504 B IP
ASN #20940 Akamai International B.V.
Hash b38672175b47aa9644bbcee9f6947113
4cdf55da3f293a7bc81d3327a7437c99c073a977
eb528ca147d5816b33619c0a84781118a4d23e0624be6736d5dd0af02311756c
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "EB528CA147D5816B33619C0A84781118A4D23E0624BE6736D5DD0AF02311756C"
Last-Modified: Tue, 10 Sep 2024 21:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12163
Expires: Wed, 11 Sep 2024 17:53:51 GMT
Date: Wed, 11 Sep 2024 14:31:08 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 6bd7ab339c70a2fbeee4c8c0acd11d01
d73d3395447b2a06e32c1e3efb673107259de9d2
fdfd7bc2cf6ecc38fb1098f0fdb33cc28a034bb850556c8be63823f4c4718be2
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "FDFD7BC2CF6ECC38FB1098F0FDB33CC28A034BB850556C8BE63823F4C4718BE2"
Last-Modified: Tue, 10 Sep 2024 00:20:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9538
Expires: Wed, 11 Sep 2024 17:10:06 GMT
Date: Wed, 11 Sep 2024 14:31:08 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash c02cbc5c5d1b0406dcc246d4bd1a6d2b
4926c8ef9661a0a06ddca8476543ba0016f6db23
6d53e4415d0c45468d4481cf09e5ea095019a86af85ccd64064eb060ab802455
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "6D53E4415D0C45468D4481CF09E5EA095019A86AF85CCD64064EB060AB802455"
Last-Modified: Tue, 10 Sep 2024 02:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11259
Expires: Wed, 11 Sep 2024 17:38:48 GMT
Date: Wed, 11 Sep 2024 14:31:09 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 49e3d04c2eb4d704e7e7c90e2dc519c0
33f04bc1c596585870c7b00e24bf9bef4d01dc8e
1a381b926d3ed1420dc33ec68eb8ff332a94ff175191a0564c07552b80c7a3d7
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "1A381B926D3ED1420DC33EC68EB8FF332A94FF175191A0564C07552B80C7A3D7"
Last-Modified: Tue, 10 Sep 2024 02:33:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12892
Expires: Wed, 11 Sep 2024 18:06:01 GMT
Date: Wed, 11 Sep 2024 14:31:09 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 7565f7dd0ab257e4670bc96b557ef4c7
b79c9bbba8c7f2ae7f2d0ded692ee65ce4fd7883
df0d2afe106cc038a21f30cc4fb48dd6687714ebc295d01850a4c494e8b3875b
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DF0D2AFE106CC038A21F30CC4FB48DD6687714EBC295D01850A4C494E8B3875B"
Last-Modified: Tue, 10 Sep 2024 05:24:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18620
Expires: Wed, 11 Sep 2024 19:41:29 GMT
Date: Wed, 11 Sep 2024 14:31:09 GMT
Connection: keep-alive
200 OK 9.4 kB URL User Request GET HTTP/1.1 IP
ASN #43754 Asiatech Data Transmission company
File type HTML document, Non-ISO extended-ASCII text, with very long lines (1193), with CRLF, LF, NEL line terminators
Hash 3534cfba580165c902d7a1b194441124
942a539b5b353312107a8b8079d59cead68fb750
e382803ec6ba2a0a97a72ff959b7d90d9fdca94cc44dcedb22a1ffc58c40f9cb
GET / HTTP/1.1
Host: gilpic.rozblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
set-cookie: PHPSESSID=18fab2d438622910d8d799099c16f3e0; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-language: fa
content-type: text/html; charset=utf-8
vary: Accept-Encoding,User-Agent
transfer-encoding: chunked
content-encoding: gzip
date: Wed, 11 Sep 2024 14:31:10 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
GET gilpic.rozblog.com/temp/site.css?37.47632
200 OK 19 kB URL GET HTTP/1.1 gilpic.rozblog.com/temp/site.css?37.47632
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
File type Unicode text, UTF-8 text, with very long lines (7735)
Hash 8d3cbf748f85d9baea22f1224965fa02
525b413f33291f9bf8740821c9a1e0d140babfa2
faa8e08aa6bdcddd95fe2c2516000c7a85ae52575684408568833fa13d28c671
GET /temp/site.css?37.47632 HTTP/1.1
Host: gilpic.rozblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Cookie: PHPSESSID=18fab2d438622910d8d799099c16f3e0
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 11 Oct 2024 14:31:10 GMT
content-type: text/css
last-modified: Sat, 07 Sep 2024 12:37:35 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 18890
date: Wed, 11 Sep 2024 14:31:10 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
GET gilpic.rozblog.com/temp/default/script.js
200 OK 302 B URL GET HTTP/1.1 gilpic.rozblog.com/temp/default/script.js
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
Hash 0f79a0db21adf42d6692070342a13c8e
bf3349841b9b81f0cb9b6694cbc5b4ebb8fe714a
c73a5c5ae7ea0f3c2f22e53038af6a95f5ceaa91abb56a7ac80f61c14745f359
GET /temp/default/script.js HTTP/1.1
Host: gilpic.rozblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Cookie: PHPSESSID=18fab2d438622910d8d799099c16f3e0
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Wed, 18 Sep 2024 14:31:10 GMT
content-type: application/javascript
last-modified: Wed, 18 Jul 2018 10:51:39 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 302
date: Wed, 11 Sep 2024 14:31:10 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
GET gilpic.rozblog.com/temp/tarahi/styles.css
200 OK 6.6 kB URL GET HTTP/1.1 gilpic.rozblog.com/temp/tarahi/styles.css
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
File type Unicode text, UTF-8 (with BOM) text
Hash a23cee76716ba52d32a1b5cf4e40b452
34d1af1f7b6ab8c691373ff08b4febd3a217a287
3aec72f66e26db8280ba920b28674d124ad37c3e791d57e2cfe5ade9e26ea117
GET /temp/tarahi/styles.css HTTP/1.1
Host: gilpic.rozblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Cookie: PHPSESSID=18fab2d438622910d8d799099c16f3e0
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 11 Oct 2024 14:31:10 GMT
content-type: text/css
last-modified: Tue, 21 Feb 2023 20:42:05 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 6617
date: Wed, 11 Sep 2024 14:31:10 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
GET gilpic.rozblog.com/code/popup
200 OK 1.2 kB URL GET HTTP/1.1 gilpic.rozblog.com/code/popup
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
Hash b16ce814b7e0ebb7bc7b7a3153515552
1daac82fe6149e73ff90a1a29f8dcaca28c3ee60
b760d8f659e8a01883263c90aa634a2acd2e8b5a881d839a9e885c73797f6a47
GET /code/popup HTTP/1.1
Host: gilpic.rozblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Cookie: PHPSESSID=18fab2d438622910d8d799099c16f3e0
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-language: fa
content-type: text/html; charset=charset
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Wed, 11 Sep 2024 14:31:10 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0,pre-check=0
pragma: no-cache
set-cookie: c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; expires=Thu, 12-Sep-2024 14:31:10 GMT; Max-Age=86400; path=/
c_t=9379166e1a9aecd718838890537546454892; expires=Thu, 12-Sep-2024 14:31:10 GMT; Max-Age=86400; path=/
vary: Accept-Encoding,User-Agent
content-length: 1180
content-encoding: gzip
date: Wed, 11 Sep 2024 14:31:10 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
GET dezfun.com/wp-content/uploads/2016/06/1466511414.jpg
400 Bad Request 20 B URL GET HTTP/1.1 dezfun.com/wp-content/uploads/2016/06/1466511414.jpg
IP
ASN #61969 Team Internet AG
Requested by http://gilpic.rozblog.com/
File type ASCII text, with no line terminators
Hash 64b3d0bcb16e406cdd665ec49fefb7f1
8da5d8ac9123e50bbd4293b111f6f640f864256b
cfe229c58e25f36ffab9053add1dcfdf3abe1cb26b7b0a3d22e9514f757b98d5
GET /wp-content/uploads/2016/06/1466511414.jpg HTTP/1.1
Host: dezfun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 400 Bad Request
Server: nginx
Date: Wed, 11 Sep 2024 14:31:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Blocked: 11015.10
GET gilpic.rozblog.com/js/site.js?24.16
200 OK 18 kB URL GET HTTP/1.1 gilpic.rozblog.com/js/site.js?24.16
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (3265)
Hash 9c852bebe1e3ebc802c99229305307eb
195e5d6937bf1d6823dcc1efdc3add1c77ac485a
ab54e4f350686a10925a3c0494d007d4465e72edc3dfd61a957358f2590c3307
GET /js/site.js?24.16 HTTP/1.1
Host: gilpic.rozblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Cookie: PHPSESSID=18fab2d438622910d8d799099c16f3e0
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Wed, 18 Sep 2024 14:31:10 GMT
content-type: application/javascript
last-modified: Sat, 07 Sep 2024 08:05:40 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 18266
date: Wed, 11 Sep 2024 14:31:10 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
GET dezfun.com/wp-content/uploads/2016/08/13731379_628040504036912_820126473_n.jpg
400 Bad Request 20 B URL GET HTTP/1.1 dezfun.com/wp-content/uploads/2016/08/13731379_628040504036912_820126473_n.jpg
IP
ASN #61969 Team Internet AG
Requested by http://gilpic.rozblog.com/
File type ASCII text, with no line terminators
Hash 64b3d0bcb16e406cdd665ec49fefb7f1
8da5d8ac9123e50bbd4293b111f6f640f864256b
cfe229c58e25f36ffab9053add1dcfdf3abe1cb26b7b0a3d22e9514f757b98d5
GET /wp-content/uploads/2016/08/13731379_628040504036912_820126473_n.jpg HTTP/1.1
Host: dezfun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 400 Bad Request
Server: nginx
Date: Wed, 11 Sep 2024 14:31:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Blocked: 11015.10
