Overview

URLneyfilm.rozblog.com/cat/300
IP 79.127.127.68 (Iran)
ASN#43754 Asiatech Data Transmission company
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-30 01:58:38 UTC
StatusLoading report..
IDS alerts0
Blocklist alert9
urlquery alerts No alerts detected
Tags None

Domain Summary (19)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
native-scripts.yektanet.com (1) 0 2022-02-02 12:12:24 UTC 2022-11-29 23:56:25 UTC 185.143.233.120 Domain (yektanet.com) ranked at: 11839
cdn.yektanet.com (3) 33652 2017-04-17 04:51:03 UTC 2022-11-05 16:16:07 UTC 185.166.104.4
audience.yektanet.com (1) 36509 2019-05-31 01:44:29 UTC 2022-11-29 23:44:01 UTC 185.143.233.120
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 52.39.62.124
dvcasha2.ocsp-certum.com (1) 71753 2014-11-27 08:04:42 UTC 2020-02-10 00:10:06 UTC 23.36.79.10
nfetch.yektanet.com (2) 42439 2019-07-31 14:44:11 UTC 2022-10-29 21:29:13 UTC 87.107.144.247
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-29 17:10:57 UTC 34.117.237.239
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
rozblog.com (5) 202745 2012-05-23 18:13:34 UTC 2022-11-29 23:56:23 UTC 79.127.127.68
ua.yektanet.com (2) 35765 2018-05-19 12:52:10 UTC 2022-11-29 23:44:01 UTC 185.143.233.120
neyfilm.rozblog.com (13) 0 2013-05-04 05:05:07 UTC 2022-11-29 21:35:08 UTC 79.127.127.68 Domain (rozblog.com) ranked at: 202745
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-29 17:14:13 UTC 34.102.187.140
rozup.ir (25) 399364 2012-10-26 09:47:59 UTC 2022-11-29 14:22:01 UTC 79.127.127.67
www.rozblog.com (1) 0 2012-07-05 17:03:02 UTC 2022-11-29 11:43:15 UTC 79.127.127.68 Domain (rozblog.com) ranked at: 202745
plus.sabavision.com (1) 47422 2019-06-03 16:54:11 UTC 2022-11-29 23:56:24 UTC 185.147.178.24
native-removal.triboon.net (2) 44323 2021-11-03 09:51:11 UTC 2022-11-29 23:56:24 UTC 185.143.234.120
r3.o.lencr.org (11) 344 No data No data 23.36.76.226

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-30 2 neyfilm.rozblog.com/cat/300 Malware
2022-11-30 2 neyfilm.rozblog.com/temp/site.css?22 Malware
2022-11-30 2 neyfilm.rozblog.com/temp/default/script.js Malware
2022-11-30 2 neyfilm.rozblog.com/js/site.js?7 Malware
2022-11-30 2 neyfilm.rozblog.com/code/popup Malware
2022-11-30 2 neyfilm.rozblog.com/include/captcha/cap9.php Malware
2022-11-30 2 neyfilm.rozblog.com/images/refresh2.svg Malware
2022-11-30 2 neyfilm.rozblog.com/temp/tarahi/fonts/wdtv.woff Malware
2022-11-30 2 neyfilm.rozblog.com/temp/tarahi/fonts/yekanregular.woff Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 79.127.127.68
Date UQ / IDS / BL URL IP
2023-02-01 12:11:33 +0000 0 - 4 - 0 liverpool-1892.rozblog.com/cat/48 79.127.127.68
2023-01-31 02:59:43 +0000 0 - 0 - 1 mashhad-film.r98.ir/post/1085 79.127.127.68
2023-01-31 02:29:19 +0000 0 - 0 - 1 mashhad-film.r98.ir/archive/1390 79.127.127.68
2023-01-27 17:38:21 +0000 0 - 18 - 1 jen-roh.rozblog.com/post/159 79.127.127.68
2023-01-15 23:51:56 +0000 0 - 3 - 0 parsiax.rozblog.com/tag/%D8%B2%D9%86%D8%AF%DA (...) 79.127.127.68


Last 5 reports on ASN: Asiatech Data Transmission company
Date UQ / IDS / BL URL IP
2023-02-04 01:16:41 +0000 0 - 0 - 16 185.99.215.159/ 185.99.215.159
2023-02-03 21:39:25 +0000 0 - 3 - 2 37.156.146.163/PUB/Cisco/Voice/CUCM/12.5/UCSI (...) 37.156.146.163
2023-02-02 22:25:00 +0000 0 - 1 - 0 dl2.soft98.ir/soft/s/SysTweak.Advanced.Driver (...) 185.112.33.122
2023-02-02 18:47:14 +0000 0 - 2 - 0 ir31.uploadboy.com/d/tkfx7vshp749/rnnnmvgijdf (...) 185.49.85.25
2023-02-02 01:26:42 +0000 0 - 3 - 1 79.127.12.215/webplugin.exe 79.127.12.215


Last 5 reports on domain: rozblog.com
Date UQ / IDS / BL URL IP
2023-02-01 12:11:33 +0000 0 - 4 - 0 liverpool-1892.rozblog.com/cat/48 79.127.127.68
2023-01-27 17:38:21 +0000 0 - 18 - 1 jen-roh.rozblog.com/post/159 79.127.127.68
2023-01-15 23:51:56 +0000 0 - 3 - 0 parsiax.rozblog.com/tag/%D8%B2%D9%86%D8%AF%DA (...) 79.127.127.68
2023-01-14 12:42:14 +0000 0 - 0 - 1 mashhad-film.rozblog.com/tag/%D8%AF%D8%A7%D9% (...) 79.127.127.68
2023-01-11 14:31:06 +0000 0 - 0 - 1 mashhad-film.rozblog.com/tag/%D9%85%D8%B4%D8% (...) 79.127.127.68


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-12-14 00:00:19 +0000 0 - 0 - 9 neyfilm.rozblog.com/cat/578 79.127.127.68
2022-12-10 13:13:20 +0000 0 - 0 - 9 neyfilm.rozblog.com/cat/580 79.127.127.68
2022-12-10 04:37:41 +0000 0 - 0 - 9 neyfilm.rozblog.com/cat/526 79.127.127.68
2022-11-23 11:27:27 +0000 0 - 0 - 10 www.neyfilm.rozblog.com/cat/501 79.127.127.68
2023-01-05 03:27:28 +0000 0 - 0 - 9 neyfilm.rozblog.com/tag/%D8%AA%D9%85%D8%A7%D9 (...) 79.127.127.68

