r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash a9f1d4d98705c281fed3b60343463200
db6f8aa98d2eda4e5473b116a222c3055568bb78
164d11173045b569cafb32e300e4c1ec6d6ab177fd34d0414cc40c541268779f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16788
Expires: Fri, 25 Nov 2022 12:37:22 GMT
Date: Fri, 25 Nov 2022 07:57:34 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8c63b226725ca6e92e3ef586ac19e603
d21ae42a1927501e5293ff3564f52b49f6b0decc
141ac47acc3800e5d35a82012fa4b044277abad3a95dc24415f66fb72c972ae6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "141AC47ACC3800E5D35A82012FA4B044277ABAD3A95DC24415F66FB72C972AE6"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8320
Expires: Fri, 25 Nov 2022 10:16:14 GMT
Date: Fri, 25 Nov 2022 07:57:34 GMT
Connection: keep-alive
www.p30day.ir/cat/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
79.127.127.32200 OK 946 B URL HTTP/1.1 www.p30day.ir/cat/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 56781600f3610a0c3aee4400a041688e
38fd980c6ff335f41e64d59a2d9950fcbc26ca5b
dff76a2659379fb8fac5aeb38ef8a5272fd2d4d6ea9766eacea21f040b07c67a
Analyzer Verdict Alert fortinet Malware
GET /cat/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 946
content-encoding: gzip
vary: Accept-Encoding
date: Fri, 25 Nov 2022 07:57:34 GMT
server: LiteSpeed
cache-control: no-cache,no-store
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash af40a2fcf8debb90c3608002da6c907a
3c75d6c0b557a3bd8d5db50155b8d896e852c145
555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3652
Cache-Control: max-age=99269
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 07:57:34 GMT
Etag: "637f47ef-1d7"
Expires: Sat, 26 Nov 2022 11:32:03 GMT
Last-Modified: Thu, 24 Nov 2022 10:31:11 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: PpS9UFNFRLD5ZVkDCXA5x9NE3sNCelRLBXB6C8brtBsnO2dRIzzl2bxxNQYjP2LBuD2bjPh9qYo=
x-amz-request-id: WE759DAH9GNHDWBX
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 25 Nov 2022 07:43:45 GMT
age: 829
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 25 Nov 2022 07:19:04 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2310
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 07:57:34 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 82d582f9d61bc8a00c9a0402c0ea863c
11efbd238d2aa34cf31e224ce915a8bda8f6b923
503332de950ab70d7ba88551be6da9a731c51a32875be710c66f5dbb2df54eb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 07:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.recaptcha.net/recaptcha/api.js?onload=onloadCallback&render=explicit
142.250.74.131200 OK 580 B URL HTTP/2 www.recaptcha.net/recaptcha/api.js?onload=onloadCallback&render=explicit
IP 142.250.74.131:0
File type ASCII text, with very long lines (912), with no line terminators
Hash 4fb3a68840a7c654a0f7422fec954003
47a1bd1343b7cea8143c9c44098320a25562ec28
4ee7379b939b77b7f49819ba6a7174c397f6dd076a4ae46a371f756459afcd44
GET /recaptcha/api.js?onload=onloadCallback&render=explicit HTTP/1.1
Host: www.recaptcha.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.p30day.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Fri, 25 Nov 2022 07:57:34 GMT
date: Fri, 25 Nov 2022 07:57:34 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 580
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.p30day.ir/favicon.ico
79.127.127.32301 Moved Permanently 707 B URL HTTP/1.1 www.p30day.ir/favicon.ico
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /favicon.ico HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.p30day.ir/cat/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Fri, 25 Nov 2022 07:57:35 GMT
server: LiteSpeed
location: https://www.p30day.ir/favicon.ico
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 82d582f9d61bc8a00c9a0402c0ea863c
11efbd238d2aa34cf31e224ce915a8bda8f6b923
503332de950ab70d7ba88551be6da9a731c51a32875be710c66f5dbb2df54eb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 07:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 07:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
142.250.74.163200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP 142.250.74.163:0
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.p30day.ir
Connection: keep-alive
Referer: http://www.p30day.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 09:43:42 GMT
expires: Fri, 24 Nov 2023 09:43:42 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 80032
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 07:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 25 Nov 2022 07:11:11 GMT
cache-control: public,max-age=3600
age: 2783
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
www.p30day.ir/favicon.ico
79.127.127.32200 OK 15 kB URL HTTP/2 www.p30day.ir/favicon.ico
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 26e511556c4a83b0f712b1de5eb858e5
72ffda4d53534a27869b2a89dee605f24ae168b9
87fbebcd24b46ab646e62dd65be350ff1ce80d9e23c1dc197207a32d8cd097d5
GET /favicon.ico HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.p30day.ir/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:35 GMT
content-type: image/x-icon
last-modified: Tue, 15 Jun 2021 13:52:21 GMT
accept-ranges: bytes
content-length: 15406
date: Fri, 25 Nov 2022 07:57:35 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash fb6949e7abaa473393f7c604691de14f
599681bba3947709baa603bbae2dd7afd04059a4
36c5165526ea9d34de14d36655ed494d0cffaa11ca3271ee47824ac11246ba13
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6171
Cache-Control: max-age=96725
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 07:57:35 GMT
Etag: "637f3429-1d7"
Expires: Sat, 26 Nov 2022 10:49:40 GMT
Last-Modified: Thu, 24 Nov 2022 09:06:49 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.195200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.recaptcha.net
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 19 Nov 2022 12:31:58 GMT
expires: Sun, 19 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 501937
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.195200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.recaptcha.net
Connection: keep-alive
Referer: https://www.recaptcha.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 21:46:16 GMT
expires: Fri, 24 Nov 2023 21:46:16 GMT
cache-control: public, max-age=31536000
age: 36679
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
push.services.mozilla.com/
54.187.31.159101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.187.31.159:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 43v/aarKsjDtekIlT3E1NQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: npaLxkqTkNlpGQD1e1GaiJpBxig=
www.p30day.ir/.lsrecap/recaptcha?
79.127.127.32301 Moved Permanently 0 B URL HTTP/2 www.p30day.ir/.lsrecap/recaptcha?
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /.lsrecap/recaptcha? HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1251
Referer: http://www.p30day.ir/cat/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Origin: http://www.p30day.ir
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
location: /cat/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
content-type: text/html; charset=utf-8
content-length: 0
date: Fri, 25 Nov 2022 07:57:36 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
www.p30day.ir/cat/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
79.127.127.32301 Moved Permanently 0 B URL HTTP/2 www.p30day.ir/cat/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /cat/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.p30day.ir/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
x-dns-prefetch-control: on
x-litespeed-tag: f51_HTTP.301
x-redirect-by: Yoast SEO
location: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
x-litespeed-cache-control: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Fri, 25 Nov 2022 07:57:37 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5396
Expires: Fri, 25 Nov 2022 09:27:32 GMT
Date: Fri, 25 Nov 2022 07:57:36 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5396
Expires: Fri, 25 Nov 2022 09:27:32 GMT
Date: Fri, 25 Nov 2022 07:57:36 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5396
Expires: Fri, 25 Nov 2022 09:27:32 GMT
Date: Fri, 25 Nov 2022 07:57:36 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5396
Expires: Fri, 25 Nov 2022 09:27:32 GMT
Date: Fri, 25 Nov 2022 07:57:36 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F981a8e9a-f018-45b6-af7e-199dc4c02c27.jpeg
34.120.237.76200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F981a8e9a-f018-45b6-af7e-199dc4c02c27.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5863138af1ddbba34a7856242a7b3a06
2eba66ff6539388c48562503e8d11ff0e060350a
d1543e1b803a07095148b743925eebbbf21f566a2df9b785a1a9d48c5604496c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F981a8e9a-f018-45b6-af7e-199dc4c02c27.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8917
x-amzn-requestid: 10f3b269-9437-476d-ae4f-a0ac3fb78491
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB8wEIwoAMF8uA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe384-4cfeecf4553b26381ed11875;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:00 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lr9z8FWWpMGtxtvcYzeT-ewuydSzpma8I06pszLDQIICotFkB_SZlA==
via: 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:55:30 GMT
age: 36126
etag: "2eba66ff6539388c48562503e8d11ff0e060350a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4dfd2143-7cf2-4a28-b8bf-bc3121d6a4d8.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4dfd2143-7cf2-4a28-b8bf-bc3121d6a4d8.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4abf25d4a15ce58edadd54994b3434a2
18800e21d05596f7b64213072dee7dda5c1faf61
633138e70f43e2be9cc447967044c4070bfc4d9285e5228361bebe255dc286e2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4dfd2143-7cf2-4a28-b8bf-bc3121d6a4d8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10950
x-amzn-requestid: 9bb73841-83d9-48b2-8c79-f00a57612b4a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFNstFeZoAMFopQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637ec31d-4e6aafd367c7740c77df133b;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 01:04:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tCG6Llkb9UHrJDHyxk5RgLkQ3Cds3dXRc0uMhy_9GbnzgMWk5UBS6w==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 22:04:29 GMT
age: 74316
etag: "18800e21d05596f7b64213072dee7dda5c1faf61"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg
34.120.237.76200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8f6118fc03f31862ff68fef8a2b9a7f
318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73
cdd4d44f05cc524d7f2b1d6d792ecd8a9a933e52ecb7685a7d7ea786a510ef39
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8089
x-amzn-requestid: f4b5f150-a5dc-40bf-93b9-394c294a51cb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEmkRFSnIAMF5vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e8481-74454bee1a1ec6d506f3d75b;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 20:37:21 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ZVv8iTGCYV-IiBJ6KwNSG1ZWSEwClaQopUejSqZq0S1wd782lRoyKA==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 22:07:32 GMT
age: 35404
etag: "318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F25123759-9d71-477d-9857-9cc07cc12173.jpeg
34.120.237.76200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F25123759-9d71-477d-9857-9cc07cc12173.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 92171fa8fbc051aefeb8ceb6072848de
377775b7c7b085efa6dd653d285ba3a52af6a549
537c4d5cc3ef2e60c3d0171ac31c1dba4ab2ff340108015787a9dd20dc76b7ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F25123759-9d71-477d-9857-9cc07cc12173.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6891
x-amzn-requestid: 6da0ae90-c3cc-4e9c-9a0e-3c72b4eb7605
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b7m2NGsvoAMF_fQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637aeb5a-1ed2badf0e84d40e6a052f7a;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 03:07:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: daiU0caUPDqn0vVDY_eK8eaMxgIenjmw1vLyUOtVYOs-FmuSIgY3Nw==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 11:37:02 GMT
age: 73234
etag: "377775b7c7b085efa6dd653d285ba3a52af6a549"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F96a33fb5-b971-4386-a670-7dcbbf52b051.jpeg
34.120.237.76200 OK 2.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F96a33fb5-b971-4386-a670-7dcbbf52b051.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 66d06d3cac1784e4ce6c8c89c300f10a
41ef94d198bbf98185eb332a3b6934c3c26c3afc
55312d1b43447e4f77d8e9e52451bb63a9868ba8122c9e16e0a20479d34367e3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F96a33fb5-b971-4386-a670-7dcbbf52b051.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2351
x-amzn-requestid: 1e3e6b14-8f46-4b62-a3d1-f5dbe5d5f94f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cGupUE_VIAMFa3A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637f5e3b-573fabc44ce59c2f4c24a32d;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 12:06:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: XEUrOPYr2rn89eMIJORVFnpqJfxqfjBadcbplZKzqLjDkzHV8NEbHg==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 18:51:30 GMT
age: 47166
etag: "41ef94d198bbf98185eb332a3b6934c3c26c3afc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd87485db-f230-4024-987f-6b9ea6098576.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd87485db-f230-4024-987f-6b9ea6098576.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 05a92b9f554600c920e8b772eb16ee75
7f29e0e2de89f7a88ff0bf2a720365032ef11cc1
4b51a70a0ee6fe0d723880ea70fee25c15bff671d8a484bbb2a3c9962303c735
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd87485db-f230-4024-987f-6b9ea6098576.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10356
x-amzn-requestid: 8450975f-bcb2-4b59-b0ef-42e43d1bb16a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCM-cGKIIAMFo7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d8ec2-7f95154e3177c6e30a925244;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 03:08:50 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NCCF79BaJkG2j75ihGL9jd3gEE4zajsC9vmEKMmk9u7-wm2s5u4mVQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 04:43:09 GMT
age: 11667
etag: "7f29e0e2de89f7a88ff0bf2a720365032ef11cc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logo.png
79.127.127.32200 OK 3.0 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logo.png
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 85 x 86, 8-bit colormap, non-interlaced\012- data
Hash c736084f562340b160cbb12fcdcf59e2
efdd05e9198f48aca2e530cecf5868731769b15a
0a79347b3008d5832c869fb8bc82e6e889a84048f9d2684e458df0da405c194c
GET /wp-content/themes/p30dayv7.1/data/images/logo.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/png
last-modified: Thu, 08 Jul 2021 15:50:55 GMT
accept-ranges: bytes
content-length: 2976
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=5c87d
79.127.127.32200 OK 30 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=5c87d
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8ae8c48601d555e7b5178c263e4d45aa
49ffb3f1eeb3df85c1b90925ef527e0ee31710b1
ae512287111e88212e1b1ac6b5a785381f86d0e733e811e9971907580d0d347c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=5c87d HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: text/css
last-modified: Thu, 24 Nov 2022 18:41:44 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30353
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/winrar.webp
79.127.127.32200 OK 868 B URL HTTP/2 www.p30day.ir/images/fastdl/winrar.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 43x43, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 87c92fbb7d5a79faceffbf561c56bd0c
8145b4c0a0a040a5696a63a15ce26e215bf6439d
ab07ecfe46a014e8c7df29ed8d828aca0c2cffa78b1bec043bbf190fec5f293d
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/winrar.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/webp
last-modified: Fri, 06 Jul 2018 12:04:56 GMT
accept-ranges: bytes
content-length: 868
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/idm.webp
79.127.127.32200 OK 1.3 kB URL HTTP/2 www.p30day.ir/images/fastdl/idm.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2fb32f9bbbd50740c31723747dc5e1e5
59c219d247b2a02f9c0c908ab85f3f2d0cc1c521
cad6e35932597fb152209d206c301e5b0fb337b77c0637fd9639cda97c2781c8
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/idm.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:18 GMT
accept-ranges: bytes
content-length: 1286
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/chrome.webp
79.127.127.32200 OK 1.3 kB URL HTTP/2 www.p30day.ir/images/fastdl/chrome.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7d04c08bcdd79e30879c5d15c2806bd5
