www.neyfilm.rozblog.com/cat/501
301 Moved Permanently 707 B URL HTTP/1.1 www.neyfilm.rozblog.com/cat/501
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
Analyzer Verdict Alert fortinet Malware
GET /cat/501 HTTP/1.1
Host: www.neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Wed, 23 Nov 2022 11:27:16 GMT
server: LiteSpeed
location: http://neyfilm.rozblog.com/cat/501
strict-transport-security: max-age=0;
vary: User-Agent
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1456357aecbd23f21ad98da57e0127eb
7074815b39fa8da9013883971d665e4c1b0797ea
f3eba265ee64870b2f822f1511b36c747d763c382557789cdad8be1d3b52d1f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3EBA265EE64870B2F822F1511B36C747D763C382557789CDAD8BE1D3B52D1F5"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10271
Expires: Wed, 23 Nov 2022 14:18:27 GMT
Date: Wed, 23 Nov 2022 11:27:16 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash b59d95402dfb464c176610284ba13f65
1a6c62fb0d48654dd204b66161bb03fefe60f71a
40cfd59b890ec5a3570603d28d90bd7e5c506babd52c2ece93e09f1c7b2a6880
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4381
Cache-Control: max-age=87420
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:27:16 GMT
Etag: "637ca4f3-1d7"
Expires: Thu, 24 Nov 2022 11:44:16 GMT
Last-Modified: Tue, 22 Nov 2022 10:31:15 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 054ff0d1a0a43f7cb1d78dbd34e27f99
3caf54f3de1d6a8c6f6454083f8b8e7dec77db54
fcdcef8306ae31f20c366489e1f88aa40b08f154d25d45f4055c4f8cdef47634
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FCDCEF8306AE31F20C366489E1F88AA40B08F154D25D45F4055C4F8CDEF47634"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6340
Expires: Wed, 23 Nov 2022 13:12:56 GMT
Date: Wed, 23 Nov 2022 11:27:16 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 23 Nov 2022 11:17:07 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 609
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: rvX2w4zfZnjb7AaI8wPADLajQZRJDPp/u9jBL1TkgIuoTGRmwz3jkE6dLsEcRO6cLSo3x57LV+E=
x-amz-request-id: B36KZY0YWTF3DWSR
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 23 Nov 2022 10:39:58 GMT
age: 2838
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 23 Nov 2022 11:27:16 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 23 Nov 2022 11:11:11 GMT
cache-control: public,max-age=3600
age: 965
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
neyfilm.rozblog.com/cat/501
200 OK 12 kB URL HTTP/1.1 neyfilm.rozblog.com/cat/501
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1574), with CRLF, LF line terminators
Hash b44d77db90dffba381f17e9dd7bf67d3
559d0119977cd2077f20041a6ae9209729696e75
db358a48b1856d1af5de10d2c9c23217e72ce70ab1d3c99d2ff4eda54e5e6bf9
Analyzer Verdict Alert fortinet Malware
GET /cat/501 HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
set-cookie: PHPSESSID=d9401b19c5b8cd8f1d65e1c7f829301b; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-language: fa
content-type: text/html; charset=utf-8
vary: Accept-Encoding,User-Agent
transfer-encoding: chunked
content-encoding: gzip
date: Wed, 23 Nov 2022 11:27:16 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
ocsp.digicert.com/
200 OK 471 B IP
Hash eb52164d651f5f45416e873aec29eb04
405b29bb7e7cd4367cf82988f8603e53db65f139
ed885e05db822ff30fe951e10b6d4f21e574d053939afca792992a1549a15301
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2247
Cache-Control: max-age=166623
Content-Type: application/ocsp-response
Date: Wed, 23 Nov 2022 11:27:17 GMT
Etag: "637de2ad-1d7"
Expires: Fri, 25 Nov 2022 09:44:20 GMT
Last-Modified: Wed, 23 Nov 2022 09:06:53 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
neyfilm.rozblog.com/temp/site.css?22
200 OK 3.9 kB URL HTTP/1.1 neyfilm.rozblog.com/temp/site.css?22
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (860)
Hash 787a6674aa05de4919a7c90cdbb150c9
2159cc3ec669621f05f361bd91b956e573faef9a
e234a5881c33e5ff75519381140d07f15611e92efbb0bb45ecf73437048d376c
Analyzer Verdict Alert fortinet Malware
GET /temp/site.css?22 HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/501
Cookie: PHPSESSID=d9401b19c5b8cd8f1d65e1c7f829301b
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 23 Dec 2022 11:27:17 GMT
content-type: text/css
last-modified: Wed, 02 Mar 2022 08:28:27 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 3945
date: Wed, 23 Nov 2022 11:27:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
neyfilm.rozblog.com/temp/default/script.js
200 OK 302 B URL HTTP/1.1 neyfilm.rozblog.com/temp/default/script.js
IP
ASN #43754 Asiatech Data Transmission company
Hash f63434fb5b29fa6044b1a1e30e6c1162
2e7ada06c79c670f0dff3bd7d0474d07c49104e0
a9396929db33b5a927292dc2e2f33891c594811b1b37dd993abbc9db9afbb7cb
Analyzer Verdict Alert fortinet Malware
GET /temp/default/script.js HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/501
Cookie: PHPSESSID=d9401b19c5b8cd8f1d65e1c7f829301b
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Wed, 30 Nov 2022 11:27:17 GMT
content-type: application/javascript
last-modified: Wed, 18 Jul 2018 10:51:39 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 302
date: Wed, 23 Nov 2022 11:27:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
neyfilm.rozblog.com/code/popup
200 OK 1.2 kB URL HTTP/1.1 neyfilm.rozblog.com/code/popup
IP
ASN #43754 Asiatech Data Transmission company
Hash 6b2ce859adfa1d83303fb0e353812946
36ade17021945b5702a55aa784d9d0ed48a3c038
72868450ce467fddb76f49956f57ecaa8db4770aea3e0f9e2655d74f44484c32
Analyzer Verdict Alert fortinet Malware
GET /code/popup HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/501
Cookie: PHPSESSID=d9401b19c5b8cd8f1d65e1c7f829301b
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-language: fa
content-type: text/html; charset=charset
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Wed, 23 Nov 2022 11:27:17 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: pop_id=11226%2C; expires=Wed, 23-Nov-2022 23:27:17 GMT; Max-Age=43200; path=/
c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; expires=Thu, 24-Nov-2022 11:27:17 GMT; Max-Age=86400; path=/
c_t=84595637e03953ceaf873442238556759135; expires=Thu, 24-Nov-2022 11:27:17 GMT; Max-Age=86400; path=/
vary: Accept-Encoding,User-Agent
content-length: 1181
content-encoding: gzip
date: Wed, 23 Nov 2022 11:27:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
neyfilm.rozblog.com/js/site.js?7
200 OK 9.4 kB URL HTTP/1.1 neyfilm.rozblog.com/js/site.js?7
IP
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 (with BOM) text, with very long lines (5730)
Hash 3a9e608b97ff4d23f8a1649f24b6ed66
794e50a615ef78e2f2bd7616c7d9e033fc4bbe9d
82faf31dfa45299d23061f2c05579901ca592090ce35f1dc48a6ff61f24ac28a
Analyzer Verdict Alert fortinet Malware
GET /js/site.js?7 HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/501
Cookie: PHPSESSID=d9401b19c5b8cd8f1d65e1c7f829301b
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Wed, 30 Nov 2022 11:27:17 GMT