JavaScript

Executed Scripts (10)

Executed Evals (5)
#1 JavaScript::Eval (size: 10980) - SHA256: 031ecafe96eb132284d2dcb2f161becd7b6b2aad68de9f08b99ff0174a6aba83
function Fast_Register() {
    username_u = document.getElementById("username_f").value;
    password = document.getElementById("password_f").value;
    repassword = document.getElementById("repassword_f").value;
    email = document.getElementById("email_f").value;
    mobile = document.getElementById("mobile_f").value;
    name = document.getElementById("name_f").value;
    capt = document.getElementById("capt_f").value;
    var a;
    if (window.ActiveXObject) {
        a = new ActiveXObject("Microsoft.XMLHTTP")
    } else if (window.XMLHttpRequest) {
        a = new XMLHttpRequest
    }
    document.getElementById("loading_rate").style.display = "block";
    document.getElementById("loading_rate").innerHTML = "<img src=/images/load.gif>";
    var b = document.getElementById("fast_register").offsetWidth / 2;
    document.getElementById("loading_rate").style.position = "absolute";
    document.getElementById("loading_rate").style.background = "#FFF";
    document.getElementById("loading_rate").style.padding = "10px";
    document.getElementById("loading_rate").style.zIndex = 1e3;
    document.getElementById("loading_rate").style.border = "1px solid #999";
    document.getElementById("loading_rate").style.top = getElementPosition("fast_register").top + 60 + "px";
    document.getElementById("loading_rate").style.left = getElementPosition("fast_register").left + 10 + "px";
    a.onreadystatechange = function() {
        if (a.readyState == 4 && a.status == 200) {
            document.getElementById("loading_rate").style.padding = "0px";
            document.getElementById("loading_rate").style.border = "0px";
            if (window.ActiveXObject) {} else {
                document.getElementById("loading_rate").style.background = "none"
            }
            document.getElementById("loading_rate").innerHTML = a.responseText
        }
    };
    a.open("GET", "/Register_Ajax?f_register=1&757365726E616D65=" + username_u + "&70617373776F7264=" + password + "&726570617373776F7264=" + repassword + "&email=" + email + "&mobile=" + mobile + "&name=" + encodeURIComponent(name) + "&capt=" + capt, true);
    a.send()
}

function close_rate() {
    document.getElementById("loading_rate").style.display = "none"
}

function getElementPosition(a) {
    var b = document.getElementById(a);
    var c = 0;
    var d = 0;
    while (b) {
        c += b.offsetLeft;
        d += b.offsetTop;
        b = b.offsetParent
    }
    if (navigator.userAgent.indexOf("Mac") != -1 && typeof document.body.leftMargin != "undefined") {
        c += document.body.leftMargin;
        d += document.body.topMargin
    }
    return {
        left: c,
        top: d
    }
}

function Link_Auto() {
    var a;
    window.ActiveXObject ? a = new ActiveXObject("Microsoft.XMLHTTP") : window.XMLHttpRequest && (a = new XMLHttpRequest);
    var c = document.getElementById("linktitle").value,
        d = document.getElementById("linkurl").value,
        e = document.getElementById("capt_link").value,
        b = document.getElementById("loading_rate").style;
    b.display = "block";
    document.getElementById("loading_rate").innerHTML = "<img src=/images/load.gif>";
    var f = document.getElementById("rate_link").offsetWidth / 2;
    b.position = "absolute";
    b.background = "#FFF";
    b.padding = "5px";
    b.zIndex = 1E3;
    b.border = "1px solid #999";
    b.top = getElementPosition("rate_link").top + "px";
    b.left = getElementPosition("rate_link").left + f + "px";
    a.onreadystatechange = function() {
        4 == a.readyState && 200 == a.status && (html_ = "<div style=text-align:right;direction:rtl><img align=absbottom style=cursor:pointer; src=/images/close.gif onclick=close_rate()> ", document.getElementById("loading_rate").innerHTML = html_ + a.responseText + "</div>")
    };
    a.open("GET", "?Send_Link=1&ajax_link=1&linktitle=" + c + "&linkurl=" + d + "&capt_link=" + e, !0);
    a.send();
    return !1
};

function Login_Ajax() {
    rbuser_hh = document.getElementById("rbuser_hh").value;
    password = document.getElementById("password_hh").value;
    sec_code_5 = document.getElementById("sec_code_5").value;
    login = document.getElementById("login").value;
    var a;
    window.ActiveXObject ? a = new ActiveXObject("Microsoft.XMLHTTP") : window.XMLHttpRequest && (a = new XMLHttpRequest);
    load_rate = document.getElementById("loading_rate");
    load_rate.style.display = "block";
    load_rate.innerHTML = "<img src=/images/load.gif>";
    document.getElementById("login_ajax");
    load_rate.style.position = "absolute";
    load_rate.style.background = "#FFF";
    load_rate.style.padding = "5px";
    load_rate.style.zIndex = 1E3;
    load_rate.style.border = "1px solid #999";
    load_rate.style.top = getElementPosition("login_ajax").top + 10 + "px";
    load_rate.style.left = getElementPosition("login_ajax").left + 20 + "px";
    a.onreadystatechange = function() {
        if (4 == a.readyState && 200 == a.status) {
            if (a.responseText.indexOf("<ok>") > 0) {
                load_rate.style.padding = "0px";
                load_rate.style.border = "0px";
                document.getElementById("loading_rate").innerHTML = a.responseText;
                window.location.reload(), !0
            } else {
                load_rate.style.padding = "0px";
                load_rate.style.border = "0px";
                document.getElementById("loading_rate").innerHTML = a.responseText;
                return !1
            }
        }
    };
    a.open("GET", "/login_ajax?login_ajax=1&username=" + rbuser_hh + "&password=" + password + "&do=1" + "&sec_code_5=" + sec_code_5 + "&login=" + login, !0);
    a.send();
    return !1
};

function close_rate() {
    document.getElementById("loading_rate").style.display = "none"
}