5917e971d8e243cf82d6abcdaedc9ae1fca7b7ab
d11703cc091f7177b192c810e165c5cc96d6d3517a6c6a4477dcec38f703b900
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/chrome.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:20 GMT
accept-ranges: bytes
content-length: 1298
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/ff.webp
79.127.127.32200 OK 1.8 kB URL HTTP/2 www.p30day.ir/images/fastdl/ff.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 26635d4802f5bf01d7cde8bcb429a493
f7ba292a1d5d91e29f9a0cabf8f204c0bb73b3c4
44686b2af956e0928ed8d000e83d1ee0007223bb74b6e268503ff208f4f7dedb
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/ff.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:20 GMT
accept-ranges: bytes
content-length: 1754
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/nvidia.webp
79.127.127.32200 OK 1.2 kB URL HTTP/2 www.p30day.ir/images/fastdl/nvidia.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7012172e13a625b034e882677435c7a0
98451904b87560a908d7211a06f4a73d80eb8b9f
fd7f3840bff4766d23c3ff979652e119036f484c1cb60f24ba6b0d39a037943c
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/nvidia.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1202
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/adgc.webp
79.127.127.32200 OK 1.4 kB URL HTTP/2 www.p30day.ir/images/fastdl/adgc.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 745a52e2bcca1a45f7ada2d8edc1baaa
390ec2980d7989082ee99edd4fb20cd76f85ccc6
a578633d17dd6c73af65284cf264bc25e7387325e78556f4db253cd214c8c3a8
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/adgc.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:20 GMT
accept-ranges: bytes
content-length: 1390
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/reader.webp
79.127.127.32200 OK 1.2 kB URL HTTP/2 www.p30day.ir/images/fastdl/reader.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2fff23369545f680acbb06c513a551f6
5552213ae9ff2876b1f694bff383004629c55174
0bd7f6d56d8347f607373f7f0fe59bbd12218c9bd0d062fb035bdcc93173f873
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/reader.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1226
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/kmp.webp
79.127.127.32200 OK 1.1 kB URL HTTP/2 www.p30day.ir/images/fastdl/kmp.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0ab2eb9b46ba51721999a1d0350bbf38
894ae30f4e29af81c60bb7502a864474dae8b626
3df5a58530b161285349a08201222fb34f760b117edd49e2ebba455b4ed52d0a
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/kmp.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1058
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/plugins/litespeed-cache/assets/js/instant_click.min.js
79.127.127.32200 OK 1.2 kB URL HTTP/2 www.p30day.ir/wp-content/plugins/litespeed-cache/assets/js/instant_click.min.js
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (3683), with no line terminators
Hash f3c166f319aea691586c1f2f4afe2118
a300f6381204e7c980b147530257244c4093df42
45eb812e6973267111387a695e662c78eeef445860ee720c8e9e623d38d05022
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/litespeed-cache/assets/js/instant_click.min.js HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: application/javascript
last-modified: Tue, 01 Nov 2022 13:47:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1167
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/klite.webp
79.127.127.32200 OK 1.3 kB URL HTTP/2 www.p30day.ir/images/fastdl/klite.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash b3762ca2e70f1f68da4fc38f53dce6b3
62eb7b1023cf4be53c3182cc32cd794aa1fba741
b68afab14ce590f52341f15711e29511323129ae83930c61732d293fef120c9c
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/klite.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1332
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
79.127.127.32404 Not Found 32 kB URL HTTP/2 www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (27170)
Hash 321f2f4c218b115b49a94edcdf74959c
6e40ac5f3a8c7dcf0602b76b21c352e92f28de48
b36aed10be70defab869821a154f3cd874bc3f0c9cffe998ea12cdae532b74d6
Analyzer Verdict Alert fortinet Malware
GET /%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.p30day.ir/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
x-dns-prefetch-control: on
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
content-type: text/html; charset=UTF-8
link: <https://www.p30day.ir/wp-json/>; rel="https://api.w.org/"
x-litespeed-cache-control: public,max-age=3600
x-litespeed-tag: f51_HTTP.404,f51_404,f51_URL.836601aa3006c94565698996a9c91f1f,f51_guest,f51_,f51_MIN.8de6feeb5b8fcc14d9cf514a7b9f9473.css,f51_MIN.9ab09e9b4aa5d113f71e8d785928edfa.js
x-litespeed-cache: miss
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/daemon-tools.webp
79.127.127.32200 OK 1.6 kB URL HTTP/2 www.p30day.ir/images/fastdl/daemon-tools.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash f1c4998e619d02f2c966d18cafa3ae5f
038e50d4c3f60a34e28bfa54d73d2f676a8b02f3
05df4592018b5987fbb9dec7d6b83d4c05f281621b694fb9b04538540d5f5442
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/daemon-tools.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:20 GMT
accept-ranges: bytes
content-length: 1632
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/office.webp
79.127.127.32200 OK 1.1 kB URL HTTP/2 www.p30day.ir/images/fastdl/office.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8ba130fcea19ecd9ed5233ce0d22dd76
8bc7e1cf3869002d614f431ea39416f8bcb259f5
6b860744ee34632f6a2fbe3ceb00a29d7cf67f31f4273db9372486d0bff4abd9
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/office.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1078
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/ps.webp
79.127.127.32200 OK 656 B URL HTTP/2 www.p30day.ir/images/fastdl/ps.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash d086c0af387345300bf7a1d54ad05820
7e6b249d54a92b5ede190734e4392b70dc332f1b
2c9967c77a7ffa6ddeda076c1b90a6beda16864fa9e131e205fcdc70f49849ec
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/ps.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 656
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/skype.webp
79.127.127.32200 OK 1.1 kB URL HTTP/2 www.p30day.ir/images/fastdl/skype.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2612c7b808a386c27c45c9d7a3ab05c7
a0c0acc0a9c0529df19d5ecc0aa8e66a4f3b3cf0
433be5e918c73c43f2130158730859ddcc9aa058d229feb01714d80cc3dfb324
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/skype.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1140
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/win10.webp
79.127.127.32200 OK 516 B URL HTTP/2 www.p30day.ir/images/fastdl/win10.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3e95105787f48e97f255c054163b1ff2
bbd996c9d0de0c5d89bbcf02b5dbd9d0d0cb38c0
aef03c97b401a3b2d73fb25e0c926b8af7b4d01eaffa56e64828772b3624e5ae
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/win10.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 516
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/windows11.webp
79.127.127.32200 OK 306 B URL HTTP/2 www.p30day.ir/images/fastdl/windows11.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash c07f514a1feb0a64d02a0f002103eacf
88bfe92c334f01ca1ee74adaa3187d15e77783b0
ba56118c3788fa3e7e8dd8b5a6d2299a00026356f98ff25138cc86215ff25bdf
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/windows11.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/webp
last-modified: Sat, 19 Jun 2021 11:21:28 GMT
accept-ranges: bytes
content-length: 306
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
79.127.127.32200 OK 836 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 (with BOM) text
Hash b6de7641069b95fb7c051e730ecb3ab1
20e90d406e0a5d1e8e12897756d560f44ba282da
0c10e76e6ce8fe60e6d33c738a107efb9fd5a9517770ab1ca23b12ec359bda4b
GET /wp-content/themes/p30dayv7.1/fontiran.css HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: text/css
last-modified: Wed, 19 Dec 2018 18:34:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 836
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/tablighat/faradars970.webm
79.127.127.32206 Partial Content 104 kB URL HTTP/2 www.p30day.ir/images/tablighat/faradars970.webm
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type WebM\012- EBML file, creator webmB\20\012- data
Size 104 kB (104427 bytes)
Hash c55d384a87daca4533daf2ffa189fd17
1d9b2d0a32ec5070435c14b99da8ed5d7d6109be
ead160ef9c494503ff00dbd6c84eb27d4857fe140d3387105742d1694d0b28bb
Analyzer Verdict Alert fortinet Malware
GET /images/tablighat/faradars970.webm HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: video/webm
last-modified: Sun, 16 Oct 2022 10:36:12 GMT
content-range: bytes 0-104426/104427
content-length: 104427
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/tablighat/animeongif.webm
79.127.127.32206 Partial Content 47 kB URL HTTP/2 www.p30day.ir/images/tablighat/animeongif.webm
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type WebM\012- EBML file, creator webmB\20\012- data
Hash 28aa7d1f52ec5ebeb47acbabda32e578
53ad8749ce9287382a29d535b57e2c4069cf2bbb
f3f51b0c0c64c201f999c25a8cfeeebe4cc2961fb5114bab05acf050dc64c3c7
Analyzer Verdict Alert fortinet Malware
GET /images/tablighat/animeongif.webm HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: video/webm
last-modified: Wed, 24 Aug 2022 09:20:55 GMT
content-range: bytes 0-47091/47092
content-length: 47092
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/tabligh/cdkeyshare270.webm
79.127.127.32206 Partial Content 34 kB URL HTTP/2 www.p30day.ir/images/tabligh/cdkeyshare270.webm
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type WebM\012- EBML file, creator webmB\20\012- data
Hash 38f15843970f1fa7d76fad78b988ee08
cbebe6f42ee44f06a843d5caac682a36b54ed42e
bb5d619ead452b1feba0e7c654f2a5d05086fad43c9e04a9c19db01a27dc5045
Analyzer Verdict Alert fortinet Malware
GET /images/tabligh/cdkeyshare270.webm HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: video/webm
last-modified: Sun, 19 Jun 2022 10:43:45 GMT
content-range: bytes 0-34370/34371
content-length: 34371
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/tabligh/gift11.webm
79.127.127.32206 Partial Content 39 kB URL HTTP/2 www.p30day.ir/images/tabligh/gift11.webm
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type WebM\012- EBML file, creator webmB\20\012- data
Hash af0ddd2b6fefee24e4183f51648c11c9
667feac1697012dcf2666a1129cb333468612fb5
88239934567ce74587ac82a31e3b77479ef1c8cb67e3f9f33baacfbbf47ea859
Analyzer Verdict Alert fortinet Malware
GET /images/tabligh/gift11.webm HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: video/webm
last-modified: Fri, 09 Sep 2022 21:10:07 GMT
content-range: bytes 0-38866/38867
content-length: 38867
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/tablighat/pcgamebanner.webm
79.127.127.32206 Partial Content 156 kB URL HTTP/2 www.p30day.ir/images/tablighat/pcgamebanner.webm
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type WebM\012- EBML file, creator webmB\20\012- data
Size 156 kB (156122 bytes)
Hash f212bf7e0a69e1cf8e167679d438f52d
766427c965b4b3ca8fe5eb23097c3d23057cf672
b780218c7eaba88ab5e3ced7c7459a59091627357c1bbd638de7b794f347aaaf
Analyzer Verdict Alert fortinet Malware
GET /images/tablighat/pcgamebanner.webm HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: video/webm
last-modified: Wed, 12 Oct 2022 10:08:41 GMT
content-range: bytes 0-156121/156122
content-length: 156122
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/headerheadbg.jpg
79.127.127.32200 OK 193 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/headerheadbg.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x38, components 1\012- data
Hash bd79e4f635621819a0f871f71828313c
7cca8338395407917aa037a2ac64c965e81b17d8
d7c3581c0769f58151379bbbc5a34fc8f46caf00c05298f90b6639e349b2e59d
GET /wp-content/themes/p30dayv7.1/data/images/headerheadbg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=5c87d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 193
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logohead.jpg
79.127.127.32200 OK 2.0 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logohead.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 284x38, components 3\012- data
Hash 4dd2b75ea3ab31ba5a8e6319244abca5
9a968b99721ac4f1dd311cf29bbbe04f229c4e21
13b88e24a117d01c8010505955530b45e2d5087dc2d377f6760eecf26fc28ede
GET /wp-content/themes/p30dayv7.1/data/images/logohead.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=5c87d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 1980
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logobg.png
79.127.127.32200 OK 8.0 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logobg.png
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 270 x 153, 8-bit/color RGB, non-interlaced\012- data
Hash 378fc626281e0c092602e3ac451bb582
cc2d093a754823a4fe5a3fdcda0c7c6428917c2d
17d63a6e2bcbd671e239e66155afe0630724920218447bcdf8536a61d37e1c36
GET /wp-content/themes/p30dayv7.1/data/images/logobg.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=5c87d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/png
last-modified: Sat, 23 Feb 2019 10:53:10 GMT
accept-ranges: bytes
content-length: 7952
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/08/Sea-of-Thieves-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
79.127.127.32200 OK 20 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/08/Sea-of-Thieves-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2c22c0e7cd4e6d18e32b5ddfd06f15b6
0c1af87f3a62b77efafb9bc069421548b8c54f50
c5ec278775b4aca8587701226794c288ad31fdd410d10753a39ce24e4e78f1ac
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2021/08/Sea-of-Thieves-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/webp
last-modified: Fri, 27 Aug 2021 23:11:40 GMT
accept-ranges: bytes
content-length: 19592
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/11/Forza-Horizon-5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
79.127.127.32200 OK 21 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/11/Forza-Horizon-5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1dda844459ad71a9d0b89ff5eadf46de
c0f435cebb2b18fc35b24d2d5fd055fc96796797
16be7e869311aa777d99a8066863eb0fb6903de667d50ca7b9e6a36c722bfac0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2021/11/Forza-Horizon-5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/webp
last-modified: Fri, 05 Nov 2021 17:11:00 GMT
accept-ranges: bytes
content-length: 21166
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2020/07/Automobilista-2-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
79.127.127.32200 OK 19 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2020/07/Automobilista-2-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f09428816304acbb921347d11728055c
f732238d24c3c36cbfc6f2ad8930f1aaed603897
f5d449b1bea45ba7c74349a094bc285b8784105f347d5bd450a37cb97f1402dc
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2020/07/Automobilista-2-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/webp
last-modified: Wed, 01 Jul 2020 14:05:46 GMT
accept-ranges: bytes
content-length: 18876
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/08/Saints-Row-ps4-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
79.127.127.32200 OK 18 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/08/Saints-Row-ps4-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 99dd8488290ff714b9b8d8fc94edd3a5
295c52f550de79932271d57d629f71b6460bed09
b533aef08fcd65251978387f27fecd7d795a4a0dec5c9d7eb34610ac51bbbe65
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2022/08/Saints-Row-ps4-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/webp
last-modified: Fri, 19 Aug 2022 08:50:27 GMT
accept-ranges: bytes
content-length: 18542
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/06/Windows-11-logo.jpg.webp
79.127.127.32200 OK 1.2 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/06/Windows-11-logo.jpg.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e56ece49b99b5232a0256d6ae0a1e828
c85832e3f54c61b419bfe091e6f3fcd05d145a16
568de9e5c88dbe83301fbbbca18e04b3bf472bbee94a2a222dce03b47c79f0ba
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2021/06/Windows-11-logo.jpg.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/webp
last-modified: Sat, 19 Jun 2021 04:10:26 GMT
accept-ranges: bytes
content-length: 1210
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2020/07/American-Truck-Simulator-Idaho-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
79.127.127.32200 OK 27 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2020/07/American-Truck-Simulator-Idaho-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 3f9f39b5a22978960e252f8a1dbee4aa