content-type: application/javascript
last-modified: Sat, 14 May 2022 01:34:44 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 9422
date: Wed, 23 Nov 2022 11:27:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
neyfilm.rozblog.com/temp/tarahi/styles.css
200 OK 6.1 kB URL HTTP/1.1 neyfilm.rozblog.com/temp/tarahi/styles.css
IP
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 (with BOM) text
Hash 28cf21c53411f845b0888677cbc74828
25bf3bc9920ad37a3f81d88e46001cab51eea3f6
d18ec6839084bfa3a36008f9f5f03cf0de9c8c656677aac9a5a62c2b6890f5ab
GET /temp/tarahi/styles.css HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/501
Cookie: PHPSESSID=d9401b19c5b8cd8f1d65e1c7f829301b
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 23 Dec 2022 11:27:17 GMT
content-type: text/css
last-modified: Tue, 15 Feb 2022 00:08:30 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 6091
date: Wed, 23 Nov 2022 11:27:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
neyfilm.rozblog.com/weblog/file/loading/88.gif
200 OK 6.0 kB URL HTTP/1.1 neyfilm.rozblog.com/weblog/file/loading/88.gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 50 x 50\012- data
Hash 093445ee241c72e6dca01dc570c230dc
32adb71ec06b5d29ec62c5511328d5970228b86d
d40495f2a0e830c47fe4cd50574c68e206292f63545a0684516db0cd8716ee0e
GET /weblog/file/loading/88.gif HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/501
Cookie: PHPSESSID=d9401b19c5b8cd8f1d65e1c7f829301b
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 11:27:17 GMT
content-type: image/gif
last-modified: Thu, 02 Feb 2012 21:52:24 GMT
accept-ranges: bytes
content-length: 5972
date: Wed, 23 Nov 2022 11:27:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: aZksZ1MdI6mRQQxe+Fn+QQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 7ixkXmDLMow4uWGrUk15tSxksTQ=
neyfilm.rozblog.com/include/captcha/cap9.php
200 OK 3.1 kB URL HTTP/1.1 neyfilm.rozblog.com/include/captcha/cap9.php
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 30, 8-bit/color RGB, non-interlaced\012- data
Hash 9970849805d79ce6c48d26ece9b9f7d4
6ce7629a6d4644a9d3bb4ea3933e8fef7fbfd55c
843e309c51d0bd110ecf505f8fe2d8a056ab61e25a6693a81d3f5ac8e69f2ea4
Analyzer Verdict Alert fortinet Malware
GET /include/captcha/cap9.php HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/501
Cookie: PHPSESSID=d9401b19c5b8cd8f1d65e1c7f829301b
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: image/png
content-length: 3108
date: Wed, 23 Nov 2022 11:27:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
neyfilm.rozblog.com/images/refresh2.svg
200 OK 276 B URL HTTP/1.1 neyfilm.rozblog.com/images/refresh2.svg
IP
ASN #43754 Asiatech Data Transmission company
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash 7082e86e2a3c9646fa1aa922b8e3a2d6
7f704127e872b5b94b8e2dd7959e2d5c9b9379a8
d1254b0bb9112500f8f39e1130f0a6c8dca1037d416e7f7d6524894b31b06b00
Analyzer Verdict Alert fortinet Malware
GET /images/refresh2.svg HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/501
Cookie: PHPSESSID=d9401b19c5b8cd8f1d65e1c7f829301b
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Wed, 30 Nov 2022 11:27:17 GMT
content-type: image/svg+xml
last-modified: Wed, 28 Apr 2021 22:57:34 GMT
etag: "114-6089e85e-9f2e18d89b796b95;;;"
accept-ranges: bytes
content-length: 276
date: Wed, 23 Nov 2022 11:27:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
neyfilm.rozblog.com/images/no_image.png
200 OK 6.3 kB URL HTTP/1.1 neyfilm.rozblog.com/images/no_image.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 5c675d607343c154f0ef074dc145988a
2f3713c21ed04a225f16439b200e2b2a6062454e
2e8f7285f7325ed8db6a0d253158db2c8962125173a1e6973e8fcb39a325a7ba
GET /images/no_image.png HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/501
Cookie: PHPSESSID=d9401b19c5b8cd8f1d65e1c7f829301b
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 11:27:17 GMT
content-type: image/png
last-modified: Sat, 12 Jan 2013 13:14:07 GMT
accept-ranges: bytes
content-length: 6278
date: Wed, 23 Nov 2022 11:27:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
rozblog.com/temp/pro/ads_468.jpg
200 OK 6.3 kB URL HTTP/1.1 rozblog.com/temp/pro/ads_468.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: "LEAD Technologies Inc. V1.01", baseline, precision 8, 468x60, components 3\012- data
Hash db8cac5e50e0f1be65a3ec0756ea6612
3053609e1039ab6d0d0be6adefeaf7ba7a243cf6
8f10f1e719bda34ecfc3af6b50f8273e9c9676d10612eff12aad2382d458ef1d
GET /temp/pro/ads_468.jpg HTTP/1.1
Host: rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 11:27:17 GMT
content-type: image/jpeg
last-modified: Fri, 20 Feb 2015 09:52:01 GMT
accept-ranges: bytes
content-length: 6286
date: Wed, 23 Nov 2022 11:27:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 79b407ca3484961bc22bd0d243aed73d
bf26c507bda53a35a8b0932f3ef70b5d2960e8c9
fd3a8f2ceb55a496d5c3600522a35da6c653bc0398458125e9cd4576228d9d16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FD3A8F2CEB55A496D5C3600522A35DA6C653BC0398458125E9CD4576228D9D16"
Last-Modified: Mon, 21 Nov 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5832
Expires: Wed, 23 Nov 2022 13:04:29 GMT
Date: Wed, 23 Nov 2022 11:27:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 79b407ca3484961bc22bd0d243aed73d
bf26c507bda53a35a8b0932f3ef70b5d2960e8c9
fd3a8f2ceb55a496d5c3600522a35da6c653bc0398458125e9cd4576228d9d16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FD3A8F2CEB55A496D5C3600522A35DA6C653BC0398458125E9CD4576228D9D16"
Last-Modified: Mon, 21 Nov 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5884
Expires: Wed, 23 Nov 2022 13:05:21 GMT
Date: Wed, 23 Nov 2022 11:27:17 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 79b407ca3484961bc22bd0d243aed73d
bf26c507bda53a35a8b0932f3ef70b5d2960e8c9
fd3a8f2ceb55a496d5c3600522a35da6c653bc0398458125e9cd4576228d9d16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FD3A8F2CEB55A496D5C3600522A35DA6C653BC0398458125E9CD4576228D9D16"
Last-Modified: Mon, 21 Nov 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5884
Expires: Wed, 23 Nov 2022 13:05:21 GMT
Date: Wed, 23 Nov 2022 11:27:17 GMT
Connection: keep-alive
rozblog.com/temp/nuke/FBarrow.gif
200 OK 59 B URL HTTP/1.1 rozblog.com/temp/nuke/FBarrow.gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 9 x 9\012- data
Hash 08f58683f752ec50ab890d4162cf9a03
2a0e3923b77ab35c273bf5307fc980f4d4de42fe
d8359b38e288d654bf46c6c01ea58f896a998390f848ca99eb4015900f1cdb42
GET /temp/nuke/FBarrow.gif HTTP/1.1
Host: rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 11:27:17 GMT
content-type: image/gif
last-modified: Sat, 26 Nov 2011 12:58:49 GMT
accept-ranges: bytes
content-length: 59
date: Wed, 23 Nov 2022 11:27:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
neyfilm.rozblog.com/temp/tarahi/fonts/wdtv.woff
200 OK 15 kB URL HTTP/1.1 neyfilm.rozblog.com/temp/tarahi/fonts/wdtv.woff
