r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 37284a837312d6586460a3b86bbe7bd0
6ac0847abd48eb8607597218aaa2cb2d434c012b
6a0e11bb042555d72b397ae0cc3d5e242d3a3fe04418e28ffd222decca7d16ca
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A0E11BB042555D72B397AE0CC3D5E242D3A3FE04418E28FFD222DECCA7D16CA"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11477
Expires: Thu, 19 Jan 2023 05:30:21 GMT
Date: Thu, 19 Jan 2023 02:19:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b36ef73c20dffb6bc10194bbd2d0dcfa
a67a4023dc8b4944debaeb92f3ba0f1402c079a6
05a7a4d832cf9e593ca44efea309edcbd80734583bada15fda3e740612eff991
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "05A7A4D832CF9E593CA44EFEA309EDCBD80734583BADA15FDA3E740612EFF991"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3191
Expires: Thu, 19 Jan 2023 03:12:15 GMT
Date: Thu, 19 Jan 2023 02:19:04 GMT
Connection: keep-alive
offersara.com/
301 Moved Permanently 142 B IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 42cf59eb230fa0a5b3b693cf000264a4
1c251f02cd1a627a0f9bb7f2ce4de8a31f7d4b34
ef39c970c7267ded22764c7f1ed4733c4cd73b3b4a453618d257668b6a63c9d0
GET / HTTP/1.1
Host: offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: http://www.offersara.com/
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
Set-Cookie: smartstore.customer=7ab47b92-1a1d-4f23-a49d-cdbfa2282122; expires=Fri, 19-Jan-2024 02:19:04 GMT; path=/; HttpOnly
X-Powered-By-Plesk: PleskWin
Date: Thu, 19 Jan 2023 02:19:04 GMT
Content-Length: 142
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 19 Jan 2023 01:49:24 GMT
content-type: application/json
age: 1780
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7afaa97fbfa9baa1485c892eac8e114d
8c17c707c218e28ac14197ce8e5eef873207a732
59db16baacb452453dbf44fc2a24f25ab09c4dbaec3a9271fda84230d8f11925
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "59DB16BAACB452453DBF44FC2A24F25AB09C4DBAEC3A9271FDA84230D8F11925"
Last-Modified: Wed, 18 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10305
Expires: Thu, 19 Jan 2023 05:10:49 GMT
Date: Thu, 19 Jan 2023 02:19:04 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: BhjwW1aXnTdNGBE7WUcpJHFArebZ/6ihNFLJr519Y9IBHQ4uJoQrDJCBy2y3spGRaO7xz/5kCLM=
x-amz-request-id: 021DVMZC04ZA50YV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 19 Jan 2023 01:56:54 GMT
age: 1330
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 19 Jan 2023 02:19:04 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 19 Jan 2023 02:17:25 GMT
age: 100
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 79af32d8e279b4cfec147ab51cb6fcb3
d726903292bd1e08a6d9fe0719d2cd5b33dc5fe6
bfcb2d8f14d89736ac6b771f1618a8fc5e707691d60807a574fb719c8e9393ab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2624
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 02:19:05 GMT
Last-Modified: Thu, 19 Jan 2023 01:35:21 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
www.offersara.com/
301 Moved Permanently 143 B IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 19d412c7dd9409b3faa09eb3f88f2f3b
6d19c1137a177fb115534860981fa856c04fc28f
6f3c5885b88b76589e1702da6f4c3e5fdb531f57109582c27ba2efa956de3284
GET / HTTP/1.1
Host: www.offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://www.offersara.com/
Server: Microsoft-IIS/10.0
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
Set-Cookie: smartstore.customer=257bd64a-c9b6-4f47-bf97-a1004219f731; expires=Fri, 19-Jan-2024 02:19:05 GMT; path=/; HttpOnly
X-Powered-By-Plesk: PleskWin
Date: Thu, 19 Jan 2023 02:19:04 GMT
Content-Length: 143
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 24OWEDuqnHkWfcHyPn9WQg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: u5IqLIfB/OTc6YRNVFBj0UCm64M=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e7b64b647e69c5273d0fb67d40fbaa88
e589560b852364a69651119ccc4fa41285731c23
22af569d05e45a828fc4fd7536254b245c900c045dd1946864e4ecb832c09466
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22AF569D05E45A828FC4FD7536254B245C900C045DD1946864E4ECB832C09466"
Last-Modified: Thu, 19 Jan 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 19 Jan 2023 08:19:05 GMT
Date: Thu, 19 Jan 2023 02:19:05 GMT
Connection: keep-alive
www.offersara.com/
200 OK 6.8 kB IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Hash 00c0ebb3ded18a4c3db61fa984f0a19e
c300759392e286e4f944a4666aa41dd0c9f75c41
8ba78c04d4da24242f5614c25f95826c830bcc4ec651923b79e1da5709d33380
GET / HTTP/1.1
Host: www.offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
cache-control: private
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
x-aspnet-version: 4.0.30319
set-cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73; expires=Fri, 19-Jan-2024 02:19:06 GMT; path=/; HttpOnly
x-powered-by-plesk: PleskWin
date: Thu, 19 Jan 2023 02:19:05 GMT
content-length: 6804
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 783c01fa14ade2316e22ead869b3dbf8
71e20a947b3a9e10cb2bf046e2ca3da294d97f70
9b0aee93ad83dd0c14a106a2514b86ab950b2fc679596fd621841242b5c7e95c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 02:19:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-65294840-2
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-65294840-2
IP
File type ASCII text, with very long lines (1921)
Hash da498bb124511bd71dac0583f57d5050
fdcb78e5018c4486c5a224898067eb64ca469c56
46ae5b2c328abf32d15476cb9a134e042f7fb0967336b0471479554800ba1d9e
GET /gtag/js?id=UA-65294840-2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 19 Jan 2023 02:19:06 GMT
expires: Thu, 19 Jan 2023 02:19:06 GMT
cache-control: private, max-age=900
last-modified: Thu, 19 Jan 2023 01:41:40 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44084
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.offersara.com/Scripts/globalize/cultures/globalize.culture.fa-IR.js