function getElementPosition(a) {
    var b = document.getElementById(a);
    var c = 0;
    var d = 0;
    while (b) {
        c += b.offsetLeft;
        d += b.offsetTop;
        b = b.offsetParent
    }
    if (navigator.userAgent.indexOf("Mac") != -1 && typeof document.body.leftMargin != "undefined") {
        c += document.body.leftMargin;
        d += document.body.topMargin
    }
    return {
        left: c,
        top: d
    }
}

function RB_Register(a) {
    var b = document.createElement("iframe");
    b.setAttribute("id", "RB_Reg_iframe");
    b.setAttribute("name", "RB_Reg_iframe");
    b.setAttribute("width", "0");
    b.setAttribute("height", "0");
    b.setAttribute("border", "0");
    b.setAttribute("style", "width: 0; height: 0; border: none;");
    a.parentNode.appendChild(b);
    window.frames.RB_Reg_iframe.name = "RB_Reg_iframe";
    iframeId = document.getElementById("RB_Reg_iframe");
    var c = function() {
        iframeId.detachEvent ? iframeId.detachEvent("onload", c) : iframeId.removeEventListener("load", c, !1);
        iframeId.contentDocument ? content = iframeId.contentDocument.body.innerHTML : iframeId.contentWindow ? content = iframeId.contentWindow.document.body.innerHTML : iframeId.document && (content = iframeId.document.body.innerHTML);
        var a = content;
        document.getElementById("loading_rate").style.padding = "0px";
        document.getElementById("loading_rate").style.border = "0px";
        window.ActiveXObject || (document.getElementById("loading_rate").style.background = "none");
        document.getElementById("loading_rate").style.display = "none";
        document.getElementById("Error_Register").innerHTML = a;
        setTimeout("iframeId.parentNode.removeChild(iframeId)", 250)
    };
    iframeId.addEventListener && iframeId.addEventListener("load", c, !0);
    iframeId.attachEvent && iframeId.attachEvent("onload", c);
    a.setAttribute("target", "RB_Reg_iframe");
    a.setAttribute("action", "/register_ajax?f_register=1");
    a.setAttribute("method", "post");
    a.setAttribute("enctype", "multipart/form-data");
    a.setAttribute("encoding", "multipart/form-data");
    a.submit();
    document.getElementById("loading_rate").style.display = "block";
    document.getElementById("loading_rate").innerHTML = "<img src=/images/load.gif>";
    a = document.getElementById("Reg_weblog").offsetWidth / 2;
    document.getElementById("loading_rate").style.position = "absolute";
    document.getElementById("loading_rate").style.background = "#FFF";
    document.getElementById("loading_rate").style.padding = "10px";
    document.getElementById("loading_rate").style.zIndex = 1E3;
    document.getElementById("loading_rate").style.border = "1px solid #999";
    document.getElementById("loading_rate").style.top = getElementPosition("Reg_weblog").top + 60 + "px";
    document.getElementById("loading_rate").style.left = getElementPosition("Reg_weblog").left + a - 40 + "px"
};

function Comment_Ajax() {
    comment_n = document.getElementById("comment_n").value;
    comment_e = document.getElementById("comment_e").value;
    comment_s = document.getElementById("comment_s").value;
    comment_m = document.getElementById("message").value;
    comment_cp = document.getElementById("comment_cp");
    comment_cap = document.getElementById("comment_cap").value;
    p_b = document.getElementById("p_b").value;
    if (comment_cp.checked == true) {
        comment_cp = "on"
    } else {
        comment_cp = ""
    }
    var a;
    if (window.ActiveXObject) {
        a = new ActiveXObject("Microsoft.XMLHTTP")
    } else if (window.XMLHttpRequest) {
        a = new XMLHttpRequest
    }
    document.getElementById("comment_error").style.display = "block";
    document.getElementById("comment_error").innerHTML = "<center><img src=/images/load.gif></center><br />";
    a.onreadystatechange = function() {
        if (a.readyState == 4 && a.status == 200) {
            if (window.ActiveXObject) {} else {
                document.getElementById("loading_rate").style.background = "none"
            }
            document.getElementById("comment_error").innerHTML = a.responseText
        }
    };
    a.open("GET", "/comment_ajax?do_comment=1&name=" + encodeURIComponent(comment_n) + "&email=" + comment_e + "&site=" + comment_s + "&message=" + encodeURIComponent(comment_m) + "&cp=" + comment_cp + "&captcha=" + comment_cap + "&p_b=" + p_b, true);
    a.send();
    return false
}

function close_rate() {
    document.getElementById("loading_rate").style.display = "none"
}

function getElementPosition(a) {
    var b = document.getElementById(a);
    var c = 0;
    var d = 0;
    while (b) {
        c += b.offsetLeft;
        d += b.offsetTop;
        b = b.offsetParent
    }
    if (navigator.userAgent.indexOf("Mac") != -1 && typeof document.body.leftMargin != "undefined") {
        c += document.body.leftMargin;
        d += document.body.topMargin
    }
    return {
        left: c,
        top: d
    }
}