GET photokade.com/wp-content/uploads/emamreza-loveu-photokade-3-500x422.jpg
301 Moved Permanently 707 B URL GET HTTP/1.1 photokade.com/wp-content/uploads/emamreza-loveu-photokade-3-500x422.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by http://gilpic.rozblog.com/
File type HTML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/uploads/emamreza-loveu-photokade-3-500x422.jpg HTTP/1.1
Host: photokade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Wed, 11 Sep 2024 14:31:10 GMT
location: https://photokade.com/wp-content/uploads/emamreza-loveu-photokade-3-500x422.jpg
GET photokade.com/wp-content/uploads/shahram-gaedi-photokade-6-500x500.jpg
301 Moved Permanently 707 B URL GET HTTP/1.1 photokade.com/wp-content/uploads/shahram-gaedi-photokade-6-500x500.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by http://gilpic.rozblog.com/
File type HTML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/uploads/shahram-gaedi-photokade-6-500x500.jpg HTTP/1.1
Host: photokade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Wed, 11 Sep 2024 14:31:10 GMT
location: https://photokade.com/wp-content/uploads/shahram-gaedi-photokade-6-500x500.jpg
GET photokade.com/wp-content/uploads/simatirandaz-photokade-1-500x500.jpg
200 OK 707 B URL GET HTTP/2 photokade.com/wp-content/uploads/simatirandaz-photokade-1-500x500.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by http://gilpic.rozblog.com/
Certificate IssuerLet's Encrypt
Subjectphotokade.com
Fingerprint20:04:66:62:42:1D:D6:D4:41:8D:05:E5:7A:EE:F5:99:75:24:1A:F0
ValidityMon, 22 Jul 2024 06:18:41 GMT - Sun, 20 Oct 2024 06:18:40 GMT
File type HTML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/uploads/simatirandaz-photokade-1-500x500.jpg HTTP/1.1
Host: photokade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Wed, 11 Sep 2024 14:31:10 GMT
location: https://photokade.com/wp-content/uploads/simatirandaz-photokade-1-500x500.jpg
GET gilpic.rozblog.com/include/captcha/cap9.php
200 OK 2.5 kB URL GET HTTP/1.1 gilpic.rozblog.com/include/captcha/cap9.php
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
File type PNG image data, 100 x 30, 8-bit/color RGB, non-interlaced
Hash 69666a4a61dcf1076a50174be87d29f7
e3be4331d690b3609ba0d92fd6487a6bb9fa02ea
8a730e476f75c4a09c36566ce4a4ed71a43227060f994e6ec929a1adeae84caf
GET /include/captcha/cap9.php HTTP/1.1
Host: gilpic.rozblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Cookie: PHPSESSID=18fab2d438622910d8d799099c16f3e0
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: image/png
content-length: 2521
date: Wed, 11 Sep 2024 14:31:10 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
GET gilpic.rozblog.com/temp/pro/ads_468.jpg
200 OK 6.3 kB URL GET HTTP/1.1 gilpic.rozblog.com/temp/pro/ads_468.jpg
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
File type JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: "LEAD Technologies Inc. V1.01", baseline, precision 8, 468x60, components 3
Hash db8cac5e50e0f1be65a3ec0756ea6612
3053609e1039ab6d0d0be6adefeaf7ba7a243cf6
8f10f1e719bda34ecfc3af6b50f8273e9c9676d10612eff12aad2382d458ef1d
GET /temp/pro/ads_468.jpg HTTP/1.1
Host: gilpic.rozblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Cookie: PHPSESSID=18fab2d438622910d8d799099c16f3e0
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 11 Sep 2025 14:31:10 GMT
content-type: image/jpeg
last-modified: Fri, 20 Feb 2015 09:52:01 GMT
accept-ranges: bytes
content-length: 6286
date: Wed, 11 Sep 2024 14:31:10 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
GET www.picturescollections.com/wp-content/uploads/2013/05/42-love-photography1.jpg
301 Moved Permanently 0 B URL GET HTTP/1.1 www.picturescollections.com/wp-content/uploads/2013/05/42-love-photography1.jpg
IP
Requested by http://gilpic.rozblog.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/uploads/2013/05/42-love-photography1.jpg HTTP/1.1
Host: www.picturescollections.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Wed, 11 Sep 2024 14:31:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.0.33
Location: https://www.picturescollections.com/wp-content/uploads/2013/05/42-love-photography1.jpg
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zh4IiD4ohtO8O7Zr3IDj755nflUwfKHFA7Q%2FJpusCF9Wc0QORokRT0%2FIamCCaNcdV6USMrI6Sjogn3MJYnuC9eot19EyEjKnh8RimefRsHb%2BwvHIgiPlRsG2HmeOp7vHK8OgB8FF25Gw2I3flvM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8c185c25096ab517-OSL
alt-svc: h2=":443"; ma=60
GET gilpic.rozblog.com/weblog/file/loading/88.gif
200 OK 6.0 kB URL GET HTTP/1.1 gilpic.rozblog.com/weblog/file/loading/88.gif
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
File type GIF image data, version 89a, 50 x 50
Hash 093445ee241c72e6dca01dc570c230dc
32adb71ec06b5d29ec62c5511328d5970228b86d
d40495f2a0e830c47fe4cd50574c68e206292f63545a0684516db0cd8716ee0e
GET /weblog/file/loading/88.gif HTTP/1.1
Host: gilpic.rozblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Cookie: PHPSESSID=18fab2d438622910d8d799099c16f3e0
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 11 Sep 2025 14:31:10 GMT
content-type: image/gif
last-modified: Thu, 02 Feb 2012 21:52:24 GMT
accept-ranges: bytes
content-length: 5972
date: Wed, 11 Sep 2024 14:31:10 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
GET gilpic.rozblog.com/images/refresh2.svg
200 OK 276 B URL GET HTTP/1.1 gilpic.rozblog.com/images/refresh2.svg
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
File type SVG Scalable Vector Graphics image
Hash 7082e86e2a3c9646fa1aa922b8e3a2d6
7f704127e872b5b94b8e2dd7959e2d5c9b9379a8
d1254b0bb9112500f8f39e1130f0a6c8dca1037d416e7f7d6524894b31b06b00
GET /images/refresh2.svg HTTP/1.1
Host: gilpic.rozblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Cookie: PHPSESSID=18fab2d438622910d8d799099c16f3e0
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Wed, 18 Sep 2024 14:31:10 GMT
content-type: image/svg+xml
last-modified: Wed, 28 Apr 2021 22:57:34 GMT
etag: "114-6089e85e-9f2e18d89b796b95;;;"
accept-ranges: bytes
content-length: 276
date: Wed, 11 Sep 2024 14:31:10 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
GET toptoop.ir/files/pic/07001/41/toptoop.ir%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF%20%D8%B9%DA%A9%D8%B3%20%D9%87%D8%A7%DB%8C%20%D8%AC%D8%AF%DB%8C%D8%AF%20%D8%A7%D8%B3%D9%85%20%D8%AB%D9%86%D8%A7%20%D8%A8%D8%B1%D8%A7%DB%8C%20%D9%BE%D8%B1%D9%88%D9%81%D8%A7%DB%8C%D9%84.jpg
301 Moved Permanently 707 B URL GET HTTP/1.1 toptoop.ir/files/pic/07001/41/toptoop.ir%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF%20%D8%B9%DA%A9%D8%B3%20%D9%87%D8%A7%DB%8C%20%D8%AC%D8%AF%DB%8C%D8%AF%20%D8%A7%D8%B3%D9%85%20%D8%AB%D9%86%D8%A7%20%D8%A8%D8%B1%D8%A7%DB%8C%20%D9%BE%D8%B1%D9%88%D9%81%D8%A7%DB%8C%D9%84.jpg
IP
Requested by http://gilpic.rozblog.com/
File type HTML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /files/pic/07001/41/toptoop.ir%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF%20%D8%B9%DA%A9%D8%B3%20%D9%87%D8%A7%DB%8C%20%D8%AC%D8%AF%DB%8C%D8%AF%20%D8%A7%D8%B3%D9%85%20%D8%AB%D9%86%D8%A7%20%D8%A8%D8%B1%D8%A7%DB%8C%20%D9%BE%D8%B1%D9%88%D9%81%D8%A7%DB%8C%D9%84.jpg HTTP/1.1
Host: toptoop.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Wed, 11 Sep 2024 14:31:11 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
location: http://www.toptoop.ir/files/pic/07001/41/toptoop.irدانلود%20عکس%20های%20جدید%20اسم%20ثنا%20برای%20پروفایل.jpg
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yMtbSRaYmPmwXkroGm%2BWc%2FcRS8BolFgZYXMs8UHDg2rugIN%2BqGaXHId%2FkGaL1sch%2FAk6vHC1ULtu4Qi%2Bx60%2Bgi4xsVWRoGvS0ask09sOZsqmPSrE15si92osN6lC"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8c185c256f890b06-OSL
alt-svc: h3=":443"; ma=86400
GET saten.ir/wp-content/uploads/2014/10/2245526.jpg
301 Moved Permanently 795 B URL GET HTTP/1.1 saten.ir/wp-content/uploads/2014/10/2245526.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by http://gilpic.rozblog.com/
File type HTML document, ASCII text, with CRLF, LF line terminators
Hash 5d8d79c3cb9af023240b1be6f5057aaa
df22980677b134e83d878893f7c7984e0d78a240
e8b101a7c7f64aad528cc734513cbeb02243c0af37930dc0f3239749cff184b6
GET /wp-content/uploads/2014/10/2245526.jpg HTTP/1.1
Host: saten.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 795
date: Wed, 11 Sep 2024 14:31:11 GMT
location: https://saten.ir/wp-content/uploads/2014/10/2245526.jpg
GET mamasite.ir/uploads/tag/postions/Missionary_Sex_Position.jpg
200 OK 0 B URL GET HTTP/2 mamasite.ir/uploads/tag/postions/Missionary_Sex_Position.jpg
IP
ASN #205585 Noyan Abr Arvan Co. ( Private Joint Stock)
Requested by http://gilpic.rozblog.com/
Certificate IssuerLet's Encrypt
Subjectmamasite.ir
Fingerprint18:A3:16:BE:1D:B4:96:DA:6C:58:5F:BB:6A:33:55:98:8B:7D:CD:04
ValidityMon, 09 Sep 2024 23:48:41 GMT - Sun, 08 Dec 2024 23:48:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /uploads/tag/postions/Missionary_Sex_Position.jpg HTTP/1.1