200 OK 2.7 kB URL HTTP/2 www.offersara.com/Scripts/globalize/cultures/globalize.culture.fa-IR.js
IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
Hash bd11385e07f85f15c38848fac7c8622b
47497cb313cc0f49c1b984c3533e5ee5b9c67c37
d868e5c9d0c43072f82290a3007febe000dd0e8b039818f7b2aa2b2cb22c84ec
GET /Scripts/globalize/cultures/globalize.culture.fa-IR.js HTTP/1.1
Host: www.offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=2073600
content-type: application/javascript
content-encoding: gzip
last-modified: Tue, 23 May 2017 08:11:47 GMT
accept-ranges: bytes
etag: "435a21399cd3d21:0"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by-plesk: PleskWin
date: Thu, 19 Jan 2023 02:19:06 GMT
content-length: 2710
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 783c01fa14ade2316e22ead869b3dbf8
71e20a947b3a9e10cb2bf046e2ca3da294d97f70
9b0aee93ad83dd0c14a106a2514b86ab950b2fc679596fd621841242b5c7e95c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 02:19:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.offersara.com/bundles/js/gvlehlav6lresuzasaelzcrspvo4ekuu6hffqvo6gow1?v=pLhv9jltmwDm2KLvaf7Gt_cK0K7NAFHIrLlsmEJAs341
200 OK 44 kB URL HTTP/2 www.offersara.com/bundles/js/gvlehlav6lresuzasaelzcrspvo4ekuu6hffqvo6gow1?v=pLhv9jltmwDm2KLvaf7Gt_cK0K7NAFHIrLlsmEJAs341
IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
File type HTML document, ASCII text, with very long lines (32012), with CRLF, LF line terminators
Hash c67ef9445152f162e1483fda1119f4a7
904a3dd2a000fd7c9a6a9e13dc3296f5435500c5
c30a4d96676de293e207b917c98a74589fbe9335d9ea62b9f67bcfab879e3d68
GET /bundles/js/gvlehlav6lresuzasaelzcrspvo4ekuu6hffqvo6gow1?v=pLhv9jltmwDm2KLvaf7Gt_cK0K7NAFHIrLlsmEJAs341 HTTP/1.1
Host: www.offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: application/x-javascript; charset=utf-8
content-encoding: gzip
expires: Fri, 19 Jan 2024 02:19:06 GMT
last-modified: Thu, 19 Jan 2023 02:19:06 GMT
vary: User-Agent,Accept-Encoding
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
x-powered-by-plesk: PleskWin
date: Thu, 19 Jan 2023 02:19:06 GMT
content-length: 43494
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7db9f11a1c6ab0117ed3dd1d36e3aecc
61a4de77803ce4ad730c21dd88b5b55a196f26d6
b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3641
Expires: Thu, 19 Jan 2023 03:19:47 GMT
Date: Thu, 19 Jan 2023 02:19:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7db9f11a1c6ab0117ed3dd1d36e3aecc
61a4de77803ce4ad730c21dd88b5b55a196f26d6
b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3641
Expires: Thu, 19 Jan 2023 03:19:47 GMT
Date: Thu, 19 Jan 2023 02:19:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7db9f11a1c6ab0117ed3dd1d36e3aecc
61a4de77803ce4ad730c21dd88b5b55a196f26d6
b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3641
Expires: Thu, 19 Jan 2023 03:19:47 GMT
Date: Thu, 19 Jan 2023 02:19:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7db9f11a1c6ab0117ed3dd1d36e3aecc
61a4de77803ce4ad730c21dd88b5b55a196f26d6
b52c568528f72c5653bad85a1f72fb22f43dcb5d96ad234ab2772a7f95ca6cc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B52C568528F72C5653BAD85A1F72FB22F43DCB5D96AD234AB2772A7F95CA6CC2"
Last-Modified: Tue, 17 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3641
Expires: Thu, 19 Jan 2023 03:19:47 GMT
Date: Thu, 19 Jan 2023 02:19:06 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28666e20-8b0b-428c-af81-822361800b23.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28666e20-8b0b-428c-af81-822361800b23.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ee23b50996d59e5b3d4d99af0d0bc05f
76fbdbd85092cb841ca269206de46cc1b6e0f215
20e83f1e7f48eaee8f946958d4bd94d0c876dd2fdab85f3c4dfe088d7726e0eb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28666e20-8b0b-428c-af81-822361800b23.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6902
x-amzn-requestid: eac4818f-27cf-4e74-967f-ba9b761e236f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e0uNuF0QIAMFUEg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c4f724-3a8ae0ba482b10f04c90c3b5;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 07:05:08 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AKGI_lQSNDKkYkcLfgIsQOt8ghMJbouQt26TehAyOBDEkg0ZU-L_Tw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 07:32:30 GMT
age: 67596
etag: "76fbdbd85092cb841ca269206de46cc1b6e0f215"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa13fdc43-f169-4fe6-a14b-6ed62c4d08cc.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa13fdc43-f169-4fe6-a14b-6ed62c4d08cc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7817aa566a3271f82153811b756bb90f
6be8688f3b8d2f053afed5c09d00e71ad9210258
1ec4a11d1598683001714eb1a130c5ba96c37aef0e43623a17780f848543b1c9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa13fdc43-f169-4fe6-a14b-6ed62c4d08cc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7864
x-amzn-requestid: 932e4550-d62d-448d-b60d-d3c62944c86c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3fnEEVOIAMFZcA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c612f9-0977cfca7fe22f83168e5d9e;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 03:16:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rcBwm967yrKleLXr5OzF8SynTLuZIXY85zeUwRyCP56tAt5ChjIapg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 03:43:10 GMT
age: 81356
etag: "6be8688f3b8d2f053afed5c09d00e71ad9210258"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4d15f9a-9958-436b-ac3e-167b5a6563ea.jpeg
200 OK 3.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4d15f9a-9958-436b-ac3e-167b5a6563ea.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b1b47910c4f71976f73a884bcae6f9bc
26c0d42fddb2a02d9878c34a76874710c92a9d30
9c5ce4945939b126cd36202f5afb8009ce790a792270ec31cc22099e4cd12a24