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, TrueType, length 14648, version 1.0\012- data
Hash 259c4490256daceb6a5f275cee137627
5c0eae14870f1ec6527aa64f3f675cb9063034ee
bd4bdb99aa4a1cf56a05d7a913dce42b23b4cb021148b0a0f22d836105d98fc5
Analyzer Verdict Alert fortinet Malware
GET /temp/tarahi/fonts/wdtv.woff HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/temp/tarahi/styles.css
Cookie: PHPSESSID=d9401b19c5b8cd8f1d65e1c7f829301b; pop_id=11226%2C; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=84595637e03953ceaf873442238556759135
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 25 Nov 2022 11:27:17 GMT
content-type: font/woff
last-modified: Thu, 26 Feb 2015 19:00:22 GMT
etag: "3938-54ef6d46-daf654b8921ad10f;;;"
accept-ranges: bytes
content-length: 14648
date: Wed, 23 Nov 2022 11:27:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
rozblog.com/temp/rang/like.png
200 OK 2.3 kB URL HTTP/1.1 rozblog.com/temp/rang/like.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 22 x 42, 8-bit/color RGBA, non-interlaced\012- data
Hash dd370ffbcd679da0d5c8547f34c6e2fb
6df3b9ec0e82b1a6ef41bc83041d2b2e16200077
2f14531974b17d9fd89de532694faf69ed7aa61b04ea990108b138d772ba96f7
GET /temp/rang/like.png HTTP/1.1
Host: rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 11:27:17 GMT
content-type: image/png
last-modified: Sat, 14 Feb 2015 11:52:19 GMT
accept-ranges: bytes
content-length: 2272
date: Wed, 23 Nov 2022 11:27:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
rozblog.com/temp/music3/MTForumBlock_row_over.png
200 OK 139 B URL HTTP/1.1 rozblog.com/temp/music3/MTForumBlock_row_over.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 1 x 18, 8-bit/color RGB, non-interlaced\012- data
Hash 1fd885e3d0a8fc062470706ae84ea56b
f0e6c850b1794c523ca16bf087054cb843daf6fa
e0dc411ff39139fd39b2cf6d027ab2d56fbd3b51bacc0935e1ae284e65c64e40
GET /temp/music3/MTForumBlock_row_over.png HTTP/1.1
Host: rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 11:27:17 GMT
content-type: image/png
last-modified: Sun, 03 Jul 2011 21:44:44 GMT
accept-ranges: bytes
content-length: 139
date: Wed, 23 Nov 2022 11:27:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
rozblog.com/temp/music3/MTForumBlock_row.png
200 OK 155 B URL HTTP/1.1 rozblog.com/temp/music3/MTForumBlock_row.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 1 x 18, 8-bit/color RGB, non-interlaced\012- data
Hash 3ae7d651d73f3b247f9737655c53e08e
476c9a585906552a1054a74f88de640142ce40f5
d5496cde5cf105a1cf8c8fe59e0efefba5859a4fbff07a4701ec4f4a7c6e5ac5
GET /temp/music3/MTForumBlock_row.png HTTP/1.1
Host: rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 11:27:17 GMT
content-type: image/png
last-modified: Sun, 03 Jul 2011 21:45:04 GMT
accept-ranges: bytes
content-length: 155
date: Wed, 23 Nov 2022 11:27:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
neyfilm.rozblog.com/temp/tarahi/fonts/fontawesome-webfont.woff?v=4.2.0
200 OK 66 kB URL HTTP/1.1 neyfilm.rozblog.com/temp/tarahi/fonts/fontawesome-webfont.woff?v=4.2.0
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, TrueType, length 65452, version 1.0\012- data
Hash d95d6f5d5ab7cfefd09651800b69bd54
7d65e0227d0d7cdc1718119cd2a7dce0638f151c
199411f659f41aaccb959bacb1b0de30e54f244352a48c6f9894e65ae0f8a9a1
GET /temp/tarahi/fonts/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/temp/tarahi/styles.css
Cookie: PHPSESSID=d9401b19c5b8cd8f1d65e1c7f829301b; pop_id=11226%2C; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=84595637e03953ceaf873442238556759135
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 25 Nov 2022 11:27:17 GMT
content-type: font/woff
last-modified: Thu, 26 Feb 2015 19:00:20 GMT
etag: "ffac-54ef6d44-11fea27943efc11b;;;"
accept-ranges: bytes
content-length: 65452
date: Wed, 23 Nov 2022 11:27:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
neyfilm.rozblog.com/temp/tarahi/fonts/yekanregular.woff
200 OK 22 kB URL HTTP/1.1 neyfilm.rozblog.com/temp/tarahi/fonts/yekanregular.woff
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, CFF, length 21500, version 2.0\012- data
Hash 05727d32400b2008acbf7fc49251ede0
b6c1a82539a2531eb1aad7d1cf05554d5a999154
da78e001fab6f5d7b1c68e17d00fb1595c9b10085d6769a86aeb6a39dc7e43d6
Analyzer Verdict Alert fortinet Malware
GET /temp/tarahi/fonts/yekanregular.woff HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/temp/tarahi/styles.css
Cookie: PHPSESSID=d9401b19c5b8cd8f1d65e1c7f829301b; pop_id=11226%2C; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=84595637e03953ceaf873442238556759135
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 25 Nov 2022 11:27:17 GMT
content-type: font/woff
last-modified: Thu, 26 Feb 2015 19:00:25 GMT
etag: "53fc-54ef6d49-80b982f1d7ce7ee2;;;"
accept-ranges: bytes
content-length: 21500
date: Wed, 23 Nov 2022 11:27:17 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
rozup.ir/up/neyfilm/Pishnehadi/%D8%A2%D9%84%D8%A8%D9%88%D9%85.png
200 OK 1.5 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D8%A2%D9%84%D8%A8%D9%88%D9%85.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash eb09df11c673284e3303417a2e38a317
e8b564163cb716510ec812558bedce451b327ad2
0ecc84565303a256741b84151272ad7312d07ea486315565418b86912c69297f
GET /up/neyfilm/Pishnehadi/%D8%A2%D9%84%D8%A8%D9%88%D9%85.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:17 GMT
Content-Type: image/png
Content-Length: 1544
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-608"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/uc_2328.jpg
200 OK 96 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/uc_2328.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 450x500, components 3\012- data
Hash 77e9363d7d3ebed21e182b9d077f1c41
3244408fe2b465a9d2ca387d7f0dd34d905b05b4
33a7d4badf04654881a442dcc51c09456de998d3371416303d97c15c8f2116cd
GET /up/neyfilm/ALIZARANDI/uc_2328.jpg HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:17 GMT
Content-Type: image/jpeg
Content-Length: 96141
Last-Modified: Wed, 22 Apr 2015 16:59:54 GMT
Connection: keep-alive
ETag: "5537d38a-1778d"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/Adobe-Flash-Player1-100x100.png
200 OK 6.9 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/Adobe-Flash-Player1-100x100.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 713a59cac516394ac6d234187c50c949
cf9a0b1caf1ef51c76696ae10030589437629382
21bc08eae9a8050d2e7226e6ccfb7b5a576dc3865f3114b5856a25f139f566b8
GET /up/neyfilm/ALIZARANDI/axenarmafzar/Adobe-Flash-Player1-100x100.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:17 GMT
Content-Type: image/png
Content-Length: 6918
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-1b06"
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ffa299e0f6e792ed0b2853c6bcab06c1
37913ced09822198d1b630bef25db516e4121ba4
6f51858cacfd38f66ef01d3bc0ae3684678633dca18e351b7d98349cfe008d21
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6F51858CACFD38F66EF01D3BC0AE3684678633DCA18E351B7D98349CFE008D21"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7365