f39bd7e10b8731d3eb7f6bd06e48ef4dfbe9a6dc
5cd3ab84d8226acecaa450b4ded8b00380cb517e2a3cfae30dd66331cfe14a72
GET /wp-content/uploads/2020/07/American-Truck-Simulator-Idaho-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Fri, 17 Jul 2020 13:55:00 GMT
accept-ranges: bytes
content-length: 26874
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/08/Sea-of-Thieves-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
79.127.127.32200 OK 23 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/08/Sea-of-Thieves-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 6df787773b8c18cc98b2ffe157d8cf0b
17f3492d8b28fca50a3325e3a9f01d4e6286c54e
c864dfad37871565a7e5f4c88b78d942cfe49296a83794e2c129957d9cecb6c7
GET /wp-content/uploads/2021/08/Sea-of-Thieves-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Fri, 27 Aug 2021 23:11:40 GMT
accept-ranges: bytes
content-length: 22629
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/11/Forza-Horizon-5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
79.127.127.32200 OK 25 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/11/Forza-Horizon-5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 266c07d954f38debe51569c226038bc7
648c6b63a63539270ac00b8ab2df8f0ba3256356
1e065c4e9a86693f4e08c4010826da7e33d64d6b83d2d7faac55063c54eb78c0
GET /wp-content/uploads/2021/11/Forza-Horizon-5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Fri, 05 Nov 2021 17:10:59 GMT
accept-ranges: bytes
content-length: 24922
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/06/SID-MEIERS-CIVILIZATION-VI-LEADER-PASS-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
79.127.127.32200 OK 28 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/06/SID-MEIERS-CIVILIZATION-VI-LEADER-PASS-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 8f6f4cc8a5bcf3fdd8685c975ce723e7
f074d8522112c9ea7c728a39f13cd7f3964c55fd
0d308d6cc845118d6257aff58d42d29bff78395ae35a3e9f76f68499e3c2c5e1
GET /wp-content/uploads/2021/06/SID-MEIERS-CIVILIZATION-VI-LEADER-PASS-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Wed, 23 Nov 2022 17:26:15 GMT
accept-ranges: bytes
content-length: 27976
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/06/Windows-11-logo.jpg
79.127.127.32200 OK 4.5 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/06/Windows-11-logo.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 6cfd2c88405e6e0c9e908f4a690975b1
7513ec40888b1edce91427375c66d51127ab7845
122413e8513d08d34485393f751b6170eb77385e7565ec2c3cf3acaa3120fb2f
GET /wp-content/uploads/2021/06/Windows-11-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Sat, 19 Jun 2021 04:10:26 GMT
accept-ranges: bytes
content-length: 4456
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2019/04/Windows-10-logo-300x300.jpg
79.127.127.32200 OK 6.4 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2019/04/Windows-10-logo-300x300.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 7bf80ff9273023112a4d0b53651d6fbc
560fb66124f1a9155b005fa11227a5ed7e57a15c
fbfffe7ea6fa1f98d458717c46cf362ab78ad4e75afeeb374e4e28d3b14ccdee
GET /wp-content/uploads/2019/04/Windows-10-logo-300x300.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Fri, 24 May 2019 19:10:41 GMT
accept-ranges: bytes
content-length: 6439
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2018/09/Cryptotab-Browser-logo.jpg
79.127.127.32200 OK 9.7 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2018/09/Cryptotab-Browser-logo.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 3a1e7ba4dff14150dccc88e5f52b667f
39e6d094a15d6f25f144a8e917a2ec0e69b7621c
65f833659efc428f6518cfbff0c96079156e4e4082890dab65fe0a52a40ac3a7
GET /wp-content/uploads/2018/09/Cryptotab-Browser-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Mon, 26 Nov 2018 15:53:27 GMT
accept-ranges: bytes
content-length: 9726
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2017/07/windows-10-lite-logo.jpg
79.127.127.32200 OK 13 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2017/07/windows-10-lite-logo.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Hash 460a3e662ac6abaa830015a1b6f5602d
5be1bd0f7de1663e526503255eeb956bbee98f48
6451070e92d01a842e77ad7ad36ceb727520d732c65e8a0a6099925f32d65b5b
GET /wp-content/uploads/2017/07/windows-10-lite-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Tue, 19 Dec 2017 22:40:21 GMT
accept-ranges: bytes
content-length: 12905
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/05/pubg-mobil.jpg
79.127.127.32200 OK 25 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/05/pubg-mobil.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 04800cc8299476f9ffdd0fb9c4e46c7b
89ebcfda8cab223733b7a8f9b85408c2cff9aaba
16ca7625901b216dc43a51319400eac8e6b8716a4e8e669d64ac45c36e41741e
GET /wp-content/uploads/2022/05/pubg-mobil.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Fri, 13 May 2022 22:40:24 GMT
accept-ranges: bytes
content-length: 25225
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2018/08/Fortnite-logo.jpg
79.127.127.32200 OK 14 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2018/08/Fortnite-logo.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash d70b4b85df7894ae52c49d6d2082e5a1
6d9cd83d5d22cc9ceb29a3f46158ef47cde6978e
c878111b78203ce81009f09637a3b9339a13a4be6399a370d10e054c91f93449
GET /wp-content/uploads/2018/08/Fortnite-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Thu, 10 Jan 2019 15:54:33 GMT
accept-ranges: bytes
content-length: 14195
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2019/05/cod-logo.jpg
79.127.127.32200 OK 28 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2019/05/cod-logo.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 6439adca635d68a4903139b773a037df
37ea4e385cc38a7b0b7ef5ece59c8c42471c2690
dc5bac1e0f414a15e14b46a0cb4edfa95db7a906edb79df61ebb8958be914dd7
GET /wp-content/uploads/2019/05/cod-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Fri, 24 May 2019 19:25:58 GMT
accept-ranges: bytes
content-length: 28142
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2016/06/WhatsApp-icon.jpg
79.127.127.32200 OK 37 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2016/06/WhatsApp-icon.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2016:06:27 20:19:34], baseline, precision 8, 300x300, components 3\012- data
Hash 2e0b3e7bc8c209a22e720dbcb7b50a73
5c8b95e2c364bcd5400a70c3a77008afa9251bf9
b2132586793157280e95b63e040d15106c5f1da1a067f70769147697fcd8da35
GET /wp-content/uploads/2016/06/WhatsApp-icon.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Sun, 07 Jan 2018 12:19:54 GMT
accept-ranges: bytes
content-length: 37331
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb.woff2
79.127.127.32200 OK 30 kB URL HTTP/2 www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb.woff2
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format (Version 2), TrueType, length 29820, version 1.0\012- data
Hash 9d38733b8a7b9153f2bf9bfe476ef8e3
93f8caeb96e52cd35dd24ffe8dbbc911af5b236e
b2144257a57aa398277a4977bfab616e368f4d8c8c45c79f2f128d8db537cbc8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/fonts/woff2/IRANSansWeb.woff2 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: font/woff2
last-modified: Tue, 16 Jan 2018 16:56:48 GMT
accept-ranges: bytes
content-length: 29820
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/fonts/fontello.woff?4430390
79.127.127.32200 OK 8.9 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/fonts/fontello.woff?4430390
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, TrueType, length 8900, version 1.0\012- data
Hash 6427d2890332acaa1a4cd0102a7f64d1
2dbca84994471c8cfd3944f3e1df902fbed726fd
6bce3d5ade75e6533bf17697cff7f66cfb51955ec9d158aeface37363b5ff754
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/p30dayv7.1/data/fonts/fontello.woff?4430390 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=5c87d
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: font/woff
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 8900
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb_Bold.woff2
79.127.127.32200 OK 28 kB URL HTTP/2 www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb_Bold.woff2
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format (Version 2), TrueType, length 28388, version 1.0\012- data
Hash 2f6f164c3e1f1329cc658b3c725bfd98
9e63d01d8561d79074bd8e46fbf265285ab958b7
a068d909851e4b57d0847b6c35457ab980463710e124a7e5e26b642e7f9f64fa
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/fonts/woff2/IRANSansWeb_Bold.woff2 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: font/woff2
last-modified: Tue, 16 Jan 2018 16:56:49 GMT
accept-ranges: bytes
content-length: 28388
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/03/trainer2.jpg
79.127.127.32200 OK 12 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/03/trainer2.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 5a8cf6d3b62188b06f86bfa8d2541406
3a83683da979322b727c69b5f43ecdebff2a5937
316c2cef65cd88c00b9c470f43708aa37b854714ab80a30a2a7af0d294912098
GET /wp-content/uploads/2022/03/trainer2.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Fri, 11 Mar 2022 21:10:15 GMT
accept-ranges: bytes
content-length: 12033
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/topadsbg.jpg
79.127.127.32200 OK 186 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/topadsbg.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 8x8, components 1\012- data
Hash c07b958a50276ef2335c0a97b26fba73
66951a4e8c12e80814625f90167c95a3ebabca82
e4c78d99b0c76d668d08209ec3d822c48d4b8f85d6f09eecc796e68b2cacb665
GET /wp-content/themes/p30dayv7.1/data/images/topadsbg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=5c87d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 186
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2017/11/AMD-Radeon-Adrenalin-Edition-logo.jpg
79.127.127.32200 OK 9.5 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2017/11/AMD-Radeon-Adrenalin-Edition-logo.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Hash a7c5fb47b5a2241827154e67e2063d7d
750b7e9141cc35af7da9b03f6f5ec0f5f468b397
deb2589dcf6631e013ceac516224880daa4f7970218ae3dc2c8473ce8bd75072
GET /wp-content/uploads/2017/11/AMD-Radeon-Adrenalin-Edition-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Fri, 15 Dec 2017 22:16:01 GMT
accept-ranges: bytes
content-length: 9474
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/08/nvidia-logo.jpg
79.127.127.32200 OK 9.8 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/08/nvidia-logo.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 4de60df9a9dd0f161ef7086529319bd4
32809468ded58d918127dc62243f6d5997f73fac
cc789bee8ec9544815531b72d475f178f3842e5536522fbe991144849bd5a444
GET /wp-content/uploads/2021/08/nvidia-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Sat, 14 Aug 2021 18:10:08 GMT
accept-ranges: bytes
content-length: 9750
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2018/11/Adobe-Photoshop-logo.jpg
79.127.127.32200 OK 15 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2018/11/Adobe-Photoshop-logo.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 683234bfc2826c1e05e983a4ff71e2ae
7e08159a55f3291fdd1482b35b3b68fae9d27045
096824d67a19cd9497a98c84125eae96262f1ee31f3c9f20e54dc28cb5b0b1a2
GET /wp-content/uploads/2018/11/Adobe-Photoshop-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Mon, 26 Nov 2018 11:52:54 GMT
accept-ranges: bytes
content-length: 15167
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2015/08/Microsoft-.NET-Framework-icon.jpg
79.127.127.32200 OK 8.9 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2015/08/Microsoft-.NET-Framework-icon.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash bd4470d56aafb57fffe946b787fbe614
3229781e256f3767f1337e17b74cc32630525bd0
2c20fae862b4307e32c5cdd069a481ad7525789014d9d946e9647c6f5e5a02c8
GET /wp-content/uploads/2015/08/Microsoft-.NET-Framework-icon.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Thu, 22 Sep 2016 23:21:55 GMT
accept-ranges: bytes
content-length: 8926
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/adstext.jpg
79.127.127.32200 OK 1.3 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/adstext.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 23x141, components 1\012- data
Hash 7d90c92e3961b8322b3335c00bc3bc87
1d4994b1397daccb185623e49e91f957cb264f3a
f063582f1f7df2931308adeff5d9239f6fe78c3476c07034cf39e0516d0410dd
GET /wp-content/themes/p30dayv7.1/data/images/adstext.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=5c87d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 1301
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/category_icon.jpg
79.127.127.32200 OK 599 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/category_icon.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 15x14, components 3\012- data
Hash 32ab43edb43c80f4084ed7818a36f029
fb4422a9be5226f1cde126ff4744c30fd4d45fc8
8956e0239a3313ccbd33cef0c9879921e91cef1b8c7372bb7c21c560672349c2
GET /wp-content/themes/p30dayv7.1/data/images/category_icon.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=5c87d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 599
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/pages_bg.jpg
79.127.127.32200 OK 177 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/pages_bg.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x38, components 1\012- data
Hash 909e83f543a3bc1d93cbc088b6c4db0d
9e4988299811f5854420d28598c521ec405844e4
4d1c24eda2bfa81daf6efa53831e2b65eda16945d4e087960c83c3d6b5ef4756
GET /wp-content/themes/p30dayv7.1/data/images/pages_bg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=5c87d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 177
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/page_btn_bg_hover.jpg
79.127.127.32200 OK 343 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/page_btn_bg_hover.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x28, components 3\012- data
Hash 575e419ed841227e17b3ff68601ebad7
ab05132fb073e59fc9ba4bd28e29be6585aadf90
b00f625e73941ed1350b7661d37f53f728e0bda561e22443ef2a6b4b3a812590
GET /wp-content/themes/p30dayv7.1/data/images/page_btn_bg_hover.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=5c87d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 343
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/page_btn_bg.jpg
79.127.127.32200 OK 184 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/page_btn_bg.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x28, components 1\012- data
Hash 29a713549baf2b7a8d3c98386876f918
d18b936322da10fb3e0e7c156ba117e6f2489f40
53345b3b9a6cd850c85cd62ef2936de688d5779c8b670e7a65782b245f0bcb58
GET /wp-content/themes/p30dayv7.1/data/images/page_btn_bg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=5c87d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 184
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/right_contentlogo.jpg
79.127.127.32200 OK 455 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/right_contentlogo.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 21x21, components 1\012- data
Hash ef487d89559d14481fe71408729115ed
1287c52488f6fff71fe0c16b441e650198bd0a74
d274862bd1bc6b81df11f8a26506d6b01800f5b5a5350f66bea78a57a3a758ec
GET /wp-content/themes/p30dayv7.1/data/images/right_contentlogo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=5c87d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 455
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/testAdsBg.jpg
79.127.127.32200 OK 1.2 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/testAdsBg.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 270x64, components 3\012- data
Hash 733f3ccb8e1f56ce42bc4dbdcb97487f
2090588bc395bb2a6ac2b614dc7122beb088646e
8560e5600d8636cffb075c9d774e594aeaf84e1405608d8a93bf246d11646480
GET /wp-content/themes/p30dayv7.1/data/images/testAdsBg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=5c87d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 1162
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/dotedfooterbg.gif
79.127.127.32200 OK 102 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/dotedfooterbg.gif
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 8 x 5, 2-bit colormap, non-interlaced\012- data
Hash e83c058adc9ac1ea2966138ddc28c83f
a7210bf381afb33535d4e55667f473bcaad195a9
f797a59c0d0c69ed3a140b2651b786583e372708de82b22e7bdbf6588199677f
GET /wp-content/themes/p30dayv7.1/data/images/dotedfooterbg.gif HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=5c87d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/gif
last-modified: Sat, 23 Feb 2019 10:56:42 GMT
accept-ranges: bytes
content-length: 102
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/11/The-Entropy-Centre.jpg