function RB_Contact(a) {
    var b = document.createElement("iframe");
    b.setAttribute("id", "RB_Reg_iframe");
    b.setAttribute("name", "RB_Reg_iframe");
    b.setAttribute("width", "0");
    b.setAttribute("height", "0");
    b.setAttribute("border", "0");
    b.setAttribute("style", "width: 0; height: 0; border: none;");
    a.parentNode.appendChild(b);
    window.frames.RB_Reg_iframe.name = "RB_Reg_iframe";
    iframeId = document.getElementById("RB_Reg_iframe");
    var c = function() {
        iframeId.detachEvent ? iframeId.detachEvent("onload", c) : iframeId.removeEventListener("load", c, !1);
        iframeId.contentDocument ? content = iframeId.contentDocument.body.innerHTML : iframeId.contentWindow ? content = iframeId.contentWindow.document.body.innerHTML : iframeId.document && (content = iframeId.document.body.innerHTML);
        var a = content;
        document.getElementById("loading_rate").style.padding = "0px";
        document.getElementById("loading_rate").style.border = "0px";
        window.ActiveXObject || (document.getElementById("loading_rate").style.background = "none");
        document.getElementById("loading_rate").style.display = "none";
        document.getElementById("error_contact").innerHTML = a;
        setTimeout("iframeId.parentNode.removeChild(iframeId)", 250)
    };
    iframeId.addEventListener && iframeId.addEventListener("load", c, !0);
    iframeId.attachEvent && iframeId.attachEvent("onload", c);
    a.setAttribute("target", "RB_Reg_iframe");
    a.setAttribute("action", "/?ajax_contact=1");
    a.setAttribute("method", "post");
    a.setAttribute("enctype", "multipart/form-data");
    a.setAttribute("encoding", "multipart/form-data");
    a.submit();
    document.getElementById("loading_rate").style.display = "block";
    document.getElementById("loading_rate").innerHTML = "<img src=/images/load.gif>";
    a = document.getElementById("Contact_Site").offsetWidth / 2;
    document.getElementById("loading_rate").style.position = "absolute";
    document.getElementById("loading_rate").style.background = "#FFF";
    document.getElementById("loading_rate").style.padding = "10px";
    document.getElementById("loading_rate").style.zIndex = 1E3;
    document.getElementById("loading_rate").style.border = "1px solid #999";
    document.getElementById("loading_rate").style.top = getElementPosition("Contact_Site").top + 60 + "px";
    document.getElementById("loading_rate").style.left = getElementPosition("Contact_Site").left + a - 40 + "px"
};
#2 JavaScript::Eval (size: 1075) - SHA256: 40c9e9a1616f3e08ffcf70b1397aee92d79f93c497c564d1dec8a6ad3c2cf08f
function getElementPosition(a) {
    a = document.getElementById(a);
    for (var b = 0, c = 0; a;) b += a.offsetLeft, c += a.offsetTop, a = a.offsetParent; - 1 != navigator.userAgent.indexOf("Mac") && "undefined" != typeof document.body.leftMargin && (b += document.body.leftMargin, c += document.body.topMargin);
    return {
        left: b,
        top: c
    }
}

function Forum_Page(a) {
    var b = document.getElementById("forum_post_block").offsetWidth / 2,
        c = document.getElementById("forum_post_block").offsetHeight / 2;
    document.getElementById("loading").style.position = "absolute";
    document.getElementById("loading").style.top = getElementPosition("forum_post_block").top + c - 40;
    document.getElementById("loading").style.left = getElementPosition("forum_post_block").left + b - 40;
    document.getElementById("loading").style.display = "block";
    var d;
    d = window.XMLHttpRequest ? new XMLHttpRequest : new ActiveXObject("Microsoft.XMLHTTP");
    d.onreadystatechange = function() {
        4 == d.readyState && 200 == d.status && (document.getElementById("loading").style.display = "none", document.getElementById("forum_post_block").innerHTML = d.responseText)
    };
    d.open("GET", "/Fm_Page/" + a, !0);
    d.send();
    return !1
};
#3 JavaScript::Eval (size: 3074) - SHA256: 98c2ea69de2b0ea6e68b052239f45dc9f290822601ba7ac54831c347296a8428
function load_ajax(b, c) {
    var a = document.createElement("iframe");
    a.setAttribute("id", "RB_Reg_iframe");
    a.setAttribute("name", "RB_Reg_iframe");
    a.setAttribute("width", "0");
    a.setAttribute("height", "0");
    a.setAttribute("border", "0");
    a.setAttribute("style", "width: 0; height: 0; border: none;");
    b.parentNode.appendChild(a);
    window.frames.RB_Reg_iframe.name = "RB_Reg_iframe";
    iframeId = document.getElementById("RB_Reg_iframe");
    var d = function() {
        iframeId.detachEvent ? iframeId.detachEvent("onload", d) : iframeId.removeEventListener("load", d, !1);
        iframeId.contentDocument ? content = iframeId.contentDocument.body.innerHTML : iframeId.contentWindow ? content = iframeId.contentWindow.document.body.innerHTML : iframeId.document && (content = iframeId.document.body.innerHTML);
        var a = content.split(",");
        document.getElementById("loading_t").style.padding = "0px";
        document.getElementById("loading_t").style.border = "0px";
        document.getElementById("loading_t").style.background = "none";
        "success" == a[0] && (document.getElementById("comment_form").style.display = "none");
        document.getElementById("error_a").style.display = "none";
        document.getElementById("loading_t").innerHTML = "" + a[1] + "</div>";
        setTimeout("iframeId.parentNode.removeChild(iframeId)", 250)
    };
    iframeId.addEventListener && iframeId.addEventListener("load", d, !0);
    iframeId.attachEvent && iframeId.attachEvent("onload", d);
    b.setAttribute("target", "RB_Reg_iframe");
    b.setAttribute("action", c);
    b.setAttribute("method", "post");
    b.setAttribute("enctype", "multipart/form-data");
    b.setAttribute("encoding", "multipart/form-data");
    b.submit();
    var a = window,
        e = document,
        f = e.documentElement,
        g = e.getElementsByTagName("body")[0],
        e = a.innerWidth || f.clientWidth || g.clientWidth,
        a = a.innerHeight || f.clientHeight || g.clientHeight;
    document.getElementById("error_a").style.display = "block";
    document.getElementById("error_a").innerHTML = "<center><img src=/images/load.gif></center>";
    document.getElementById("error_a").style.position = "fixed";
    document.getElementById("error_a").style.background = "#FFF";
    document.getElementById("error_a").style.padding = "10px";
    document.getElementById("error_a").style.zIndex = 1E3;
    document.getElementById("error_a").style.border = "1px solid #999";
    document.getElementById("error_a").style.top = a / 2 + "px";
    document.getElementById("error_a").style.right = e / 2 - 40 + "px"
}

function Show_Smiles() {
    $Smiles = document.getElementById("slimes").style;
    $Smiles.display = "block";
    var b = pos_div("show_smiles");
    $Smiles.left = b[0] - 7 + "px";
    $Smiles.top = b[1] + 25 + "px"
}

function pos_div(b) {
    o = document.getElementById(b);
    for (var c = o.offsetLeft, a = o.offsetTop; o = o.offsetParent;) c += o.offsetLeft;
    for (o = document.getElementById(b); o = o.offsetParent;) a += o.offsetTop;
    return [c, a]
}