Expires: Wed, 23 Nov 2022 13:30:02 GMT
Date: Wed, 23 Nov 2022 11:27:17 GMT
Connection: keep-alive
rozup.ir/up/neyfilm/ALIZARANDI/uc_886.jpg
200 OK 80 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/uc_886.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0 ME, datetime=2012:10:06 15:08:24], progressive, precision 8, 450x350, components 3\012- data
Hash 7bb099bab559328fc8d97c3c5726d8b5
21da02c63ea5568ac511063bf354e1ca0b25e69b
6674025cc2a7f9f4b338b4529f8f22927ca6fc646ceca0326808e0fbe8366df2
GET /up/neyfilm/ALIZARANDI/uc_886.jpg HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:17 GMT
Content-Type: image/jpeg
Content-Length: 79552
Last-Modified: Wed, 22 Apr 2015 17:02:20 GMT
Connection: keep-alive
ETag: "5537d41c-136c0"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/Internet-Download-Manager-61-100x100.png
200 OK 14 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/Internet-Download-Manager-61-100x100.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash cfdbce4fe6a135178bcaee284033eeee
dd417174542ecff236d648a05e3b985f45b6cad0
6dba2fec1bf54f8caa9fba0ad7ae539ef23a5646715bf0577488f24984b746d3
GET /up/neyfilm/ALIZARANDI/axenarmafzar/Internet-Download-Manager-61-100x100.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:17 GMT
Content-Type: image/png
Content-Length: 14493
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-389d"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/uc_1359.png
200 OK 4.3 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/uc_1359.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 300 x 45, 8-bit colormap, non-interlaced\012- data
Hash a82be12fddef1b066a5b6fa4b23f6069
2da26d09c759bba1f3ed9953cba6fd53daa61baa
b635f006fe79bc69a5829eca84804f0ac7bb272e12f6617a08fe1a3750da248d
GET /up/neyfilm/ALIZARANDI/uc_1359.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:17 GMT
Content-Type: image/png
Content-Length: 4265
Last-Modified: Thu, 23 Apr 2015 15:03:48 GMT
Connection: keep-alive
ETag: "553909d4-10a9"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/uc_2215.jpg
200 OK 55 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/uc_2215.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 450x350, components 3\012- data
Hash 2bbae22da0bdf6880f41662c6ba92a67
298db2ff444800bd6e193f389a4c061b00f7fac1
0801d5bb892e6fc8c84680a4301bc711566e9313dcae29439280ffd7dbc42ef6
GET /up/neyfilm/ALIZARANDI/uc_2215.jpg HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:17 GMT
Content-Type: image/jpeg
Content-Length: 55243
Last-Modified: Wed, 22 Apr 2015 16:56:41 GMT
Connection: keep-alive
ETag: "5537d2c9-d7cb"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/%D8%B4%D8%A7%D9%BE.jpg
200 OK 96 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/%D8%B4%D8%A7%D9%BE.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2015:04:22 21:18:35], baseline, precision 8, 500x200, components 3\012- data
Hash a79cd97fefcaae507b0e318118f5eca7
9ce2679f1c62daca1f42a4153897e59204a92cf8
082823c4a671332c70ceb39c1c207b1c047472fe9881141819c6d455e4ddc089
GET /up/neyfilm/ALIZARANDI/%D8%B4%D8%A7%D9%BE.jpg HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:17 GMT
Content-Type: image/jpeg
Content-Length: 96193
Last-Modified: Wed, 22 Apr 2015 16:54:41 GMT
Connection: keep-alive
ETag: "5537d251-177c1"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D8%AA%DA%A9-%D8%A2%D9%87%D9%86%DA%AF.png
200 OK 1.6 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D8%AA%DA%A9-%D8%A2%D9%87%D9%86%DA%AF.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash b75b545ac71d9dd520ea52b8927964db
173f3df176f22006216c8d04e87c11dff35c62f0
a0af35eb593109fcc4cd4427a9d4c6c159ff326c42612ae546d06cd2c9d656b7
GET /up/neyfilm/Pishnehadi/%D8%AA%DA%A9-%D8%A2%D9%87%D9%86%DA%AF.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:17 GMT
Content-Type: image/png
Content-Length: 1648
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-670"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D8%A7%D8%AE%D8%A8%D8%A7%D8%B1-%D9%85%D9%88%D8%B3%DB%8C%D9%82%DB%8C.png
200 OK 1.8 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D8%A7%D8%AE%D8%A8%D8%A7%D8%B1-%D9%85%D9%88%D8%B3%DB%8C%D9%82%DB%8C.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash d3274f11b841f3746d838d3970b4f76d
a2ea2e11a47ee418787f0dae95ba2ff6544576a2
a35522b12cf4248a86c2b7183fa893c750a635a0fad8a11186084113d71e4598
GET /up/neyfilm/Pishnehadi/%D8%A7%D8%AE%D8%A8%D8%A7%D8%B1-%D9%85%D9%88%D8%B3%DB%8C%D9%82%DB%8C.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:17 GMT
Content-Type: image/png
Content-Length: 1817
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-719"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D9%85%D9%88%D8%B2%DB%8C%DA%A9-%D9%88%DB%8C%D8%AF%DB%8C%D9%88.png
200 OK 1.8 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D9%85%D9%88%D8%B2%DB%8C%DA%A9-%D9%88%DB%8C%D8%AF%DB%8C%D9%88.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash c8e85fd80b37039786d675e208fbf738
a29c317df996992ceb50ac3b404c1ee78ba77b14
a22c9f1b49635541f6207fd2d548078373d980b0f0f12e833b8382df987c7e8d
GET /up/neyfilm/Pishnehadi/%D9%85%D9%88%D8%B2%DB%8C%DA%A9-%D9%88%DB%8C%D8%AF%DB%8C%D9%88.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:18 GMT
Content-Type: image/png
Content-Length: 1823
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-71f"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D9%81%DB%8C%D9%84%D9%85-%D8%A7%DB%8C%D8%B1%D8%A7%D9%86%DB%8C.png
200 OK 1.8 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D9%81%DB%8C%D9%84%D9%85-%D8%A7%DB%8C%D8%B1%D8%A7%D9%86%DB%8C.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash d374b5e228b80c66ab9efa2539fe77e5
4333b4566a54d5f359ff14ac6198ad87bdd494a7
f72e96a56633fc5a48ae42b41477cc82aec1a3b82d5cdbf2d83913c2cb964805
GET /up/neyfilm/Pishnehadi/%D9%81%DB%8C%D9%84%D9%85-%D8%A7%DB%8C%D8%B1%D8%A7%D9%86%DB%8C.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:18 GMT
Content-Type: image/png
Content-Length: 1837
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-72d"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D8%A2%D8%B1%D8%B4%DB%8C%D9%88-%D8%B3%D8%B1%DB%8C%D8%A7%D9%84.png
200 OK 1.9 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D8%A2%D8%B1%D8%B4%DB%8C%D9%88-%D8%B3%D8%B1%DB%8C%D8%A7%D9%84.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash ed8ea3e5b5d48d4b2399e795d03a2552
edd02a3f45839dfd3ce791812101db7885dcd24b
17949d9d0af7f8b9c1b03c9ab7dd16b299eada335e0fe569770482472ee1afec
GET /up/neyfilm/Pishnehadi/%D8%A2%D8%B1%D8%B4%DB%8C%D9%88-%D8%B3%D8%B1%DB%8C%D8%A7%D9%84.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:18 GMT
Content-Type: image/png
Content-Length: 1892
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-764"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D9%86%D8%B1%D9%85-%D8%A7%D9%81%D8%B2%D8%A7%D8%B1.png