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4d15f9a-9958-436b-ac3e-167b5a6563ea.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3861
x-amzn-requestid: c8fbb2e1-9ec6-42c0-8030-9be785e8913e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9TegFNEoAMFwqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c865f6-04a9e7db684e88ed69e1bd43;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 21:34:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 0vlLtF3fPmIBiYrKVY8qBwVvS7PMn3OTGpu6C0umuCqXdzYxsF-xgQ==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 21:53:12 GMT
age: 15954
etag: "26c0d42fddb2a02d9878c34a76874710c92a9d30"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js
200 OK 17 kB URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (32033)
Hash fe413c30d28a4d7ceecb3eca9a8862fc
59a3825945039c802d3358b4eac89b2eed2ff37a
65d7012968e8f10abff8099870922073f31af2eeb595e234a9e4bbdb10d1f39b
GET /bootstrap/3.3.7/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 02:19:06 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:00 GMT
cdn-cachedat: 12/13/2021 20:18:53
cdn-edgestorageid: 755
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-proxyver: 1.02
cdn-requestid: 48135f30fbfcba704628453df5764d8f
cdn-cache: HIT
cf-cache-status: HIT
age: 19544231
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 78bc15652a6a0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F358af8d7-be1d-4bbe-ab3e-a9efaf49e1ac.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F358af8d7-be1d-4bbe-ab3e-a9efaf49e1ac.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2b8f931fb5afe958e67fce9e1822dac4
5732887999b819f6facc6f4608a407b5a09adf75
3c6c787e700f8139ec0eeaad93923f647f9efa5ce60120fc0aab52fa9588efaf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F358af8d7-be1d-4bbe-ab3e-a9efaf49e1ac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5005
x-amzn-requestid: 647dd62e-6b47-4298-9457-c7f37e653e0e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e5qLKEX6IAMFX0g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c6f0ad-3dc1396c1b3662fa4ec5f1fa;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 19:02:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: oi7K1Z45sral6ne0AsNTVD5vGc4WbZ7acJoq--4NFhN_f2z-xq7pWQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 21:55:43 GMT
etag: "5732887999b819f6facc6f4608a407b5a09adf75"
content-type: image/jpeg
age: 15803
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7a0759c043594fbe85af422b59b8227
a05cfaad16078f42218dae233da38f6f5dff8487
e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 79b70f1f-a157-4dd4-8743-825714195b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9T3UGA3oAMFSlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c86695-36e60aba09c152c73b8aefcb;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 21:37:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Ew6UYM2a_TNmSJNwTdR0fKiQg4V05R0RsS1rPp0sMOZ4Cn7-TJc3_A==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Wed, 18 Jan 2023 21:45:29 GMT
age: 16417
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.offersara.com/Themes/Kala118/Content/css/RTL.css
200 OK 1.4 kB URL HTTP/2 www.offersara.com/Themes/Kala118/Content/css/RTL.css
IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
File type assembler source, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash f1409aa0805729e9f814fb442ce441a0
6d0c0c27ed1da86838a23437a6c3984c54c2f6f9
acf9e6f74446b8037095042fa665a301438c3795ad4af13c250c952a17284129
GET /Themes/Kala118/Content/css/RTL.css HTTP/1.1
Host: www.offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: text/css
content-encoding: gzip
expires: Fri, 20 Jan 2023 02:19:06 GMT
last-modified: Wed, 15 Aug 2018 15:33:18 GMT
accept-ranges: bytes
etag: "1D434AD4A3BB300"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
set-cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73; expires=Fri, 19-Jan-2024 02:19:06 GMT; path=/; HttpOnly
x-aspnet-version: 4.0.30319
x-powered-by-plesk: PleskWin
date: Thu, 19 Jan 2023 02:19:06 GMT
content-length: 1400
X-Firefox-Spdy: h2
www.offersara.com/Themes/Kala118/Content/fa/rtlfont.css
200 OK 308 B URL HTTP/2 www.offersara.com/Themes/Kala118/Content/fa/rtlfont.css
IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
File type ASCII text, with CRLF line terminators
Hash 6f3cb271dc80cd5bba8920b0ee030bb6
1e704cc9c96b66d3762045eb747b26092339db6b
67dcf072363f235441104342802c09db45ce8be8ef46506763bd4465057c61fc
GET /Themes/Kala118/Content/fa/rtlfont.css HTTP/1.1
Host: www.offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: text/css
content-encoding: gzip
expires: Fri, 20 Jan 2023 02:19:06 GMT
last-modified: Wed, 15 Aug 2018 11:12:34 GMT
accept-ranges: bytes
etag: "1D43488DDAEBD00"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
set-cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73; expires=Fri, 19-Jan-2024 02:19:06 GMT; path=/; HttpOnly
x-aspnet-version: 4.0.30319
x-powered-by-plesk: PleskWin
date: Thu, 19 Jan 2023 02:19:06 GMT
content-length: 308
X-Firefox-Spdy: h2
www.offersara.com/Themes/Kala118/Content/plugins/jssocials/jssocials.js
200 OK 4.2 kB URL HTTP/2 www.offersara.com/Themes/Kala118/Content/plugins/jssocials/jssocials.js
IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
File type assembler source, Unicode text, UTF-8 text
Hash bda6823d5d660894ba2ea45df386b76f
c170b3002ddf275711c3dc49de47cec7381a88fb
7e94806b4bb38e2012dd2e07d6683d1640065d864580b4255b5846cff21e7bee
GET /Themes/Kala118/Content/plugins/jssocials/jssocials.js HTTP/1.1
Host: www.offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: application/javascript
content-encoding: gzip
expires: Fri, 20 Jan 2023 02:19:06 GMT
last-modified: Sun, 12 Aug 2018 22:58:29 GMT
accept-ranges: bytes
etag: "1D4328FFBFD9880"
vary: Accept-Encoding
server: Microsoft-IIS/10.0