function SM(b) {
    document.getElementById("message").value += b
}

function Del_Cooki() {
    document.cookie = "name_c=; expires=Thu, 01 Jan 1970 00:00:00 GMT;path=/";
    document.cookie = "email_c=; expires=Thu, 01 Jan 1970 00:00:00 GMT;path=/";
    document.cookie = "site_c=; expires=Thu, 01 Jan 1970 00:00:00 GMT;path=/";
    document.getElementById("comment_n").value = "";
    document.getElementById("comment_e").value = "";
    document.getElementById("comment_s").value = "";
    alert(text_6)
};
#4 JavaScript::Eval (size: 1603) - SHA256: 32f013e30bcce20d5d76157a69ab970b290870d08c24c5a651ef5a4147f7c64d
function close_rate_m() {
    document.getElementById("resualt_mail").style.display = "none"
}

function Register_Mail(id) {
    var id;
    var ssmail = document.getElementById("smail").value;
    var sec_code_mail = document.getElementById("sec_code_mail").value;
    var xmlhttp;
    if (window.ActiveXObject) {
        xmlhttp = new ActiveXObject("Microsoft.XMLHTTP")
    } else if (window.XMLHttpRequest) {
        xmlhttp = new XMLHttpRequest()
    };
    xmlhttp.onreadystatechange = function() {
        document.getElementById("load_mail").style.display = "block";
        if (xmlhttp.readyState == 4) {
            document.getElementById("load_mail").style.display = "none";
            document.getElementById("resualt_mail").style.display = "block";
            html_ = "<div style=text-align:right;direction:rtl;><img align=absbottom style=cursor:pointer; src=/images/close.gif onclick=close_rate_m()> ";
            if (xmlhttp.responseText == 1) {
                document.getElementById("resualt_mail").innerHTML = html_ + Mail_txt1 + "</div>"
            } else if (xmlhttp.responseText == 2) {
                document.getElementById("resualt_mail").innerHTML = html_ + Mail_txt2 + "</div>"
            } else if (xmlhttp.responseText == 3) {
                document.getElementById("resualt_mail").innerHTML = html_ + Mail_txt3 + " </div>"
            } else if (xmlhttp.responseText == 4) {
                document.getElementById("resualt_mail").innerHTML = html_ + Mail_txt4 + "</div>"
            } else if (xmlhttp.responseText == 5) {
                document.getElementById("resualt_mail").innerHTML = html_ + Mail_txt5 + "</div>"
            } else if (xmlhttp.responseText == 6) {
                document.getElementById("resualt_mail").innerHTML = html_ + Mail_txt6 + "</div>"
            } else {
                document.getElementById("resualt_mail").innerHTML = xmlhttp.responseText
            }
        }
    };
    xmlhttp.open("GET", "?reg_mail=1&rmail=" + ssmail + "&type_mail=" + id + "&sec_code_mail=" + sec_code_mail, true);
    xmlhttp.send()
}
#5 JavaScript::Eval (size: 142) - SHA256: 818d91b37b1e996c8afdfd05018b5780ff2be46b14430eaf5a166463bfe2f0c3
function Display_smiles(id) {
    var e = document.getElementById(id);
    if (e.style.display == "block") e.style.display = "none";
    else e.style.display = "block"
}

Executed Writes (0)


HTTP Transactions (81)


Request Response
                                        
                                            GET /cat/300 HTTP/1.1 
Host: neyfilm.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         79.127.127.68
HTTP/1.1 200 OK
content-type: text/html; charset=utf-8
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
set-cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-language: fa
vary: Accept-Encoding,User-Agent
transfer-encoding: chunked
content-encoding: gzip
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1574), with CRLF, LF line terminators
Size:   10756
Md5:    f356d12c12d0832a88da4e66afd44fe1
Sha1:   76e510e61461e3ab61bb45d205b3cdf863e4684e
Sha256: 5a3dadc476501376522b849fbc336bc1b7ffb26d13a0ab9f266641748e48c6ac

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "8EED57C91B42EF7B2D5EFF1309E306E23E13C3DE21219AF24A693CBF3E8977FC"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3690
Expires: Wed, 30 Nov 2022 02:59:57 GMT
Date: Wed, 30 Nov 2022 01:58:27 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A3EC545A8F9364AC9062EDDB41279E1465687A1B60F9C1DEC6B3A3DF8B033EB3"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6541
Expires: Wed, 30 Nov 2022 03:47:28 GMT
Date: Wed, 30 Nov 2022 01:58:27 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: C5uQvVwHG7C6hd/qcMx2IuWMIL78jtPTmY3LtoXjcejuyd2i3dH0b1lSzFZYxhTqT/cdPFQvxNw=
x-amz-request-id: GPZCCAB7Q75H5EBS
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 30 Nov 2022 01:45:02 GMT
age: 805
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /temp/site.css?22 HTTP/1.1 
Host: neyfilm.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/300
Cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4

search
                                         79.127.127.68
HTTP/1.1 200 OK
content-type: text/css
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 30 Dec 2022 01:58:27 GMT
last-modified: Wed, 02 Mar 2022 08:28:27 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 3945
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;


--- Additional Info ---
Magic:  ASCII text, with very long lines (860)
Size:   3945
Md5:    787a6674aa05de4919a7c90cdbb150c9
Sha1:   2159cc3ec669621f05f361bd91b956e573faef9a
Sha256: e234a5881c33e5ff75519381140d07f15611e92efbb0bb45ecf73437048d376c

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Accept-Ranges: bytes
Age: 4703
Cache-Control: public, max-age=1209600
Date: Wed, 30 Nov 2022 01:58:27 GMT
Etag: "638651c5-37"
Last-Modified: Tue, 29 Nov 2022 18:39:01 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 55


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   55
Md5:    9f073354411bbaf7a319b1519f10b4b7
Sha1:   571498f38548829bf186f49f5be9d5fa6e689a68
Sha256: 4a7aaaa1c093dee8a191d4469c9f701c5e62e88896bc778a13cc4ffedf9be89a
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 30 Nov 2022 01:19:38 GMT
cache-control: public,max-age=3600
age: 2329
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            GET /temp/tarahi/styles.css HTTP/1.1 
Host: neyfilm.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/300
Cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4

search
                                         79.127.127.68
HTTP/1.1 200 OK
content-type: text/css
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 30 Dec 2022 01:58:27 GMT
last-modified: Tue, 15 Feb 2022 00:08:30 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 6091
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text
Size:   6091
Md5:    28cf21c53411f845b0888677cbc74828
Sha1:   25bf3bc9920ad37a3f81d88e46001cab51eea3f6
Sha256: d18ec6839084bfa3a36008f9f5f03cf0de9c8c656677aac9a5a62c2b6890f5ab
                                        
