| mail.zarryfbar.com/edd/4shell/index.html | 188.114.97.1 | 301 Moved Permanently | 0 B |
URL HTTP/1.1mail.zarryfbar.com/edd/4shell/index.html IP188.114.97.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | openphish | Generic/Spear Phishing | |
GET /edd/4shell/index.html HTTP/1.1
Host: mail.zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 20 Dec 2022 21:52:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 20 Dec 2022 22:52:40 GMT
Location: https://mail.zarryfbar.com/edd/4shell/index.html
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gBPM0PkhrLEKP44ppjL4Oaw%2FoYEUf3zJNXPvpILuOULg37H4n452R6ohDQUtm%2FLsI0EMhy2HY5sFri3Lo8A2zuz8XYm1twJcj1PJrVFkw1DALnzjyPGBpEfvnZwqaj6sVjtQ9JA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77cb9b3daec1b4e8-OSL
alt-svc: h2=":443"; ma=60
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashbbea1550fedd5eb9c265712fab75b137 2c2f981747898a380265f766345f2bb9c8c983fd c728286e38c31a4d3f7a39702e0a5f69c14bf69e01a88bc4479714953fbda278
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C728286E38C31A4D3F7A39702E0A5F69C14BF69E01A88BC4479714953FBDA278"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9079
Expires: Wed, 21 Dec 2022 00:23:59 GMT
Date: Tue, 20 Dec 2022 21:52:40 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashb8fbcd7ca1a893d05677318a8a198e7a 0851654c21f6e3741887e7deab8098c1dc56f33c edbade5913ace2fcbb932922e9af69acb2e8759474a2eeaec216307247fea361
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EDBADE5913ACE2FCBB932922E9AF69ACB2E8759474A2EEAEC216307247FEA361"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3414
Expires: Tue, 20 Dec 2022 22:49:34 GMT
Date: Tue, 20 Dec 2022 21:52:40 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashb44c4b5daa307a355e7bab1c83c1ca82 dbd14cd873f1dd4502f277b3f51cb7bc8da0c080 fd4604461cfa002c8a261bb14eb8dda56817db231b9012b2eb38d6dbc2674df5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Alert, Retry-After, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 20 Dec 2022 21:34:30 GMT
content-type: application/json
age: 1090
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashcf03270e3476f7482a2cc7ddc6a9e857 ab70d5ee87b01e0601f8e518bf36f97c8ceeba9a 43a4e796860a1481636dac103488cadc68c261d13cfe835d273efc368e569f97
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "43A4E796860A1481636DAC103488CADC68C261D13CFE835D273EFC368E569F97"
Last-Modified: Sun, 18 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9100
Expires: Wed, 21 Dec 2022 00:24:20 GMT
Date: Tue, 20 Dec 2022 21:52:40 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash53341dea33f4f3d9b4966f80589f429a 20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: M3Ds5F6MrRKXO2z8UYEn7rdfVTZKeeYwPu6cvEP5YAw9jrw/OTs0eKoJ3yYePV+M58sHCzBGMgU=
x-amz-request-id: 0B8X4A2WN9C63MPN
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 20 Dec 2022 21:29:36 GMT
age: 1384
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 21:52:40 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 23.36.77.32 | 200 OK | 344 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashb8e1fd34021c78ed191d5f3f8acc4e0c 35c3942d67e149e2f4bc5a96ca6b5df373a4091f b7750a7f3519c156642961d77569620e83a63a8ef9fd08b5d07f618131855a30
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "B7750A7F3519C156642961D77569620E83A63A8EF9FD08B5D07F618131855A30"
Last-Modified: Tue, 20 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21565
Expires: Wed, 21 Dec 2022 03:52:06 GMT
Date: Tue, 20 Dec 2022 21:52:41 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Last-Modified, Retry-After, Content-Type, Alert, Pragma, ETag, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 20 Dec 2022 21:08:02 GMT
age: 2679
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashd0c2b6760f2b58f445446dd2276d5af4 aeedf417b1ebde86ce837ca02ba934abb938b1a4 8fe72d0ce839150559da5ddf46bf87d26b6b9cbe34d09641b29a53be24997c81
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2384
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 21:52:41 GMT
Last-Modified: Tue, 20 Dec 2022 21:12:57 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
|
|
| e1.o.lencr.org/ | 23.36.77.32 | 200 OK | 344 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashb8e1fd34021c78ed191d5f3f8acc4e0c 35c3942d67e149e2f4bc5a96ca6b5df373a4091f b7750a7f3519c156642961d77569620e83a63a8ef9fd08b5d07f618131855a30
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "B7750A7F3519C156642961D77569620E83A63A8EF9FD08B5D07F618131855A30"
Last-Modified: Tue, 20 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21565
Expires: Wed, 21 Dec 2022 03:52:06 GMT
Date: Tue, 20 Dec 2022 21:52:41 GMT
Connection: keep-alive
|
|
| push.services.mozilla.com/ | 52.43.158.219 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.43.158.219:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: q+5+YI0SWSW+Xa5AYTewdg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: hIaK70ZvSRI1P/7YftegRyDJoGc=
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashc92a63593449265941bccd2401ec3927 09bd5c279a11c5067d75300053d70e4e678d7140 a137e34a2d19637a6fe63ba801ce97be1ded72584f8a90798b4c0910526a4429
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 21:52:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.googletagmanager.com/gtm.js?id=GTM-PKTC9WF | 142.250.74.40 | 200 OK | 63 kB |
URL HTTP/2www.googletagmanager.com/gtm.js?id=GTM-PKTC9WF IP142.250.74.40:0
File typeASCII text, with very long lines (2552) Hashff8238ece4876df63d938908a07307e3 75ff098cedefbbeb966622cd963e0cd32bd67a50 b9f21baa353373913449dec98517b16e1f154cee7f38918a1934c418b92eddfb