set-cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73; expires=Fri, 19-Jan-2024 02:19:06 GMT; path=/; HttpOnly
x-aspnet-version: 4.0.30319
x-powered-by-plesk: PleskWin
date: Thu, 19 Jan 2023 02:19:06 GMT
content-length: 4217
X-Firefox-Spdy: h2
www.offersara.com/Media/Thumbs/0000/0000004.png
200 OK 4.8 kB URL HTTP/2 www.offersara.com/Media/Thumbs/0000/0000004.png
IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
File type PNG image data, 200 x 63, 8-bit/color RGB, non-interlaced\012- data
Hash 6456b206d39c7102ac8154a850eee9d7
e5dd4dea63067862bc8af3df079e1dd6d2cad3af
629f2ae42fc37b59644de56fe6538a72b2605bdb68f14ec243a578b63df607c8
GET /Media/Thumbs/0000/0000004.png HTTP/1.1
Host: www.offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=2073600
content-type: image/png
last-modified: Tue, 11 Sep 2018 15:58:47 GMT
accept-ranges: bytes
etag: "2384fb52e849d41:0"
server: Microsoft-IIS/10.0
x-powered-by-plesk: PleskWin
date: Thu, 19 Jan 2023 02:19:06 GMT
content-length: 4752
X-Firefox-Spdy: h2
www.offersara.com/Themes/kala118/Content/images/home-bn/b1.jpg
200 OK 73 kB URL HTTP/2 www.offersara.com/Themes/kala118/Content/images/home-bn/b1.jpg
IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 762x460, components 3\012- data
Hash 395afa7e3c393bbfdbeb67f6bdf119b3
5297ec2c608ee4cf5b99690951561551edc8d5e0
c6cf4b2ba153f2d5c33bacede3a28350b9ec717a616842b8d544e7ce28c7b683
GET /Themes/kala118/Content/images/home-bn/b1.jpg HTTP/1.1
Host: www.offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: image/jpeg
expires: Fri, 20 Jan 2023 02:19:06 GMT
last-modified: Sat, 13 May 2017 14:02:04 GMT
accept-ranges: bytes
etag: "1D2CBF17FDE5600"
server: Microsoft-IIS/10.0
set-cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73; expires=Fri, 19-Jan-2024 02:19:06 GMT; path=/; HttpOnly
x-aspnet-version: 4.0.30319
x-powered-by-plesk: PleskWin
date: Thu, 19 Jan 2023 02:19:06 GMT
content-length: 72835
X-Firefox-Spdy: h2
www.offersara.com/Themes/kala118/Content/images/home-bn/telegram.jpg
200 OK 51 kB URL HTTP/2 www.offersara.com/Themes/kala118/Content/images/home-bn/telegram.jpg
IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 360x458, components 3\012- data
Hash b5bfafc90dfd1c16a5aa8c4924fe949d
de7086d494997484d6d9bee4d6655c6b138940d9
d0deede61178933b89301443725df9a8c5909a7b7d635913139910b0c8b250c3
GET /Themes/kala118/Content/images/home-bn/telegram.jpg HTTP/1.1
Host: www.offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: image/jpeg
expires: Fri, 20 Jan 2023 02:19:06 GMT
last-modified: Sun, 14 May 2017 11:48:07 GMT
accept-ranges: bytes
etag: "1D2CCA7F3DB3580"
server: Microsoft-IIS/10.0
set-cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73; expires=Fri, 19-Jan-2024 02:19:06 GMT; path=/; HttpOnly
x-aspnet-version: 4.0.30319
x-powered-by-plesk: PleskWin
date: Thu, 19 Jan 2023 02:19:06 GMT
content-length: 50794
X-Firefox-Spdy: h2
www.offersara.com/Themes/kala118/Content/images/home-bn/offer-banner1.jpg
200 OK 52 kB URL HTTP/2 www.offersara.com/Themes/kala118/Content/images/home-bn/offer-banner1.jpg
IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 370x278, components 3\012- data
Hash d7cdd12acbca4901adc9eec0c14bbf1b
2631a55687fc9bfdf107df5efbde45f7145f68da
7b77f7d87e8dad67ffe4304c7bf51622917e76c936d9c4017d9d9fbafa0795e6
GET /Themes/kala118/Content/images/home-bn/offer-banner1.jpg HTTP/1.1
Host: www.offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: image/jpeg
expires: Fri, 20 Jan 2023 02:19:06 GMT
last-modified: Sun, 14 May 2017 13:43:43 GMT
accept-ranges: bytes
etag: "1D2CCB81A08D180"
server: Microsoft-IIS/10.0
set-cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73; expires=Fri, 19-Jan-2024 02:19:06 GMT; path=/; HttpOnly
x-aspnet-version: 4.0.30319
x-powered-by-plesk: PleskWin
date: Thu, 19 Jan 2023 02:19:06 GMT
content-length: 52151
X-Firefox-Spdy: h2
www.offersara.com/Themes/kala118/Content/images/home-bn/offer-banner2.jpg
200 OK 38 kB URL HTTP/2 www.offersara.com/Themes/kala118/Content/images/home-bn/offer-banner2.jpg
IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 370x278, components 3\012- data
Hash 5656f36b1379c590aacfa47ec7a845c4
dbeb06e77e2a6ba30ef80e8953b225c0a847c970
a26b2814d53147ab9542c5ba0cd322550ce1aa5d04c62e0461430f32da9886b6
GET /Themes/kala118/Content/images/home-bn/offer-banner2.jpg HTTP/1.1
Host: www.offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: image/jpeg
expires: Fri, 20 Jan 2023 02:19:06 GMT
last-modified: Sun, 14 May 2017 13:55:21 GMT
accept-ranges: bytes
etag: "1D2CCB9BA132A80"
server: Microsoft-IIS/10.0
set-cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73; expires=Fri, 19-Jan-2024 02:19:06 GMT; path=/; HttpOnly
x-aspnet-version: 4.0.30319
x-powered-by-plesk: PleskWin
date: Thu, 19 Jan 2023 02:19:06 GMT
content-length: 38179
X-Firefox-Spdy: h2
www.offersara.com/Themes/kala118/Content/images/home-bn/offer-banner3.jpg
200 OK 32 kB URL HTTP/2 www.offersara.com/Themes/kala118/Content/images/home-bn/offer-banner3.jpg
IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 370x278, components 3\012- data
Hash 105a513754aae680a3636feaf545a7bb
34fd7b0cb036a313980dcb22a0c9d5870c5d70d3
67a08176517c5b59afb14d0f159ecf37177fc4f4223feea384f4750452f44628
GET /Themes/kala118/Content/images/home-bn/offer-banner3.jpg HTTP/1.1
Host: www.offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: image/jpeg
expires: Fri, 20 Jan 2023 02:19:06 GMT
last-modified: Sun, 14 May 2017 13:59:42 GMT
accept-ranges: bytes
etag: "1D2CCBA55A49B00"
server: Microsoft-IIS/10.0
set-cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73; expires=Fri, 19-Jan-2024 02:19:06 GMT; path=/; HttpOnly
x-aspnet-version: 4.0.30319
x-powered-by-plesk: PleskWin
date: Thu, 19 Jan 2023 02:19:06 GMT
content-length: 31652
X-Firefox-Spdy: h2
www.smartsuppchat.com/loader.js?