Host: mamasite.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Wed, 11 Sep 2024 14:31:11 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=65
Location: https://mamasite.ir/uploads/tag/postions/Missionary_Sex_Position.jpg
Server: ArvanCloud
Server-Timing: total;dur=0
X-Request-ID: 4f19d31572f547c51c3b25d00107083e
X-SID: 6232
GET files.namnak.com/users/sf/Images/Sargarmi/goonagoon/9411/19_pics/%D9%81%D8%A7%D9%84-%D8%A8%D9%87%D9%85%D9%86-%D9%85%D8%A7%D9%87.jpg
200 OK 162 B URL GET HTTP/2 files.namnak.com/users/sf/Images/Sargarmi/goonagoon/9411/19_pics/%D9%81%D8%A7%D9%84-%D8%A8%D9%87%D9%85%D9%86-%D9%85%D8%A7%D9%87.jpg
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
Certificate IssuerLet's Encrypt
Subjectfiles.namnak.com
Fingerprint2D:79:13:D8:50:87:86:B8:01:80:87:43:13:3A:60:38:BC:83:83:8A
ValidityWed, 04 Sep 2024 20:32:15 GMT - Tue, 03 Dec 2024 20:32:14 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /users/sf/Images/Sargarmi/goonagoon/9411/19_pics/%D9%81%D8%A7%D9%84-%D8%A8%D9%87%D9%85%D9%86-%D9%85%D8%A7%D9%87.jpg HTTP/1.1
Host: files.namnak.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Wed, 11 Sep 2024 14:31:11 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://files.namnak.com/users/sf/Images/Sargarmi/goonagoon/9411/19_pics/%D9%81%D8%A7%D9%84-%D8%A8%D9%87%D9%85%D9%86-%D9%85%D8%A7%D9%87.jpg
Server: Hosted by hostdl.com
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400;
GET gilpic.rozblog.com/images/no_image.png
200 OK 38 kB URL GET HTTP/1.1 gilpic.rozblog.com/images/no_image.png
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
File type PNG image data, 578 x 423, 8-bit/color RGBA, non-interlaced
Hash 480874c4d09ee78c62f3c54188da6d63
87a5d589012b6154193c9b6b2ee85270d74a5db9
1ecdb8bb333e1fd849a68901df9fc9df554838b7e76ac0b18597ea3d5b95a72a
GET /images/no_image.png HTTP/1.1
Host: gilpic.rozblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Cookie: PHPSESSID=18fab2d438622910d8d799099c16f3e0
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 11 Sep 2025 14:31:10 GMT
content-type: image/png
last-modified: Sat, 12 Aug 2023 16:24:04 GMT
accept-ranges: bytes
content-length: 38401
date: Wed, 11 Sep 2024 14:31:10 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
GET www.poonak.org/wp-content/uploads/2016/07/8easyvnn8x5zvrat7o.jpg
301 Moved Permanently 162 B URL GET HTTP/1.1 www.poonak.org/wp-content/uploads/2016/07/8easyvnn8x5zvrat7o.jpg
IP
ASN #212216 Netafraz Iranian Ltd.
Requested by http://gilpic.rozblog.com/
File type HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /wp-content/uploads/2016/07/8easyvnn8x5zvrat7o.jpg HTTP/1.1
Host: www.poonak.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 11 Sep 2024 14:31:11 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://www.poonak.org/wp-content/uploads/2016/07/8easyvnn8x5zvrat7o.jpg
GET www.poonak.org/wp-content/uploads/2014/07/366117_416.jpg
301 Moved Permanently 162 B URL GET HTTP/1.1 www.poonak.org/wp-content/uploads/2014/07/366117_416.jpg
IP
ASN #212216 Netafraz Iranian Ltd.
Requested by http://gilpic.rozblog.com/
File type HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /wp-content/uploads/2014/07/366117_416.jpg HTTP/1.1
Host: www.poonak.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 11 Sep 2024 14:31:11 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://www.poonak.org/wp-content/uploads/2014/07/366117_416.jpg
GET www.poonak.org/wp-content/uploads/2015/04/afsharibahareh.jpg
301 Moved Permanently 162 B URL GET HTTP/2 www.poonak.org/wp-content/uploads/2015/04/afsharibahareh.jpg
IP
ASN #212216 Netafraz Iranian Ltd.
Requested by http://gilpic.rozblog.com/
Certificate IssuerLet's Encrypt
Subjectpoonak.org
Fingerprint7A:8F:59:08:2A:F9:C6:C5:62:F6:90:3B:E8:17:D1:4D:24:93:A4:1B
ValiditySun, 14 Jul 2024 19:52:43 GMT - Sat, 12 Oct 2024 19:52:42 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /wp-content/uploads/2015/04/afsharibahareh.jpg HTTP/1.1
Host: www.poonak.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 11 Sep 2024 14:31:11 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://www.poonak.org/wp-content/uploads/2015/04/afsharibahareh.jpg
GET www.irannaz.com/user_files/image/image7/0.573356001288726906_irannaz_com.jpg
301 Moved Permanently 707 B URL GET HTTP/1.1 www.irannaz.com/user_files/image/image7/0.573356001288726906_irannaz_com.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by http://gilpic.rozblog.com/
File type HTML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /user_files/image/image7/0.573356001288726906_irannaz_com.jpg HTTP/1.1
Host: www.irannaz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Wed, 11 Sep 2024 14:31:11 GMT
location: https://www.irannaz.com/user_files/image/image7/0.573356001288726906_irannaz_com.jpg
GET www.alamto.com/wp-content/uploads/2012/08/daily-omens.jpg
200 OK 12 kB URL GET HTTP/1.1 www.alamto.com/wp-content/uploads/2012/08/daily-omens.jpg
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 189x208, components 3
Hash 46bcb780f1e47bf814ac1d1bc9c60495
570740e38de5fddcbba190de6ee9b96396eef7fb
5933fda34511ace3ac4575c280d6df33e570220fd5a4107adc4d5f89d4abdd6e
GET /wp-content/uploads/2012/08/daily-omens.jpg HTTP/1.1
Host: www.alamto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Wed, 18 Sep 2024 14:31:11 GMT
content-type: image/jpeg
last-modified: Thu, 30 Aug 2012 12:03:35 GMT
accept-ranges: bytes
content-length: 11602
date: Wed, 11 Sep 2024 14:31:11 GMT
server: LiteSpeed
GET files.namnak.com/users/km/aup/9506/132_pics/%D8%B1%D8%A7%D9%85%D8%A8%D8%AF-%D8%AC%D9%88%D8%A7%D9%86.jpg
200 OK 162 B URL GET HTTP/2 files.namnak.com/users/km/aup/9506/132_pics/%D8%B1%D8%A7%D9%85%D8%A8%D8%AF-%D8%AC%D9%88%D8%A7%D9%86.jpg
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
Certificate IssuerLet's Encrypt
Subjectfiles.namnak.com
Fingerprint2D:79:13:D8:50:87:86:B8:01:80:87:43:13:3A:60:38:BC:83:83:8A
ValidityWed, 04 Sep 2024 20:32:15 GMT - Tue, 03 Dec 2024 20:32:14 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /users/km/aup/9506/132_pics/%D8%B1%D8%A7%D9%85%D8%A8%D8%AF-%D8%AC%D9%88%D8%A7%D9%86.jpg HTTP/1.1
Host: files.namnak.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Wed, 11 Sep 2024 14:31:11 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://files.namnak.com/users/km/aup/9506/132_pics/%D8%B1%D8%A7%D9%85%D8%A8%D8%AF-%D8%AC%D9%88%D8%A7%D9%86.jpg
Server: Hosted by hostdl.com
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400;
GET s2.picofile.com/file/8264600000/www_Campec_Ir_mitra_hajjar_19.jpg
301 Moved Permanently 190 B URL GET HTTP/1.1 s2.picofile.com/file/8264600000/www_Campec_Ir_mitra_hajjar_19.jpg
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
File type HTML document, ASCII text, with CRLF line terminators
Hash bc889e63005d2ba1885b36a9f7c37784
fdf7fc90770275810b4451d213e3b1b39da26805
956362cbc27e507f76406fc46b17528b58a159c45eed51c0a3850734d79681dd
GET /file/8264600000/www_Campec_Ir_mitra_hajjar_19.jpg HTTP/1.1
Host: s2.picofile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
Location: https://s2.picofile.com/file/8264600000/www_Campec_Ir_mitra_hajjar_19.jpg
Server: WSGIServer/0.1 Python/2.6.1
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *, content-range, range, content-length, cache-control, content-type, x-requested-with
Access-Control-Allow-Methods: *
Access-Control-Allow-Origin: http://gilpic.rozblog.com
Origin-Agent-Cluster: ?0
X-Powered-By: Django/1.2.1 SVN-13336
Date: Wed, 11 Sep 2024 14:31:10 GMT
Content-Length: 190
GET s5.picofile.com/file/8138135334/www_Campec_Ir_Sahar_Jafari_Jozani_19.jpg
200 OK 197 B URL GET HTTP/2 s5.picofile.com/file/8138135334/www_Campec_Ir_Sahar_Jafari_Jozani_19.jpg
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
Certificate IssuerSectigo Limited
Subject*.picofile.com
Fingerprint85:D2:D6:46:ED:86:D3:41:F9:D7:01:E6:D8:E7:FE:F4:B2:8C:82:5B
ValidityFri, 24 Nov 2023 00:00:00 GMT - Sat, 23 Nov 2024 23:59:59 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 20df287e43443a2092e191360143874e
646e46a9cc6ade97711191f5c4b139d0fcefb81a
3d81d3dabab129cc81d4c4e38abf5d5cc952e0a71b1ec4fa26334d1bdd82d063
GET /file/8138135334/www_Campec_Ir_Sahar_Jafari_Jozani_19.jpg HTTP/1.1
Host: s5.picofile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
Location: https://s5.picofile.com/file/8138135334/www_Campec_Ir_Sahar_Jafari_Jozani_19.jpg
Server: WSGIServer/0.1 Python/2.6.1
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *, content-range, range, content-length, cache-control, content-type, x-requested-with
Access-Control-Allow-Methods: *
Access-Control-Allow-Origin: http://gilpic.rozblog.com
Origin-Agent-Cluster: ?0
X-Powered-By: Django/1.2.1 SVN-13336
Date: Wed, 11 Sep 2024 14:31:10 GMT
Content-Length: 197
GET www.rahafun.com/wp-content/uploads/rahafun.com-joftgirie_heyvanat-2.jpg
301 Moved Permanently 162 B URL GET HTTP/1.1 www.rahafun.com/wp-content/uploads/rahafun.com-joftgirie_heyvanat-2.jpg
IP
ASN #212216 Netafraz Iranian Ltd.