79.127.127.32200 OK 9.6 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/11/The-Entropy-Centre.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 231795b3b422358130e86bd1a3669f66
2b4798c05ca435d480c2b892874f76df13f95a69
189721730fb70ca68611316278604d19ba25a56dfb13cc12b22c6f6ab34680f1
GET /wp-content/uploads/2022/11/The-Entropy-Centre.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Thu, 24 Nov 2022 21:34:19 GMT
accept-ranges: bytes
content-length: 9567
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/02/Dying-Light-2-series-x-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
79.127.127.32200 OK 21 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/02/Dying-Light-2-series-x-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash ee93636f9f72471ebdbcc8d70d813d86
8542db898186157c77b43077beb230d0cb086028
c3d851b91be9c70a439fb3a7b8495a6957d3d34da9b9da46d970350796f02170
GET /wp-content/uploads/2022/02/Dying-Light-2-series-x-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Mon, 28 Feb 2022 21:10:10 GMT
accept-ranges: bytes
content-length: 20931
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/01/King-Arthur-Knights-Tale-logo.jpg
79.127.127.32200 OK 11 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/01/King-Arthur-Knights-Tale-logo.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash e0975f973cbcc261407a9627ae51edae
2fbb81ae9572543950c9fb93a6ce35d232c9a2b9
5fd7c8d06c7ef32d01f46530470118312b98035531a63db27b97c199e680cddf
GET /wp-content/uploads/2021/01/King-Arthur-Knights-Tale-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Fri, 29 Jan 2021 09:15:20 GMT
accept-ranges: bytes
content-length: 10680
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/underFooter_bg.jpg
79.127.127.32200 OK 170 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/underFooter_bg.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x2, components 1\012- data
Hash 204ccbc677cdc87675467ffe8c9129a0
9ea29e505de3e97d6f6b9638a4b379f21a0def7b
109936adfb4a38a446b3ffa75836a002b241ea538f1b9727546d431761a889f4
GET /wp-content/themes/p30dayv7.1/data/images/underFooter_bg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/8de6feeb5b8fcc14d9cf514a7b9f9473.css?ver=5c87d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 170
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/09/ps4-jailbreak-games-%D9%84%DB%8C%D8%B3%D8%AA.jpg
79.127.127.32200 OK 40 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/09/ps4-jailbreak-games-%D9%84%DB%8C%D8%B3%D8%AA.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 282ab4960a3218179243add97e98d1bb
f3f55b81949c9c10f6e7c7b7fdd150fc0256d7c0
b4eeca569cb6f2401e2645fdf01d952240276ca6bd21d21c3f358f8314ef77d0
GET /wp-content/uploads/2022/09/ps4-jailbreak-games-%D9%84%DB%8C%D8%B3%D8%AA.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Mon, 26 Sep 2022 19:29:35 GMT
accept-ranges: bytes
content-length: 39795
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/09/%D8%AC%DB%8C%D9%84%D8%A8%D8%B1%DB%8C%DA%A9-ps4-%D9%BE%DB%8C-%D8%B3%DB%8C-%D8%AF%DB%8C.jpg
79.127.127.32200 OK 23 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/09/%D8%AC%DB%8C%D9%84%D8%A8%D8%B1%DB%8C%DA%A9-ps4-%D9%BE%DB%8C-%D8%B3%DB%8C-%D8%AF%DB%8C.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash c59c5894ca56da620457ac4f3d675ab7
4b2d5bd0680aa6fbfae98fefac9270831b447e35
6989b43e56daa13a2702b1baba2f2220eb2f54af4d0c32cb613776b90ebc058d
GET /wp-content/uploads/2022/09/%D8%AC%DB%8C%D9%84%D8%A8%D8%B1%DB%8C%DA%A9-ps4-%D9%BE%DB%8C-%D8%B3%DB%8C-%D8%AF%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Tue, 20 Sep 2022 09:45:30 GMT
accept-ranges: bytes
content-length: 22630
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/07/elden-ring-game.jpg
79.127.127.32200 OK 20 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/07/elden-ring-game.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 080d36f5a29083af1b095fa12aa3f8ab
c809e9cc01c78fbb315899b038532e2bad0ac2fb
50864ff8ca4ba1ba0fdb31fb21e0d6d5c962f97235e84ac2600ce144e418bc98
GET /wp-content/uploads/2022/07/elden-ring-game.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Wed, 20 Jul 2022 11:10:18 GMT
accept-ranges: bytes
content-length: 20052
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2012/02/Compress-MP3-loho.jpg
79.127.127.32200 OK 21 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2012/02/Compress-MP3-loho.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Hash 013226b3f4363a157a004ebc4aa870b7
ea3c70c968dddcf00dc22b0f26aae9abfd7ab439
0a576d3cc12179339fd6abcbb60e9b8ef626a2800463c8a31162e0b9ce1db664
GET /wp-content/uploads/2012/02/Compress-MP3-loho.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/jpeg
last-modified: Sun, 24 Dec 2017 22:06:51 GMT
accept-ranges: bytes
content-length: 20779
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2015/06/Adobe-Premiere-Pro-CC.png
79.127.127.32200 OK 83 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2015/06/Adobe-Premiere-Pro-CC.png
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 340 x 341, 8-bit/color RGBA, non-interlaced\012- data
Hash 64a26a243d45aee77f69fa817974fecc
fbf3d83f1a13038b23d1837e3f819ef297450208
990b30976df503e2194a1cfb730ae6433df02704150d3629fe3e56d9e6518256
GET /wp-content/uploads/2015/06/Adobe-Premiere-Pro-CC.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/png
last-modified: Thu, 25 Jan 2018 19:38:15 GMT
accept-ranges: bytes
content-length: 82684
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/11/WRC10-300.png
79.127.127.32200 OK 92 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/11/WRC10-300.png
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced\012- data
Hash d55685dac23b9197585d402f73350b7a
d33389ed2bbfb4536f43bd4a89340f1d677c7e57
03d1c26c8dcc542f25edb65c2c93912568a8bd8efc716b169e662ec9977dbca3
GET /wp-content/uploads/2022/11/WRC10-300.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/png
last-modified: Thu, 24 Nov 2022 19:15:41 GMT
accept-ranges: bytes
content-length: 91649
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/plugins/litespeed-cache/guest.vary.php
79.127.127.32200 OK 20 B URL HTTP/2 www.p30day.ir/wp-content/plugins/litespeed-cache/guest.vary.php
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JSON data\012- , ASCII text, with no line terminators
Hash 6983d6b2ea353ce0b2b3d2477674219d
d1b7a9df890d2bf30ce03ee569b28d5c3226debe
0056a5d09750d683c893ec741a9c08940a19439d1c67b3de820c31cdfd15eb02
Analyzer Verdict Alert fortinet Malware
POST /wp-content/plugins/litespeed-cache/guest.vary.php HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Origin: https://www.p30day.ir
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/2 200 OK
x-litespeed-cache-control: no-cache
set-cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; expires=Sun, 27-Nov-2022 07:57:38 GMT; Max-Age=172800; path=/; secure; HttpOnly
content-type: text/html; charset=UTF-8
content-length: 20
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash a0111a2443450172e5d2b48d350a8f57
75e89d4cd001303e66a93880f96d6c47e7d665ab
c9865c82b8f373aeb3a7333b0f65408211d832aba753c35d3544ecb2913f4f64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 07:57:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-15659274-1
142.250.74.168200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-15659274-1
IP 142.250.74.168:0
File type ASCII text, with very long lines (1921)
Hash 9a855aa213f3cf814afdc2feba1c4630
fa2a1643c4673cbefba0973ca77a8c6583640d4a
e9d38ccd9937e93908dec3d85f8a20757d83779478e60e182080c8676f988c65
GET /gtag/js?id=UA-15659274-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 07:57:38 GMT
expires: Fri, 25 Nov 2022 07:57:38 GMT
cache-control: private, max-age=900
last-modified: Fri, 25 Nov 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43611
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash a0111a2443450172e5d2b48d350a8f57
75e89d4cd001303e66a93880f96d6c47e7d665ab
c9865c82b8f373aeb3a7333b0f65408211d832aba753c35d3544ecb2913f4f64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 07:57:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.p30day.ir/images/frss/preview.php?tmp=2&url=https://www.p30day.ir/?feed=custom
79.127.127.32200 OK 1.4 kB URL HTTP/2 www.p30day.ir/images/frss/preview.php?tmp=2&url=https://www.p30day.ir/?feed=custom
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text
Hash c3808ebb52d68899f7b982f8809b0f6d
dd99383a6953f835b5e61d2028a4dfbc0994f2b4
c8751739cec6bd857bc5f07124855a9bbcbd6be0eb39ae565d50482f8c7178fd
GET /images/frss/preview.php?tmp=2&url=https://www.p30day.ir/?feed=custom HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-length: 1424
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/favicon_new.ico
79.127.127.32200 OK 1.2 kB URL HTTP/2 www.p30day.ir/images/favicon_new.ico
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 20150782a6ad1e6082f82fc53588af43
eaf8e21e158c5783e2d38ba268d2ca73de6b64c3
122e9e80ae6f9bc3446bee8d631819d93a4e83d71b046b59f88930f8126a4aa9
Analyzer Verdict Alert fortinet Malware
GET /images/favicon_new.ico HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:38 GMT
content-type: image/x-icon
last-modified: Thu, 22 Sep 2016 09:58:52 GMT
accept-ranges: bytes
content-length: 1150
date: Fri, 25 Nov 2022 07:57:38 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
app.najva.com/static/css/local-messaging.css?v=202201002507
104.21.77.178200 OK 5.4 kB URL HTTP/2 app.najva.com/static/css/local-messaging.css?v=202201002507
IP 104.21.77.178:0
File type ASCII text, with very long lines (10718), with no line terminators
Hash 39455f77f99106710e629918d231a868
4720b87ca9d751004795fa7a9db5626349227c2f
74973872b0da5f9aac4a1908f0cf9a570a9ff68bac0b9f7324a5a63998127e4a
GET /static/css/local-messaging.css?v=202201002507 HTTP/1.1
Host: app.najva.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 07:57:38 GMT
content-type: text/css
last-modified: Sat, 12 Nov 2022 15:49:24 GMT
vary: Accept-Encoding
etag: W/"636fc084-29de"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cache-control: max-age=16070400
cf-cache-status: HIT
age: 7056
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SPskndMKhD4jfcMktU%2FeO7lw%2FYSzSoDQgTwE1gGZXA8UAxdPl4AHvP8mUlglfMDPDbojZKPqiq0RiOYbGGLADVWhAi81a1YK%2FweOMjpBt1RZUIrOY%2FLXnfH43e%2Fb4sAV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f8d5a9daca0b55-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/js/9ab09e9b4aa5d113f71e8d785928edfa.js?ver=5c87d
79.127.127.32200 OK 64 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/js/9ab09e9b4aa5d113f71e8d785928edfa.js?ver=5c87d
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (65447)
Hash 2800a1abd374da8690f23858c416290e
13b166a50651ed0dd4088733b6d0aed3b31f110b
8f1467c5932f68335dfc852be62527f5bc2a4af78a90729c72fd918f55d7a12b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/js/9ab09e9b4aa5d113f71e8d785928edfa.js?ver=5c87d HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:39 GMT
content-type: application/javascript
last-modified: Thu, 24 Nov 2022 18:41:44 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 64000
date: Fri, 25 Nov 2022 07:57:39 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/03c8850d4ff0350767581ae20bb24694.css?ver=24694
79.127.127.32200 OK 217 B URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/03c8850d4ff0350767581ae20bb24694.css?ver=24694
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
Hash 95e891f28e44a9b314c09545d86be2b7
f9b13a8bd47273b086a0a07df15f314e0af0bc3e
5a5f39391fbf5b06db84b8f9716d53de575ee97a627d2c5f12f79a991a671eb5
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/03c8850d4ff0350767581ae20bb24694.css?ver=24694 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: text/css
last-modified: Fri, 25 Nov 2022 07:57:40 GMT
accept-ranges: bytes
content-length: 217
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/72d84f6ba4828c7b1eff74713697c0a2.css?ver=7c0a2
79.127.127.32200 OK 129 B URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/72d84f6ba4828c7b1eff74713697c0a2.css?ver=7c0a2
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with no line terminators
Hash 5fa8018ed12f71dff7729f927d6e2f80
1d74e0653327b59f8a9ede182064d0425cff8801
8d74a46f5aa0083693a91b5cc42c9d44c8e0551fe1165d028a8fbeb16527ba7f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/72d84f6ba4828c7b1eff74713697c0a2.css?ver=7c0a2 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: text/css
last-modified: Fri, 25 Nov 2022 07:57:40 GMT
accept-ranges: bytes
content-length: 129
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/plugins/litespeed-cache/assets/js/instant_click.min.js
79.127.127.32200 OK 1.2 kB URL HTTP/2 www.p30day.ir/wp-content/plugins/litespeed-cache/assets/js/instant_click.min.js
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (3683), with no line terminators
Hash f3c166f319aea691586c1f2f4afe2118
a300f6381204e7c980b147530257244c4093df42
45eb812e6973267111387a695e662c78eeef445860ee720c8e9e623d38d05022
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/litespeed-cache/assets/js/instant_click.min.js HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: application/javascript
last-modified: Tue, 01 Nov 2022 13:47:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1167
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logo.png
79.127.127.32200 OK 3.0 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logo.png
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 85 x 86, 8-bit colormap, non-interlaced\012- data
Hash c736084f562340b160cbb12fcdcf59e2
efdd05e9198f48aca2e530cecf5868731769b15a
0a79347b3008d5832c869fb8bc82e6e889a84048f9d2684e458df0da405c194c
GET /wp-content/themes/p30dayv7.1/data/images/logo.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/png
last-modified: Thu, 08 Jul 2021 15:50:55 GMT
accept-ranges: bytes
content-length: 2976
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/winrar.webp
79.127.127.32200 OK 868 B URL HTTP/2 www.p30day.ir/images/fastdl/winrar.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 43x43, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 87c92fbb7d5a79faceffbf561c56bd0c
8145b4c0a0a040a5696a63a15ce26e215bf6439d
ab07ecfe46a014e8c7df29ed8d828aca0c2cffa78b1bec043bbf190fec5f293d
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/winrar.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/webp
last-modified: Fri, 06 Jul 2018 12:04:56 GMT
accept-ranges: bytes
content-length: 868
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/idm.webp
79.127.127.32200 OK 1.3 kB URL HTTP/2 www.p30day.ir/images/fastdl/idm.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2fb32f9bbbd50740c31723747dc5e1e5
59c219d247b2a02f9c0c908ab85f3f2d0cc1c521
cad6e35932597fb152209d206c301e5b0fb337b77c0637fd9639cda97c2781c8
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/idm.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:18 GMT
accept-ranges: bytes
content-length: 1286
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/chrome.webp
79.127.127.32200 OK 1.3 kB URL HTTP/2 www.p30day.ir/images/fastdl/chrome.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7d04c08bcdd79e30879c5d15c2806bd5
5917e971d8e243cf82d6abcdaedc9ae1fca7b7ab
d11703cc091f7177b192c810e165c5cc96d6d3517a6c6a4477dcec38f703b900
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/chrome.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:20 GMT
accept-ranges: bytes
content-length: 1298
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/ff.webp
79.127.127.32200 OK 1.8 kB URL HTTP/2 www.p30day.ir/images/fastdl/ff.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 26635d4802f5bf01d7cde8bcb429a493
f7ba292a1d5d91e29f9a0cabf8f204c0bb73b3c4
44686b2af956e0928ed8d000e83d1ee0007223bb74b6e268503ff208f4f7dedb
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/ff.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:20 GMT
accept-ranges: bytes
content-length: 1754
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
79.127.127.32200 OK 836 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 (with BOM) text
Hash b6de7641069b95fb7c051e730ecb3ab1
20e90d406e0a5d1e8e12897756d560f44ba282da
0c10e76e6ce8fe60e6d33c738a107efb9fd5a9517770ab1ca23b12ec359bda4b
GET /wp-content/themes/p30dayv7.1/fontiran.css HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: text/css
last-modified: Wed, 19 Dec 2018 18:34:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 836
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
79.127.127.32404 Not Found 31 kB URL HTTP/2 www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (26572)
Hash 2262aa2e776338104bb8f8492e7e205c
584806eaf05745b1d55caed325d6bd77a7a2f22a
75a807fc255e0bd7100e0611ac99f049c64bf1671717b3e08a22afc2a90c1eb3
Analyzer Verdict Alert fortinet Malware
GET /%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.p30day.ir/