200 OK 6.3 kB URL HTTP/2 www.smartsuppchat.com/loader.js?
IP
ASN #60068 Datacamp Limited
Hash 35b012ab958bdccdb5664f1c09ed4137
3e64c36876df82ad3666783624fcfe04cfbad01e
c42c68ebcde2f060a4375c6d0e7222e184a06502c7041259da2f8bb446e552da
GET /loader.js? HTTP/1.1
Host: www.smartsuppchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 02:19:07 GMT
content-type: application/javascript
last-modified: Wed, 28 Dec 2022 13:18:33 GMT
etag: W/"63ac4229-4b9b"
expires: Wed, 28 Dec 2022 13:26:03 GMT
cache-control: max-age=300, public, s-maxage=60
x-accel-expires: @1674094753
server: CDN77-Turbo
x-77-nzt: AblMCQ1SOFf/NgAAAA
x-77-nzt-ray: c0a4cc28f496f6699ba8c86380678f09
x-cache: HIT
x-age: 54
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
www.torkbrand.ir/eNamadLogo.htm
404 Not Found 942 B URL HTTP/2 www.torkbrand.ir/eNamadLogo.htm
IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash c57f025c1a2e06d0b79045700623615a
726d484788804304aa07b7a57328e7413482a5ab
6cf07673c3fa501b966f0169b26a10ad7de8bdcac3d4cabddcca7845d2216014
GET /eNamadLogo.htm HTTP/1.1
Host: www.torkbrand.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
content-type: text/html
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Thu, 19 Jan 2023 02:19:07 GMT
content-length: 942
X-Firefox-Spdy: h2
www.offersara.com/Themes/kala118/Content/images/home-bn/telegramBanner2.jpg
200 OK 72 kB URL HTTP/2 www.offersara.com/Themes/kala118/Content/images/home-bn/telegramBanner2.jpg
IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1140x149, components 3\012- data
Hash 9050e904dfa439f719fe751086194880
ea09c748d809c673bf72d7a9ebdb20117b2abf8a
75c6ab73f490c0dac5cc5e47ecc4c58cfa048776f18fddb6514f8a596cdcb546
GET /Themes/kala118/Content/images/home-bn/telegramBanner2.jpg HTTP/1.1
Host: www.offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: image/jpeg
expires: Fri, 20 Jan 2023 02:19:06 GMT
last-modified: Sun, 14 May 2017 13:20:19 GMT
accept-ranges: bytes
etag: "1D2CCB4D52F6B80"
server: Microsoft-IIS/10.0
set-cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73; expires=Fri, 19-Jan-2024 02:19:06 GMT; path=/; HttpOnly
x-aspnet-version: 4.0.30319
x-powered-by-plesk: PleskWin
date: Thu, 19 Jan 2023 02:19:06 GMT
content-length: 72070
X-Firefox-Spdy: h2
www.offersara.com/Themes/Kala118/Content/fa/fonts/a83daff6.ttf
200 OK 59 kB URL HTTP/2 www.offersara.com/Themes/Kala118/Content/fa/fonts/a83daff6.ttf
IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
File type TrueType Font data, digitally signed, 15 tables, 1st "DSIG", 30 names, Macintosh, Copyright (c) 2015 by www.fontiran.com (Moslem Ebrahimi). All rights reserved.RegularIRANSansWeb\012- data
Hash a83daff6a3fcaf7cf89f771c940e401f
e43a21af5930685c2f02975adbebc0eef0991fed
713381597421b846af2beb440baf503c71c8fb9f8546be841d79dc28fc1fd9f0
GET /Themes/Kala118/Content/fa/fonts/a83daff6.ttf HTTP/1.1
Host: www.offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/Themes/Kala118/Content/fa/rtlfont.css
Cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=2073600
content-type: application/octet-stream
last-modified: Wed, 15 Aug 2018 11:09:22 GMT
accept-ranges: bytes
etag: "32f3536b8834d41:0"
server: Microsoft-IIS/10.0
x-powered-by-plesk: PleskWin
date: Thu, 19 Jan 2023 02:19:06 GMT
content-length: 58664
X-Firefox-Spdy: h2
www.torkbrand.ir/eNamadLogo.htm
404 Not Found 942 B URL HTTP/2 www.torkbrand.ir/eNamadLogo.htm
IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash c57f025c1a2e06d0b79045700623615a
726d484788804304aa07b7a57328e7413482a5ab
6cf07673c3fa501b966f0169b26a10ad7de8bdcac3d4cabddcca7845d2216014
GET /eNamadLogo.htm HTTP/1.1
Host: www.torkbrand.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Thu, 19 Jan 2023 02:19:07 GMT
content-length: 942
X-Firefox-Spdy: h2
www.offersara.com/Themes/Kala118/Content/fonts/fontawesome-webfont.woff?v=3.2.1
200 OK 98 kB URL HTTP/2 www.offersara.com/Themes/Kala118/Content/fonts/fontawesome-webfont.woff?v=3.2.1
IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
File type Web Open Font Format, TrueType, length 98024, version 4.7\012- data
Hash fee66e712a8a08eef5805a46892932ad
28b782240b3e76db824e12c02754a9731a167527
ba0c59deb5450f5cb41b3f93609ee2d0d995415877ddfa223e8a8a7533474f07
GET /Themes/Kala118/Content/fonts/fontawesome-webfont.woff?v=3.2.1 HTTP/1.1
Host: www.offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.offersara.com/bundles/css/61ijdh5fk8jfbjbcg-glqbyg5bmgtsxrwpofiz-u_m41?v=fvQiC9pZUMYbp2JeM9bqe95o8tU2dspuMMbZJSmVbTg1
Cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=2073600
content-type: application/x-font-woff
last-modified: Sun, 12 Aug 2018 22:57:00 GMT
accept-ranges: bytes
etag: "ba3143c78f32d41:0"
server: Microsoft-IIS/10.0
x-powered-by-plesk: PleskWin
date: Thu, 19 Jan 2023 02:19:06 GMT
content-length: 98024
X-Firefox-Spdy: h2
www.offersara.com/~/Themes/Torkbrand/Content/images/home-bn/b1.jpg
404 Not Found 847 B URL HTTP/2 www.offersara.com/~/Themes/Torkbrand/Content/images/home-bn/b1.jpg
IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text
Hash c8ce6881d1ad3a1ae6f8039071731a43
e361728adb3cacc75b40a627b8b64928982f8ec6
5a4418bb352e51a46f54db3e5bac652a5609150b288e17c06469a2391a2fa4fd
GET /~/Themes/Torkbrand/Content/images/home-bn/b1.jpg HTTP/1.1