Requested by http://gilpic.rozblog.com/
File type HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /wp-content/uploads/rahafun.com-joftgirie_heyvanat-2.jpg HTTP/1.1
Host: www.rahafun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 11 Sep 2024 14:31:11 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://www.rahafun.com/wp-content/uploads/rahafun.com-joftgirie_heyvanat-2.jpg
GET cdn.yjc.ir/files/fa/news/1394/11/6/4065605_215.jpg
301 Moved Permanently 0 B URL GET HTTP/1.1 cdn.yjc.ir/files/fa/news/1394/11/6/4065605_215.jpg
IP
ASN #31549 Aria Shatel Company Ltd
Requested by http://gilpic.rozblog.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /files/fa/news/1394/11/6/4065605_215.jpg HTTP/1.1
Host: cdn.yjc.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Content-length: 0
Location: https://cdn.yjc.ir/files/fa/news/1394/11/6/4065605_215.jpg
Connection: close
GET gilpic.rozblog.com/temp/img/star.png
200 OK 3.8 kB URL GET HTTP/1.1 gilpic.rozblog.com/temp/img/star.png
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
File type PNG image data, 24 x 72, 8-bit/color RGBA, non-interlaced
Hash 63c668cb80738b769ce776aa2ee56a5c
3f9d78168365e7cfb7460e46d51da236ca3a1131
0c8cc42dc2e01368e61930e3ab9c783a0d15eecd4e546f58a0e87aaf98383add
GET /temp/img/star.png HTTP/1.1
Host: gilpic.rozblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Cookie: PHPSESSID=18fab2d438622910d8d799099c16f3e0; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=9379166e1a9aecd718838890537546454892
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 11 Sep 2025 14:31:11 GMT
content-type: image/png
last-modified: Sat, 25 Nov 2023 14:21:34 GMT
accept-ranges: bytes
content-length: 3759
date: Wed, 11 Sep 2024 14:31:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
GET gilpic.rozblog.com/temp/tarahi/fonts/wdtv.woff
200 OK 15 kB URL GET HTTP/1.1 gilpic.rozblog.com/temp/tarahi/fonts/wdtv.woff
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
File type Web Open Font Format, TrueType, length 14648, version 1.0
Hash 259c4490256daceb6a5f275cee137627
5c0eae14870f1ec6527aa64f3f675cb9063034ee
bd4bdb99aa4a1cf56a05d7a913dce42b23b4cb021148b0a0f22d836105d98fc5
GET /temp/tarahi/fonts/wdtv.woff HTTP/1.1
Host: gilpic.rozblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/temp/tarahi/styles.css
Cookie: PHPSESSID=18fab2d438622910d8d799099c16f3e0; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=9379166e1a9aecd718838890537546454892
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 13 Sep 2024 14:31:11 GMT
content-type: font/woff
last-modified: Thu, 26 Feb 2015 19:00:22 GMT
etag: "3938-54ef6d46-daf654b8921ad10f;;;"
accept-ranges: bytes
content-length: 14648
date: Wed, 11 Sep 2024 14:31:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
504 B IP
ASN #20940 Akamai International B.V.
Hash 9166ec047d1a1a5f81e7d3837eabbc9a
7ed1e5b331a854776d5c422d2ded1329b74c7044
63274b199d0425d6b2283c6a23df2ab604b62be6614d18b74decff86727eb1ca
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "63274B199D0425D6B2283C6A23DF2AB604B62BE6614D18B74DECFF86727EB1CA"
Last-Modified: Tue, 10 Sep 2024 02:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17094
Expires: Wed, 11 Sep 2024 19:16:05 GMT
Date: Wed, 11 Sep 2024 14:31:11 GMT
Connection: keep-alive
GET www.keder.ir/wp-content/uploads/2016/02/keder.ir-1-2621.jpg
404 Not Found 106 B URL GET HTTP/1.1 www.keder.ir/wp-content/uploads/2016/02/keder.ir-1-2621.jpg
IP
ASN #48434 Tebyan-e-Noor Cultural-Artistic Institute
Requested by http://gilpic.rozblog.com/
File type HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /wp-content/uploads/2016/02/keder.ir-1-2621.jpg HTTP/1.1
Host: www.keder.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Wed, 11 Sep 2024 14:31:11 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
GET saten.ir/wp-content/uploads/2014/10/2245526.jpg
301 Moved Permanently 51 kB URL GET HTTP/1.1 saten.ir/wp-content/uploads/2014/10/2245526.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by http://gilpic.rozblog.com/
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 70", baseline, precision 8, 640x640, components 3
Hash b35b5faebf872b4de18a8f400e19f778
2a89ba6e795f056f0bd42d604f01eb19a6393df5
5550c3c490be0b30be46ac371838988ace5eb1bd9342f2739d88a3e5907c5c9e
GET /wp-content/uploads/2014/10/2245526.jpg HTTP/1.1
Host: saten.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://gilpic.rozblog.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Sep 2024 14:31:11 GMT
content-type: image/jpeg
last-modified: Mon, 28 Jun 2021 19:12:15 GMT
accept-ranges: bytes
content-length: 51392
date: Wed, 11 Sep 2024 14:31:11 GMT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
GET gilpic.rozblog.com/temp/tarahi/fonts/yekanregular.woff
200 OK 22 kB URL GET HTTP/1.1 gilpic.rozblog.com/temp/tarahi/fonts/yekanregular.woff
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
File type Web Open Font Format, CFF, length 21500, version 2.0
Hash 05727d32400b2008acbf7fc49251ede0
b6c1a82539a2531eb1aad7d1cf05554d5a999154
da78e001fab6f5d7b1c68e17d00fb1595c9b10085d6769a86aeb6a39dc7e43d6
GET /temp/tarahi/fonts/yekanregular.woff HTTP/1.1
Host: gilpic.rozblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/temp/tarahi/styles.css
Cookie: PHPSESSID=18fab2d438622910d8d799099c16f3e0; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=9379166e1a9aecd718838890537546454892
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 13 Sep 2024 14:31:11 GMT
content-type: font/woff
last-modified: Thu, 26 Feb 2015 19:00:25 GMT
etag: "53fc-54ef6d49-80b982f1d7ce7ee2;;;"
accept-ranges: bytes
content-length: 21500
date: Wed, 11 Sep 2024 14:31:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
GET www.toptoop.ir/files/pic/07001/41/toptoop.ir%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF%20%D8%B9%DA%A9%D8%B3%20%D9%87%D8%A7%DB%8C%20%D8%AC%D8%AF%DB%8C%D8%AF%20%D8%A7%D8%B3%D9%85%20%D8%AB%D9%86%D8%A7%20%D8%A8%D8%B1%D8%A7%DB%8C%20%D9%BE%D8%B1%D9%88%D9%81%D8%A7%DB%8C%D9%84.jpg
200 OK 24 kB URL GET HTTP/1.1 www.toptoop.ir/files/pic/07001/41/toptoop.ir%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF%20%D8%B9%DA%A9%D8%B3%20%D9%87%D8%A7%DB%8C%20%D8%AC%D8%AF%DB%8C%D8%AF%20%D8%A7%D8%B3%D9%85%20%D8%AB%D9%86%D8%A7%20%D8%A8%D8%B1%D8%A7%DB%8C%20%D9%BE%D8%B1%D9%88%D9%81%D8%A7%DB%8C%D9%84.jpg
IP
Requested by http://gilpic.rozblog.com/
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2016:07:13 11:50:41], progressive, precision 8, 450x450, components 3
Hash bc303ca66572770db3295515442143e5
9e3ba69e9292d729cb50d554da047e7c801baa3e
4e6c99fc0fb3acd699847dee821666a18b325a08c16e28459b324627b6cfde58
GET /files/pic/07001/41/toptoop.ir%D8%AF%D8%A7%D9%86%D9%84%D9%88%D8%AF%20%D8%B9%DA%A9%D8%B3%20%D9%87%D8%A7%DB%8C%20%D8%AC%D8%AF%DB%8C%D8%AF%20%D8%A7%D8%B3%D9%85%20%D8%AB%D9%86%D8%A7%20%D8%A8%D8%B1%D8%A7%DB%8C%20%D9%BE%D8%B1%D9%88%D9%81%D8%A7%DB%8C%D9%84.jpg HTTP/1.1
Host: www.toptoop.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://gilpic.rozblog.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 11 Sep 2024 14:31:11 GMT