Connection: keep-alive
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
x-dns-prefetch-control: on
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
content-type: text/html; charset=UTF-8
link: <https://www.p30day.ir/wp-json/>; rel="https://api.w.org/"
x-litespeed-cache-control: public,max-age=3600
x-litespeed-tag: f51_HTTP.404,f51_404,f51_URL.836601aa3006c94565698996a9c91f1f,f51_
x-litespeed-cache: miss
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/nvidia.webp
79.127.127.32200 OK 1.2 kB URL HTTP/2 www.p30day.ir/images/fastdl/nvidia.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7012172e13a625b034e882677435c7a0
98451904b87560a908d7211a06f4a73d80eb8b9f
fd7f3840bff4766d23c3ff979652e119036f484c1cb60f24ba6b0d39a037943c
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/nvidia.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1202
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/adgc.webp
79.127.127.32200 OK 1.4 kB URL HTTP/2 www.p30day.ir/images/fastdl/adgc.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 745a52e2bcca1a45f7ada2d8edc1baaa
390ec2980d7989082ee99edd4fb20cd76f85ccc6
a578633d17dd6c73af65284cf264bc25e7387325e78556f4db253cd214c8c3a8
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/adgc.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:20 GMT
accept-ranges: bytes
content-length: 1390
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/reader.webp
79.127.127.32200 OK 1.2 kB URL HTTP/2 www.p30day.ir/images/fastdl/reader.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2fff23369545f680acbb06c513a551f6
5552213ae9ff2876b1f694bff383004629c55174
0bd7f6d56d8347f607373f7f0fe59bbd12218c9bd0d062fb035bdcc93173f873
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/reader.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1226
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/kmp.webp
79.127.127.32200 OK 1.1 kB URL HTTP/2 www.p30day.ir/images/fastdl/kmp.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0ab2eb9b46ba51721999a1d0350bbf38
894ae30f4e29af81c60bb7502a864474dae8b626
3df5a58530b161285349a08201222fb34f760b117edd49e2ebba455b4ed52d0a
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/kmp.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1058
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/klite.webp
79.127.127.32200 OK 1.3 kB URL HTTP/2 www.p30day.ir/images/fastdl/klite.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash b3762ca2e70f1f68da4fc38f53dce6b3
62eb7b1023cf4be53c3182cc32cd794aa1fba741
b68afab14ce590f52341f15711e29511323129ae83930c61732d293fef120c9c
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/klite.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1332
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/aimp.webp
79.127.127.32200 OK 1.1 kB URL HTTP/2 www.p30day.ir/images/fastdl/aimp.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 56e0584dce3543e6e8863428ae915ede
cbff7f659dc8db1b819324511aacd68b6c68f0ef
b0d948b1483456bd5fc8b4e31726442084b42419a7608d3a89acb99376e7cd47
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/aimp.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/webp
last-modified: Fri, 06 Jul 2018 11:59:58 GMT
accept-ranges: bytes
content-length: 1074
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/daemon-tools.webp
79.127.127.32200 OK 1.6 kB URL HTTP/2 www.p30day.ir/images/fastdl/daemon-tools.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash f1c4998e619d02f2c966d18cafa3ae5f
038e50d4c3f60a34e28bfa54d73d2f676a8b02f3
05df4592018b5987fbb9dec7d6b83d4c05f281621b694fb9b04538540d5f5442
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/daemon-tools.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:20 GMT
accept-ranges: bytes
content-length: 1632
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/office.webp
79.127.127.32200 OK 1.1 kB URL HTTP/2 www.p30day.ir/images/fastdl/office.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8ba130fcea19ecd9ed5233ce0d22dd76
8bc7e1cf3869002d614f431ea39416f8bcb259f5
6b860744ee34632f6a2fbe3ceb00a29d7cf67f31f4273db9372486d0bff4abd9
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/office.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1078
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/ps.webp
79.127.127.32200 OK 656 B URL HTTP/2 www.p30day.ir/images/fastdl/ps.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash d086c0af387345300bf7a1d54ad05820
7e6b249d54a92b5ede190734e4392b70dc332f1b
2c9967c77a7ffa6ddeda076c1b90a6beda16864fa9e131e205fcdc70f49849ec
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/ps.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 656
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/skype.webp
79.127.127.32200 OK 1.1 kB URL HTTP/2 www.p30day.ir/images/fastdl/skype.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2612c7b808a386c27c45c9d7a3ab05c7
a0c0acc0a9c0529df19d5ecc0aa8e66a4f3b3cf0
433be5e918c73c43f2130158730859ddcc9aa058d229feb01714d80cc3dfb324
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/skype.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 1140
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/win10.webp
79.127.127.32200 OK 516 B URL HTTP/2 www.p30day.ir/images/fastdl/win10.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3e95105787f48e97f255c054163b1ff2
bbd996c9d0de0c5d89bbcf02b5dbd9d0d0cb38c0
aef03c97b401a3b2d73fb25e0c926b8af7b4d01eaffa56e64828772b3624e5ae
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/win10.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/webp
last-modified: Mon, 30 Apr 2018 14:48:19 GMT
accept-ranges: bytes
content-length: 516
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/fastdl/windows11.webp
79.127.127.32200 OK 306 B URL HTTP/2 www.p30day.ir/images/fastdl/windows11.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image\012- data
Hash c07f514a1feb0a64d02a0f002103eacf
88bfe92c334f01ca1ee74adaa3187d15e77783b0
ba56118c3788fa3e7e8dd8b5a6d2299a00026356f98ff25138cc86215ff25bdf
Analyzer Verdict Alert fortinet Malware
GET /images/fastdl/windows11.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/webp
last-modified: Sat, 19 Jun 2021 11:21:28 GMT
accept-ranges: bytes
content-length: 306
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-admin/admin-ajax.php
79.127.127.32200 OK 6.5 kB URL HTTP/2 www.p30day.ir/wp-admin/admin-ajax.php
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
Hash 8cdaffdc9ce3cdf6d4c404f2ce2be66f
eda0c6106d22f15b0623803823c8bf6b2385c027
1a86fa28d8e88742d268f4775ff53d371969d67251b3a52f1aea2b889ce82577
Analyzer Verdict Alert fortinet Malware
POST /wp-admin/admin-ajax.php HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://www.p30day.ir
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.p30day.ir
access-control-allow-credentials: true
x-robots-tag: noindex
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
set-cookie: PHPSESSID=a0afd62ba0884b08526c593e4e894876; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: image/png
x-litespeed-cache-control: no-cache
date: Fri, 25 Nov 2022 07:57:39 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/ff8eed7eee11d7b3a0057a07a54d3bce.css?ver=d3bce
79.127.127.32200 OK 15 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/ff8eed7eee11d7b3a0057a07a54d3bce.css?ver=d3bce
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8fd060c830e547b6841a92ff9e066490
14c21e9ac2b254c5cf4804d41329665be75f2e22
cd266320ce8d3000fe8c53dfe40cc57b6c9e57be063768d7f4a64d998e4b150a
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/ff8eed7eee11d7b3a0057a07a54d3bce.css?ver=d3bce HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: text/css
last-modified: Fri, 25 Nov 2022 07:57:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logobg.png
79.127.127.32200 OK 8.0 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/logobg.png
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 270 x 153, 8-bit/color RGB, non-interlaced\012- data
Hash 378fc626281e0c092602e3ac451bb582
cc2d093a754823a4fe5a3fdcda0c7c6428917c2d
17d63a6e2bcbd671e239e66155afe0630724920218447bcdf8536a61d37e1c36
GET /wp-content/themes/p30dayv7.1/data/images/logobg.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/png
last-modified: Sat, 23 Feb 2019 10:53:10 GMT
accept-ranges: bytes
content-length: 7952
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/d5bd7ba53955ea45cdde76ae13483e21.css?ver=83e21
79.127.127.32200 OK 20 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/d5bd7ba53955ea45cdde76ae13483e21.css?ver=83e21
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (2216), with no line terminators
Hash f873cf7f4c57f38c36546933be70703f
32d3d0662500ae28db95d1339421ade6a488151f
ec7952cc058b324ca899ab240f12781b224d44018bb3c459966c5a3df53cfd54
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/d5bd7ba53955ea45cdde76ae13483e21.css?ver=83e21 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: text/css
last-modified: Fri, 25 Nov 2022 07:57:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/11/Forza-Horizon-5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
79.127.127.32200 OK 21 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/11/Forza-Horizon-5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1dda844459ad71a9d0b89ff5eadf46de
c0f435cebb2b18fc35b24d2d5fd055fc96796797
16be7e869311aa777d99a8066863eb0fb6903de667d50ca7b9e6a36c722bfac0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2021/11/Forza-Horizon-5-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/webp
last-modified: Fri, 05 Nov 2021 17:11:00 GMT
accept-ranges: bytes
content-length: 21166
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2020/07/Automobilista-2-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
79.127.127.32200 OK 19 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2020/07/Automobilista-2-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f09428816304acbb921347d11728055c
f732238d24c3c36cbfc6f2ad8930f1aaed603897
f5d449b1bea45ba7c74349a094bc285b8784105f347d5bd450a37cb97f1402dc
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2020/07/Automobilista-2-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/webp
last-modified: Wed, 01 Jul 2020 14:05:46 GMT
accept-ranges: bytes
content-length: 18876
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/08/Saints-Row-ps4-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
79.127.127.32200 OK 18 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/08/Saints-Row-ps4-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 99dd8488290ff714b9b8d8fc94edd3a5
295c52f550de79932271d57d629f71b6460bed09
b533aef08fcd65251978387f27fecd7d795a4a0dec5c9d7eb34610ac51bbbe65
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2022/08/Saints-Row-ps4-%D8%A8%D8%A7%D8%B2%DB%8C.jpg.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/webp
last-modified: Fri, 19 Aug 2022 08:50:27 GMT
accept-ranges: bytes
content-length: 18542
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/06/Windows-11-logo.jpg.webp
79.127.127.32200 OK 1.2 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/06/Windows-11-logo.jpg.webp
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e56ece49b99b5232a0256d6ae0a1e828
c85832e3f54c61b419bfe091e6f3fcd05d145a16
568de9e5c88dbe83301fbbbca18e04b3bf472bbee94a2a222dce03b47c79f0ba
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2021/06/Windows-11-logo.jpg.webp HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/webp
last-modified: Sat, 19 Jun 2021 04:10:26 GMT
accept-ranges: bytes
content-length: 1210
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2020/07/American-Truck-Simulator-Idaho-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
79.127.127.32200 OK 27 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2020/07/American-Truck-Simulator-Idaho-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 3f9f39b5a22978960e252f8a1dbee4aa
f39bd7e10b8731d3eb7f6bd06e48ef4dfbe9a6dc
5cd3ab84d8226acecaa450b4ded8b00380cb517e2a3cfae30dd66331cfe14a72
GET /wp-content/uploads/2020/07/American-Truck-Simulator-Idaho-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Fri, 17 Jul 2020 13:55:00 GMT
accept-ranges: bytes
content-length: 26874
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/08/Sea-of-Thieves-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
79.127.127.32200 OK 23 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/08/Sea-of-Thieves-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 6df787773b8c18cc98b2ffe157d8cf0b
17f3492d8b28fca50a3325e3a9f01d4e6286c54e
c864dfad37871565a7e5f4c88b78d942cfe49296a83794e2c129957d9cecb6c7
GET /wp-content/uploads/2021/08/Sea-of-Thieves-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Fri, 27 Aug 2021 23:11:40 GMT
accept-ranges: bytes
content-length: 22629
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/f3339baed1f9db0350f0972773eda65a.css?ver=da65a
79.127.127.32200 OK 25 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/f3339baed1f9db0350f0972773eda65a.css?ver=da65a
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (744), with no line terminators
Hash 20850afdcf65fd268bbe3fba1803d5bd
f42f8b38cb290115805dee2201be9f42575b6616
a80e429ecb9f9eca1922a1db76499081f591c238a798a1ba095b5a40f86c9a5f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/f3339baed1f9db0350f0972773eda65a.css?ver=da65a HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: text/css
last-modified: Fri, 25 Nov 2022 07:57:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/44ee4d0839a4a04e07c9597310276dc6.css?ver=76dc6
79.127.127.32200 OK 31 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/44ee4d0839a4a04e07c9597310276dc6.css?ver=76dc6
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (25320), with no line terminators
Hash e33135a426307447193e9790f339d8d4
df3607e1b2cb0e45bdfad584270154f5d6b336f8
a70307785beae086ccaec152b1a086d85d34755d008efec5a4d24e64d52a72f5
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/44ee4d0839a4a04e07c9597310276dc6.css?ver=76dc6 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: text/css
last-modified: Fri, 25 Nov 2022 07:57:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/0a4c03c0b65170a860ae44a691591c7b.css?ver=91c7b
79.127.127.32200 OK 5.7 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/0a4c03c0b65170a860ae44a691591c7b.css?ver=91c7b
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (4528), with no line terminators
Hash cef1f9d145729da4ee37ae01caf40abd
33a99ca4e5f75288ef4b5f29db3de936a16efb13
b613333ca4edc65d9ecd2bef74112c416e1c1a8b99e19433400f034b9a3c2bf6
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/0a4c03c0b65170a860ae44a691591c7b.css?ver=91c7b HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: text/css
last-modified: Fri, 25 Nov 2022 07:57:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/7b14418837f17488895857beb9620d88.css?ver=20d88
79.127.127.32200 OK 7.0 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/7b14418837f17488895857beb9620d88.css?ver=20d88
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (2328)
Hash d5d1ef45db81d07049eb830eeea674d6
ca4abb4edceb542a4c65be1be71210a0af538e81
23e9ebae157973266f58660948c7a1451a687b91a588fde3d791e6f1a8c17860
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/7b14418837f17488895857beb9620d88.css?ver=20d88 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: text/css
last-modified: Fri, 25 Nov 2022 07:57:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
79.127.127.32200 OK 25 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (65536), with no line terminators
Hash 315e0fa95c143a760d538ee01d9d7f36
d3a9c9b1de055a85dabe6895d290a54222955a30
95a9b78d2790714f27d1f5cf2f7722a4ae416a8578a8b8e35e6cf2facf6e045f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: text/css
last-modified: Fri, 25 Nov 2022 07:57:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2017/07/windows-10-lite-logo.jpg
79.127.127.32200 OK 13 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2017/07/windows-10-lite-logo.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Hash 460a3e662ac6abaa830015a1b6f5602d
5be1bd0f7de1663e526503255eeb956bbee98f48
6451070e92d01a842e77ad7ad36ceb727520d732c65e8a0a6099925f32d65b5b
GET /wp-content/uploads/2017/07/windows-10-lite-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Tue, 19 Dec 2017 22:40:21 GMT
accept-ranges: bytes
content-length: 12905
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/05/pubg-mobil.jpg
79.127.127.32200 OK 25 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/05/pubg-mobil.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 04800cc8299476f9ffdd0fb9c4e46c7b
89ebcfda8cab223733b7a8f9b85408c2cff9aaba
16ca7625901b216dc43a51319400eac8e6b8716a4e8e669d64ac45c36e41741e
GET /wp-content/uploads/2022/05/pubg-mobil.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Fri, 13 May 2022 22:40:24 GMT