GET /gtm.js?id=GTM-PKTC9WF HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 20 Dec 2022 21:52:42 GMT
expires: Tue, 20 Dec 2022 21:52:42 GMT
cache-control: private, max-age=900
last-modified: Tue, 20 Dec 2022 21:17:12 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 62581
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashc92a63593449265941bccd2401ec3927 09bd5c279a11c5067d75300053d70e4e678d7140 a137e34a2d19637a6fe63ba801ce97be1ded72584f8a90798b4c0910526a4429
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 21:52:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google-analytics.com/analytics.js | 142.250.74.110 | 200 OK | 102 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.110:0
Size102 kB (101483 bytes) Hash016ee6fb6c72016fb490ce493e3e1cc6 3c20096f92e93f97933d7f9a8b6e4e1cc85f8b33 b5a1dfbe0e1459ac39f49588cc8862d4587607ee82dc20fdda9522bc7f7db8a2
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 20 Dec 2022 20:41:08 GMT
expires: Tue, 20 Dec 2022 22:41:08 GMT
cache-control: public, max-age=7200
age: 4294
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash9280942f48b6d8af0882ac1f9a684dae 1998f517eb03d75b98b81b8fcc3de69b57faaad9 43e916ba35470cee4a823db0332214b20948fedd09350f83aa0376d902a4926b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 21:52:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google-analytics.com/j/collect?v=1&_v=j98&a=2038186520&t=pageview&_s=1&dl=https%3A%2F%2Fmail.zarryfbar.com%2Fedd%2F4shell%2Findex.html&ul=en-us&de=UTF-8&dt=%D8%A8%D8%B1%DA%AF%D9%87%20%D9%BE%DB%8C%D8%AF%D8%A7%20%D9%86%D8%B4%D8%AF%20%E2%80%93%20%D8%B8%D8%B1%DB%8C%D9%81%20%D8%A8%D8%A7%D8%B1%20%7C%20%D8%A8%D8%A7%D8%B1%D8%A8%D8%B1%DB%8C%20%7C%20%D8%A7%D8%AA%D9%88%D8%A8%D8%A7%D8%B1%20%7C%20%D8%A8%D8%A7%D8%B1%D8%A8%D8%B1%DB%8C%20%D8%B4%D9%87%D8%B1%DB%8C%20%7C%20%D8%A7%D8%AA%D9%88%D8%A8%D8%A7%D8%B1%20%D8%B4%D9%87%D8%B1%DB%8C&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAEABAAAAACAAI~&jid=378163778&gjid=726198861&cid=1102505320.1671573172&tid=UA-217889527-25&_gid=529124309.1671573172&_r=1>m=2wgbu0PKTC9WF&z=1366053082 | 142.250.74.110 | 200 OK | 1 B |
URL HTTP/2www.google-analytics.com/j/collect?v=1&_v=j98&a=2038186520&t=pageview&_s=1&dl=https%3A%2F%2Fmail.zarryfbar.com%2Fedd%2F4shell%2Findex.html&ul=en-us&de=UTF-8&dt=%D8%A8%D8%B1%DA%AF%D9%87%20%D9%BE%DB%8C%D8%AF%D8%A7%20%D9%86%D8%B4%D8%AF%20%E2%80%93%20%D8%B8%D8%B1%DB%8C%D9%81%20%D8%A8%D8%A7%D8%B1%20%7C%20%D8%A8%D8%A7%D8%B1%D8%A8%D8%B1%DB%8C%20%7C%20%D8%A7%D8%AA%D9%88%D8%A8%D8%A7%D8%B1%20%7C%20%D8%A8%D8%A7%D8%B1%D8%A8%D8%B1%DB%8C%20%D8%B4%D9%87%D8%B1%DB%8C%20%7C%20%D8%A7%D8%AA%D9%88%D8%A8%D8%A7%D8%B1%20%D8%B4%D9%87%D8%B1%DB%8C&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAEABAAAAACAAI~&jid=378163778&gjid=726198861&cid=1102505320.1671573172&tid=UA-217889527-25&_gid=529124309.1671573172&_r=1>m=2wgbu0PKTC9WF&z=1366053082 IP142.250.74.110:0
File typevery short file (no magic) Hashc4ca4238a0b923820dcc509a6f75849b 356a192b7913b04c54574d18c28d46e6395428ab 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?v=1&_v=j98&a=2038186520&t=pageview&_s=1&dl=https%3A%2F%2Fmail.zarryfbar.com%2Fedd%2F4shell%2Findex.html&ul=en-us&de=UTF-8&dt=%D8%A8%D8%B1%DA%AF%D9%87%20%D9%BE%DB%8C%D8%AF%D8%A7%20%D9%86%D8%B4%D8%AF%20%E2%80%93%20%D8%B8%D8%B1%DB%8C%D9%81%20%D8%A8%D8%A7%D8%B1%20%7C%20%D8%A8%D8%A7%D8%B1%D8%A8%D8%B1%DB%8C%20%7C%20%D8%A7%D8%AA%D9%88%D8%A8%D8%A7%D8%B1%20%7C%20%D8%A8%D8%A7%D8%B1%D8%A8%D8%B1%DB%8C%20%D8%B4%D9%87%D8%B1%DB%8C%20%7C%20%D8%A7%D8%AA%D9%88%D8%A8%D8%A7%D8%B1%20%D8%B4%D9%87%D8%B1%DB%8C&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAEABAAAAACAAI~&jid=378163778&gjid=726198861&cid=1102505320.1671573172&tid=UA-217889527-25&_gid=529124309.1671573172&_r=1>m=2wgbu0PKTC9WF&z=1366053082 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://mail.zarryfbar.com
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://mail.zarryfbar.com
date: Tue, 20 Dec 2022 21:52:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| googleads.g.doubleclick.net/pagead/viewthroughconversion/10854601997/?random=1671573171792&cv=11&fst=1671573171792&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fmail.zarryfbar.com%2Fedd%2F4shell%2Findex.html&tiba=%D8%A8%D8%B1%DA%AF%D9%87%20%D9%BE%DB%8C%D8%AF%D8%A7%20%D9%86%D8%B4%D8%AF%20%E2%80%93%20%D8%B8%D8%B1%DB%8C%D9%81%20%D8%A8%D8%A7%D8%B1%20%7C%20%D8%A8%D8%A7%D8%B1%D8%A8%D8%B1%DB%8C%20%7C%20%D8%A7%D8%AA%D9%88%D8%A8%D8%A7%D8%B1%20%7C%20%D8%A8%D8%A7%D8%B1%D8%A8&auid=1868992731.1671573172&rfmt=3&fmt=4 | 142.250.74.162 | 200 OK | 956 B |
URL HTTP/2googleads.g.doubleclick.net/pagead/viewthroughconversion/10854601997/?random=1671573171792&cv=11&fst=1671573171792&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fmail.zarryfbar.com%2Fedd%2F4shell%2Findex.html&tiba=%D8%A8%D8%B1%DA%AF%D9%87%20%D9%BE%DB%8C%D8%AF%D8%A7%20%D9%86%D8%B4%D8%AF%20%E2%80%93%20%D8%B8%D8%B1%DB%8C%D9%81%20%D8%A8%D8%A7%D8%B1%20%7C%20%D8%A8%D8%A7%D8%B1%D8%A8%D8%B1%DB%8C%20%7C%20%D8%A7%D8%AA%D9%88%D8%A8%D8%A7%D8%B1%20%7C%20%D8%A8%D8%A7%D8%B1%D8%A8&auid=1868992731.1671573172&rfmt=3&fmt=4 IP142.250.74.162:0
File typeASCII text, with very long lines (2307), with no line terminators Hash4735f04ec8f0131ac842723a40934779 4c86b742533dafb51e86a4007e211a94ff9f895e 1048afff58cdfb3c265af9eaa4237341d090fc3a459b053ff1c31503ed64b0de