200 OK 1.7 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D9%86%D8%B1%D9%85-%D8%A7%D9%81%D8%B2%D8%A7%D8%B1.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash 91486a703eee1715a0e0e24a789b7667
321a4eb4aed702db0350e808b1ab4b546ea83d40
a23d0207fe8a0afc2854b6943ba59cce740d5c775c476df8c4ac3ab8947e124a
GET /up/neyfilm/Pishnehadi/%D9%86%D8%B1%D9%85-%D8%A7%D9%81%D8%B2%D8%A7%D8%B1.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:18 GMT
Content-Type: image/png
Content-Length: 1659
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-67b"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D8%B3%D8%B1%DB%8C%D8%A7%D9%84.png
200 OK 1.8 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D8%B3%D8%B1%DB%8C%D8%A7%D9%84.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash 74129318d41ce8423b398eb065ca602e
729a39c43ac02096ae498aeb81bbbc8ef6037e77
7eb0ecc1747e9764403efca2dd8ef549290722622ddf6a5698a122cc14dc2f20
GET /up/neyfilm/Pishnehadi/%D8%B3%D8%B1%DB%8C%D8%A7%D9%84.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:18 GMT
Content-Type: image/png
Content-Length: 1781
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-6f5"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D9%81%DB%8C%D9%84%D9%85-%D8%AE%D8%A7%D8%B1%D8%AC%DB%8C.png
200 OK 1.8 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D9%81%DB%8C%D9%84%D9%85-%D8%AE%D8%A7%D8%B1%D8%AC%DB%8C.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash 2a02e9f195f2080b3a80b78139c02cc1
5cf949d1cc9bb726f2c1d7cfb153dbd1466385a8
0a3e637590da21a24465d1c0c0a88a5b2aada6eeb0fa321bac0eb743be44e215
GET /up/neyfilm/Pishnehadi/%D9%81%DB%8C%D9%84%D9%85-%D8%AE%D8%A7%D8%B1%D8%AC%DB%8C.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:18 GMT
Content-Type: image/png
Content-Length: 1757
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-6dd"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D8%A7%D8%B3-%D8%A7%D9%85-%D8%A7%D8%B3.png
200 OK 1.7 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D8%A7%D8%B3-%D8%A7%D9%85-%D8%A7%D8%B3.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash 71bc0cfb0e8f19da2d7fe06928985de0
61835ad6add92d2b04c5fdef29537fc688f37ee1
bdd623adfc6ae6fce7ee6bb2f8801f1e9fbae91ab002af25bda12d7e4b93b04e
GET /up/neyfilm/Pishnehadi/%D8%A7%D8%B3-%D8%A7%D9%85-%D8%A7%D8%B3.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:18 GMT
Content-Type: image/png
Content-Length: 1685
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-695"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/NOD32-logo2-100x100.png
200 OK 11 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/NOD32-logo2-100x100.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 7cc3630c20ae4097b1b5f504e2326a99
28fb1365a8b52995b1f90ba428a767e90a9c3aca
c6104e4261eba13131bda269fca29f9ff8da34b82ec67a89e0ae033a546b3f9e
GET /up/neyfilm/ALIZARANDI/axenarmafzar/NOD32-logo2-100x100.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:18 GMT
Content-Type: image/png
Content-Length: 10749
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-29fd"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D9%87%D9%85%D8%B1%D8%A7%D9%87-%D8%A7%D9%88%D9%84.png
200 OK 1.9 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D9%87%D9%85%D8%B1%D8%A7%D9%87-%D8%A7%D9%88%D9%84.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash d55010f4d04529f02c1971042c38ab3d
0242dacd41a110041687fba3470af08138bf120b
5806f844be81f3b88a52143a61704d7a22c986e3b8e56d8813208d2b1481b4cb
GET /up/neyfilm/Pishnehadi/%D9%87%D9%85%D8%B1%D8%A7%D9%87-%D8%A7%D9%88%D9%84.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:18 GMT
Content-Type: image/png
Content-Length: 1881
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-759"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/vlc-player-100x100.png
200 OK 9.6 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/vlc-player-100x100.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 4ff98c2c912b58c49d9dcdd8efa7f355
ed2a816b81ac32bcb590b02679c8178e97590458
fb5ce6eefde1ab8db11311213b11bd09de4388b557f2985f70f22769de52e47e
GET /up/neyfilm/ALIZARANDI/axenarmafzar/vlc-player-100x100.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:18 GMT
Content-Type: image/png
Content-Length: 9646
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-25ae"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/chrome-100x100.png
200 OK 6.5 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/chrome-100x100.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 4cd1101c6d95e009d1299de1644be63b
e85ab709713ffb1a24949cd05d336a93a33bb7e0
91e7fa0e42c31ebfe1abf6e0a8caa813b06ff202e8e0dfd8963bbe713718deab
GET /up/neyfilm/ALIZARANDI/axenarmafzar/chrome-100x100.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:18 GMT
Content-Type: image/png
Content-Length: 6510
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-196e"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/winrar4-100x100.png
200 OK 9.4 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/winrar4-100x100.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash da360bbf560923e761b8bc660df161b7
e50c20e56c2c08cf1d1497eee84ff7f02e4e58db
4319a0555c961ca43d107616696afd30bdd6f30fec461a37271c48731bf9fe61
GET /up/neyfilm/ALIZARANDI/axenarmafzar/winrar4-100x100.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:18 GMT
Content-Type: image/png
Content-Length: 9364
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-2494"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/Firefox-37-100x100.png
200 OK 16 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/Firefox-37-100x100.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash ceef5adb5e29d1f961ee6664fbe09e38
b145852a8dc3ca9fbe950808c4404e97d5c0fa95
8c03ac20400e7191a57a8f5901d2a69f2a0a97cc610b6d081d0abdcff17ead5d
GET /up/neyfilm/ALIZARANDI/axenarmafzar/Firefox-37-100x100.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:18 GMT
Content-Type: image/png
Content-Length: 16114
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-3ef2"
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4986
Expires: Wed, 23 Nov 2022 12:50:24 GMT
Date: Wed, 23 Nov 2022 11:27:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4986
Expires: Wed, 23 Nov 2022 12:50:24 GMT
Date: Wed, 23 Nov 2022 11:27:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4986
Expires: Wed, 23 Nov 2022 12:50:24 GMT
Date: Wed, 23 Nov 2022 11:27:18 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F45ca81c5-d11a-4d86-a922-dbdce0f6b46c.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F45ca81c5-d11a-4d86-a922-dbdce0f6b46c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0cc111ba6ae699fca7fbff3490640960
18084197b48ea3b4a143636250396e8791d0285f
34fbba92e665ad371ea2bd1a871251cf0c5b7832d6f4661b21b2cfbd7f786923
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F45ca81c5-d11a-4d86-a922-dbdce0f6b46c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4977
x-amzn-requestid: 3e56de91-7ed1-4b1e-b230-5f19b2cc6601