accept-ranges: bytes
content-length: 25225
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2018/08/Fortnite-logo.jpg
79.127.127.32200 OK 14 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2018/08/Fortnite-logo.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash d70b4b85df7894ae52c49d6d2082e5a1
6d9cd83d5d22cc9ceb29a3f46158ef47cde6978e
c878111b78203ce81009f09637a3b9339a13a4be6399a370d10e054c91f93449
GET /wp-content/uploads/2018/08/Fortnite-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Thu, 10 Jan 2019 15:54:33 GMT
accept-ranges: bytes
content-length: 14195
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2019/05/cod-logo.jpg
79.127.127.32200 OK 28 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2019/05/cod-logo.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 6439adca635d68a4903139b773a037df
37ea4e385cc38a7b0b7ef5ece59c8c42471c2690
dc5bac1e0f414a15e14b46a0cb4edfa95db7a906edb79df61ebb8958be914dd7
GET /wp-content/uploads/2019/05/cod-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Fri, 24 May 2019 19:25:58 GMT
accept-ranges: bytes
content-length: 28142
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2016/06/WhatsApp-icon.jpg
79.127.127.32200 OK 37 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2016/06/WhatsApp-icon.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS Windows, datetime=2016:06:27 20:19:34], baseline, precision 8, 300x300, components 3\012- data
Hash 2e0b3e7bc8c209a22e720dbcb7b50a73
5c8b95e2c364bcd5400a70c3a77008afa9251bf9
b2132586793157280e95b63e040d15106c5f1da1a067f70769147697fcd8da35
GET /wp-content/uploads/2016/06/WhatsApp-icon.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Sun, 07 Jan 2018 12:19:54 GMT
accept-ranges: bytes
content-length: 37331
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/03/trainer2.jpg
79.127.127.32200 OK 12 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/03/trainer2.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 5a8cf6d3b62188b06f86bfa8d2541406
3a83683da979322b727c69b5f43ecdebff2a5937
316c2cef65cd88c00b9c470f43708aa37b854714ab80a30a2a7af0d294912098
GET /wp-content/uploads/2022/03/trainer2.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Fri, 11 Mar 2022 21:10:15 GMT
accept-ranges: bytes
content-length: 12033
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/09/ps4-jailbreak-games-%D9%84%DB%8C%D8%B3%D8%AA.jpg
79.127.127.32200 OK 40 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/09/ps4-jailbreak-games-%D9%84%DB%8C%D8%B3%D8%AA.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 282ab4960a3218179243add97e98d1bb
f3f55b81949c9c10f6e7c7b7fdd150fc0256d7c0
b4eeca569cb6f2401e2645fdf01d952240276ca6bd21d21c3f358f8314ef77d0
GET /wp-content/uploads/2022/09/ps4-jailbreak-games-%D9%84%DB%8C%D8%B3%D8%AA.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Mon, 26 Sep 2022 19:29:35 GMT
accept-ranges: bytes
content-length: 39795
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/09/%D8%AC%DB%8C%D9%84%D8%A8%D8%B1%DB%8C%DA%A9-ps4-%D9%BE%DB%8C-%D8%B3%DB%8C-%D8%AF%DB%8C.jpg
79.127.127.32200 OK 23 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/09/%D8%AC%DB%8C%D9%84%D8%A8%D8%B1%DB%8C%DA%A9-ps4-%D9%BE%DB%8C-%D8%B3%DB%8C-%D8%AF%DB%8C.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash c59c5894ca56da620457ac4f3d675ab7
4b2d5bd0680aa6fbfae98fefac9270831b447e35
6989b43e56daa13a2702b1baba2f2220eb2f54af4d0c32cb613776b90ebc058d
GET /wp-content/uploads/2022/09/%D8%AC%DB%8C%D9%84%D8%A8%D8%B1%DB%8C%DA%A9-ps4-%D9%BE%DB%8C-%D8%B3%DB%8C-%D8%AF%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Tue, 20 Sep 2022 09:45:30 GMT
accept-ranges: bytes
content-length: 22630
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/07/elden-ring-game.jpg
79.127.127.32200 OK 20 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/07/elden-ring-game.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3\012- data
Hash 080d36f5a29083af1b095fa12aa3f8ab
c809e9cc01c78fbb315899b038532e2bad0ac2fb
50864ff8ca4ba1ba0fdb31fb21e0d6d5c962f97235e84ac2600ce144e418bc98
GET /wp-content/uploads/2022/07/elden-ring-game.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Wed, 20 Jul 2022 11:10:18 GMT
accept-ranges: bytes
content-length: 20052
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/topadsbg.jpg
79.127.127.32200 OK 186 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/topadsbg.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 8x8, components 1\012- data
Hash c07b958a50276ef2335c0a97b26fba73
66951a4e8c12e80814625f90167c95a3ebabca82
e4c78d99b0c76d668d08209ec3d822c48d4b8f85d6f09eecc796e68b2cacb665
GET /wp-content/themes/p30dayv7.1/data/images/topadsbg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 186
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2017/11/AMD-Radeon-Adrenalin-Edition-logo.jpg
79.127.127.32200 OK 9.5 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2017/11/AMD-Radeon-Adrenalin-Edition-logo.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Hash a7c5fb47b5a2241827154e67e2063d7d
750b7e9141cc35af7da9b03f6f5ec0f5f468b397
deb2589dcf6631e013ceac516224880daa4f7970218ae3dc2c8473ce8bd75072
GET /wp-content/uploads/2017/11/AMD-Radeon-Adrenalin-Edition-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Fri, 15 Dec 2017 22:16:01 GMT
accept-ranges: bytes
content-length: 9474
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/08/nvidia-logo.jpg
79.127.127.32200 OK 9.8 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/08/nvidia-logo.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 4de60df9a9dd0f161ef7086529319bd4
32809468ded58d918127dc62243f6d5997f73fac
cc789bee8ec9544815531b72d475f178f3842e5536522fbe991144849bd5a444
GET /wp-content/uploads/2021/08/nvidia-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Sat, 14 Aug 2021 18:10:08 GMT
accept-ranges: bytes
content-length: 9750
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2018/11/Adobe-Photoshop-logo.jpg
79.127.127.32200 OK 15 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2018/11/Adobe-Photoshop-logo.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 683234bfc2826c1e05e983a4ff71e2ae
7e08159a55f3291fdd1482b35b3b68fae9d27045
096824d67a19cd9497a98c84125eae96262f1ee31f3c9f20e54dc28cb5b0b1a2
GET /wp-content/uploads/2018/11/Adobe-Photoshop-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Mon, 26 Nov 2018 11:52:54 GMT
accept-ranges: bytes
content-length: 15167
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2015/08/Microsoft-.NET-Framework-icon.jpg
79.127.127.32200 OK 8.9 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2015/08/Microsoft-.NET-Framework-icon.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash bd4470d56aafb57fffe946b787fbe614
3229781e256f3767f1337e17b74cc32630525bd0
2c20fae862b4307e32c5cdd069a481ad7525789014d9d946e9647c6f5e5a02c8
GET /wp-content/uploads/2015/08/Microsoft-.NET-Framework-icon.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Thu, 22 Sep 2016 23:21:55 GMT
accept-ranges: bytes
content-length: 8926
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2012/02/Compress-MP3-loho.jpg
79.127.127.32200 OK 21 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2012/02/Compress-MP3-loho.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Hash 013226b3f4363a157a004ebc4aa870b7
ea3c70c968dddcf00dc22b0f26aae9abfd7ab439
0a576d3cc12179339fd6abcbb60e9b8ef626a2800463c8a31162e0b9ce1db664
GET /wp-content/uploads/2012/02/Compress-MP3-loho.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Sun, 24 Dec 2017 22:06:51 GMT
accept-ranges: bytes
content-length: 20779
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2015/06/Adobe-Premiere-Pro-CC.png
79.127.127.32200 OK 83 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2015/06/Adobe-Premiere-Pro-CC.png
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 340 x 341, 8-bit/color RGBA, non-interlaced\012- data
Hash 64a26a243d45aee77f69fa817974fecc
fbf3d83f1a13038b23d1837e3f819ef297450208
990b30976df503e2194a1cfb730ae6433df02704150d3629fe3e56d9e6518256
GET /wp-content/uploads/2015/06/Adobe-Premiere-Pro-CC.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/png
last-modified: Thu, 25 Jan 2018 19:38:15 GMT
accept-ranges: bytes
content-length: 82684
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/adstext.jpg
79.127.127.32200 OK 1.3 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/adstext.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 23x141, components 1\012- data
Hash 7d90c92e3961b8322b3335c00bc3bc87
1d4994b1397daccb185623e49e91f957cb264f3a
f063582f1f7df2931308adeff5d9239f6fe78c3476c07034cf39e0516d0410dd
GET /wp-content/themes/p30dayv7.1/data/images/adstext.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 1301
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/category_icon.jpg
79.127.127.32200 OK 599 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/category_icon.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 15x14, components 3\012- data
Hash 32ab43edb43c80f4084ed7818a36f029
fb4422a9be5226f1cde126ff4744c30fd4d45fc8
8956e0239a3313ccbd33cef0c9879921e91cef1b8c7372bb7c21c560672349c2
GET /wp-content/themes/p30dayv7.1/data/images/category_icon.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 599
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/pages_bg.jpg
79.127.127.32200 OK 177 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/pages_bg.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x38, components 1\012- data
Hash 909e83f543a3bc1d93cbc088b6c4db0d
9e4988299811f5854420d28598c521ec405844e4
4d1c24eda2bfa81daf6efa53831e2b65eda16945d4e087960c83c3d6b5ef4756
GET /wp-content/themes/p30dayv7.1/data/images/pages_bg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 177
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/page_btn_bg_hover.jpg
79.127.127.32200 OK 343 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/page_btn_bg_hover.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x28, components 3\012- data
Hash 575e419ed841227e17b3ff68601ebad7
ab05132fb073e59fc9ba4bd28e29be6585aadf90
b00f625e73941ed1350b7661d37f53f728e0bda561e22443ef2a6b4b3a812590
GET /wp-content/themes/p30dayv7.1/data/images/page_btn_bg_hover.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 343
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/page_btn_bg.jpg
79.127.127.32200 OK 184 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/page_btn_bg.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x28, components 1\012- data
Hash 29a713549baf2b7a8d3c98386876f918
d18b936322da10fb3e0e7c156ba117e6f2489f40
53345b3b9a6cd850c85cd62ef2936de688d5779c8b670e7a65782b245f0bcb58
GET /wp-content/themes/p30dayv7.1/data/images/page_btn_bg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 184
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/right_contentlogo.jpg
79.127.127.32200 OK 455 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/right_contentlogo.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 21x21, components 1\012- data
Hash ef487d89559d14481fe71408729115ed
1287c52488f6fff71fe0c16b441e650198bd0a74
d274862bd1bc6b81df11f8a26506d6b01800f5b5a5350f66bea78a57a3a758ec
GET /wp-content/themes/p30dayv7.1/data/images/right_contentlogo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 455
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/testAdsBg.jpg
79.127.127.32200 OK 1.2 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/testAdsBg.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 270x64, components 3\012- data
Hash 733f3ccb8e1f56ce42bc4dbdcb97487f
2090588bc395bb2a6ac2b614dc7122beb088646e
8560e5600d8636cffb075c9d774e594aeaf84e1405608d8a93bf246d11646480
GET /wp-content/themes/p30dayv7.1/data/images/testAdsBg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 1162
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/dotedfooterbg.gif
79.127.127.32200 OK 102 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/dotedfooterbg.gif
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 8 x 5, 2-bit colormap, non-interlaced\012- data
Hash e83c058adc9ac1ea2966138ddc28c83f
a7210bf381afb33535d4e55667f473bcaad195a9
f797a59c0d0c69ed3a140b2651b786583e372708de82b22e7bdbf6588199677f
GET /wp-content/themes/p30dayv7.1/data/images/dotedfooterbg.gif HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/gif
last-modified: Sat, 23 Feb 2019 10:56:42 GMT
accept-ranges: bytes
content-length: 102
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/11/The-Entropy-Centre.jpg
79.127.127.32200 OK 9.6 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/11/The-Entropy-Centre.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash 231795b3b422358130e86bd1a3669f66
2b4798c05ca435d480c2b892874f76df13f95a69
189721730fb70ca68611316278604d19ba25a56dfb13cc12b22c6f6ab34680f1
GET /wp-content/uploads/2022/11/The-Entropy-Centre.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Thu, 24 Nov 2022 21:34:19 GMT
accept-ranges: bytes
content-length: 9567
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/02/Dying-Light-2-series-x-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
79.127.127.32200 OK 21 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/02/Dying-Light-2-series-x-%D8%A8%D8%A7%D8%B2%DB%8C.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash ee93636f9f72471ebdbcc8d70d813d86
8542db898186157c77b43077beb230d0cb086028
c3d851b91be9c70a439fb3a7b8495a6957d3d34da9b9da46d970350796f02170
GET /wp-content/uploads/2022/02/Dying-Light-2-series-x-%D8%A8%D8%A7%D8%B2%DB%8C.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Mon, 28 Feb 2022 21:10:10 GMT
accept-ranges: bytes
content-length: 20931
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/11/WRC10-300.png
79.127.127.32200 OK 92 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/11/WRC10-300.png
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced\012- data
Hash d55685dac23b9197585d402f73350b7a
d33389ed2bbfb4536f43bd4a89340f1d677c7e57
03d1c26c8dcc542f25edb65c2c93912568a8bd8efc716b169e662ec9977dbca3
GET /wp-content/uploads/2022/11/WRC10-300.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/png
last-modified: Thu, 24 Nov 2022 19:15:41 GMT
accept-ranges: bytes
content-length: 91649
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2021/01/King-Arthur-Knights-Tale-logo.jpg
79.127.127.32200 OK 11 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2021/01/King-Arthur-Knights-Tale-logo.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3\012- data
Hash e0975f973cbcc261407a9627ae51edae
2fbb81ae9572543950c9fb93a6ce35d232c9a2b9
5fd7c8d06c7ef32d01f46530470118312b98035531a63db27b97c199e680cddf
GET /wp-content/uploads/2021/01/King-Arthur-Knights-Tale-logo.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Fri, 29 Jan 2021 09:15:20 GMT
accept-ranges: bytes
content-length: 10680
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/underFooter_bg.jpg
79.127.127.32200 OK 170 B URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/images/underFooter_bg.jpg
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1x2, components 1\012- data
Hash 204ccbc677cdc87675467ffe8c9129a0
9ea29e505de3e97d6f6b9638a4b379f21a0def7b
109936adfb4a38a446b3ffa75836a002b241ea538f1b9727546d431761a889f4
GET /wp-content/themes/p30dayv7.1/data/images/underFooter_bg.jpg HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/jpeg
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 170
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb.woff2
79.127.127.32200 OK 30 kB URL HTTP/2 www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb.woff2
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format (Version 2), TrueType, length 29820, version 1.0\012- data
Hash 9d38733b8a7b9153f2bf9bfe476ef8e3
93f8caeb96e52cd35dd24ffe8dbbc911af5b236e
b2144257a57aa398277a4977bfab616e368f4d8c8c45c79f2f128d8db537cbc8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/fonts/woff2/IRANSansWeb.woff2 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: font/woff2
last-modified: Tue, 16 Jan 2018 16:56:48 GMT
accept-ranges: bytes
content-length: 29820
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/p30dayv7.1/data/fonts/fontello.woff?4430390
79.127.127.32200 OK 8.9 kB URL HTTP/2 www.p30day.ir/wp-content/themes/p30dayv7.1/data/fonts/fontello.woff?4430390
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, TrueType, length 8900, version 1.0\012- data
Hash 6427d2890332acaa1a4cd0102a7f64d1
2dbca84994471c8cfd3944f3e1df902fbed726fd
6bce3d5ade75e6533bf17697cff7f66cfb51955ec9d158aeface37363b5ff754
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/p30dayv7.1/data/fonts/fontello.woff?4430390 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/litespeed/css/d612c365a0de5a8508df927fd29ecba1.css?ver=5337c
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: font/woff