GET /pagead/viewthroughconversion/10854601997/?random=1671573171792&cv=11&fst=1671573171792&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&hn=www.googleadservices.com&frm=0&url=https%3A%2F%2Fmail.zarryfbar.com%2Fedd%2F4shell%2Findex.html&tiba=%D8%A8%D8%B1%DA%AF%D9%87%20%D9%BE%DB%8C%D8%AF%D8%A7%20%D9%86%D8%B4%D8%AF%20%E2%80%93%20%D8%B8%D8%B1%DB%8C%D9%81%20%D8%A8%D8%A7%D8%B1%20%7C%20%D8%A8%D8%A7%D8%B1%D8%A8%D8%B1%DB%8C%20%7C%20%D8%A7%D8%AA%D9%88%D8%A8%D8%A7%D8%B1%20%7C%20%D8%A8%D8%A7%D8%B1%D8%A8&auid=1868992731.1671573172&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 20 Dec 2022 21:52:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 956
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 20-Dec-2022 22:07:42 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash9280942f48b6d8af0882ac1f9a684dae 1998f517eb03d75b98b81b8fcc3de69b57faaad9 43e916ba35470cee4a823db0332214b20948fedd09350f83aa0376d902a4926b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 21:52:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash44d1b97ebc6772b76319806ff504cf27 e7e520951d9f34cfc991932a62b0bd8cf390b1f7 b30398f6056dcc04122b413d78c632ea15df7cff07471850a1603a121efba20d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 21:52:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash746409a88b1342fe7b570306c302c71e e08a7bf55e08a498f2eed6a35b90107fc0bdb303 9352308fd047bafceddfaf2a9a6eab650593f16ff5632330a4bf745750704650
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9352308FD047BAFCEDDFAF2A9A6EAB650593F16FF5632330A4BF745750704650"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10192
Expires: Wed, 21 Dec 2022 00:42:34 GMT
Date: Tue, 20 Dec 2022 21:52:42 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash746409a88b1342fe7b570306c302c71e e08a7bf55e08a498f2eed6a35b90107fc0bdb303 9352308fd047bafceddfaf2a9a6eab650593f16ff5632330a4bf745750704650
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9352308FD047BAFCEDDFAF2A9A6EAB650593F16FF5632330A4BF745750704650"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10192
Expires: Wed, 21 Dec 2022 00:42:34 GMT
Date: Tue, 20 Dec 2022 21:52:42 GMT
Connection: keep-alive
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash0b3a38d8057f8c59aa4db5a405d1004c 3c25e79903c1854f482800c6649da26764730a90 910fbf0b154d2cb38f02f87065f7e94f0aa98a11ffd1c87b04eecf80975d4a51
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 21:52:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e977b0b-6e7d-42dd-9743-5064708ab1e0.jpeg | 34.120.237.76 | 200 OK | 7.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e977b0b-6e7d-42dd-9743-5064708ab1e0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb5da803c751be159f0f5b3c2f65bd2b6 39139480cfc2ed0781b51745bfaabed4490aa0db 920ee464843101c638327866fbfcc9c7f00fc19b7cdbc8948fbe53d2b6fb4ed3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e977b0b-6e7d-42dd-9743-5064708ab1e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7876
x-amzn-requestid: 668c95f2-a1b1-4abd-9f4e-23d05c4998a5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: da270EFlIAMFR5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a10518-56d6db4f4cff1b4e08b87046;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 00:43:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: U9cES2VDr79vF5gBfhG-5ZyHa8WVqEti4ZGHsBerkxIkeSWsPhC-jA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 ea699166e6ec77aa410ff505b0a8ce18.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Dec 2022 01:06:15 GMT
age: 74787
etag: "39139480cfc2ed0781b51745bfaabed4490aa0db"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg | 34.120.237.76 | 200 OK | 5.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashbfd0e913579b4ff2f511223d70cb01fb 497e0ffef816e100e6ddc221ec17d5f389c1142a bee68ae1a938a5111a32dab4ec4f6964994e6c39143eac9ab94d6c5e29999372
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5185
x-amzn-requestid: 3087af97-3f2d-4848-b297-eba8d84f10c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT10YHv8oAMF2sg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3682-7527022d4bd9c15518fe75cc;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Dg3c2lWr1FbFUalH5QB05VrQIkpt3LNuUM-VxJZiaXy3nJu-cfd5jg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Dec 2022 21:39:08 GMT
age: 814
etag: "497e0ffef816e100e6ddc221ec17d5f389c1142a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d762722-a130-4c65-99b1-2f6fb91155e5.jpeg | 34.120.237.76 | 200 OK | 8.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d762722-a130-4c65-99b1-2f6fb91155e5.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc7ac0b5738bab6b4ed770c26ca922250 e56fd4ee2f5354a54a6271db2be528f98eecd3d7 5997d5be6bbeb189ef08af2f6c6dd5bb0cfa70ad7b40daab8712efe5adc2c6e1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d762722-a130-4c65-99b1-2f6fb91155e5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8450
x-amzn-requestid: a9f11c68-8327-46ba-9075-e316a2f9fdbb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dabr3FoSIAMFdtQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a0d97e-61b788f5675fe0e815e1e967;Sampled=0
x-amzn-remapped-date: Mon, 19 Dec 2022 21:37:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: _nupdrdRDG-S085FRNoJgzDQVg9Ngb_nYDR5C1AkkterWy8vlXBxGw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 ac463f3377446e4c603deca30feb744a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Dec 2022 21:41:22 GMT
age: 680
etag: "e56fd4ee2f5354a54a6271db2be528f98eecd3d7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82b028aa-d0e3-4082-a385-1385bc5c6e06.jpeg | 34.120.237.76 | 200 OK | 9.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82b028aa-d0e3-4082-a385-1385bc5c6e06.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash045f016fb66e6e0d1da1fb742d9b19a7 8f98bf2cedfccfce71464a733e2fd37482fd71c2 593cf38d1c2c315ff23fcda60e41141caa0266874f36a0c517554ca01ea51f12