Content-Type: image/jpeg
Content-Length: 24471
Connection: keep-alive
cache-control: public, max-age=604800
expires: Wed, 18 Sep 2024 14:31:11 GMT
last-modified: Wed, 13 Jul 2016 07:21:00 GMT
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FfqpiYalAMcG3mWXoTCfnH%2BIFXPdWF%2FsAjJUqwEAvnb3lqZgqbM%2B%2BOR3mymHE2yNhIVNvQYQQv%2FEbmDNo82pic%2FKJl%2FwXm1edu5DWIKylGDP7hjN5lKXuC42d3tbkIgmig%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8c185c2728ed56b5-OSL
alt-svc: h3=":443"; ma=86400
GET photokade.com/wp-content/uploads/emamreza-loveu-photokade-3-500x422.jpg
301 Moved Permanently 44 kB URL GET HTTP/1.1 photokade.com/wp-content/uploads/emamreza-loveu-photokade-3-500x422.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by http://gilpic.rozblog.com/
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x422, components 3
Hash 7e231a6993367deb3701dd0a432e8aeb
4ebe2fe20d80fb485afe60ea6259e474621d4e6b
25d7b8bf4aad0cac91338ce3d8b34e3871968f2eb54cbe562a792ec338c770f5
GET /wp-content/uploads/emamreza-loveu-photokade-3-500x422.jpg HTTP/1.1
Host: photokade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://gilpic.rozblog.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=10368000,public
expires: Thu, 09 Jan 2025 14:31:11 GMT
content-type: image/jpeg
last-modified: Mon, 03 Feb 2020 11:09:57 GMT
accept-ranges: bytes
content-length: 44464
date: Wed, 11 Sep 2024 14:31:11 GMT
vary: User-Agent,Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: no-referrer-when-downgrade
permissions-policy: geolocation=(self), microphone=()
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash 9166ec047d1a1a5f81e7d3837eabbc9a
7ed1e5b331a854776d5c422d2ded1329b74c7044
63274b199d0425d6b2283c6a23df2ab604b62be6614d18b74decff86727eb1ca
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "63274B199D0425D6B2283C6A23DF2AB604B62BE6614D18B74DECFF86727EB1CA"
Last-Modified: Tue, 10 Sep 2024 02:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17094
Expires: Wed, 11 Sep 2024 19:16:05 GMT
Date: Wed, 11 Sep 2024 14:31:11 GMT
Connection: keep-alive
GET photokade.com/wp-content/uploads/shahram-gaedi-photokade-6-500x500.jpg
301 Moved Permanently 49 kB URL GET HTTP/1.1 photokade.com/wp-content/uploads/shahram-gaedi-photokade-6-500x500.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by http://gilpic.rozblog.com/
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3
Hash 1380b3c1af64a1279091848f5e8082ca
3ee2ae75457861c0f455b6302ea411415896aba4
d0a86ac60dc63ba0cc8126721b873df4026ab3f662b8579f815145cc8b192a88
GET /wp-content/uploads/shahram-gaedi-photokade-6-500x500.jpg HTTP/1.1
Host: photokade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://gilpic.rozblog.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=10368000,public
expires: Thu, 09 Jan 2025 14:31:11 GMT
content-type: image/jpeg
last-modified: Mon, 03 Feb 2020 11:08:15 GMT
accept-ranges: bytes
content-length: 48707
date: Wed, 11 Sep 2024 14:31:11 GMT
vary: User-Agent,Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: no-referrer-when-downgrade
permissions-policy: geolocation=(self), microphone=()
X-Firefox-Spdy: h2
GET gilpic.rozblog.com/temp/tarahi/fonts/fontawesome-webfont.woff?v=4.2.0
200 OK 66 kB URL GET HTTP/1.1 gilpic.rozblog.com/temp/tarahi/fonts/fontawesome-webfont.woff?v=4.2.0
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
File type Web Open Font Format, TrueType, length 65452, version 1.0
Hash d95d6f5d5ab7cfefd09651800b69bd54
7d65e0227d0d7cdc1718119cd2a7dce0638f151c
199411f659f41aaccb959bacb1b0de30e54f244352a48c6f9894e65ae0f8a9a1
GET /temp/tarahi/fonts/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1
Host: gilpic.rozblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/temp/tarahi/styles.css
Cookie: PHPSESSID=18fab2d438622910d8d799099c16f3e0; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=9379166e1a9aecd718838890537546454892
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 13 Sep 2024 14:31:11 GMT
content-type: font/woff
last-modified: Thu, 26 Feb 2015 19:00:20 GMT
etag: "ffac-54ef6d44-11fea27943efc11b;;;"
accept-ranges: bytes
content-length: 65452
date: Wed, 11 Sep 2024 14:31:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
504 B IP
ASN #20940 Akamai International B.V.
Hash 7565f7dd0ab257e4670bc96b557ef4c7
b79c9bbba8c7f2ae7f2d0ded692ee65ce4fd7883
df0d2afe106cc038a21f30cc4fb48dd6687714ebc295d01850a4c494e8b3875b
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DF0D2AFE106CC038A21F30CC4FB48DD6687714EBC295D01850A4C494E8B3875B"
Last-Modified: Tue, 10 Sep 2024 05:24:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18618
Expires: Wed, 11 Sep 2024 19:41:29 GMT
Date: Wed, 11 Sep 2024 14:31:11 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash c8882f7ab2eeac8e65767260a014fc31
bac2071f9b1bffa6883a68c5341217a1aef7fcb3
90e443ba988178b433a1dded775175b48d56517ca62abc45767521f882b0cf68
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "90E443BA988178B433A1DDED775175B48D56517CA62ABC45767521F882B0CF68"
Last-Modified: Tue, 10 Sep 2024 04:01:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3502
Expires: Wed, 11 Sep 2024 15:29:33 GMT
Date: Wed, 11 Sep 2024 14:31:11 GMT
Connection: keep-alive
GET photokade.com/wp-content/uploads/simatirandaz-photokade-1-500x500.jpg
200 OK 65 kB URL GET HTTP/2 photokade.com/wp-content/uploads/simatirandaz-photokade-1-500x500.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by http://gilpic.rozblog.com/
Certificate IssuerLet's Encrypt
Subjectphotokade.com
Fingerprint20:04:66:62:42:1D:D6:D4:41:8D:05:E5:7A:EE:F5:99:75:24:1A:F0
ValidityMon, 22 Jul 2024 06:18:41 GMT - Sun, 20 Oct 2024 06:18:40 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3
Hash e7f6357c1a9615c1302dfd4f79de9472
3d84174487a5d741da591071fd018ada21f5c9f4
f4ead48ccd0c263c384a24476fefe19b90481801eee17bc52e596157b0b62824
GET /wp-content/uploads/simatirandaz-photokade-1-500x500.jpg HTTP/1.1
Host: photokade.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://gilpic.rozblog.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=10368000,public
expires: Thu, 09 Jan 2025 14:31:11 GMT
content-type: image/jpeg
last-modified: Mon, 03 Feb 2020 02:39:05 GMT
accept-ranges: bytes
content-length: 65325
date: Wed, 11 Sep 2024 14:31:11 GMT
vary: User-Agent,Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains; preload
referrer-policy: no-referrer-when-downgrade
permissions-policy: geolocation=(self), microphone=()
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash 0c931964b4b109d37ec8de3d34e7d3f5
32907a2724b53c56d14cd36b856e2142cdb17b04
254e867cb02ad83e76a9bf02f7878be338a249f70f5715b77f6e07d959ceff62
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "254E867CB02AD83E76A9BF02F7878BE338A249F70F5715B77F6E07D959CEFF62"
Last-Modified: Mon, 09 Sep 2024 22:05:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20973
Expires: Wed, 11 Sep 2024 20:20:44 GMT
Date: Wed, 11 Sep 2024 14:31:11 GMT
Connection: keep-alive
345 B IP
ASN #20940 Akamai International B.V.