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bxQKBHzdIAMFpUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376c70c-41c572d27999534d3c198372;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 23:43:08 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Or1B6k7o4cYqVXfndjJsKLOV-aYKX8bfHCQIUqNzvofjQSnIf8f04A==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:52:42 GMT
age: 48876
etag: "18084197b48ea3b4a143636250396e8791d0285f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44f9633f-15fe-459e-aebf-06d2b582efa8.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44f9633f-15fe-459e-aebf-06d2b582efa8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3e8d7af3a5d030774447a0f71c7824f0
663cace8681891ad55943dd0273493aa9474d102
22068df04672281e392caa485259df103d591ab247c3eb5e0ccba10ffd8a9ef0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44f9633f-15fe-459e-aebf-06d2b582efa8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9766
x-amzn-requestid: ca8b7a9f-3c1a-419d-953e-2944bf820e5e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBcR_Hd4IAMFWUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d40d9-4ca5e9b2476a47cd199b9cba;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 21:36:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: gtzOoH3--VR9BQTHvU5vInc6yhBcK0-O1oBbVJpAhpRRqqKY8vAf_g==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:45:48 GMT
age: 49290
etag: "663cace8681891ad55943dd0273493aa9474d102"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0ea68cc-d723-41ae-8bc2-16e2e422e2aa.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0ea68cc-d723-41ae-8bc2-16e2e422e2aa.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c6380f73d47906bd63b9c48137e4df61
94e053461d2db89e9d08321f26a2555ebcd7e0b9
84144e3c3e7acc7339fd1da9b373f18582734b6f4d235b2aef8c90616ed1c8a7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0ea68cc-d723-41ae-8bc2-16e2e422e2aa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5914
x-amzn-requestid: 175363fa-bb7a-4c95-8aa4-ebb3f16f3745
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1lI3HaqIAMFmTA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63788238-1bb736b52bbae37c5e19486f;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 07:14:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 39Lmple6qq9vrKeKJ4lcditVdK5XfRFtv3Cs0_R8B7pVDYPiRAGFtg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 22:13:08 GMT
age: 47650
etag: "94e053461d2db89e9d08321f26a2555ebcd7e0b9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4ba2cc1-6e28-45a2-bc78-97012bdeedb2.png
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4ba2cc1-6e28-45a2-bc78-97012bdeedb2.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8b591bcc9d645eed0ea6ebc5dae07d31
97278cc5c5a1be7926d53fd8daf9e802bfb6cbdb
82dde9a4d139bdfae1d8859f4d7a77f92182c65ad630e25d0cc52f346dd1dfad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4ba2cc1-6e28-45a2-bc78-97012bdeedb2.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11793
x-amzn-requestid: 7edbd95e-83c8-4162-886f-b0bf88deee5f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-I6oFrQIAMFnYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637beeaa-4f1317ec61500d713816830d;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:33:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WYzBlSLCZWYEtLVSlKROHJMgK7WYhBNym1oizSWYlwg5oBatM9eRYQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 22:54:39 GMT
age: 45159
etag: "97278cc5c5a1be7926d53fd8daf9e802bfb6cbdb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d5a9928-3c61-44dc-af42-7d4e3c891caa.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d5a9928-3c61-44dc-af42-7d4e3c891caa.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 03830e3ff377979c234bf37561c54cfd
c18884ce9370c97e6b4e12ab0f827d68a1938bfa
5ba8bfc69c7eba42de4a16bf6d1e1e3570cd3918fe15cb8b2d25950ef791ddbb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d5a9928-3c61-44dc-af42-7d4e3c891caa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8365
x-amzn-requestid: e6c2ec6e-525e-4b9f-a45d-63076580df5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-IrpFJ3oAMF4mA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637bee4a-576f678b6e364bca09532010;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 21:31:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RjuSNwOFpk7_LY-bp-R4iKsz33D4T5Are-BNb2ftPT-N_g0W2PDeuQ==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 22 Nov 2022 21:44:55 GMT
age: 49343
etag: "c18884ce9370c97e6b4e12ab0f827d68a1938bfa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: 47c2739d-73c5-4d91-914c-fe635cb09772
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1U8xGxgIAMF-qQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63786851-6fbe19dc5c4c20dd657604e3;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 05:23:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ezHvyK3va4SioabOjSittTiLQRs_Q8k4TPxkiGp_svtZ8omDPTUN-A==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 05:01:14 GMT
age: 23164
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
rozup.ir/up/neyfilm/Pishnehadi/%D8%A7%DB%8C%D8%B1%D8%A7%D9%86%D8%B3%D9%84.png
200 OK 1.9 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D8%A7%DB%8C%D8%B1%D8%A7%D9%86%D8%B3%D9%84.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash d10a8dcd31f75b6398401268901111cf
52a2051f5204351e4913171d9c84feb7aedc6292
9d3a20aa83028843d3c8638584e54615cdf9f0dcdbd838cfe3739bedcbf73de1
GET /up/neyfilm/Pishnehadi/%D8%A7%DB%8C%D8%B1%D8%A7%D9%86%D8%B3%D9%84.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:18 GMT
Content-Type: image/png
Content-Length: 1924
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-784"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/Nero-100x100.png
200 OK 13 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/Nero-100x100.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 170f21ee06dea2afc5328b9c9dbe27e0
e6e8317b9a60ea23a0fe5ab75d0ac91c1fd72a8b
e2cd6704d1aa143d18900380dcbff71c66661695ff8fc754428ed074ce2cc9c2
GET /up/neyfilm/ALIZARANDI/axenarmafzar/Nero-100x100.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:18 GMT
Content-Type: image/png
Content-Length: 12912
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-3270"
Accept-Ranges: bytes
www.rozblog.com/theme/rozblog_v4/favi1.ico
200 OK 1.2 kB URL HTTP/1.1 www.rozblog.com/theme/rozblog_v4/favi1.ico
IP
ASN #43754 Asiatech Data Transmission company
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 129e0e4681906fae60ea32d066a7b4c5
33c024415db44baa3aba0f13df1399d9b81ac9e6
0a14eb14e53df8201b78084ab9a276a1f4ca01e55a20c3b8b0b6f3b660ee3ff0
GET /theme/rozblog_v4/favi1.ico HTTP/1.1
Host: www.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 23 Nov 2023 11:27:19 GMT
content-type: image/x-icon
last-modified: Tue, 18 Nov 2014 15:12:07 GMT
accept-ranges: bytes
content-length: 1150
date: Wed, 23 Nov 2022 11:27:19 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