last-modified: Sat, 13 Oct 2018 17:14:26 GMT
accept-ranges: bytes
content-length: 8900
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb_Bold.woff2
79.127.127.32200 OK 28 kB URL HTTP/2 www.p30day.ir/wp-content/themes/fonts/woff2/IRANSansWeb_Bold.woff2
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format (Version 2), TrueType, length 28388, version 1.0\012- data
Hash 2f6f164c3e1f1329cc658b3c725bfd98
9e63d01d8561d79074bd8e46fbf265285ab958b7
a068d909851e4b57d0847b6c35457ab980463710e124a7e5e26b642e7f9f64fa
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/fonts/woff2/IRANSansWeb_Bold.woff2 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.p30day.ir/wp-content/themes/p30dayv7.1/fontiran.css
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: font/woff2
last-modified: Tue, 16 Jan 2018 16:56:49 GMT
accept-ranges: bytes
content-length: 28388
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/frss/preview.php?tmp=2&url=https://www.p30day.ir/?feed=custom
79.127.127.32200 OK 1.4 kB URL HTTP/2 www.p30day.ir/images/frss/preview.php?tmp=2&url=https://www.p30day.ir/?feed=custom
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text
Hash c3808ebb52d68899f7b982f8809b0f6d
dd99383a6953f835b5e61d2028a4dfbc0994f2b4
c8751739cec6bd857bc5f07124855a9bbcbd6be0eb39ae565d50482f8c7178fd
GET /images/frss/preview.php?tmp=2&url=https://www.p30day.ir/?feed=custom HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
content-length: 1424
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/images/favicon_new.ico
79.127.127.32200 OK 1.2 kB URL HTTP/2 www.p30day.ir/images/favicon_new.ico
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 20150782a6ad1e6082f82fc53588af43
eaf8e21e158c5783e2d38ba268d2ca73de6b64c3
122e9e80ae6f9bc3446bee8d631819d93a4e83d71b046b59f88930f8126a4aa9
Analyzer Verdict Alert fortinet Malware
GET /images/favicon_new.ico HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: image/x-icon
last-modified: Thu, 22 Sep 2016 09:58:52 GMT
accept-ranges: bytes
content-length: 1150
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/js/d6cb22e2ebb9f7eacf6048b04aa359d5.js?ver=359d5
79.127.127.32200 OK 12 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/js/d6cb22e2ebb9f7eacf6048b04aa359d5.js?ver=359d5
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (537)
Hash 9f2d6f1a447e6f0be567ca4012abb2e4
f4a6b0b93217c1158168e1db6cc54ac820dd0c2e
3100daa2eed93010f03926941ee6ed26e7ec6a978b076914a2f27c4924164d00
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/js/d6cb22e2ebb9f7eacf6048b04aa359d5.js?ver=359d5 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: application/javascript
last-modified: Fri, 25 Nov 2022 07:57:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-15659274-1
142.250.74.168200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-15659274-1
IP 142.250.74.168:0
File type ASCII text, with very long lines (1921)
Hash 12375ebf2feefc13b88fa46b1e07bcc1
1330732f5bd1286ebd29c641dae8f1fad5391815
282712649be3db92a48bfdadc9b54cebd4629415c744eb26bfdefae0bba4cd91
GET /gtag/js?id=UA-15659274-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 07:57:40 GMT
expires: Fri, 25 Nov 2022 07:57:40 GMT
cache-control: private, max-age=900
last-modified: Fri, 25 Nov 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43612
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
X-Firefox-Early-Data: accepted
www.p30day.ir/wp-content/plugins/contact-form-7/includes/swv/js/index.js
79.127.127.32200 OK 2.8 kB URL HTTP/2 www.p30day.ir/wp-content/plugins/contact-form-7/includes/swv/js/index.js
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (9937), with no line terminators
Hash 4317b1c024df372435f6482deadddeb3
5c8824a17e40a44ea8fc51568b98bdb1e2e7fab5
3798fb16289ba55459fb6d3b2efa915e3c019c5942759abb7bd19a0ef622b85d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:41 GMT
content-type: application/javascript
last-modified: Wed, 19 Oct 2022 18:33:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2817
date: Fri, 25 Nov 2022 07:57:41 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
app.najva.com/static/css/local-messaging.css?v=202201002507
104.21.77.178200 OK 5.4 kB URL HTTP/2 app.najva.com/static/css/local-messaging.css?v=202201002507
IP 104.21.77.178:0
File type ASCII text, with very long lines (10718), with no line terminators
Hash 39455f77f99106710e629918d231a868
4720b87ca9d751004795fa7a9db5626349227c2f
74973872b0da5f9aac4a1908f0cf9a570a9ff68bac0b9f7324a5a63998127e4a
GET /static/css/local-messaging.css?v=202201002507 HTTP/1.1
Host: app.najva.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 25 Nov 2022 07:57:40 GMT
content-type: text/css
last-modified: Sat, 12 Nov 2022 15:49:24 GMT
vary: Accept-Encoding
etag: W/"636fc084-29de"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
cache-control: max-age=16070400
cf-cache-status: HIT
age: 7058
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f%2Bw1iVlf25hEj5D0WdZBwUUK3tED%2B7o6kuvGAf4Xo%2FmTk97FU0gtlFpUEb7etoOoldXt00ya%2Fedx9bEo%2F7B3I6uabEC898Q9R5aD9wy11JFUb%2F5zIH6ZDBi%2Bqh%2BM3nsk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f8d5b92f19b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/js/ceb2015a4b72da8597dedd7751c129fd.js?ver=129fd
79.127.127.32200 OK 1.3 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/js/ceb2015a4b72da8597dedd7751c129fd.js?ver=129fd
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 text, with very long lines (1725)
Hash 6f3e175e2d3a9e2273cb02296ef1d802
d98112391356f6c61f80db8cea237d239bb186ec
b0845a45016bef4ae1a9c16cefa08389fda26a4f91b6ec3d26d9a7f2fe8ed567
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/js/ceb2015a4b72da8597dedd7751c129fd.js?ver=129fd HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:41 GMT
content-type: application/javascript
last-modified: Fri, 25 Nov 2022 07:57:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1289
date: Fri, 25 Nov 2022 07:57:41 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/js/640736c56d74085b9fb02efb76bb2f3e.js?ver=b2f3e
79.127.127.32200 OK 639 B URL HTTP/2 www.p30day.ir/wp-content/litespeed/js/640736c56d74085b9fb02efb76bb2f3e.js?ver=b2f3e
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (1287)
Hash 4100c6ad2089cfc1825a57867147eff9
d86c2c252c2f2782c326130e2405bfae8f12bf3f
16e989f0161f33ba73aa36264416635ab93cf67ec0bf79af9f1b4117b2516638
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/js/640736c56d74085b9fb02efb76bb2f3e.js?ver=b2f3e HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:41 GMT
content-type: application/javascript
last-modified: Fri, 25 Nov 2022 07:57:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 639
date: Fri, 25 Nov 2022 07:57:41 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/js/120e635100d057112aed3306e8fa4135.js?ver=a4135
79.127.127.32200 OK 5.7 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/js/120e635100d057112aed3306e8fa4135.js?ver=a4135
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type HTML document, ASCII text, with very long lines (22869)
Hash 35baa0fce050e4476e8a5b0e96ad9067
baef913b6851565785d3a376ee4e351bd14a8c9b
2c6c6c9108216a7306164109b14332f9f2ea6a0c386ae2f4d87c811e90889956
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/js/120e635100d057112aed3306e8fa4135.js?ver=a4135 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:41 GMT
content-type: application/javascript
last-modified: Fri, 25 Nov 2022 07:57:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5715
date: Fri, 25 Nov 2022 07:57:41 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/js/1ea23faa87881db2a9f69eb83d000ca7.js?ver=00ca7
79.127.127.32200 OK 7.2 kB URL HTTP/2 www.p30day.ir/wp-content/litespeed/js/1ea23faa87881db2a9f69eb83d000ca7.js?ver=00ca7
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (18798)
Hash fc190db3af01f454dc661d17f8221783
08ec8c7538494d1d04032f6a84980eb8a81629f5
396fa7c01067d27dbf0393e3112d22ae899176566c6248a16f5bb5740f6c1e77
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/js/1ea23faa87881db2a9f69eb83d000ca7.js?ver=00ca7 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:41 GMT
content-type: application/javascript
last-modified: Fri, 25 Nov 2022 07:57:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7181
date: Fri, 25 Nov 2022 07:57:41 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
van.najva.com/static/js/scripts/p30day978-website-35101-f397efcf-b6f4-4d41-a2e7-b593844f163b.js?v=202201002507
185.166.104.4200 OK 50 kB URL HTTP/2 van.najva.com/static/js/scripts/p30day978-website-35101-f397efcf-b6f4-4d41-a2e7-b593844f163b.js?v=202201002507
IP 185.166.104.4:0
ASN #202319 Avaye Hamrahe Houshmande Hezardastan PJSC
File type Unicode text, UTF-8 text, with very long lines (20445)
Hash 4d3f5f1868013733957b1d2b8533525c
c2465b6443c716e4806bddd13c2e146a47da96e4
22b884721db19eb1451aa2aabf10c3c3c36dfcf5fca2d45b8fba041d478c70cb
GET /static/js/scripts/p30day978-website-35101-f397efcf-b6f4-4d41-a2e7-b593844f163b.js?v=202201002507 HTTP/1.1
Host: van.najva.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.p30day.ir/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 25 Nov 2022 07:57:40 GMT
content-type: application/javascript
last-modified: Sat, 22 Jan 2022 08:30:41 GMT
x-rgw-object-type: Normal
etag: W/"b4aa3c98a23075f78be6c2800538c908"
x-amz-request-id: tx0000000000000045adbf3-0063803722-494d5cd-default
x-zrk-us: 206
cache-control: public, max-age=300
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
access-control-max-age: 60
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=0
server: Delivery
x-zrk-cs: REVALIDATED
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2
www.p30day.ir/najva-messaging-sw.js
79.127.127.32200 OK 136 B URL HTTP/2 www.p30day.ir/najva-messaging-sw.js
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with no line terminators
Hash 9218a636fc5e0b49519686a6299d6943
2e08c4c763401c5649ce36eba374297fda1b9fab
df564b4a28ef8a5475e079616bb3e4ddf5de65b55204c5f7737a17565a540c5b
Analyzer Verdict Alert fortinet Malware
GET /najva-messaging-sw.js HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:41 GMT
content-type: application/javascript
last-modified: Thu, 20 Jan 2022 13:50:53 GMT
accept-ranges: bytes
content-length: 136
date: Fri, 25 Nov 2022 07:57:41 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/js/2c7e8414a5d94e253a15de8131679036.js?ver=79036
79.127.127.32200 OK 867 B URL HTTP/2 www.p30day.ir/wp-content/litespeed/js/2c7e8414a5d94e253a15de8131679036.js?ver=79036
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (484)
Hash e87b5bc2f352b36735ed4bc3e1dcf878
2b5313bd79dc80bb0887326416ff8a123b8da8be
c903874eae284dd65449ec89a7becdc1cdad74a29df75938bf0d12ab913b3ec7
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/js/2c7e8414a5d94e253a15de8131679036.js?ver=79036 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:42 GMT
content-type: application/javascript
last-modified: Fri, 25 Nov 2022 07:57:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 867
date: Fri, 25 Nov 2022 07:57:42 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/js/4eb854e754a8cb296ce1954c215443e5.js?ver=443e5
79.127.127.32200 OK 37 B URL HTTP/2 www.p30day.ir/wp-content/litespeed/js/4eb854e754a8cb296ce1954c215443e5.js?ver=443e5
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
Hash 622812d1045068a5a6791e30a38eacbe
d7917d9bc45a7909c5944d0138bbff75e8e59419
3b018ba3fd44409b43ce623cbd7b69a94aedb00a35882ef3c2c754df3e9c7dca
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/js/4eb854e754a8cb296ce1954c215443e5.js?ver=443e5 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:42 GMT
content-type: application/javascript
last-modified: Fri, 25 Nov 2022 07:57:40 GMT
accept-ranges: bytes
content-length: 37
date: Fri, 25 Nov 2022 07:57:42 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d9459cb1b79e03e66ad9b1c21dfe81b1
1b4dccd9ca04f289ac9fac7bac111220f899d45a
3f81856361381c1bc77ac082a83993c221ae980b0206662fcf5f4be9229c9783
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3F81856361381C1BC77AC082A83993C221AE980B0206662FCF5F4BE9229C9783"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14603
Expires: Fri, 25 Nov 2022 12:01:04 GMT
Date: Fri, 25 Nov 2022 07:57:41 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d9459cb1b79e03e66ad9b1c21dfe81b1
1b4dccd9ca04f289ac9fac7bac111220f899d45a
3f81856361381c1bc77ac082a83993c221ae980b0206662fcf5f4be9229c9783
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3F81856361381C1BC77AC082A83993C221AE980B0206662FCF5F4BE9229C9783"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14603
Expires: Fri, 25 Nov 2022 12:01:04 GMT
Date: Fri, 25 Nov 2022 07:57:41 GMT
Connection: keep-alive
van.najva.com/static/js/scripts/p30day978-website-35101-f397efcf-b6f4-4d41-a2e7-b593844f163b-service-worker.js
185.166.104.4200 OK 21 kB URL HTTP/2 van.najva.com/static/js/scripts/p30day978-website-35101-f397efcf-b6f4-4d41-a2e7-b593844f163b-service-worker.js
IP 185.166.104.4:0
ASN #202319 Avaye Hamrahe Houshmande Hezardastan PJSC
File type Unicode text, UTF-8 text, with very long lines (28945)
Hash 5e249349edf0ffdb1a1c4ad7b196ade1
1fb0b0cc0635057fb0ec4dd52318ebf075d04474
f4c7b89824fac1a4192ff6f0667f9d63f883b0b44ec726fcaae0d3f0ae99754a
GET /static/js/scripts/p30day978-website-35101-f397efcf-b6f4-4d41-a2e7-b593844f163b-service-worker.js HTTP/1.1
Host: van.najva.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 07:57:41 GMT
content-type: application/javascript
last-modified: Sat, 22 Jan 2022 08:30:43 GMT
x-rgw-object-type: Normal
etag: W/"b6f5831e34dedbeb9ca892f30e654f32"
x-amz-request-id: tx0000000000000014de028-00636a179e-4707a72-default
x-zrk-us: 206
cache-control: public, max-age=300
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
access-control-max-age: 60
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=0
server: Delivery
x-zrk-cs: REVALIDATED
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2
ua.yektanet.com/pixel?id=njv-email
185.143.234.120302 Found 151 B URL HTTP/2 ua.yektanet.com/pixel?id=njv-email
IP 185.143.234.120:0
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash c15cb23782f11cc460e23cb1935327da
e97431744a49c79282a30de7a17c7b537c08253e
0660a33678dbfee5f5e0cc1c20f8987a9174d2b076d88ba853f394ee5a105145
GET /pixel?id=njv-email HTTP/1.1
Host: ua.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: ArvanCloud
date: Fri, 25 Nov 2022 07:57:41 GMT
content-type: text/html
content-length: 151
set-cookie: gearbox_ad_token=24eed04d-9c50-4e72-800a-fba65f48fdcc; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Mon, 22-Nov-32 07:57:41 GMT
analytics_global_token=24eed04d-9c50-4e72-800a-fba65f48fdcc; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Mon, 22-Nov-32 07:57:41 GMT
location: https://cookie.najva.com/matching/?yektanet_user_id=24eed04d-9c50-4e72-800a-fba65f48fdcc&njc=
last-modified: Friday, 25-Nov-2022 07:57:41 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2057
ar-atime: 0.186
ar-cache: BYPASS
ar-request-id: beffcd525ff8cb76fa510deff354dc87
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 25 Nov 2022 06:41:08 GMT
expires: Fri, 25 Nov 2022 08:41:08 GMT
cache-control: public, max-age=7200
age: 4593
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
audience.yektanet.com/api/v1/scripts/preview/validate/?app_id=VwsLBz1w
185.143.234.120200 OK 5 B URL HTTP/2 audience.yektanet.com/api/v1/scripts/preview/validate/?app_id=VwsLBz1w
IP 185.143.234.120:0
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type ASCII text, with no line terminators
Hash 68934a3e9455fa72420237eb05902327
7cb6efb98ba5972a9b5090dc2e517fe14d12cb04
fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa
GET /api/v1/scripts/preview/validate/?app_id=VwsLBz1w HTTP/1.1
Host: audience.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.p30day.ir
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ArvanCloud
date: Fri, 25 Nov 2022 07:57:41 GMT
content-type: application/json
content-length: 5
access-control-allow-origin: https://www.p30day.ir
allow: GET, OPTIONS
access-control-allow-methods: GET, OPTIONS
access-control-allow-credentials: true
access-control-allow-headers: Authorization
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2074
ar-atime: 0.187
ar-cache: BYPASS
ar-request-id: fce92607318eb5a5570859cca4943cf0
accept-ranges: bytes
X-Firefox-Spdy: h2
ua.yektanet.com/__fake.gif/
185.143.234.120200 OK 42 B URL HTTP/2 ua.yektanet.com/__fake.gif/
IP 185.143.234.120:0
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /__fake.gif/ HTTP/1.1
Host: ua.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 606
Origin: https://www.p30day.ir
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ArvanCloud
date: Fri, 25 Nov 2022 07:57:41 GMT
content-type: image/gif
content-length: 42