Hash 891bbd69044f13c2ead1bbde31238ec0
c2641e15f3e62a91f1ea6c802d717c57c6037c87
faaccbf7a5077cbb6d916dc7ef88c69787ffb2d3d5b72480608865ea42c1b0a0
POST / HTTP/1.1
Host: e6.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "FAACCBF7A5077CBB6D916DC7EF88C69787FFB2D3D5B72480608865EA42C1B0A0"
Last-Modified: Tue, 10 Sep 2024 00:51:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21573
Expires: Wed, 11 Sep 2024 20:30:44 GMT
Date: Wed, 11 Sep 2024 14:31:11 GMT
Connection: keep-alive
GET www.rozblog.com/theme/ads/banner.html
200 OK 487 B URL GET HTTP/2 www.rozblog.com/theme/ads/banner.html
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
Certificate IssuerLet's Encrypt
Subjectrozblog.com
Fingerprint00:EC:52:7D:6B:8C:DF:74:97:D5:66:E7:71:AB:16:D1:DE:CB:D3:6D
ValidityWed, 21 Aug 2024 18:05:24 GMT - Tue, 19 Nov 2024 18:05:23 GMT
File type HTML document, Unicode text, UTF-8 (with BOM) text
Hash acdea163c9f1236ddf2395e4457aa5cd
4af56c130ec32761203a4176bede2198832957f5
74f58c7d0986d2412c0a3d469ee8355476d80d756feae9ecd8e022a4d86201ac
GET /theme/ads/banner.html HTTP/1.1
Host: www.rozblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=172800
expires: Fri, 13 Sep 2024 14:31:11 GMT
content-type: text/html
last-modified: Tue, 09 Jul 2024 13:12:26 GMT
etag: "48e-668d373a-e09a3ebd605f281b;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 487
date: Wed, 11 Sep 2024 14:31:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
GET www.irannaz.com/user_files/image/image7/0.573356001288726906_irannaz_com.jpg
301 Moved Permanently 91 kB URL GET HTTP/1.1 www.irannaz.com/user_files/image/image7/0.573356001288726906_irannaz_com.jpg
IP
ASN #24940 Hetzner Online GmbH
Requested by http://gilpic.rozblog.com/
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 595x397, components 3
Hash 2c9ceda7badf231c43a2c27fea13db7e
2b4690a6276127e73c7c56b2fee669bd871abc9e
094e5c2afc8b9b9cc4e0e9796d997652ecce6976bbaf3b0bb1ee249b2fa7fbdc
GET /user_files/image/image7/0.573356001288726906_irannaz_com.jpg HTTP/1.1
Host: www.irannaz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://gilpic.rozblog.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Wed, 18 Sep 2024 14:31:11 GMT
content-type: image/jpeg
last-modified: Tue, 25 Feb 2020 06:26:29 GMT
accept-ranges: bytes
content-length: 90745
date: Wed, 11 Sep 2024 14:31:11 GMT
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash f8a0a4eeb8747fab1c3f6ef29ab6748a
b3309ab1780b0113a7cc07c271dada176d4ec460
a92db0c9b2eb371817ea02f6a8b891cd7d8390f23f9c86d85a0f7066c374668b
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "A92DB0C9B2EB371817EA02F6A8B891CD7D8390F23F9C86D85A0F7066C374668B"
Last-Modified: Wed, 11 Sep 2024 06:39:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21592
Expires: Wed, 11 Sep 2024 20:31:03 GMT
Date: Wed, 11 Sep 2024 14:31:11 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash f8a0a4eeb8747fab1c3f6ef29ab6748a
b3309ab1780b0113a7cc07c271dada176d4ec460
a92db0c9b2eb371817ea02f6a8b891cd7d8390f23f9c86d85a0f7066c374668b
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "A92DB0C9B2EB371817EA02F6A8B891CD7D8390F23F9C86D85A0F7066C374668B"
Last-Modified: Wed, 11 Sep 2024 06:39:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21566
Expires: Wed, 11 Sep 2024 20:30:37 GMT
Date: Wed, 11 Sep 2024 14:31:11 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 4d49969fee7d4ff825a2b4949f88c9f6
991fc786f731c80f8d761613b3d5e58d89ee8647
0eaf5d4290e85fe94abef4cafa5d691c8738e9e246d22316d8db733a399f07ac
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "0EAF5D4290E85FE94ABEF4CAFA5D691C8738E9E246D22316D8DB733A399F07AC"
Last-Modified: Tue, 10 Sep 2024 04:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17828
Expires: Wed, 11 Sep 2024 19:28:19 GMT
Date: Wed, 11 Sep 2024 14:31:11 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash f8a0a4eeb8747fab1c3f6ef29ab6748a
b3309ab1780b0113a7cc07c271dada176d4ec460
a92db0c9b2eb371817ea02f6a8b891cd7d8390f23f9c86d85a0f7066c374668b
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "A92DB0C9B2EB371817EA02F6A8B891CD7D8390F23F9C86D85A0F7066C374668B"
Last-Modified: Wed, 11 Sep 2024 06:39:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 11 Sep 2024 20:31:11 GMT
Date: Wed, 11 Sep 2024 14:31:11 GMT
Connection: keep-alive
GET www.poonak.org/wp-content/uploads/2014/07/366117_416.jpg
301 Moved Permanently 162 B URL GET HTTP/1.1 www.poonak.org/wp-content/uploads/2014/07/366117_416.jpg
IP
ASN #212216 Netafraz Iranian Ltd.
Requested by http://gilpic.rozblog.com/
File type HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /wp-content/uploads/2014/07/366117_416.jpg HTTP/1.1
Host: www.poonak.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://gilpic.rozblog.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Wed, 11 Sep 2024 14:31:11 GMT
content-type: text/html
content-length: 162
location: https://poonak.org/wp-content/uploads/2014/07/366117_416.jpg
X-Firefox-Spdy: h2
GET www.poonak.org/wp-content/uploads/2015/04/afsharibahareh.jpg
301 Moved Permanently 162 B URL GET HTTP/2 www.poonak.org/wp-content/uploads/2015/04/afsharibahareh.jpg
IP
ASN #212216 Netafraz Iranian Ltd.
Requested by http://gilpic.rozblog.com/
Certificate IssuerLet's Encrypt
Subjectpoonak.org
Fingerprint7A:8F:59:08:2A:F9:C6:C5:62:F6:90:3B:E8:17:D1:4D:24:93:A4:1B
ValiditySun, 14 Jul 2024 19:52:43 GMT - Sat, 12 Oct 2024 19:52:42 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /wp-content/uploads/2015/04/afsharibahareh.jpg HTTP/1.1
Host: www.poonak.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://gilpic.rozblog.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Wed, 11 Sep 2024 14:31:11 GMT
content-type: text/html
content-length: 162
location: https://poonak.org/wp-content/uploads/2015/04/afsharibahareh.jpg
X-Firefox-Spdy: h2
GET files.namnak.com/users/sf/Images/Sargarmi/goonagoon/9411/19_pics/%D9%81%D8%A7%D9%84-%D8%A8%D9%87%D9%85%D9%86-%D9%85%D8%A7%D9%87.jpg
200 OK 15 kB URL GET HTTP/2 files.namnak.com/users/sf/Images/Sargarmi/goonagoon/9411/19_pics/%D9%81%D8%A7%D9%84-%D8%A8%D9%87%D9%85%D9%86-%D9%85%D8%A7%D9%87.jpg
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
Certificate IssuerLet's Encrypt
Subjectfiles.namnak.com
Fingerprint2D:79:13:D8:50:87:86:B8:01:80:87:43:13:3A:60:38:BC:83:83:8A
ValidityWed, 04 Sep 2024 20:32:15 GMT - Tue, 03 Dec 2024 20:32:14 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70", baseline, precision 8, 300x291, components 3
Hash 34df200119363617c88fa2052a97cae3
116e5387bcbf6d02e4f33a75cda0520acd109222
22c4657442b23cc073fc44552e25f79cffa84b000b8379e04473f1477d208ad0
GET /users/sf/Images/Sargarmi/goonagoon/9411/19_pics/%D9%81%D8%A7%D9%84-%D8%A8%D9%87%D9%85%D9%86-%D9%85%D8%A7%D9%87.jpg HTTP/1.1
Host: files.namnak.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://gilpic.rozblog.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 11 Sep 2024 14:31:11 GMT
content-type: image/jpeg
content-length: 14887
last-modified: Wed, 08 Jun 2016 13:50:00 GMT
etag: "57582288-3a27"
server: Hosted by hostdl.com
expires: Fri, 11 Oct 2024 14:31:11 GMT
cache-control: max-age=2592000
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400;
accept-ranges: bytes
X-Firefox-Spdy: h2
GET mamasite.ir/uploads/tag/postions/Missionary_Sex_Position.jpg
200 OK 11 kB URL GET HTTP/2 mamasite.ir/uploads/tag/postions/Missionary_Sex_Position.jpg
IP
ASN #205585 Noyan Abr Arvan Co. ( Private Joint Stock)
Requested by http://gilpic.rozblog.com/
Certificate IssuerLet's Encrypt
Subjectmamasite.ir
Fingerprint18:A3:16:BE:1D:B4:96:DA:6C:58:5F:BB:6A:33:55:98:8B:7D:CD:04
ValidityMon, 09 Sep 2024 23:48:41 GMT - Sun, 08 Dec 2024 23:48:40 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 270x150, components 3
Hash 6c003c4555b726115db1b9aa0ae5767a
15add3b624336934b665a544ee845ff6d724d188
c3a0179b1d30c5efc06422ee59bf076ec092f2fa2a8d90bdce232c2d2670ac86
GET /uploads/tag/postions/Missionary_Sex_Position.jpg HTTP/1.1
Host: mamasite.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://gilpic.rozblog.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 11 Sep 2024 14:31:11 GMT
content-type: image/jpeg
content-length: 11344
last-modified: Sun, 03 Jan 2016 09:01:09 GMT
etag: "baafb749546d11:0"
x-powered-by: ASP.NET
x-xss-protection: 1; mode=block
server: ArvanCloud
server-timing: total;dur=170
x-cache: REVALIDATED
x-request-id: 14e820e8578d285421513a260dea0a7c
x-sid: 6231
accept-ranges: bytes
X-Firefox-Spdy: h2
GET www.rozblog.com/theme/ads/style_ads.css
200 OK 720 B URL GET HTTP/2 www.rozblog.com/theme/ads/style_ads.css
IP
ASN #43754 Asiatech Data Transmission company
Requested by https://www.rozblog.com/theme/ads/banner.html
Certificate IssuerLet's Encrypt
Subjectrozblog.com
Fingerprint00:EC:52:7D:6B:8C:DF:74:97:D5:66:E7:71:AB:16:D1:DE:CB:D3:6D
ValidityWed, 21 Aug 2024 18:05:24 GMT - Tue, 19 Nov 2024 18:05:23 GMT
Hash 692c3a98b1967065e9adad2c348e9d08
b9558f78445af0ceb359403fc8e67ed995f3f5a7
42f4dc74e88e0c6e8e4f16e13ae40a013004a3bfa842d6210dc3dcc6ebef0e26
GET /theme/ads/style_ads.css HTTP/1.1
Host: www.rozblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rozblog.com/theme/ads/banner.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000, no-transform
expires: Fri, 11 Oct 2024 14:31:11 GMT
content-type: text/css
last-modified: Tue, 09 Jul 2024 13:12:26 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 720
date: Wed, 11 Sep 2024 14:31:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
X-Firefox-Spdy: h2
GET www.rozblog.com/theme/ads/ecommerce.png
200 OK 9.7 kB URL GET HTTP/2 www.rozblog.com/theme/ads/ecommerce.png
IP
ASN #43754 Asiatech Data Transmission company
Requested by https://www.rozblog.com/theme/ads/banner.html
Certificate IssuerLet's Encrypt
Subjectrozblog.com
Fingerprint00:EC:52:7D:6B:8C:DF:74:97:D5:66:E7:71:AB:16:D1:DE:CB:D3:6D
ValidityWed, 21 Aug 2024 18:05:24 GMT - Tue, 19 Nov 2024 18:05:23 GMT
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Hash 31ce9ee51ccddf63254006e1393ee127
00af5daa90da5823a622626fe4354ed2bd174237
b618833a26e46f5eb75306ff53b14894f75030eb2b996f17273fe4ebe9038d80
GET /theme/ads/ecommerce.png HTTP/1.1
Host: www.rozblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rozblog.com/theme/ads/banner.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000, no-transform
expires: Thu, 11 Sep 2025 14:31:11 GMT
content-type: image/png
last-modified: Tue, 09 Jul 2024 11:20:37 GMT
accept-ranges: bytes
content-length: 9747
date: Wed, 11 Sep 2024 14:31:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
X-Firefox-Spdy: h2
GET www.poonak.org/wp-content/uploads/2016/07/8easyvnn8x5zvrat7o.jpg
301 Moved Permanently 162 B URL GET HTTP/1.1 www.poonak.org/wp-content/uploads/2016/07/8easyvnn8x5zvrat7o.jpg
IP
ASN #212216 Netafraz Iranian Ltd.