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82b028aa-d0e3-4082-a385-1385bc5c6e06.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9216
x-amzn-requestid: 460a95bf-5724-4bea-b6c1-f6ce263da5e7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dabq8FXboAMFwCQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a0d979-70340469247cdcf952a98c3e;Sampled=0
x-amzn-remapped-date: Mon, 19 Dec 2022 21:36:57 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 7yYJKslDn22-iL_OH_VIiZdrTMJ-9c-DyORpGZ4d2MZLDoX5PpekRw==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 446e26a256db1310ae719d818e420898.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Dec 2022 21:45:59 GMT
age: 403
etag: "8f98bf2cedfccfce71464a733e2fd37482fd71c2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd309904d-b04d-4ea5-a08f-18c679152ad0.jpeg | 34.120.237.76 | 200 OK | 9.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd309904d-b04d-4ea5-a08f-18c679152ad0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash93c59f175466e2f77cec141a40cf3587 2f3c4bad2a69184f567f74c814b59b53aa777029 974563dd61f2afb6e26bb5516244d16ed1e76124cc6b500a2039e1d255d8945d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd309904d-b04d-4ea5-a08f-18c679152ad0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9893
x-amzn-requestid: b6a76f15-7dc0-43e6-968c-3c228b9aece7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dabr3FHXIAMF2tg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a0d97e-7dab8e9d620fa4323a19ebfc;Sampled=0
x-amzn-remapped-date: Mon, 19 Dec 2022 21:37:02 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: Si2t27XTRGDrraDSi4bikAdhPr7WDObUOF-FrINdKvkAxCGjB-izPg==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 1d0860167e2100a6d1cd9c0213c2b8e8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Dec 2022 21:46:05 GMT
age: 397
etag: "2f3c4bad2a69184f567f74c814b59b53aa777029"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2f35059-99cc-477d-9e68-c3a035d125df.jpeg | 34.120.237.76 | 200 OK | 9.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2f35059-99cc-477d-9e68-c3a035d125df.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashbba7c67bdc57d1fe2870ebd4ee9fd5c9 127850560e258665ca8074757c1b66f680d2bd78 9edd765e65644edfe4221352225cb89ebe98fa451d9528b8b614d594a20e100d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2f35059-99cc-477d-9e68-c3a035d125df.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9265
x-amzn-requestid: d84f905b-7faf-409a-b188-4b8cf06b9e4f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: da4KJGx9oAMFrQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a1070d-43152d9651bcb4a15ffe1cfa;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 00:51:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: uGYoskcC2ev3JFxsBZGglmBiCCWmjo5Xg2zqe5925zArdzRk5QtuTQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 c5c7edc18be1805f007e0576da02e554.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Dec 2022 01:14:29 GMT
etag: "127850560e258665ca8074757c1b66f680d2bd78"
content-type: image/jpeg
age: 74293
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.google.no/pagead/1p-user-list/10854601997/?random=1671573171792&cv=11&fst=1671570000000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fmail.zarryfbar.com%2Fedd%2F4shell%2Findex.html&tiba=%D8%A8%D8%B1%DA%AF%D9%87%20%D9%BE%DB%8C%D8%AF%D8%A7%20%D9%86%D8%B4%D8%AF%20%E2%80%93%20%D8%B8%D8%B1%DB%8C%D9%81%20%D8%A8%D8%A7%D8%B1%20%7C%20%D8%A8%D8%A7%D8%B1%D8%A8%D8%B1%DB%8C%20%7C%20%D8%A7%D8%AA%D9%88%D8%A8%D8%A7%D8%B1%20%7C%20%D8%A8%D8%A7%D8%B1%D8%A8&fmt=3&is_vtc=1&random=3767351658&rmt_tld=1&ipr=y | 142.250.74.131 | 200 OK | 42 B |
URL HTTP/2www.google.no/pagead/1p-user-list/10854601997/?random=1671573171792&cv=11&fst=1671570000000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fmail.zarryfbar.com%2Fedd%2F4shell%2Findex.html&tiba=%D8%A8%D8%B1%DA%AF%D9%87%20%D9%BE%DB%8C%D8%AF%D8%A7%20%D9%86%D8%B4%D8%AF%20%E2%80%93%20%D8%B8%D8%B1%DB%8C%D9%81%20%D8%A8%D8%A7%D8%B1%20%7C%20%D8%A8%D8%A7%D8%B1%D8%A8%D8%B1%DB%8C%20%7C%20%D8%A7%D8%AA%D9%88%D8%A8%D8%A7%D8%B1%20%7C%20%D8%A8%D8%A7%D8%B1%D8%A8&fmt=3&is_vtc=1&random=3767351658&rmt_tld=1&ipr=y IP142.250.74.131:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/10854601997/?random=1671573171792&cv=11&fst=1671570000000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fmail.zarryfbar.com%2Fedd%2F4shell%2Findex.html&tiba=%D8%A8%D8%B1%DA%AF%D9%87%20%D9%BE%DB%8C%D8%AF%D8%A7%20%D9%86%D8%B4%D8%AF%20%E2%80%93%20%D8%B8%D8%B1%DB%8C%D9%81%20%D8%A8%D8%A7%D8%B1%20%7C%20%D8%A8%D8%A7%D8%B1%D8%A8%D8%B1%DB%8C%20%7C%20%D8%A7%D8%AA%D9%88%D8%A8%D8%A7%D8%B1%20%7C%20%D8%A8%D8%A7%D8%B1%D8%A8&fmt=3&is_vtc=1&random=3767351658&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 20 Dec 2022 21:52:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google.com/pagead/1p-user-list/10854601997/?random=1671573171792&cv=11&fst=1671570000000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fmail.zarryfbar.com%2Fedd%2F4shell%2Findex.html&tiba=%D8%A8%D8%B1%DA%AF%D9%87%20%D9%BE%DB%8C%D8%AF%D8%A7%20%D9%86%D8%B4%D8%AF%20%E2%80%93%20%D8%B8%D8%B1%DB%8C%D9%81%20%D8%A8%D8%A7%D8%B1%20%7C%20%D8%A8%D8%A7%D8%B1%D8%A8%D8%B1%DB%8C%20%7C%20%D8%A7%D8%AA%D9%88%D8%A8%D8%A7%D8%B1%20%7C%20%D8%A8%D8%A7%D8%B1%D8%A8&fmt=3&is_vtc=1&random=3767351658&rmt_tld=0&ipr=y | 142.250.74.132 | 200 OK | 41 kB |