Host: www.offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
server: Microsoft-IIS/10.0
x-powered-by-plesk: PleskWin
date: Thu, 19 Jan 2023 02:19:07 GMT
content-length: 847
X-Firefox-Spdy: h2
www.offersara.com/~/Themes/Torkbrand/Content/images/home-bn/b2.jpg
404 Not Found 847 B URL HTTP/2 www.offersara.com/~/Themes/Torkbrand/Content/images/home-bn/b2.jpg
IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text
Hash c8ce6881d1ad3a1ae6f8039071731a43
e361728adb3cacc75b40a627b8b64928982f8ec6
5a4418bb352e51a46f54db3e5bac652a5609150b288e17c06469a2391a2fa4fd
GET /~/Themes/Torkbrand/Content/images/home-bn/b2.jpg HTTP/1.1
Host: www.offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
server: Microsoft-IIS/10.0
x-powered-by-plesk: PleskWin
date: Thu, 19 Jan 2023 02:19:07 GMT
content-length: 847
X-Firefox-Spdy: h2
www.offersara.com/Themes/Kala118/Content/images/left-a.png
200 OK 260 B URL HTTP/2 www.offersara.com/Themes/Kala118/Content/images/left-a.png
IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
File type PNG image data, 15 x 45, 8-bit/color RGBA, non-interlaced\012- data
Hash 482134ff122a5fe55df566fcefb884f2
6da454506911d5f54920b65fc9650752351ea2c3
d4dc718b1cc7dfafc1efa03f88c4fc4cf0ecdc455c7a97546b92081ab8ca0623
GET /Themes/Kala118/Content/images/left-a.png HTTP/1.1
Host: www.offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/bundles/css/61ijdh5fk8jfbjbcg-glqbyg5bmgtsxrwpofiz-u_m41?v=fvQiC9pZUMYbp2JeM9bqe95o8tU2dspuMMbZJSmVbTg1
Cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: image/png
expires: Fri, 20 Jan 2023 02:19:07 GMT
last-modified: Sun, 12 Aug 2018 22:57:30 GMT
accept-ranges: bytes
etag: "1D4328FD8D2E900"
server: Microsoft-IIS/10.0
set-cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73; expires=Fri, 19-Jan-2024 02:19:07 GMT; path=/; HttpOnly
x-aspnet-version: 4.0.30319
x-powered-by-plesk: PleskWin
date: Thu, 19 Jan 2023 02:19:07 GMT
content-length: 260
X-Firefox-Spdy: h2
www.offersara.com/Themes/Kala118/Content/images/right-a.png
200 OK 261 B URL HTTP/2 www.offersara.com/Themes/Kala118/Content/images/right-a.png
IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
File type PNG image data, 15 x 45, 8-bit/color RGBA, non-interlaced\012- data
Hash 48c429a1751f1d99ce65cc81c4f77991
0afe745a933d037bbe2c339ac31841ae2c1bdb0a
d27051352f97d82bca90f0e778174885dda849946cde4540395a8f028570660c
GET /Themes/Kala118/Content/images/right-a.png HTTP/1.1
Host: www.offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/bundles/css/61ijdh5fk8jfbjbcg-glqbyg5bmgtsxrwpofiz-u_m41?v=fvQiC9pZUMYbp2JeM9bqe95o8tU2dspuMMbZJSmVbTg1
Cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: image/png
expires: Fri, 20 Jan 2023 02:19:07 GMT
last-modified: Sun, 12 Aug 2018 22:57:38 GMT
accept-ranges: bytes
etag: "1D4328FDD979D00"
server: Microsoft-IIS/10.0
set-cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73; expires=Fri, 19-Jan-2024 02:19:07 GMT; path=/; HttpOnly
x-aspnet-version: 4.0.30319
x-powered-by-plesk: PleskWin
date: Thu, 19 Jan 2023 02:19:07 GMT
content-length: 261
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 4446bc68afee0a0f288899af89bbc9b1
ed86c85a4d43179aa085bc2e485c1849ba58e9d6
64a50efd0920a1cb5ff2b40acc110218b84460e3e4dd3a14cbb5f71dbf521822
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=147013
Date: Thu, 19 Jan 2023 02:19:08 GMT
Etag: "63c8311e-1d7"
Expires: Fri, 20 Jan 2023 19:09:21 GMT
Last-Modified: Wed, 18 Jan 2023 17:49:18 GMT
Server: ECS (nyb/1DCD)
X-Cache: Miss from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: HmcOWVYaAotTTQh4bqZB2Fn3q6ul0SzdCl9jYX2z7Y-eZumd-yI9_Q==
Age: 4803
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Thu, 19 Jan 2023 00:41:07 GMT
expires: Thu, 19 Jan 2023 02:41:07 GMT
cache-control: public, max-age=7200
age: 5881
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.offersara.com/favicon.ico
200 OK 9.2 kB URL HTTP/2 www.offersara.com/favicon.ico
IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
File type MS Windows icon resource - 4 icons, 48x48, 8 bits/pixel, 32x32, 8 bits/pixel\012- data
Hash fbc00dff73726d1a06261a20bc854f30
98387466811d1d3fd8f1b0036770c08de2145deb
d242e2ff239e58e5c069e794145cee120b7e739bf5f91277f19ac02fa6f5c7dc
GET /favicon.ico HTTP/1.1
Host: www.offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=2073600
content-type: image/x-icon
last-modified: Wed, 01 Jun 2016 17:50:54 GMT
accept-ranges: bytes
etag: "b7fbad242ebcd11:0"
server: Microsoft-IIS/10.0
x-powered-by-plesk: PleskWin
date: Thu, 19 Jan 2023 02:19:07 GMT
content-length: 9158
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash efac8d32469e6807b1b1f2916a47edf1
68d91e7af565f1cf6597bcdd642a78dbada50a8d
22639289563bb576a7c20b9c733bdd7f98c41519fdddeef0d710f0d058c5bf88
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 02:19:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-65294840-2&cid=501783384.1674094748&jid=1540130728&gjid=19958598&_gid=790517122.1674094748&_u=YEBAAUAAAAAAACAAI~&z=1360332141
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-65294840-2&cid=501783384.1674094748&jid=1540130728&gjid=19958598&_gid=790517122.1674094748&_u=YEBAAUAAAAAAACAAI~&z=1360332141