Requested by http://gilpic.rozblog.com/
File type HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /wp-content/uploads/2016/07/8easyvnn8x5zvrat7o.jpg HTTP/1.1
Host: www.poonak.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://gilpic.rozblog.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Wed, 11 Sep 2024 14:31:11 GMT
content-type: text/html
content-length: 162
location: https://poonak.org/wp-content/uploads/2016/07/8easyvnn8x5zvrat7o.jpg
X-Firefox-Spdy: h2
GET files.namnak.com/users/km/aup/9506/132_pics/%D8%B1%D8%A7%D9%85%D8%A8%D8%AF-%D8%AC%D9%88%D8%A7%D9%86.jpg
200 OK 15 kB URL GET HTTP/2 files.namnak.com/users/km/aup/9506/132_pics/%D8%B1%D8%A7%D9%85%D8%A8%D8%AF-%D8%AC%D9%88%D8%A7%D9%86.jpg
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
Certificate IssuerLet's Encrypt
Subjectfiles.namnak.com
Fingerprint2D:79:13:D8:50:87:86:B8:01:80:87:43:13:3A:60:38:BC:83:83:8A
ValidityWed, 04 Sep 2024 20:32:15 GMT - Tue, 03 Dec 2024 20:32:14 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70", baseline, precision 8, 300x210, components 3
Hash 2576931b6b25b3aa36acf688dfcff80e
125f9a43b5814714362c97f341a1efc38a14d7d3
41b0adc9c593ec095f110d7bc8ee171a530f713e1ed045adbcec5d99bd1a8f5f
GET /users/km/aup/9506/132_pics/%D8%B1%D8%A7%D9%85%D8%A8%D8%AF-%D8%AC%D9%88%D8%A7%D9%86.jpg HTTP/1.1
Host: files.namnak.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://gilpic.rozblog.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 11 Sep 2024 14:31:11 GMT
content-type: image/jpeg
content-length: 14778
last-modified: Mon, 22 Aug 2016 06:28:43 GMT
etag: "57ba9b9b-39ba"
server: Hosted by hostdl.com
expires: Fri, 11 Oct 2024 14:31:11 GMT
cache-control: max-age=2592000
alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400;
accept-ranges: bytes
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash dd4bcddc2fb1d7d18d33d855007053ba
16d10b0abc9d95876d28938dfa3025b701245fee
38aa28854df4acfafafa0ccdf53ee6aee155c13d08bfd7385fcd1bbffae21260
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "38AA28854DF4ACFAFAFA0CCDF53EE6AEE155C13D08BFD7385FCD1BBFFAE21260"
Last-Modified: Wed, 11 Sep 2024 06:15:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 11 Sep 2024 20:31:11 GMT
Date: Wed, 11 Sep 2024 14:31:11 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 7565f7dd0ab257e4670bc96b557ef4c7
b79c9bbba8c7f2ae7f2d0ded692ee65ce4fd7883
df0d2afe106cc038a21f30cc4fb48dd6687714ebc295d01850a4c494e8b3875b
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DF0D2AFE106CC038A21F30CC4FB48DD6687714EBC295D01850A4C494E8B3875B"
Last-Modified: Tue, 10 Sep 2024 05:24:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18618
Expires: Wed, 11 Sep 2024 19:41:29 GMT
Date: Wed, 11 Sep 2024 14:31:11 GMT
Connection: keep-alive
GET www.rozblog.com/theme/ads/arrow-left.png
200 OK 4.2 kB URL GET HTTP/2 www.rozblog.com/theme/ads/arrow-left.png
IP
ASN #43754 Asiatech Data Transmission company
Requested by https://www.rozblog.com/theme/ads/banner.html
Certificate IssuerLet's Encrypt
Subjectrozblog.com
Fingerprint00:EC:52:7D:6B:8C:DF:74:97:D5:66:E7:71:AB:16:D1:DE:CB:D3:6D
ValidityWed, 21 Aug 2024 18:05:24 GMT - Tue, 19 Nov 2024 18:05:23 GMT
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Hash 46391ce1d25fa254f516224c73a046c7
95329d21a757541712e4b80a9bec8956e9b73225
786bf14fc49d5da14aa7da62d92e119c4e9c652430a071fdb77ccaf2949e640d
GET /theme/ads/arrow-left.png HTTP/1.1
Host: www.rozblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.rozblog.com/theme/ads/banner.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000, no-transform
expires: Thu, 11 Sep 2025 14:31:11 GMT
content-type: image/png
last-modified: Tue, 09 Jul 2024 11:20:37 GMT
accept-ranges: bytes
content-length: 4167
date: Wed, 11 Sep 2024 14:31:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
X-Firefox-Spdy: h2
GET rozup.ir/view/1189555/Fale-rozane.jpg
200 OK 215 kB URL GET HTTP/1.1 rozup.ir/view/1189555/Fale-rozane.jpg
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
Certificate IssuerLet's Encrypt
Subjectrozup.ir
FingerprintF2:17:9B:E4:A0:C6:3C:FD:E7:E9:F8:54:E9:1C:18:5C:8B:09:95:4F
ValiditySun, 28 Jul 2024 19:37:07 GMT - Sat, 26 Oct 2024 19:37:06 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=344, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=350], baseline, precision 8, 600x590, components 3
Size 215 kB (215177 bytes)
Hash fd59f23460ae9db3577f88621263e37b
6cf495b36163b22cfdcd063cab9191d420a34a7e
1d84f6e34adc27bc577c400113e27d4f41c13df854697c022a9707534cd2e411
GET /view/1189555/Fale-rozane.jpg HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 11 Sep 2024 14:31:11 GMT
Content-Type: image/jpeg
Content-Length: 215177
Last-Modified: Sat, 23 Jan 2016 14:30:29 GMT
Connection: keep-alive
ETag: "56a38e85-34889"
Expires: Thu, 11 Sep 2025 14:31:11 GMT
Cache-Control: max-age=31536000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
GET www.rozblog.com/theme/ads/Vazir.woff
200 OK 54 kB URL GET HTTP/2 www.rozblog.com/theme/ads/Vazir.woff
IP
ASN #43754 Asiatech Data Transmission company
Requested by https://www.rozblog.com/theme/ads/banner.html
Certificate IssuerLet's Encrypt
Subjectrozblog.com
Fingerprint00:EC:52:7D:6B:8C:DF:74:97:D5:66:E7:71:AB:16:D1:DE:CB:D3:6D
ValidityWed, 21 Aug 2024 18:05:24 GMT - Tue, 19 Nov 2024 18:05:23 GMT
File type Web Open Font Format, TrueType, length 54004, version 0.0
Hash abdaaf2e791f4416323efffec0a85b49
a9a3ee5482b64dd5792a0845e576806c79354118
2bcfbc8d9cbea056d3c0a8e511a28ef7461748230cec56b40ac0952058725adb
GET /theme/ads/Vazir.woff HTTP/1.1
Host: www.rozblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.rozblog.com/theme/ads/style_ads.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000, no-transform
expires: Fri, 13 Sep 2024 14:31:11 GMT
content-type: font/woff
last-modified: Tue, 09 Jul 2024 11:20:37 GMT
etag: "d2f4-668d1d05-beec0b8c8b94f6c8;;;"
accept-ranges: bytes
content-length: 54004
date: Wed, 11 Sep 2024 14:31:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
X-Firefox-Spdy: h2
GET s5.picofile.com/file/8138135334/www_Campec_Ir_Sahar_Jafari_Jozani_19.jpg
200 OK 275 kB URL GET HTTP/2 s5.picofile.com/file/8138135334/www_Campec_Ir_Sahar_Jafari_Jozani_19.jpg
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
Certificate IssuerSectigo Limited
Subject*.picofile.com
Fingerprint85:D2:D6:46:ED:86:D3:41:F9:D7:01:E6:D8:E7:FE:F4:B2:8C:82:5B
ValidityFri, 24 Nov 2023 00:00:00 GMT - Sat, 23 Nov 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2014:08:31 17:04:28], progressive, precision 8, 640x640, components 3
Size 275 kB (274776 bytes)
Hash d71411a497e6df96344fd76ca3460832
a43005ead5ff778bbead68253b86eb832d737fd1
850bf68005180b477ffb36e61babf73c132283ba315a8f15aeeb65f20e27c4d1
GET /file/8138135334/www_Campec_Ir_Sahar_Jafari_Jozani_19.jpg HTTP/1.1
Host: s5.picofile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://gilpic.rozblog.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private
content-type: image/jpeg
last-modified: Sun, 31 Aug 2014 12:42:11 GMT
accept-ranges: bytes
etag: "80132e1e3093d108"
server: WSGIServer/0.1 Python/2.6.1
access-control-allow-credentials: true
access-control-allow-headers: *, content-range, range, content-length, cache-control, content-type, x-requested-with
access-control-allow-methods: *
access-control-allow-origin: http://gilpic.rozblog.com
origin-agent-cluster: ?0
x-powered-by: Django/1.2.1 SVN-13336
date: Wed, 11 Sep 2024 14:31:11 GMT
content-length: 274776
X-Firefox-Spdy: h2
GET www.rahafun.com/wp-content/uploads/rahafun.com-joftgirie_heyvanat-2.jpg
301 Moved Permanently 64 kB URL GET HTTP/1.1 www.rahafun.com/wp-content/uploads/rahafun.com-joftgirie_heyvanat-2.jpg
IP
ASN #212216 Netafraz Iranian Ltd.