URL HTTP/2www.google.com/pagead/1p-user-list/10854601997/?random=1671573171792&cv=11&fst=1671570000000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fmail.zarryfbar.com%2Fedd%2F4shell%2Findex.html&tiba=%D8%A8%D8%B1%DA%AF%D9%87%20%D9%BE%DB%8C%D8%AF%D8%A7%20%D9%86%D8%B4%D8%AF%20%E2%80%93%20%D8%B8%D8%B1%DB%8C%D9%81%20%D8%A8%D8%A7%D8%B1%20%7C%20%D8%A8%D8%A7%D8%B1%D8%A8%D8%B1%DB%8C%20%7C%20%D8%A7%D8%AA%D9%88%D8%A8%D8%A7%D8%B1%20%7C%20%D8%A8%D8%A7%D8%B1%D8%A8&fmt=3&is_vtc=1&random=3767351658&rmt_tld=0&ipr=y IP142.250.74.132:0
Hashd9ec36edf9aa06e0995ffced05422204 bacf29999581ba5a071c6a6a755cbe5e9d357f88 357ff6d64c9527a1688e9e358be4a1a88dbea2d3afd5cf7be3a280b672b6c2c0
GET /pagead/1p-user-list/10854601997/?random=1671573171792&cv=11&fst=1671570000000&bg=ffffff&guid=ON&async=1>m=2wgbu0&u_w=1280&u_h=1024&frm=0&url=https%3A%2F%2Fmail.zarryfbar.com%2Fedd%2F4shell%2Findex.html&tiba=%D8%A8%D8%B1%DA%AF%D9%87%20%D9%BE%DB%8C%D8%AF%D8%A7%20%D9%86%D8%B4%D8%AF%20%E2%80%93%20%D8%B8%D8%B1%DB%8C%D9%81%20%D8%A8%D8%A7%D8%B1%20%7C%20%D8%A8%D8%A7%D8%B1%D8%A8%D8%B1%DB%8C%20%7C%20%D8%A7%D8%AA%D9%88%D8%A8%D8%A7%D8%B1%20%7C%20%D8%A8%D8%A7%D8%B1%D8%A8&fmt=3&is_vtc=1&random=3767351658&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 20 Dec 2022 21:52:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash44d1b97ebc6772b76319806ff504cf27 e7e520951d9f34cfc991932a62b0bd8cf390b1f7 b30398f6056dcc04122b413d78c632ea15df7cff07471850a1603a121efba20d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 21:52:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash97216d9347c0d3c1bab297df919688d5 61eca83749fd58d5ce753bf65419435d522c2ce5 7277b81f23f6516aa706c00202e0705421837431095d5b1f7fb0f283ab5736ff
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 21:52:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7b99ff1-3a90-4792-98d7-d8a29855c0b3.jpeg | 34.120.237.76 | 200 OK | 9.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7b99ff1-3a90-4792-98d7-d8a29855c0b3.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash49a98c00b1949e152b5f31c588a76a63 1315068dfd111f24e39d14434c719ef10328bfbf 6f67099495261e1114eeca46d2afd3c0bc6921fbc20a6e3e78c4af5d1c9edbc2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7b99ff1-3a90-4792-98d7-d8a29855c0b3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9593
x-amzn-requestid: 3a50abdf-4974-4f53-bdc6-5c15a84fea65
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: da6rNHYQoAMFdzg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a10b14-40a012f068ef226f07b54875;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 01:08:36 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: vr3KPzYtoXK8ovd6YeEi1sRG-q4ukS9YoGtJeT44Wu5E-yvDTfP5Fg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 3236f234d59c0fda99b416088c283260.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Dec 2022 01:28:13 GMT
age: 73476
etag: "1315068dfd111f24e39d14434c719ef10328bfbf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-content/themes/betheme/css/shortcodes.css?ver=21.9.4 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-content/themes/betheme/css/shortcodes.css?ver=21.9.4 IP104.21.44.149:0
GET /wp-content/themes/betheme/css/shortcodes.css?ver=21.9.4 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Mon, 07 Jun 2021 20:18:26 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L2bYP6P6ssvLfJeLW8xFd8IFbyjbZ0Gn5HekDMDRePdGCJO%2F4BurrmyumReC4QGiev6SEetk5cM4NoMHECshZA58MoYmwpkmFcaqDVYs4GMr1OuSCoWJ0ccDh74OMCJP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c3a0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp IP104.21.44.149:0
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Fri, 04 Feb 2022 14:54:01 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UAZOI6nFSyq8f%2FmKase1V9B6cfRUtQNlNlZ402%2BjFGg9i9EBA5G772XJpD%2Fzfv%2FytO65fhuDx8qQOTxFxOQuvzcAv2NsxkmB3n3H3T3ZZLTyucy%2FZQUTlVcnoT2kPvyZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c410afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-content/themes/betheme/assets/jplayer/jplayer.min.js?ver=21.9.4 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-content/themes/betheme/assets/jplayer/jplayer.min.js?ver=21.9.4 IP104.21.44.149:0
GET /wp-content/themes/betheme/assets/jplayer/jplayer.min.js?ver=21.9.4 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Mon, 07 Jun 2021 20:18:26 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aK6fIWt9wwlm5ajKt%2F%2Fu6G894ilVv9e9VU%2FoMytAkwTiWB1C9O87qAUEhg7OsqnyCo7v%2BtwahiC4dVH1eKKNQJtoLBqTcerLneUZvL69EVAqQV2Q5NxzTG%2FkzqbpRKku"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c550afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-content/themes/betheme/rtl.css | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-content/themes/betheme/rtl.css IP104.21.44.149:0
GET /wp-content/themes/betheme/rtl.css HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Tue, 08 Jun 2021 00:22:55 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b24g6AkarJsThYTGSLOEIwZCcucnmEORRT%2BgpUaL%2FUaZmca3Yq%2BkXT1zY2uQOHwzq5G3dKRncTCn7DR6gr46nXbeCNvULfUVZYen9TRDVyHyydfUZT7IQA6nrnJmHBki"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c460afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-includes/css/dist/block-library/style-rtl.min.css?ver=5.3.12 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-includes/css/dist/block-library/style-rtl.min.css?ver=5.3.12 IP104.21.44.149:0
GET /wp-includes/css/dist/block-library/style-rtl.min.css?ver=5.3.12 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Fri, 04 Feb 2022 14:55:33 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Bgfdj83CHbePj4D%2F4gtSbLVVSZ4DNFzLQh2U1jBlr%2Fg0qPhqI5MTyzLiEwEM1r1p1DzDJs889zyejdHQ1t0JJ6bH18nA4p3Cfle2VoqL3dbg3N3iASvmWUIdq2ZKDmbP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c370afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-content/themes/betheme/assets/animations/animations.min.css?ver=21.9.4 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-content/themes/betheme/assets/animations/animations.min.css?ver=21.9.4 IP104.21.44.149:0