rozup.ir/up/neyfilm/ahang/Ali%20Lohrasbi%20-%20In%20Rooza.jpg
200 OK 72 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ahang/Ali%20Lohrasbi%20-%20In%20Rooza.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 532x600, components 3\012- data
Hash e5e40131e7b02af8375ea82a27591b65
ccd8a88b833560a46971d0d55198a3c4286c5306
66a58bbb0388dcc07c0fd0db4025eb03f5ccea8e5ab4c6e09cd6ba0e95cda43d
GET /up/neyfilm/ahang/Ali%20Lohrasbi%20-%20In%20Rooza.jpg HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 23 Nov 2022 11:27:18 GMT
Content-Type: image/jpeg
Content-Length: 71480
Last-Modified: Wed, 28 Aug 2013 16:42:02 GMT
Connection: keep-alive
ETag: "521e285a-11738"
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 09131df19e84cdcdf6d84e289b2076f8
f3f479af8e0aa799c24b3fb77a073c9b58fde4b3
d865894bc8f63e9b0f0435fda2d37f90b8e228b19edf4afebd584648d9e73558
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D865894BC8F63E9B0F0435FDA2D37F90B8E228B19EDF4AFEBD584648D9E73558"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3473
Expires: Wed, 23 Nov 2022 12:25:12 GMT
Date: Wed, 23 Nov 2022 11:27:19 GMT
Connection: keep-alive
nfetch.yektanet.com/api/v2/load
204 No Content 0 B URL HTTP/2 nfetch.yektanet.com/api/v2/load
IP
ASN #204544 Dade Pardazi Mobinhost Co LTD
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v2/load HTTP/1.1
Host: nfetch.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://neyfilm.rozblog.com/
Origin: http://neyfilm.rozblog.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 23 Nov 2022 11:27:19 GMT
vary: Origin, Access-Control-Request-Headers
access-control-allow-origin: http://neyfilm.rozblog.com
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-headers: content-type
strict-transport-security: max-age=15724800; includeSubDomains
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a70c7a8c504960e0bd6623816d7c3f4d
9dfd261b8c97ccaba3b1ee81f61b4fd2d6612d9a
b0db924e13c307d8418724df90ca04cb7e855f137a003271fb13376e2dcf491b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0DB924E13C307D8418724DF90CA04CB7E855F137A003271FB13376E2DCF491B"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10812
Expires: Wed, 23 Nov 2022 14:27:31 GMT
Date: Wed, 23 Nov 2022 11:27:19 GMT
Connection: keep-alive
dvcasha2.ocsp-certum.com/
200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash 0baab3e1e9fd35feece6182e974259c3
864e3cb44deb8571352953b231e5ca832a34f0e3
b08693cc212b9770c2261420c5f70378cf5806d4f4729a42727a91f97b95e27e
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=443
Date: Wed, 23 Nov 2022 11:27:19 GMT
Connection: keep-alive
X-N: S
audience.yektanet.com/api/v1/scripts/preview/validate/?app_id=xywHAyqU
200 OK 5 B URL HTTP/2 audience.yektanet.com/api/v1/scripts/preview/validate/?app_id=xywHAyqU
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type ASCII text, with no line terminators
Hash 68934a3e9455fa72420237eb05902327
7cb6efb98ba5972a9b5090dc2e517fe14d12cb04
fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa
GET /api/v1/scripts/preview/validate/?app_id=xywHAyqU HTTP/1.1
Host: audience.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://neyfilm.rozblog.com
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 23 Nov 2022 11:27:19 GMT
content-type: application/json
content-length: 5
access-control-allow-origin: http://neyfilm.rozblog.com
allow: GET, OPTIONS
access-control-allow-methods: GET, OPTIONS
access-control-allow-credentials: true
access-control-allow-headers: Authorization
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2051
ar-atime: 0.183
ar-cache: BYPASS
ar-request-id: 037e57c8670228768299d5fa44e33c34
accept-ranges: bytes
X-Firefox-Spdy: h2
plus.sabavision.com/csync/3P/pixel?id=yektanet
200 OK 597 B URL HTTP/2 plus.sabavision.com/csync/3P/pixel?id=yektanet
IP
ASN #44932 Fannavaran-e Idea Pardaz-e Saba PJSC
File type JPEG image data, baseline, precision 8, 1x1, components 3\012- data
Hash 91c97a3dd65bdf0bcd2fa45d5b1c1b86
68cf099726f6e1cc8f3b31ff481a1d2479fc682d
af64a6f3ffc388b91cd70eae25893f7bea7e8e7d84d2c2b41c378cfbe13651ff
GET /csync/3P/pixel?id=yektanet HTTP/1.1
Host: plus.sabavision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:27:19 GMT
content-type: image/jpeg
content-length: 597
cache-control: no-cache
cache-directive: no-cache
expires: 0
pragma: no-cache
pragma-directive: no-cache
server: nginx
x-upstream-ct: 0.000
x-upstream-ht: 0.268
x-upstream: 0
X-Firefox-Spdy: h2
ua.yektanet.com/__fake.gif/?aa=event&abe=L&abf=9ccd67bd-7f56-4395-bca2-12bdaf14464f&abj=1&aed=pub&ac=http%3A%2F%2Fneyfilm.rozblog.com%2Fcat%2F501&ae=%7B%7D&ad=neyfilm.rozblog.com&as=%D8%AA%DA%A9%20%D8%A2%D9%87%D9%86%DA%AF%20%D9%87%D8%A7&aef=xywHAyqU&aec=156927&aaa=direct&aab=null&ai=4223631f-db26-1004-8c47-77eae5152030&abw=1268&abb=7194&aby=1280&abz=1024&al=1280&am=939&abk=%D8%B1%D8%B3%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D8%A7%D9%86%D9%87%20%D9%86%DB%8C%D8%B4%D8%A7%D8%A8%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%88%D8%B1%20%D9%85%D9%88%D8%B2%DB%8C%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%DA%A9
200 OK 42 B URL HTTP/2 ua.yektanet.com/__fake.gif/?aa=event&abe=L&abf=9ccd67bd-7f56-4395-bca2-12bdaf14464f&abj=1&aed=pub&ac=http%3A%2F%2Fneyfilm.rozblog.com%2Fcat%2F501&ae=%7B%7D&ad=neyfilm.rozblog.com&as=%D8%AA%DA%A9%20%D8%A2%D9%87%D9%86%DA%AF%20%D9%87%D8%A7&aef=xywHAyqU&aec=156927&aaa=direct&aab=null&ai=4223631f-db26-1004-8c47-77eae5152030&abw=1268&abb=7194&aby=1280&abz=1024&al=1280&am=939&abk=%D8%B1%D8%B3%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D8%A7%D9%86%D9%87%20%D9%86%DB%8C%D8%B4%D8%A7%D8%A8%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%88%D8%B1%20%D9%85%D9%88%D8%B2%DB%8C%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%DA%A9
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /__fake.gif/?aa=event&abe=L&abf=9ccd67bd-7f56-4395-bca2-12bdaf14464f&abj=1&aed=pub&ac=http%3A%2F%2Fneyfilm.rozblog.com%2Fcat%2F501&ae=%7B%7D&ad=neyfilm.rozblog.com&as=%D8%AA%DA%A9%20%D8%A2%D9%87%D9%86%DA%AF%20%D9%87%D8%A7&aef=xywHAyqU&aec=156927&aaa=direct&aab=null&ai=4223631f-db26-1004-8c47-77eae5152030&abw=1268&abb=7194&aby=1280&abz=1024&al=1280&am=939&abk=%D8%B1%D8%B3%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D8%A7%D9%86%D9%87%20%D9%86%DB%8C%D8%B4%D8%A7%D8%A8%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%88%D8%B1%20%D9%85%D9%88%D8%B2%DB%8C%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%DA%A9 HTTP/1.1
Host: ua.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 23 Nov 2022 11:27:20 GMT
content-type: image/gif
content-length: 42
set-cookie: gearbox_ad_token=ce30536a-a7b97-7ebb7-7db46-611962568b93d; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Sat, 20-Nov-32 11:27:20 GMT
analytics_global_token=ce30536a-a7b97-7ebb7-7db46-611962568b93d; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Sat, 20-Nov-32 11:27:20 GMT
last-modified: Wednesday, 23-Nov-2022 11:27:20 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2012