Requested by http://gilpic.rozblog.com/
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, baseline, precision 8, 590x472, components 3
Hash 1d15a4cfc6605eb0f4b0efa762a7d13b
8bd033d9deb4a7856c3f6763089be7859d94b9eb
a479fd89f724d24150c543fac246f0f778c9822cc167136b4b8ff54a21a65f36
GET /wp-content/uploads/rahafun.com-joftgirie_heyvanat-2.jpg HTTP/1.1
Host: www.rahafun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://gilpic.rozblog.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 11 Sep 2024 14:31:11 GMT
content-type: image/jpeg
content-length: 63871
last-modified: Wed, 06 Dec 2017 21:00:51 GMT
etag: "5a285a83-f97f"
expires: Wed, 25 Sep 2024 14:31:11 GMT
cache-control: max-age=1209600
accept-ranges: bytes
X-Firefox-Spdy: h2
GET s2.picofile.com/file/8264600000/www_Campec_Ir_mitra_hajjar_19.jpg
301 Moved Permanently 418 kB URL GET HTTP/1.1 s2.picofile.com/file/8264600000/www_Campec_Ir_mitra_hajjar_19.jpg
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=1080, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=1080], baseline, precision 8, 1080x1080, components 3
Size 418 kB (417684 bytes)
Hash b5d7021b9a1ebbf6485672d4ea35ab02
fbbcbdcba818f59000d066a7b65574a43a13cafd
85315f8fa7597246c64f084426ef409815d1b75b71e274d9cfe02ffe7efff85b
GET /file/8264600000/www_Campec_Ir_mitra_hajjar_19.jpg HTTP/1.1
Host: s2.picofile.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://gilpic.rozblog.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private
content-type: image/jpeg
last-modified: Sun, 21 Aug 2016 13:35:09 GMT
accept-ranges: bytes
etag: "802440f8c7c9d308"
server: WSGIServer/0.1 Python/2.6.1
access-control-allow-credentials: true
access-control-allow-headers: *, content-range, range, content-length, cache-control, content-type, x-requested-with
access-control-allow-methods: *
access-control-allow-origin: http://gilpic.rozblog.com
origin-agent-cluster: ?0
x-powered-by: Django/1.2.1 SVN-13336
date: Wed, 11 Sep 2024 14:31:11 GMT
content-length: 417684
X-Firefox-Spdy: h2
GET cdn.yjc.ir/files/fa/news/1394/11/6/4065605_215.jpg
301 Moved Permanently 188 kB URL GET HTTP/1.1 cdn.yjc.ir/files/fa/news/1394/11/6/4065605_215.jpg
IP
ASN #31549 Aria Shatel Company Ltd
Requested by http://gilpic.rozblog.com/
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 600x418, components 3
Size 188 kB (188124 bytes)
Hash d7539e56204404e88f3da15252de1230
5f836426b1ba7b8b2b5d784eab8e2d2ba9eb2d91
50852a70a7f5ca2a4f942583b66445cd5fcbf9f0b095d57ee96f3e05c444f95a
GET /files/fa/news/1394/11/6/4065605_215.jpg HTTP/1.1
Host: cdn.yjc.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://gilpic.rozblog.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 10 Sep 2024 07:46:20 GMT
Last-Modified: Fri, 22 Mar 2019 21:03:33 GMT
Content-Length: 188124
Cache-Control: max-age=31536000
Expires: Wed, 10 Sep 2025 07:46:20 GMT
Content-Type: image/jpeg
Age: 110690
X-Cache: HIT
X-Cache-Hits: 16
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
GET gilpic.rozblog.com/theme/rozblog_v4/favi1.ico
200 OK 1.2 kB URL GET HTTP/1.1 gilpic.rozblog.com/theme/rozblog_v4/favi1.ico
IP
ASN #43754 Asiatech Data Transmission company
Requested by http://gilpic.rozblog.com/
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Hash 129e0e4681906fae60ea32d066a7b4c5
33c024415db44baa3aba0f13df1399d9b81ac9e6
0a14eb14e53df8201b78084ab9a276a1f4ca01e55a20c3b8b0b6f3b660ee3ff0
GET /theme/rozblog_v4/favi1.ico HTTP/1.1
Host: gilpic.rozblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Cookie: PHPSESSID=18fab2d438622910d8d799099c16f3e0; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=9379166e1a9aecd718838890537546454892
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 11 Sep 2025 14:31:12 GMT
content-type: image/x-icon
last-modified: Tue, 18 Nov 2014 15:12:07 GMT
accept-ranges: bytes
content-length: 1150
date: Wed, 11 Sep 2024 14:31:12 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
GET poonak.org/wp-content/uploads/2014/07/366117_416.jpg
404 Not Found 4.9 kB URL GET HTTP/2 poonak.org/wp-content/uploads/2014/07/366117_416.jpg
IP
ASN #212216 Netafraz Iranian Ltd.
Requested by http://gilpic.rozblog.com/
Certificate IssuerLet's Encrypt
Subjectpoonak.org
Fingerprint7A:8F:59:08:2A:F9:C6:C5:62:F6:90:3B:E8:17:D1:4D:24:93:A4:1B
ValiditySun, 14 Jul 2024 19:52:43 GMT - Sat, 12 Oct 2024 19:52:42 GMT
File type gzip compressed data, from Unix
Hash f8f4b8a4d9bf73225e8ef41d949c5b9e
cf99efd9f5d3cc3f50efa6d3301d8ba7a032505a
7da52c86d11e0ce69e20c3adb8b3d2ed389994a2e6cc044ac4e6829c5ece5e5e
GET /wp-content/uploads/2014/07/366117_416.jpg HTTP/1.1
Host: poonak.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://gilpic.rozblog.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Wed, 11 Sep 2024 14:31:11 GMT
content-type: text/html
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
GET fun.baharfa.com/wp-content/uploads/2013/04/Hilary-Duff-Tafrih4all-3.jpg
0 B URL GET fun.baharfa.com/wp-content/uploads/2013/04/Hilary-Duff-Tafrih4all-3.jpg
IP
Requested by http://gilpic.rozblog.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/uploads/2013/04/Hilary-Duff-Tafrih4all-3.jpg HTTP/1.1
Host: fun.baharfa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
GET www.jametarinha.org/wp-content/uploads/2016/05/photo-imam-zaman-jametarinha.org1_.jpg
0 B URL GET www.jametarinha.org/wp-content/uploads/2016/05/photo-imam-zaman-jametarinha.org1_.jpg
IP
Requested by http://gilpic.rozblog.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2016/05/photo-imam-zaman-jametarinha.org1_.jpg HTTP/1.1
Host: www.jametarinha.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
GET www.jametarinha.org/wp-content/uploads/2016/05/elham-arab-jametarinha.org_.jpg
0 B URL GET www.jametarinha.org/wp-content/uploads/2016/05/elham-arab-jametarinha.org_.jpg
IP
Requested by http://gilpic.rozblog.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2016/05/elham-arab-jametarinha.org_.jpg HTTP/1.1
Host: www.jametarinha.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
GET poonak.org/wp-content/uploads/2016/07/8easyvnn8x5zvrat7o.jpg
404 Not Found 0 B URL GET HTTP/2 poonak.org/wp-content/uploads/2016/07/8easyvnn8x5zvrat7o.jpg
IP
ASN #212216 Netafraz Iranian Ltd.
Requested by http://gilpic.rozblog.com/
Certificate IssuerLet's Encrypt
Subjectpoonak.org
Fingerprint7A:8F:59:08:2A:F9:C6:C5:62:F6:90:3B:E8:17:D1:4D:24:93:A4:1B
ValiditySun, 14 Jul 2024 19:52:43 GMT - Sat, 12 Oct 2024 19:52:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/uploads/2016/07/8easyvnn8x5zvrat7o.jpg HTTP/1.1
Host: poonak.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://gilpic.rozblog.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Wed, 11 Sep 2024 14:31:11 GMT
content-type: text/html
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
GET poonak.org/wp-content/uploads/2015/04/afsharibahareh.jpg
404 Not Found 0 B URL GET HTTP/2 poonak.org/wp-content/uploads/2015/04/afsharibahareh.jpg
IP
ASN #212216 Netafraz Iranian Ltd.
Requested by http://gilpic.rozblog.com/
Certificate IssuerLet's Encrypt
Subjectpoonak.org
Fingerprint7A:8F:59:08:2A:F9:C6:C5:62:F6:90:3B:E8:17:D1:4D:24:93:A4:1B
ValiditySun, 14 Jul 2024 19:52:43 GMT - Sat, 12 Oct 2024 19:52:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/uploads/2015/04/afsharibahareh.jpg HTTP/1.1
Host: poonak.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://gilpic.rozblog.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Wed, 11 Sep 2024 14:31:11 GMT
content-type: text/html
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
GET up.azar-fun.ir/up/azar-fun/Pictures/japan3.jpg
0 B URL GET up.azar-fun.ir/up/azar-fun/Pictures/japan3.jpg
IP
Requested by http://gilpic.rozblog.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /up/azar-fun/Pictures/japan3.jpg HTTP/1.1
Host: up.azar-fun.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://gilpic.rozblog.com/
Pragma: no-cache
Cache-Control: no-cache
79.127.127.68
188.114.97.1
49.12.169.58
23.33.119.27
0.0.0.0