GET /wp-content/themes/betheme/assets/animations/animations.min.css?ver=21.9.4 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Mon, 07 Jun 2021 20:18:26 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FNUeVeR6WKp5XP3M6izHEwtbxHlYokBa8KvL%2BDJMjcBNasur5u6a4pXOgFgBaW94OO%2Bl6VXVqzuKDimli6B5fG2zS5FzqkefWt4go7fXk3bfdOVvXNB898wao8BenFNe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c3b0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-content/themes/betheme/assets/animations/animations.min.js?ver=21.9.4 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-content/themes/betheme/assets/animations/animations.min.js?ver=21.9.4 IP104.21.44.149:0
GET /wp-content/themes/betheme/assets/animations/animations.min.js?ver=21.9.4 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Mon, 07 Jun 2021 20:18:26 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hicx4EoxG16EkF31bWZ8t7Kb4jJXu920Fd5ImaO7m8YJq5KIhmTk1THHbQX%2F2tGn54ozCfDm0eLu5DpAdU1TRDx4SFMSz8DqEaMTdgsD%2Bu1dVcHtjonMiWAGolz53upZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c540afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3 IP104.21.44.149:0
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Wed, 09 Mar 2022 19:22:12 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UaeBM8zRziQc2zDkqdp8FgjzB7UslOsN1o5iECrc1af%2BY0Xm6Bf93TjA%2FVb3mqfNGrJgcpeJiS2lNOScbh4xlTA5OZbsuq%2FmxqSUDpEUv3FidkY6wicZ4T9RxQPTLBXb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c480afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4 IP104.21.44.149:0
GET /wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Fri, 04 Feb 2022 14:55:35 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0bY4VqOko14yfZgrwajNGxaKqvtWR%2BZzM5TMnNYXDaO%2F9TQVtrFpMXpIIXRajJZTA5ltvF89uKHwbbpTE3V7PGSjayx89Mj4ObabV7yIQdOf6QdKbrZfK6B%2BUwD%2F0kCL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c4d0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-includes/js/jquery/ui/core.min.js?ver=1.11.4 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-includes/js/jquery/ui/core.min.js?ver=1.11.4 IP104.21.44.149:0
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.11.4 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Fri, 04 Feb 2022 14:55:35 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Hro3tEb0x3J%2Bc2tesUAlLaTaPTCBTAepgAsq611R%2FKsU676WsyQN0SSZsyLqSNcd5zGOgg3dOG9DUIIYISvQXQhuX%2Bmy8OY%2Fcub%2BUOGmJgqSSrxI%2Fk6i3Tnb9s4MUcfX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c490afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 IP104.21.44.149:0
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Fri, 04 Feb 2022 14:54:01 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fBSf2bRQ8dPrFLZRh4mTttyNoOXclqCEAxg2PpW8q%2BwVYL7IyORvV24ilRRBUv%2BiHJQGOwf9n27JaPwBw8qHCA35V2qBLImHlLIVdeepTW1EDu1QLrRlL0cS8fKCq59%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c420afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-content/themes/betheme/assets/jplayer/css/jplayer.blue.monday.css?ver=21.9.4 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-content/themes/betheme/assets/jplayer/css/jplayer.blue.monday.css?ver=21.9.4 IP104.21.44.149:0
GET /wp-content/themes/betheme/assets/jplayer/css/jplayer.blue.monday.css?ver=21.9.4 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Mon, 07 Jun 2021 20:18:26 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dQHhHnIfacGkop2Ept8PUX0R4hD5bv0sXE370IMYc5YnelYaleBxWWFgMdqKXLHz1vF9TIMTmIcp4EzpsCf1Bxmv0esgoQZBq4k4DhRi4FDGcW7Tkd6hPM38eHk%2BU9Po"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c3e0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-content/themes/betheme/css/responsive.css?ver=21.9.4 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-content/themes/betheme/css/responsive.css?ver=21.9.4 IP104.21.44.149:0
GET /wp-content/themes/betheme/css/responsive.css?ver=21.9.4 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Mon, 07 Jun 2021 20:18:26 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iFhei7DtHr6y60%2BdxSpWvq078%2BCFpHect4aUUh7cg91W080FyGzow5Re06aJU9yevjzBer%2FBczsinmmjdhI5JdIaoI361pT8xgc%2FeCgAHmkSVXCx1XqITgX8v3N9CTNQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c3f0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-content/themes/betheme/css/base.css?ver=21.9.4 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-content/themes/betheme/css/base.css?ver=21.9.4 IP104.21.44.149:0
GET /wp-content/themes/betheme/css/base.css?ver=21.9.4 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Mon, 07 Jun 2021 20:18:26 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mR5HL6980pvHIK7jnoCVAMCbNbydNysAOMLmCz4ubDpfIXxqKk6H7PbJKC26qgAWBrX3yGQixp1IRpZ4Ha96vlyBTXnli6HuD8Q9n9fAtaUD%2BWs8JncWqZBHmn48cexN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c380afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.2.23 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.2.23 IP104.21.44.149:0
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.2.23 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Wed, 09 Mar 2022 19:22:35 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k4oEVqj6swWBACLD7329pzEYNw12Cr9VFBDOLaSYUpz2NDQ5xzDoNgSt14GxDpNBq3W7EmjNlS%2Fs0xUa7w0Ko%2FlZ71TccZk1KSb3Y%2B6c%2B49ye3P4s9vF3iSUUQI79pcT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c450afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-includes/js/jquery/ui/accordion.min.js?ver=1.11.4 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-includes/js/jquery/ui/accordion.min.js?ver=1.11.4 IP104.21.44.149:0