ar-atime: 0.253
ar-cache: BYPASS
ar-request-id: 1f62974374c8295e358d24c7cb9c5064
accept-ranges: bytes
X-Firefox-Spdy: h2
nfetch.yektanet.com/api/v2/load
200 OK 1.4 kB URL HTTP/2 nfetch.yektanet.com/api/v2/load
IP
ASN #204544 Dade Pardazi Mobinhost Co LTD
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (1353), with no line terminators
Hash ba5fb8ee1cb4e3e8339947d2ab0d388d
e82814148762b76e3157214b0c8d8b68b937bdfa
ae30b9f777a219fbfe245f1308cf040c964633f383b20c31479104d15cfc29cb
POST /api/v2/load HTTP/1.1
Host: nfetch.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 240
Origin: http://neyfilm.rozblog.com
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:27:20 GMT
content-type: application/json; charset=utf-8
content-length: 1412
vary: Origin
access-control-allow-origin: http://neyfilm.rozblog.com
access-control-allow-credentials: true
strict-transport-security: max-age=15724800; includeSubDomains
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
cdn.yektanet.com/fp/fingerprint.js?v=umd
200 OK 21 kB URL HTTP/2 cdn.yektanet.com/fp/fingerprint.js?v=umd
IP
ASN #202319 Avaye Hamrahe Houshmande Hezardastan PJSC
File type Unicode text, UTF-8 text, with very long lines (31515)
Hash 3d3b8801d149f9d5a85d984ff74c7b6c
fbf4f084aed2a7769f2a3410dd6e944063b2c434
7290c2f5a429350f2ab59887c950607f8a1f104339208e2af55ffa5f385445c6
GET /fp/fingerprint.js?v=umd HTTP/1.1
Host: cdn.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:27:19 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 20 Sep 2022 08:24:54 GMT
vary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
etag: W/"632978d6-7c6a"
x-zrk-us: 206
cache-control: public, max-age=3600
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
strict-transport-security: max-age=31536000
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2
native-removal.triboon.net/?hash=353918701,805586540,156812323,540354173,875952507
200 OK 0 B URL HTTP/2 native-removal.triboon.net/?hash=353918701,805586540,156812323,540354173,875952507
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
OPTIONS /?hash=353918701,805586540,156812323,540354173,875952507 HTTP/1.1
Host: native-removal.triboon.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: href
Referer: http://neyfilm.rozblog.com/
Origin: http://neyfilm.rozblog.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 23 Nov 2022 11:27:18 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: http://neyfilm.rozblog.com
access-control-allow-headers: *
cache-control: public, max-age=14400, s-maxage=14400, stale-while-revalidate=3600, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2022
ar-atime: 0.199
ar-request-id: ef1faa5b782c9276eeb27e875599bd34
content-encoding: br
X-Firefox-Spdy: h2
native-removal.triboon.net/?hash=353918701,805586540,156812323,540354173,875952507
200 OK 0 B URL HTTP/2 native-removal.triboon.net/?hash=353918701,805586540,156812323,540354173,875952507
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
GET /?hash=353918701,805586540,156812323,540354173,875952507 HTTP/1.1
Host: native-removal.triboon.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
href: http://neyfilm.rozblog.com/cat/501
Origin: http://neyfilm.rozblog.com
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 23 Nov 2022 11:27:18 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: http://neyfilm.rozblog.com
access-control-allow-headers: *
cache-control: public, max-age=14400, s-maxage=14400, stale-while-revalidate=3600, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2022
ar-atime: 0.300
ar-cache: BYPASS
ar-request-id: 6e688644b7fefdbc249101ac12bdf83a
content-encoding: br
X-Firefox-Spdy: h2
native-scripts.yektanet.com/public/chunk/minified/105.85c2d3e0a98cc9146357.js
200 OK 0 B URL HTTP/2 native-scripts.yektanet.com/public/chunk/minified/105.85c2d3e0a98cc9146357.js
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
GET /public/chunk/minified/105.85c2d3e0a98cc9146357.js HTTP/1.1
Host: native-scripts.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Cookie: gearbox_ad_token=ce30536a-a7b97-7ebb7-7db46-611962568b93d; analytics_global_token=ce30536a-a7b97-7ebb7-7db46-611962568b93d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 23 Nov 2022 11:27:20 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 31 Aug 2022 06:37:01 GMT
x-rgw-object-type: Normal
etag: W/"a13ed01a77c4df76f1f9c6843b130ebf"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
expires: Wed, 23 Nov 2022 12:27:20 GMT
x-xss-protection: 1; mode=block
ar-sid: 2051
ar-atime: 0.000
ar-cache: HIT
ar-request-id: a678377aa03be4bab19e4f0c2897327a
content-encoding: br
X-Firefox-Spdy: h2
native-scripts.yektanet.com/public/chunk/minified/footer.fffc95f803a170216edf.js
200 OK 0 B URL HTTP/2 native-scripts.yektanet.com/public/chunk/minified/footer.fffc95f803a170216edf.js
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
GET /public/chunk/minified/footer.fffc95f803a170216edf.js HTTP/1.1
Host: native-scripts.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Cookie: gearbox_ad_token=ce30536a-a7b97-7ebb7-7db46-611962568b93d; analytics_global_token=ce30536a-a7b97-7ebb7-7db46-611962568b93d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 23 Nov 2022 11:27:20 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 31 Aug 2022 06:37:01 GMT
x-rgw-object-type: Normal
etag: W/"33cd532130f60bdeffd688686e4c8bdc"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
expires: Wed, 23 Nov 2022 12:27:20 GMT
x-xss-protection: 1; mode=block
ar-sid: 2051
ar-atime: 0.000
ar-cache: HIT
ar-request-id: 145cf2729eb3bda943198e32bf1f945d
content-encoding: br
X-Firefox-Spdy: h2
www.bia2ahang.com/wp-content/uploads/Ali-Lohrasbi-Havasam-Behet-Hast.jpg
404 Not Found 0 B URL HTTP/1.0 www.bia2ahang.com/wp-content/uploads/Ali-Lohrasbi-Havasam-Behet-Hast.jpg
IP
GET /wp-content/uploads/Ali-Lohrasbi-Havasam-Behet-Hast.jpg HTTP/1.1
Host: www.bia2ahang.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
HTTP/1.0 404 Not Found
cache-control: no-cache
content-type: text/html
x-reason: MediaRequest
cdn.yektanet.com/js/rozblog.com/native-rozblog.com-23662.js?v=2022010023011
200 OK 0 B URL HTTP/2 cdn.yektanet.com/js/rozblog.com/native-rozblog.com-23662.js?v=2022010023011
IP
ASN #202319 Avaye Hamrahe Houshmande Hezardastan PJSC
GET /js/rozblog.com/native-rozblog.com-23662.js?v=2022010023011 HTTP/1.1
Host: cdn.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 23 Nov 2022 11:27:17 GMT
content-type: application/javascript; charset=utf-8
cache-tag: native_rozblog.com,native
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
last-modified: Tue, 01 Nov 2022 15:08:10 GMT
x-rgw-object-type: Normal
etag: W/"3002a2f3567924d4814b78bb369a605b"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
x-zrk-us: 206
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2
79.127.127.68
23.36.76.226
34.160.144.191
93.184.220.29
0.0.0.0