                                            GET /temp/default/script.js HTTP/1.1 
Host: neyfilm.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/300
Cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4

search
                                         79.127.127.68
HTTP/1.1 200 OK
content-type: application/javascript
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Wed, 07 Dec 2022 01:58:27 GMT
last-modified: Wed, 18 Jul 2018 10:51:39 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 302
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;


--- Additional Info ---
Magic:  ASCII text
Size:   302
Md5:    f63434fb5b29fa6044b1a1e30e6c1162
Sha1:   2e7ada06c79c670f0dff3bd7d0474d07c49104e0
Sha256: a9396929db33b5a927292dc2e2f33891c594811b1b37dd993abbc9db9afbb7cb

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /js/site.js?7 HTTP/1.1 
Host: neyfilm.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/300
Cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4

search
                                         79.127.127.68
HTTP/1.1 200 OK
content-type: application/javascript
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Wed, 07 Dec 2022 01:58:27 GMT
last-modified: Sat, 14 May 2022 01:34:44 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 9422
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (5730)
Size:   9422
Md5:    3a9e608b97ff4d23f8a1649f24b6ed66
Sha1:   794e50a615ef78e2f2bd7616c7d9e033fc4bbe9d
Sha256: 82faf31dfa45299d23061f2c05579901ca592090ce35f1dc48a6ff61f24ac28a

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /code/popup HTTP/1.1 
Host: neyfilm.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/300
Cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4

search
                                         79.127.127.68
HTTP/1.1 200 OK
content-type: text/html; charset=charset
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-language: fa
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Wed, 30 Nov 2022 01:58:27 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: pop_id=11095%2C; expires=Wed, 30-Nov-2022 13:58:27 GMT; Max-Age=43200; path=/ c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; expires=Thu, 01-Dec-2022 01:58:27 GMT; Max-Age=86400; path=/ c_t=367626386b8c395160593047150774327107; expires=Thu, 01-Dec-2022 01:58:27 GMT; Max-Age=86400; path=/
vary: Accept-Encoding,User-Agent
content-length: 1180
content-encoding: gzip
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;


--- Additional Info ---
Magic:  ASCII text
Size:   1180
Md5:    6cf949584b4421ba81caf35b73a51ecf
Sha1:   0d78cad48e829f9251f34c42d523d2f5b83f8c60
Sha256: 277b7c2e300ea218046fe1329a244abbf41c487e8d11c49b3d2caeffb0dfbdb9

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Wed, 30 Nov 2022 01:58:27 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /weblog/file/loading/88.gif HTTP/1.1 
Host: neyfilm.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/300
Cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4

search
                                         79.127.127.68
HTTP/1.1 200 OK
content-type: image/gif
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 30 Nov 2023 01:58:27 GMT
last-modified: Thu, 02 Feb 2012 21:52:24 GMT
accept-ranges: bytes
content-length: 5972
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent


--- Additional Info ---
Magic:  GIF image data, version 89a, 50 x 50\012- data
Size:   5972
Md5:    093445ee241c72e6dca01dc570c230dc
Sha1:   32adb71ec06b5d29ec62c5511328d5970228b86d
Sha256: d40495f2a0e830c47fe4cd50574c68e206292f63545a0684516db0cd8716ee0e
                                        
                                            GET /images/no_image.png HTTP/1.1 
Host: neyfilm.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/300
Cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4

search
                                         79.127.127.68
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 30 Nov 2023 01:58:27 GMT
last-modified: Sat, 12 Jan 2013 13:14:07 GMT
accept-ranges: bytes
content-length: 6278
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   6278
Md5:    5c675d607343c154f0ef074dc145988a
Sha1:   2f3713c21ed04a225f16439b200e2b2a6062454e
Sha256: 2e8f7285f7325ed8db6a0d253158db2c8962125173a1e6973e8fcb39a325a7ba
                                        
                                            GET /include/captcha/cap9.php HTTP/1.1 
Host: neyfilm.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/300
Cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4

search
                                         79.127.127.68
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-length: 1952
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent


--- Additional Info ---
Magic:  PNG image data, 100 x 30, 8-bit/color RGB, non-interlaced\012- data
Size:   1952
Md5:    85ef9d75ad45afef504e599e7f80f536
Sha1:   d4d9f5ea106de8dd1cdc09d6007fecc1f42ffb07
Sha256: 3307b5798757648145eccc3b50aa25a585bce9e8303732f88be1586140dcb3c3

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /temp/pro/ads_468.jpg HTTP/1.1 
Host: rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/

search
                                         79.127.127.68
HTTP/1.1 200 OK
content-type: image/jpeg
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 30 Nov 2023 01:58:27 GMT
last-modified: Fri, 20 Feb 2015 09:52:01 GMT
accept-ranges: bytes
content-length: 6286
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: "LEAD Technologies Inc. V1.01", baseline, precision 8, 468x60, components 3\012- data
Size:   6286
Md5:    db8cac5e50e0f1be65a3ec0756ea6612
Sha1:   3053609e1039ab6d0d0be6adefeaf7ba7a243cf6
Sha256: 8f10f1e719bda34ecfc3af6b50f8273e9c9676d10612eff12aad2382d458ef1d
                                        
                                            GET /images/refresh2.svg HTTP/1.1 
Host: neyfilm.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/300
Cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4

search
                                         79.127.127.68
HTTP/1.1 200 OK
content-type: image/svg+xml
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Wed, 07 Dec 2022 01:58:27 GMT
last-modified: Wed, 28 Apr 2021 22:57:34 GMT
etag: "114-6089e85e-9f2e18d89b796b95;;;"
accept-ranges: bytes
content-length: 276
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Size:   276
Md5:    7082e86e2a3c9646fa1aa922b8e3a2d6
Sha1:   7f704127e872b5b94b8e2dd7959e2d5c9b9379a8
Sha256: d1254b0bb9112500f8f39e1130f0a6c8dca1037d416e7f7d6524894b31b06b00