GET /wp-includes/js/jquery/ui/accordion.min.js?ver=1.11.4 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Fri, 04 Feb 2022 14:55:35 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NLvAw8fruf9XXcalY%2Bdm4h308h6GFk4EFDX6KNEDZonBDn1VP6fD0gAptXo5U5ToHeWvMO%2FVNyzKyqFOXUFkXtCBcuK7wkntjE8eKn3GIbGYdC35yV5HWgjlbQ0Po3oy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c500afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-content/themes/betheme/js/scripts.js?ver=21.9.4 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-content/themes/betheme/js/scripts.js?ver=21.9.4 IP104.21.44.149:0
GET /wp-content/themes/betheme/js/scripts.js?ver=21.9.4 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Mon, 07 Jun 2021 20:18:26 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ou95sYrKSw%2F0tw7zh2Wwm0zqKrettP1Pj39H7ippFbHIoWGnFttdlrs6a6DY1tFXFfhaxPghVwgWD7AsnyowL7lhOr8eA5VqYA1lPuJ3yUQZIoNFc0J7MQWDVn2Dgrfr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c590afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-content/themes/betheme/fonts/persian-fonts/fonts.css | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-content/themes/betheme/fonts/persian-fonts/fonts.css IP104.21.44.149:0
GET /wp-content/themes/betheme/fonts/persian-fonts/fonts.css HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Mon, 07 Jun 2021 20:18:26 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XcdAtj14ZIi9ZgJsexOlCtyK4dtBqe9aIZ6YvK8Pcv2IwTybhocQiOStOydOjJ6DX8KDbKhgjBmxlELFLbHG7ZmAn6RSPixaw3kbMzhsffNXsid0UadfUXkFhRZXn%2Bup"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c470afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-includes/js/jquery/ui/tabs.min.js?ver=1.11.4 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-includes/js/jquery/ui/tabs.min.js?ver=1.11.4 IP104.21.44.149:0
GET /wp-includes/js/jquery/ui/tabs.min.js?ver=1.11.4 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Fri, 04 Feb 2022 14:55:34 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bliua0tNWVsK24IBJpK1DhQiDbsUuOPML0tS7AX9%2Bb70zb3YX4u6s%2BJGFEVWyl6qDuvyvO9IPyk6OfYLwDFjRggxABJwJzY19Qd2PClF%2FlfqsdowUTIvPrgWf8cQJsGj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c4f0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-content/themes/betheme/assets/ui/jquery.ui.all.css?ver=21.9.4 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-content/themes/betheme/assets/ui/jquery.ui.all.css?ver=21.9.4 IP104.21.44.149:0
GET /wp-content/themes/betheme/assets/ui/jquery.ui.all.css?ver=21.9.4 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Mon, 07 Jun 2021 20:18:26 GMT
vary: Accept-Encoding,Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ys64JMVL6vgNsgELxZLCeyWc64W8zK3%2F6gD0Z7GqBgSSA8SRu9%2BI08yq3cvn5xCCRvFlaHqFX5odjmSMI%2FDtX7xAAvU2DNHWsKLEFXYkERaWY2DByIzYqOOYRQ3oi%2BcY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c3c0afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-content/themes/betheme/css/layout.css?ver=21.9.4 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-content/themes/betheme/css/layout.css?ver=21.9.4 IP104.21.44.149:0
GET /wp-content/themes/betheme/css/layout.css?ver=21.9.4 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Mon, 07 Jun 2021 20:18:26 GMT
vary: Accept-Encoding,Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E8ocSizn%2Fg12uZ%2FwkDr3yBtH9%2Bev%2FFRouUy7hFb3d5szPAJowp9LDK8hkDBfAAIwGmYTWq3qs%2Fr6G9w5up%2FGUBlNZbnUwxFItCtyrK1yIJcqz8PoCQV3VqrfU7RecAAb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c390afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.2.23 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.2.23 IP104.21.44.149:0
GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.2.23 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Wed, 09 Mar 2022 19:22:46 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tT4%2BwatMrPi7LIRkdvFOl3QIdohIgIyJ8V8wZUYT0Wk0MmgfUI5R8c5oNE089pWTdISfcf3jOJFY8HtR9oJFLPZ%2BHNo5N7w%2FOFascPjtfxhQIp8LgfQH0UV2FgKqUdTQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c440afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-includes/js/jquery/ui/sortable.min.js?ver=1.11.4 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-includes/js/jquery/ui/sortable.min.js?ver=1.11.4 IP104.21.44.149:0
GET /wp-includes/js/jquery/ui/sortable.min.js?ver=1.11.4 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Fri, 04 Feb 2022 14:55:35 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W9a35qslzpcM%2F6O4Tu8sKIlYsinFVOeGnDgi4DQIGNjdnUJQc8qawq1IKY1nzJzrP9HiSVsbEv5%2FUqoErlServaKAtSTn6%2FJULNMFF3867536wt5xUNpax%2BIZgCrJ30D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c4e0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-content/themes/betheme/js/parallax/translate3d.js?ver=21.9.4 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-content/themes/betheme/js/parallax/translate3d.js?ver=21.9.4 IP104.21.44.149:0
GET /wp-content/themes/betheme/js/parallax/translate3d.js?ver=21.9.4 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Mon, 07 Jun 2021 20:18:26 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4lfTiK5si9dME0OuZhnzxVj0jC9ye0CLonItMGhU4%2BFtMPJtqAWu64Eyj6kBhuUTzNkQRBliEKLj%2BeOJQsNtXy3UWbMg9kSyjIu%2Fo%2BIyNmn3CEAVjrnqr5X50QfM3fwi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c570afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-content/plugins/atp-call-now/css/style.css?ver=5.3.12 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-content/plugins/atp-call-now/css/style.css?ver=5.3.12 IP104.21.44.149:0