set-cookie: gearbox_ad_token=23eb2fa2-b4ea-4510-a63f-88bc45273d64; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Mon, 22-Nov-32 07:57:41 GMT
analytics_global_token=23eb2fa2-b4ea-4510-a63f-88bc45273d64; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Mon, 22-Nov-32 07:57:41 GMT
last-modified: Friday, 25-Nov-2022 07:57:41 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2057
ar-atime: 0.209
ar-request-id: a2476866c28b31b707c530c67328f9c5
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9ea0f6ee1bec7eee0194e7bec00e5d11
7e9bd189dacb10bbbe236b3f6ad3f8f06482a490
b9004a9795747d1a2d1927ad4ad81df64fd0537f9a23a5364aeaeb3c21eebfb5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B9004A9795747D1A2D1927AD4AD81DF64FD0537F9A23A5364AEAEB3C21EEBFB5"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14943
Expires: Fri, 25 Nov 2022 12:06:45 GMT
Date: Fri, 25 Nov 2022 07:57:42 GMT
Connection: keep-alive
cookie.najva.com/matching/?yektanet_user_id=24eed04d-9c50-4e72-800a-fba65f48fdcc&njc=
51.83.105.55503 Service Unavailable 190 B URL HTTP/2 cookie.najva.com/matching/?yektanet_user_id=24eed04d-9c50-4e72-800a-fba65f48fdcc&njc=
IP 51.83.105.55:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3267dd8f0e96711dd54dbb1f5676b447
202602c4ec4a5e2498e3d24a3ed025ce70bf749c
b429e25e7813a9e2b90dcec11d9cb5287751246128dd6c76a7349774829c5554
GET /matching/?yektanet_user_id=24eed04d-9c50-4e72-800a-fba65f48fdcc&njc= HTTP/1.1
Host: cookie.najva.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.p30day.ir/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 503 Service Unavailable
date: Fri, 25 Nov 2022 07:57:42 GMT
content-type: text/html
content-length: 190
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash d3d2d21ac304813a16da64921ce18ba4
98b1762c675c61eeb18254986461e6b1074ebc92
af00429c189464ddb8df704dc48035421f943444df6ca17390fb97466c2e7e9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 07:57:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-15659274-1&cid=75884588.1669363061&jid=1230364567&gjid=888612436&_gid=246497703.1669363061&_u=YEBAAUAAAAAAACAAI~&z=403058263
142.251.1.155200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-15659274-1&cid=75884588.1669363061&jid=1230364567&gjid=888612436&_gid=246497703.1669363061&_u=YEBAAUAAAAAAACAAI~&z=403058263
IP 142.251.1.155:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-15659274-1&cid=75884588.1669363061&jid=1230364567&gjid=888612436&_gid=246497703.1669363061&_u=YEBAAUAAAAAAACAAI~&z=403058263 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.p30day.ir
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.p30day.ir
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 25 Nov 2022 07:57:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.p30day.ir/images/tabligh/tarhdokan.gif
79.127.127.32200 OK 43 kB URL HTTP/2 www.p30day.ir/images/tabligh/tarhdokan.gif
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 120 x 240\012- data
Hash 38200c9031feb328f3dcabc34b4e0842
8972e0bfaeb580fa889732b4d2167681e875b36f
1a2c8762ce06f294680e8250c2613c1b2aa394cb766cb2e87475dedb3c9d98ae
GET /images/tabligh/tarhdokan.gif HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=352d2135-1d99-1084-8867-a59184e972c0; analytics_token=b0967519-a86e-6be2-d5db-991804a8837d; yektanet_session_last_activity=11/25/2022; _yngt_iframe=1; _ga=GA1.2.75884588.1669363061; _gid=GA1.2.246497703.1669363061; _gat_gtag_UA_15659274_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:42 GMT
content-type: image/gif
last-modified: Thu, 31 Oct 2019 19:17:22 GMT
accept-ranges: bytes
content-length: 42594
date: Fri, 25 Nov 2022 07:57:42 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 07:57:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.p30day.ir/images/tabligh/aseman120.gif
79.127.127.32200 OK 6.1 kB URL HTTP/2 www.p30day.ir/images/tabligh/aseman120.gif
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 120 x 240\012- data
Hash d8296e1015c23e5cdf59f3074323e5b4
b23d9c5ae89e5181ac0438be11f5d5ff02425ac0
172197d1ecb53fe25409bdbf947e48c6d0cc74597d0be7e88ef872b8f52f90cd
GET /images/tabligh/aseman120.gif HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=352d2135-1d99-1084-8867-a59184e972c0; analytics_token=b0967519-a86e-6be2-d5db-991804a8837d; yektanet_session_last_activity=11/25/2022; _yngt_iframe=1; _ga=GA1.2.75884588.1669363061; _gid=GA1.2.246497703.1669363061; _gat_gtag_UA_15659274_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:42 GMT
content-type: image/gif
last-modified: Sun, 23 Feb 2020 09:55:41 GMT
accept-ranges: bytes
content-length: 6149
date: Fri, 25 Nov 2022 07:57:42 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
audience-scripts.yektanet.com/public/static/preview/capture-clicks.b327994856ffa26dac46.js
185.143.234.120200 OK 10 kB URL HTTP/2 audience-scripts.yektanet.com/public/static/preview/capture-clicks.b327994856ffa26dac46.js
IP 185.143.234.120:0
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type ASCII text, with very long lines (5077), with no line terminators
Hash 192be2a0bf9efd2d9accc0291216632b
4d21256c6e07633f0403ae82609306378748e4ca
fc8c263cd4bfa877dadfbf66b9d2540d743b3a55d71a2a9f68447f1b7641f743
GET /public/static/preview/capture-clicks.b327994856ffa26dac46.js HTTP/1.1
Host: audience-scripts.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ArvanCloud
date: Fri, 25 Nov 2022 07:57:41 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Tue, 18 Oct 2022 07:48:43 GMT
x-rgw-object-type: Normal
etag: W/"6c4cbf1e27051692b4b4d144de1d27b0"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
expires: Fri, 25 Nov 2022 08:57:41 GMT
x-xss-protection: 1; mode=block
ar-sid: 2060
ar-atime: 0.004
ar-cache: HIT
ar-request-id: 88059cde9848093f029f7116c7063b4c
content-encoding: br
X-Firefox-Spdy: h2
audience-scripts.yektanet.com/public/static/preview/external-link.98f839ddda9637efa171.js
185.143.234.120200 OK 9.0 kB URL HTTP/2 audience-scripts.yektanet.com/public/static/preview/external-link.98f839ddda9637efa171.js
IP 185.143.234.120:0
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type Unicode text, UTF-8 text, with very long lines (2928), with no line terminators
Hash edd143fc407384517d6efce10f809f6d
81404dd5bceed2b8c1468721bdcf43993c70f75d
9b7396cb98fec363ad7b3c0d60787e75f52e1aaedf99db7ca317ef62955237c3
GET /public/static/preview/external-link.98f839ddda9637efa171.js HTTP/1.1
Host: audience-scripts.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ArvanCloud
date: Fri, 25 Nov 2022 07:57:41 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Tue, 18 Oct 2022 07:48:43 GMT
x-rgw-object-type: Normal
etag: W/"b114b7bd4dfb855fe7d405f0c2d08156"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
expires: Fri, 25 Nov 2022 08:57:41 GMT
x-xss-protection: 1; mode=block
ar-sid: 2060
ar-atime: 0.004
ar-cache: HIT
ar-request-id: 23586697b636a9b2660a68474521e554
content-encoding: br
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/plugins/advanced-floating-content-lite/public/images/close.png
79.127.127.32200 OK 2.4 kB URL HTTP/2 www.p30day.ir/wp-content/plugins/advanced-floating-content-lite/public/images/close.png
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 33 x 33, 8-bit/color RGBA, non-interlaced\012- data
Hash 525c837d809c56cf4374b8ae8c8c1d2e
a5d82ed71cc507878ddb1db38b504d04ec91c07b
10b48a1ec522abd18c5f62d7282433ff88b0a15af5351d0103fb78ea07b85693
GET /wp-content/plugins/advanced-floating-content-lite/public/images/close.png HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=352d2135-1d99-1084-8867-a59184e972c0; analytics_token=b0967519-a86e-6be2-d5db-991804a8837d; yektanet_session_last_activity=11/25/2022; _yngt_iframe=1; _ga=GA1.2.75884588.1669363061; _gid=GA1.2.246497703.1669363061; _gat_gtag_UA_15659274_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:42 GMT
content-type: image/png
last-modified: Thu, 10 Nov 2022 13:26:27 GMT
accept-ranges: bytes
content-length: 2407
date: Fri, 25 Nov 2022 07:57:42 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/uploads/2022/09/venka150.gif
79.127.127.32200 OK 10 kB URL HTTP/2 www.p30day.ir/wp-content/uploads/2022/09/venka150.gif
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 150 x 150\012- data
Hash 0935a2c8e008a93bfc879bcb8fbead13
2a8d31114fa4f80d0003db7ba8048a54cfa969ab
94014d278bf589453339144d2977291755e6a99abd1c9e1f76c8b98b733d43bf
GET /wp-content/uploads/2022/09/venka150.gif HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876; analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}; analytics_session_token=352d2135-1d99-1084-8867-a59184e972c0; analytics_token=b0967519-a86e-6be2-d5db-991804a8837d; yektanet_session_last_activity=11/25/2022; _yngt_iframe=1; _ga=GA1.2.75884588.1669363061; _gid=GA1.2.246497703.1669363061; _gat_gtag_UA_15659274_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:42 GMT
content-type: image/gif
last-modified: Thu, 15 Sep 2022 13:34:58 GMT
accept-ranges: bytes
content-length: 10159
date: Fri, 25 Nov 2022 07:57:42 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.gstatic.com/firebasejs/6.6.2/firebase-app.js
142.250.74.163200 OK 3.9 kB URL HTTP/2 www.gstatic.com/firebasejs/6.6.2/firebase-app.js
IP 142.250.74.163:0
File type ASCII text, with very long lines (11452)
Hash 63d27db05d5c9a63dc57643f37960d40
08e8fbc1c812e54e4a29fb31f8e6d731c49e9c16
f0e6023ad6184830d6463a199ac0ca9aff28faae5ae2bd0ac612d60daaedec09
GET /firebasejs/6.6.2/firebase-app.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 3945
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 17:24:46 GMT
expires: Fri, 24 Nov 2023 17:24:46 GMT
cache-control: public, max-age=31536000
age: 52376
last-modified: Thu, 19 Sep 2019 21:11:52 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash d3d2d21ac304813a16da64921ce18ba4
98b1762c675c61eeb18254986461e6b1074ebc92
af00429c189464ddb8df704dc48035421f943444df6ca17390fb97466c2e7e9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 07:57:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 76544babbcf6515110bd81aaee8e7e63
043497692868c67ac84cdfe70d0a484517abd1c2
a19d5958d683662375a2469d1d7e551188469b967eb6f2bae2d5e43dac51a4f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 07:57:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 163d4912a06d8358abc770dc0351d7b4
1e8dc04b95e704679ab729f81716466ea8a3e591
72245d178d481350af611804e557032ffb7bb3a3e8cdb83f3332a5ffba78d193
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 07:57:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ua.yektanet.com/cookie/set
185.143.234.120200 OK 113 B URL HTTP/2 ua.yektanet.com/cookie/set
IP 185.143.234.120:0
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type JSON data\012- , ASCII text
Hash e66e8889b67126511fdb0e96dd2ebdc0
d2aa5ef725a6146e33d3c669211043c2b7fefdb7
51a4c1d07eff5b77898e3ff54c347a540be0c964fb056cda204b31dbd61d4c10
GET /cookie/set HTTP/1.1
Host: ua.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ua.yektanet.com/cookie/iframe/
Cookie: gearbox_ad_token=24eed04d-9c50-4e72-800a-fba65f48fdcc; analytics_global_token=24eed04d-9c50-4e72-800a-fba65f48fdcc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Fri, 25 Nov 2022 07:57:42 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-methods: GET
access-control-allow-credentials: true
set-cookie: gearbox_ad_token=24eed04d-9c50-4e72-800a-fba65f48fdcc; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Mon, 22-Nov-32 07:57:42 GMT
analytics_global_token=24eed04d-9c50-4e72-800a-fba65f48fdcc; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Mon, 22-Nov-32 07:57:42 GMT
last-modified: Friday, 25-Nov-2022 07:57:42 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2057
ar-atime: 0.196
ar-cache: BYPASS
ar-request-id: 06066edab4cec20f8957c28526f3f948
content-encoding: br
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-15659274-1&cid=75884588.1669363061&jid=1230364567&_u=YEBAAUAAAAAAACAAI~&z=674333540
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-15659274-1&cid=75884588.1669363061&jid=1230364567&_u=YEBAAUAAAAAAACAAI~&z=674333540
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-15659274-1&cid=75884588.1669363061&jid=1230364567&_u=YEBAAUAAAAAAACAAI~&z=674333540 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 07:57:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 65992aeb8efb9a0b8fd59687090733fe
526a2afccc93d32849185d153fafe44b72797df9
b6677984b6c3602d7b62df776158c09a3e57eec4c0edbddafb0624200715f10e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 07:57:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 163d4912a06d8358abc770dc0351d7b4
1e8dc04b95e704679ab729f81716466ea8a3e591
72245d178d481350af611804e557032ffb7bb3a3e8cdb83f3332a5ffba78d193
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 07:57:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.p30day.ir/wp-content/litespeed/js/3f5b6fdcc852bc0a1759e69461c21975.js?ver=21975
79.127.127.32200 OK 0 B URL HTTP/2 www.p30day.ir/wp-content/litespeed/js/3f5b6fdcc852bc0a1759e69461c21975.js?ver=21975
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/js/3f5b6fdcc852bc0a1759e69461c21975.js?ver=21975 HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: application/javascript
last-modified: Fri, 25 Nov 2022 07:57:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.p30day.ir/wp-content/litespeed/js/73cf842437aaa442c306024520a834ae.js?ver=834ae
79.127.127.32200 OK 0 B URL HTTP/2 www.p30day.ir/wp-content/litespeed/js/73cf842437aaa442c306024520a834ae.js?ver=834ae
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
Analyzer Verdict Alert fortinet Malware
GET /wp-content/litespeed/js/73cf842437aaa442c306024520a834ae.js?ver=834ae HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31557600
expires: Sat, 25 Nov 2023 13:57:40 GMT
content-type: application/javascript
last-modified: Fri, 25 Nov 2022 07:57:40 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 07:57:40 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
cdn.yektanet.com/rg_woebegone/scripts_v4/VwsLBz1w/complete.js?v=2022-11-25T07
185.166.104.4200 OK 0 B URL HTTP/2 cdn.yektanet.com/rg_woebegone/scripts_v4/VwsLBz1w/complete.js?v=2022-11-25T07
IP 185.166.104.4:0
ASN #202319 Avaye Hamrahe Houshmande Hezardastan PJSC
GET /rg_woebegone/scripts_v4/VwsLBz1w/complete.js?v=2022-11-25T07 HTTP/1.1
Host: cdn.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 25 Nov 2022 07:57:41 GMT
content-type: application/javascript; charset=utf-8
cache-tag: ua_VwsLBz1w,ua
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
last-modified: Tue, 18 Oct 2022 11:27:11 GMT
x-rgw-object-type: Normal
etag: W/"b9453f68a712e7c36bf65287ce78a022"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
x-zrk-us: 206
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2
www.p30day.ir/wp-admin/admin-ajax.php
79.127.127.32200 OK 0 B URL HTTP/2 www.p30day.ir/wp-admin/admin-ajax.php
IP 79.127.127.32:0
ASN #43754 Asiatech Data Transmission company
Analyzer Verdict Alert fortinet Malware
POST /wp-admin/admin-ajax.php HTTP/1.1
Host: www.p30day.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 22
Origin: https://www.p30day.ir
Connection: keep-alive
Referer: https://www.p30day.ir/%D8%A8%D8%A7%D8%B2%DB%8C-%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84/%D8%A8%D8%A7%D8%B2%DB%8C-%D8%A2%D9%86%D8%AF%D8%B1%D9%88%DB%8C%D8%AF
Cookie: _lscache_vary_p30day=075517b28fbcdec03abbb6838204cd18; PHPSESSID=a0afd62ba0884b08526c593e4e894876
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.p30day.ir
access-control-allow-credentials: true
x-robots-tag: noindex
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: image/png
x-litespeed-cache-control: no-cache
date: Fri, 25 Nov 2022 07:57:41 GMT
server: LiteSpeed
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
app.najva.com/static/js/scripts/p30day978-website-35101-f397efcf-b6f4-4d41-a2e7-b593844f163b.js?v=202201002507
104.21.77.178301 Moved Permanently 0 B URL HTTP/2 app.najva.com/static/js/scripts/p30day978-website-35101-f397efcf-b6f4-4d41-a2e7-b593844f163b.js?v=202201002507
IP 104.21.77.178:0
GET /static/js/scripts/p30day978-website-35101-f397efcf-b6f4-4d41-a2e7-b593844f163b.js?v=202201002507 HTTP/1.1
Host: app.najva.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.p30day.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
date: Fri, 25 Nov 2022 07:57:40 GMT
content-type: text/html
location: https://van.najva.com/static/js/scripts/p30day978-website-35101-f397efcf-b6f4-4d41-a2e7-b593844f163b.js?v=202201002507
cache-control: max-age=16070400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MbLGUrsnEw5sb%2F%2BMuk3OZxE9sbQ8pTpizPwOuJrf%2BcIU6EFG0h9hksoaA1YIIzjbDB73UUZrybS9O50eGLnTpLCdVV1JfszLmpAUAmq3HZK63%2BsJkslRAxkT1BELLoIU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f8d5b92f1cb51e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2