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0128C255EBD7C3AF4A564D12CC91CAEA143B9631DB5D7A47A1ACD752F2CAF322"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11983
Expires: Wed, 30 Nov 2022 05:18:10 GMT
Date: Wed, 30 Nov 2022 01:58:27 GMT
Connection: keep-alive

                                        
                                            GET /temp/nuke/FBarrow.gif HTTP/1.1 
Host: rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/

search
                                         79.127.127.68
HTTP/1.1 200 OK
content-type: image/gif
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 30 Nov 2023 01:58:27 GMT
last-modified: Sat, 26 Nov 2011 12:58:49 GMT
accept-ranges: bytes
content-length: 59
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent


--- Additional Info ---
Magic:  GIF image data, version 89a, 9 x 9\012- data
Size:   59
Md5:    08f58683f752ec50ab890d4162cf9a03
Sha1:   2a0e3923b77ab35c273bf5307fc980f4d4de42fe
Sha256: d8359b38e288d654bf46c6c01ea58f896a998390f848ca99eb4015900f1cdb42
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0128C255EBD7C3AF4A564D12CC91CAEA143B9631DB5D7A47A1ACD752F2CAF322"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11983
Expires: Wed, 30 Nov 2022 05:18:10 GMT
Date: Wed, 30 Nov 2022 01:58:27 GMT
Connection: keep-alive

                                        
                                            GET /temp/music3/MTForumBlock_row_over.png HTTP/1.1 
Host: rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/

search
                                         79.127.127.68
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 30 Nov 2023 01:58:27 GMT
last-modified: Sun, 03 Jul 2011 21:44:44 GMT
accept-ranges: bytes
content-length: 139
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent


--- Additional Info ---
Magic:  PNG image data, 1 x 18, 8-bit/color RGB, non-interlaced\012- data
Size:   139
Md5:    1fd885e3d0a8fc062470706ae84ea56b
Sha1:   f0e6c850b1794c523ca16bf087054cb843daf6fa
Sha256: e0dc411ff39139fd39b2cf6d027ab2d56fbd3b51bacc0935e1ae284e65c64e40
                                        
                                            GET /temp/tarahi/fonts/wdtv.woff HTTP/1.1 
Host: neyfilm.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/temp/tarahi/styles.css
Cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4; pop_id=11095%2C; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=367626386b8c395160593047150774327107

search
                                         79.127.127.68
HTTP/1.1 200 OK
content-type: font/woff
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 02 Dec 2022 01:58:27 GMT
last-modified: Thu, 26 Feb 2015 19:00:22 GMT
etag: "3938-54ef6d46-daf654b8921ad10f;;;"
accept-ranges: bytes
content-length: 14648
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 14648, version 1.0\012- data
Size:   14648
Md5:    259c4490256daceb6a5f275cee137627
Sha1:   5c0eae14870f1ec6527aa64f3f675cb9063034ee
Sha256: bd4bdb99aa4a1cf56a05d7a913dce42b23b4cb021148b0a0f22d836105d98fc5

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /temp/rang/like.png HTTP/1.1 
Host: rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/

search
                                         79.127.127.68
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 30 Nov 2023 01:58:27 GMT
last-modified: Sat, 14 Feb 2015 11:52:19 GMT
accept-ranges: bytes
content-length: 2272
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent


--- Additional Info ---
Magic:  PNG image data, 22 x 42, 8-bit/color RGBA, non-interlaced\012- data
Size:   2272
Md5:    dd370ffbcd679da0d5c8547f34c6e2fb
Sha1:   6df3b9ec0e82b1a6ef41bc83041d2b2e16200077
Sha256: 2f14531974b17d9fd89de532694faf69ed7aa61b04ea990108b138d772ba96f7
                                        
                                            GET /temp/music3/MTForumBlock_row.png HTTP/1.1 
Host: rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/

search
                                         79.127.127.68
HTTP/1.1 200 OK
content-type: image/png
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 30 Nov 2023 01:58:27 GMT
last-modified: Sun, 03 Jul 2011 21:45:04 GMT
accept-ranges: bytes
content-length: 155
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent


--- Additional Info ---
Magic:  PNG image data, 1 x 18, 8-bit/color RGB, non-interlaced\012- data
Size:   155
Md5:    3ae7d651d73f3b247f9737655c53e08e
Sha1:   476c9a585906552a1054a74f88de640142ce40f5
Sha256: d5496cde5cf105a1cf8c8fe59e0efefba5859a4fbff07a4701ec4f4a7c6e5ac5
                                        
                                            GET /temp/tarahi/fonts/yekanregular.woff HTTP/1.1 
Host: neyfilm.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/temp/tarahi/styles.css
Cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4; pop_id=11095%2C; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=367626386b8c395160593047150774327107

search
                                         79.127.127.68
HTTP/1.1 200 OK
content-type: font/woff
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 02 Dec 2022 01:58:27 GMT
last-modified: Thu, 26 Feb 2015 19:00:25 GMT
etag: "53fc-54ef6d49-80b982f1d7ce7ee2;;;"
accept-ranges: bytes
content-length: 21500
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent


--- Additional Info ---
Magic:  Web Open Font Format, CFF, length 21500, version 2.0\012- data
Size:   21500
Md5:    05727d32400b2008acbf7fc49251ede0
Sha1:   b6c1a82539a2531eb1aad7d1cf05554d5a999154
Sha256: da78e001fab6f5d7b1c68e17d00fb1595c9b10085d6769a86aeb6a39dc7e43d6

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /up/neyfilm/Pishnehadi/%D9%81%DB%8C%D9%84%D9%85-%D8%A7%DB%8C%D8%B1%D8%A7%D9%86%DB%8C.png HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:26 GMT
Content-Length: 1837
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-72d"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Size:   1837
Md5:    d374b5e228b80c66ab9efa2539fe77e5
Sha1:   4333b4566a54d5f359ff14ac6198ad87bdd494a7
Sha256: f72e96a56633fc5a48ae42b41477cc82aec1a3b82d5cdbf2d83913c2cb964805
                                        
                                            GET /up/neyfilm/Pishnehadi/%D8%A7%DB%8C%D8%B1%D8%A7%D9%86%D8%B3%D9%84.png HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:26 GMT
Content-Length: 1924
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-784"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Size:   1924
Md5:    d10a8dcd31f75b6398401268901111cf
Sha1:   52a2051f5204351e4913171d9c84feb7aedc6292
Sha256: 9d3a20aa83028843d3c8638584e54615cdf9f0dcdbd838cfe3739bedcbf73de1
                                        