GET /wp-content/plugins/atp-call-now/css/style.css?ver=5.3.12 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Mon, 28 Jun 2021 11:00:28 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tsLNheszCFcC00Bh6tYE01XjHRPlpPQhORf5qTL1sTHBC79ofDJN%2FqDyEF7v9fm2geXmoorGNxtpXCCRciP8r68Z%2FizKg31rbNnLpTDp3nwhRjZERU4bcN1bo3ymlzHT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b453c620afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-content/themes/betheme/js/plugins.js?ver=21.9.4 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-content/themes/betheme/js/plugins.js?ver=21.9.4 IP104.21.44.149:0
GET /wp-content/themes/betheme/js/plugins.js?ver=21.9.4 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:42 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Mon, 07 Jun 2021 20:18:26 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dmQMZm4%2F6433mCnVRvKMFpbjYP1BGVL6IA8RXrOaOf73lQVT90DArHUqD214362V9bnvvMaoUyXB09NxYn38TtNEyxpqx5y31LHQiYEsl4D8i82wM3kQETdlaiQafd0X"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c510afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-content/themes/betheme/style.css?ver=21.9.4 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-content/themes/betheme/style.css?ver=21.9.4 IP104.21.44.149:0
GET /wp-content/themes/betheme/style.css?ver=21.9.4 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Tue, 08 Jun 2021 00:23:27 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X3Bl2hyrlKDuIUuimQk0v7EIP6dlTzT22fF3ZeXUCP2BYSBOzSOoekAm5aoF30JtJoChqLSIiiQ5Lx0XiDahVryWI5deLogi71dYOkWx5aE3PfBwhyprSDhgCoDJGw31"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b453c6a0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-content/themes/betheme/js/menu.js?ver=21.9.4 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-content/themes/betheme/js/menu.js?ver=21.9.4 IP104.21.44.149:0
GET /wp-content/themes/betheme/js/menu.js?ver=21.9.4 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Mon, 07 Jun 2021 20:18:26 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VGfVQQOwEdnWn4cUWRpGzUY44udTipnOFkTsIw%2BJCdjIgUo9odEexpj%2FD5F2UhyPOmbWomB56PtkADhQwMzSC%2FvPTXA9zlsNAzikYK195CkIhCk3ePMBIhNQVkvdU1et"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c530afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.23 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.23 IP104.21.44.149:0
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.23 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Mon, 07 Jun 2021 20:18:26 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I2VRsHQLzrZLGhM14cosUMmbgUrJz7ZxbUf7I%2F2ih3LeE5TwPOGREDD81%2BSddEW6ZPBxgc0%2FY%2FqAn0guKF5HZ%2FhGlO3PK6mVF1pVukynptWoOEo%2F0lETMMN1F%2BUr6P2Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b453c630afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| mail.zarryfbar.com/edd/4shell/index.html | 188.114.97.1 | 404 Not Found | 0 B |
URL HTTP/2mail.zarryfbar.com/edd/4shell/index.html IP188.114.97.1:0
GET /edd/4shell/index.html HTTP/1.1
Host: mail.zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 404 Not Found
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://zarryfbar.com/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qRT5WkOhZ8RT3azEljKfJtQGhah2U4LiB6n2fDB3m%2FecS%2BiKxQjBo7mJoyOio%2FYjn6HA9OlJ49vuTTStuaH3FPJpSsgdZseULV0RlPQgeDB6EWurA9IFQ3l4ZTxPHu1Hl4oR3ho%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b406ac60b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.3 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.3 IP104.21.44.149:0
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.3 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Mon, 07 Jun 2021 20:18:26 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lp8TQdU3kT2jc7zYuMTxpz0Pf%2BUqaQUHokfga8sfMxKRy1i9mJi%2BydFkb3scf7OKfE9p0tkfY5YlDn9cB8a%2BXJJ%2F%2B2W4d96ZUIzlz4ummu4teHHmEkvrXL0YwWcpTPiu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b453c640afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-content/plugins/contact-form-7/includes/css/styles-rtl.css?ver=5.3 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-content/plugins/contact-form-7/includes/css/styles-rtl.css?ver=5.3 IP104.21.44.149:0
GET /wp-content/plugins/contact-form-7/includes/css/styles-rtl.css?ver=5.3 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Mon, 07 Jun 2021 20:18:26 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N03YAOuI7493iRmB0yWCLMWTm1CHovCOKHeQY0FVoW6WNU%2F2E69wgsuERxYkZTb2NInayrwPw3%2FX4K21qrvL6CMIyaL5jO4fC0lSEDtSFnXiOu0zxJIRCmAVl9rdOAs4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b453c660afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zarryfbar.com/wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4 | 104.21.44.149 | 200 OK | 0 B |
URL HTTP/2zarryfbar.com/wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4 IP104.21.44.149:0
GET /wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4 HTTP/1.1
Host: zarryfbar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mail.zarryfbar.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 21:52:41 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
expires: Wed, 20 Dec 2023 21:50:16 GMT
last-modified: Fri, 04 Feb 2022 14:55:35 GMT
vary: Accept-Encoding,Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Nz3bMOR5wmoC%2BoYJdNfjfLzwfa8%2FfFHU2UsJ1Qfjcsp5%2FMLSiVOx3p6oOJ3CIqiuDeum1pTb8dPpcHEl9xBTU%2BGPtMBb3aAVq1Kj%2FY2EFoInRMA1mx37hI49lXD4rU9i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77cb9b452c4a0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|