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-65294840-2&cid=501783384.1674094748&jid=1540130728&gjid=19958598&_gid=790517122.1674094748&_u=YEBAAUAAAAAAACAAI~&z=1360332141 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.offersara.com
Connection: keep-alive
Referer: https://www.offersara.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.offersara.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 19 Jan 2023 02:19:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash efac8d32469e6807b1b1f2916a47edf1
68d91e7af565f1cf6597bcdd642a78dbada50a8d
22639289563bb576a7c20b9c733bdd7f98c41519fdddeef0d710f0d058c5bf88
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 02:19:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 532289832b1f21cd9014c904ca0a1ad6
16b0dbd03283cf8a80316e49ab0a0299fd237d99
e0b0758c8bea976e4963c7ca91cc223d9b68f1e45048dd9d5cce73c9f20a08a9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 02:19:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 558ca082e2b49b22ae356cf10b191c68
c3956046019b64bc525381a4ab7f0c70002b5b17
862dfa54857c199a1d5450b0b07d8fcc3e2702476e7a0938b3d34e2fab332af3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 02:19:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-65294840-2&cid=501783384.1674094748&jid=1540130728&_u=YEBAAUAAAAAAACAAI~&z=715190383
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-65294840-2&cid=501783384.1674094748&jid=1540130728&_u=YEBAAUAAAAAAACAAI~&z=715190383
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-65294840-2&cid=501783384.1674094748&jid=1540130728&_u=YEBAAUAAAAAAACAAI~&z=715190383 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 19 Jan 2023 02:19:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-65294840-2&cid=501783384.1674094748&jid=1540130728&_u=YEBAAUAAAAAAACAAI~&z=715190383
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-65294840-2&cid=501783384.1674094748&jid=1540130728&_u=YEBAAUAAAAAAACAAI~&z=715190383
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j99&tid=UA-65294840-2&cid=501783384.1674094748&jid=1540130728&_u=YEBAAUAAAAAAACAAI~&z=715190383 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 19 Jan 2023 02:19:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 558ca082e2b49b22ae356cf10b191c68
c3956046019b64bc525381a4ab7f0c70002b5b17
862dfa54857c199a1d5450b0b07d8fcc3e2702476e7a0938b3d34e2fab332af3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 19 Jan 2023 02:19:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.offersara.com/Themes/kala118/Content/images/home-bn/b2.jpg
200 OK 472 B URL HTTP/2 www.offersara.com/Themes/kala118/Content/images/home-bn/b2.jpg
IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
Hash 96932e7ee122dfbe89a87a0265f8bf94
a260e5fb88fa73efaedcd7880f4bfea7acf44fbb
e806134fe3187494ab16df5a777bb4d7b8d0a8c400b542a5414b63c7ef3ac3e2
GET /Themes/kala118/Content/images/home-bn/b2.jpg HTTP/1.1
Host: www.offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: image/jpeg
expires: Fri, 20 Jan 2023 02:19:06 GMT
last-modified: Sat, 13 May 2017 14:02:06 GMT
accept-ranges: bytes
etag: "1D2CBF1810F8300"
server: Microsoft-IIS/10.0
set-cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73; expires=Fri, 19-Jan-2024 02:19:06 GMT; path=/; HttpOnly
x-aspnet-version: 4.0.30319
x-powered-by-plesk: PleskWin
date: Thu, 19 Jan 2023 02:19:06 GMT
content-length: 62375
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash eb6e39e02638e3414f02f08056cc5ef0
0df6799e79594a190e070d804f90179f39c5e1d4
5c24830874e6489abb6020062afbf182408c888bb1025060f03f0da88d640c84
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=122744
Date: Thu, 19 Jan 2023 02:19:08 GMT
Etag: "63c7dc9e-1d7"
Expires: Fri, 20 Jan 2023 12:24:52 GMT
Last-Modified: Wed, 18 Jan 2023 11:48:46 GMT
Server: ECS (dcb/7F82)
X-Cache: Miss from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YYspqph8ZMCRESm4QOy4OL7_5I5srzxxUg3VIDEKDfpIzMpUmugHww==
Age: 2166
websocket-visitors.smartsupp.com/socket/?EIO=3&transport=websocket
101 Switching Protocols 0 B URL HTTP/1.1 websocket-visitors.smartsupp.com/socket/?EIO=3&transport=websocket
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket/?EIO=3&transport=websocket HTTP/1.1
Host: websocket-visitors.smartsupp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.offersara.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: wD9JAndLj5X6N3dRI496FA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Thu, 19 Jan 2023 02:19:09 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 4f3aETZuUQciryJ79jurbAIsCV8=
Sec-WebSocket-Version: 13
WebSocket-Server: uWebSockets
translations.smartsuppcdn.com/api/v1/widget/translations/lang/fa/defaults
200 OK 0 B URL HTTP/2 translations.smartsuppcdn.com/api/v1/widget/translations/lang/fa/defaults
IP
ASN #60068 Datacamp Limited
GET /api/v1/widget/translations/lang/fa/defaults HTTP/1.1
Host: translations.smartsuppcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.offersara.com/
Origin: https://www.offersara.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 19 Jan 2023 02:19:08 GMT
content-type: application/json; charset=utf-8
x-version: d49c3086c398affe04caacd5da4888899f8f9e5f
vary: Origin
access-control-allow-origin: *
cache-control: max-age=600
x-response-time: 0ms
x-accel-expires: @1674095348
server: CDN77-Turbo
x-77-nzt: AblMCRRa9YjehwIAAA
x-77-nzt-ray: af5856300a6b1d399ca8c863f5605520
x-cache: REVALIDATED
x-age: 647
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
www.offersara.com/bundles/css/61ijdh5fk8jfbjbcg-glqbyg5bmgtsxrwpofiz-u_m41?v=fvQiC9pZUMYbp2JeM9bqe95o8tU2dspuMMbZJSmVbTg1
200 OK 0 B URL HTTP/2 www.offersara.com/bundles/css/61ijdh5fk8jfbjbcg-glqbyg5bmgtsxrwpofiz-u_m41?v=fvQiC9pZUMYbp2JeM9bqe95o8tU2dspuMMbZJSmVbTg1
IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
GET /bundles/css/61ijdh5fk8jfbjbcg-glqbyg5bmgtsxrwpofiz-u_m41?v=fvQiC9pZUMYbp2JeM9bqe95o8tU2dspuMMbZJSmVbTg1 HTTP/1.1
Host: www.offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: text/css; charset=utf-8
content-encoding: gzip
expires: Fri, 19 Jan 2024 02:19:06 GMT
last-modified: Thu, 19 Jan 2023 02:19:06 GMT
vary: User-Agent,Accept-Encoding
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
x-powered-by-plesk: PleskWin
date: Thu, 19 Jan 2023 02:19:06 GMT
X-Firefox-Spdy: h2
bootstrap.smartsuppchat.com/widget/d950f838348b1902d53ed827a60c6f931075de43.json
200 OK 0 B URL HTTP/2 bootstrap.smartsuppchat.com/widget/d950f838348b1902d53ed827a60c6f931075de43.json
IP
GET /widget/d950f838348b1902d53ed827a60c6f931075de43.json HTTP/1.1
Host: bootstrap.smartsuppchat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.offersara.com
Connection: keep-alive
Referer: https://www.offersara.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 02:19:08 GMT
content-type: application/json; charset=utf-8
x-version: 53ea911f61896be6992922257e82b4783f6cf210
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: private, max-age=0, must-revalidate
x-hit: redis
etag: "432-O08tpa6hW+m6gBYL3H9v/ugSOCY"
content-encoding: br
X-Firefox-Spdy: h2
www.offersara.com/bundles/js/8_uu_ygaxwa9bm7hbk6kzb1z4hvod6ovmciqpt_2k9e1?v=cid8EcX769XrQZeNp7MuWyf8iuk_UhBcFqVfuv_m7XY1
200 OK 0 B URL HTTP/2 www.offersara.com/bundles/js/8_uu_ygaxwa9bm7hbk6kzb1z4hvod6ovmciqpt_2k9e1?v=cid8EcX769XrQZeNp7MuWyf8iuk_UhBcFqVfuv_m7XY1
IP
ASN #48147 Asre Pardazeshe Ettelaate Amin Institute
GET /bundles/js/8_uu_ygaxwa9bm7hbk6kzb1z4hvod6ovmciqpt_2k9e1?v=cid8EcX769XrQZeNp7MuWyf8iuk_UhBcFqVfuv_m7XY1 HTTP/1.1
Host: www.offersara.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.offersara.com/
Cookie: smartstore.customer=04fe1fa7-c3e5-42cf-9168-d8d8d6e7ce73
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public
content-type: application/x-javascript; charset=utf-8
content-encoding: gzip
expires: Fri, 19 Jan 2024 02:19:06 GMT
last-modified: Thu, 19 Jan 2023 02:19:06 GMT
vary: User-Agent,Accept-Encoding
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
x-powered-by-plesk: PleskWin
date: Thu, 19 Jan 2023 02:19:06 GMT
X-Firefox-Spdy: h2
widget-v2.smartsuppcdn.com/asset-manifest.json
200 OK 0 B URL HTTP/2 widget-v2.smartsuppcdn.com/asset-manifest.json
IP
ASN #60068 Datacamp Limited
GET /asset-manifest.json HTTP/1.1
Host: widget-v2.smartsuppcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Origin: https://www.offersara.com
Connection: keep-alive
Referer: https://www.offersara.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 02:19:08 GMT
content-type: application/json
last-modified: Tue, 17 Jan 2023 07:36:57 GMT
etag: W/"63c65019-6ce"
expires: Tue, 17 Jan 2023 09:23:51 GMT
cache-control: max-age=300, public, s-maxage=60
access-control-allow-origin: *
x-accel-expires: @1674094779
server: CDN77-Turbo
x-77-nzt: AblMCRSKKBT/HQAAAA
x-77-nzt-ray: af5856300a6b1d399ca8c8638125b30f
x-cache: HIT
x-age: 29
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
widget-v2.smartsuppcdn.com/static/js/main.a3c0c1de.chunk.js
200 OK 0 B URL HTTP/2 widget-v2.smartsuppcdn.com/static/js/main.a3c0c1de.chunk.js
IP
ASN #60068 Datacamp Limited
GET /static/js/main.a3c0c1de.chunk.js HTTP/1.1
Host: widget-v2.smartsuppcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 02:19:08 GMT
content-type: application/javascript
last-modified: Tue, 17 Jan 2023 07:36:57 GMT
etag: W/"63c65019-1cc88"
expires: Wed, 17 Jan 2024 09:18:51 GMT
cache-control: max-age=31536000, public, immutable
access-control-allow-origin: *
x-accel-expires: @1705483131
server: CDN77-Turbo
x-77-nzt: AblMCRST+LL/oUACAA
x-77-nzt-ray: af585630a27245399ca8c863a9f5a412
x-cache: HIT
x-age: 147617
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
widget-v2.smartsuppcdn.com/static/js/6.84dd967b.chunk.js
200 OK 0 B URL HTTP/2 widget-v2.smartsuppcdn.com/static/js/6.84dd967b.chunk.js
IP
ASN #60068 Datacamp Limited
GET /static/js/6.84dd967b.chunk.js HTTP/1.1
Host: widget-v2.smartsuppcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 19 Jan 2023 02:19:08 GMT
content-type: application/javascript
last-modified: Tue, 17 Jan 2023 07:36:57 GMT
etag: W/"63c65019-8312d"
expires: Wed, 17 Jan 2024 09:18:51 GMT
cache-control: max-age=31536000, public, immutable
access-control-allow-origin: *
x-accel-expires: @1705483131
server: CDN77-Turbo
x-77-nzt: AblMCRSS3ib/oUACAA
x-77-nzt-ray: af585630a27245399ca8c86330aa4b13
x-cache: HIT
x-age: 147617
x-77-pop: stockholmSE
x-77-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
185.142.158.188
74.125.131.156
185.76.9.25
23.36.76.226
3.64.139.171
93.184.220.29
104.18.11.207