                                            GET /up/neyfilm/Pishnehadi/%D9%85%D9%88%D8%B2%DB%8C%DA%A9-%D9%88%DB%8C%D8%AF%DB%8C%D9%88.png HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:26 GMT
Content-Length: 1823
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-71f"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Size:   1823
Md5:    c8e85fd80b37039786d675e208fbf738
Sha1:   a29c317df996992ceb50ac3b404c1ee78ba77b14
Sha256: a22c9f1b49635541f6207fd2d548078373d980b0f0f12e833b8382df987c7e8d
                                        
                                            GET /temp/tarahi/fonts/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1 
Host: neyfilm.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/temp/tarahi/styles.css
Cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4; pop_id=11095%2C; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=367626386b8c395160593047150774327107

search
                                         79.127.127.68
HTTP/1.1 200 OK
content-type: font/woff
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 02 Dec 2022 01:58:27 GMT
last-modified: Thu, 26 Feb 2015 19:00:20 GMT
etag: "ffac-54ef6d44-11fea27943efc11b;;;"
accept-ranges: bytes
content-length: 65452
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 65452, version 1.0\012- data
Size:   65452
Md5:    d95d6f5d5ab7cfefd09651800b69bd54
Sha1:   7d65e0227d0d7cdc1718119cd2a7dce0638f151c
Sha256: 199411f659f41aaccb959bacb1b0de30e54f244352a48c6f9894e65ae0f8a9a1
                                        
                                            GET /up/neyfilm/ALIZARANDI/axenarmafzar/vlc-player-100x100.png HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:26 GMT
Content-Length: 9646
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-25ae"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   9646
Md5:    4ff98c2c912b58c49d9dcdd8efa7f355
Sha1:   ed2a816b81ac32bcb590b02679c8178e97590458
Sha256: fb5ce6eefde1ab8db11311213b11bd09de4388b557f2985f70f22769de52e47e
                                        
                                            GET /up/neyfilm/ALIZARANDI/axenarmafzar/Firefox-37-100x100.png HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:26 GMT
Content-Length: 16114
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-3ef2"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   16114
Md5:    ceef5adb5e29d1f961ee6664fbe09e38
Sha1:   b145852a8dc3ca9fbe950808c4404e97d5c0fa95
Sha256: 8c03ac20400e7191a57a8f5901d2a69f2a0a97cc610b6d081d0abdcff17ead5d
                                        
                                            GET /up/neyfilm/ALIZARANDI/uc_1359.png HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Length: 4265
Last-Modified: Thu, 23 Apr 2015 15:03:48 GMT
Connection: keep-alive
ETag: "553909d4-10a9"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 300 x 45, 8-bit colormap, non-interlaced\012- data
Size:   4265
Md5:    a82be12fddef1b066a5b6fa4b23f6069
Sha1:   2da26d09c759bba1f3ed9953cba6fd53daa61baa
Sha256: b635f006fe79bc69a5829eca84804f0ac7bb272e12f6617a08fe1a3750da248d
                                        
                                            GET /up/neyfilm/ALIZARANDI/uc_886.jpg HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:26 GMT
Content-Length: 79552
Last-Modified: Wed, 22 Apr 2015 17:02:20 GMT
Connection: keep-alive
ETag: "5537d41c-136c0"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0 ME, datetime=2012:10:06 15:08:24], progressive, precision 8, 450x350, components 3\012- data
Size:   79552
Md5:    7bb099bab559328fc8d97c3c5726d8b5
Sha1:   21da02c63ea5568ac511063bf354e1ca0b25e69b
Sha256: 6674025cc2a7f9f4b338b4529f8f22927ca6fc646ceca0326808e0fbe8366df2
                                        
                                            GET /up/neyfilm/Pishnehadi/%D8%A2%D9%84%D8%A8%D9%88%D9%85.png HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Length: 1544
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-608"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Size:   1544
Md5:    eb09df11c673284e3303417a2e38a317
Sha1:   e8b564163cb716510ec812558bedce451b327ad2
Sha256: 0ecc84565303a256741b84151272ad7312d07ea486315565418b86912c69297f
                                        
                                            GET /up/neyfilm/Pishnehadi/%D8%AA%DA%A9-%D8%A2%D9%87%D9%86%DA%AF.png HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Length: 1648
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-670"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Size:   1648
Md5:    b75b545ac71d9dd520ea52b8927964db
Sha1:   173f3df176f22006216c8d04e87c11dff35c62f0
Sha256: a0af35eb593109fcc4cd4427a9d4c6c159ff326c42612ae546d06cd2c9d656b7
                                        
                                            GET /up/neyfilm/ALIZARANDI/uc_2215.jpg HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Length: 55243
Last-Modified: Wed, 22 Apr 2015 16:56:41 GMT
Connection: keep-alive
ETag: "5537d2c9-d7cb"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 450x350, components 3\012- data
Size:   55243
Md5:    2bbae22da0bdf6880f41662c6ba92a67
Sha1:   298db2ff444800bd6e193f389a4c061b00f7fac1
Sha256: 0801d5bb892e6fc8c84680a4301bc711566e9313dcae29439280ffd7dbc42ef6
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 30 Nov 2022 01:08:56 GMT
cache-control: public,max-age=3600
age: 2972
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /up/neyfilm/Pishnehadi/%D8%A7%D8%AE%D8%A8%D8%A7%D8%B1-%D9%85%D9%88%D8%B3%DB%8C%D9%82%DB%8C.png HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Length: 1817
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-719"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Size:   1817
Md5:    d3274f11b841f3746d838d3970b4f76d
Sha1:   a2ea2e11a47ee418787f0dae95ba2ff6544576a2
Sha256: a35522b12cf4248a86c2b7183fa893c750a635a0fad8a11186084113d71e4598
                                        
                                            GET /up/neyfilm/Pishnehadi/%D8%A2%D8%B1%D8%B4%DB%8C%D9%88-%D8%B3%D8%B1%DB%8C%D8%A7%D9%84.png HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Length: 1892
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-764"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Size:   1892
Md5:    ed8ea3e5b5d48d4b2399e795d03a2552
Sha1:   edd02a3f45839dfd3ce791812101db7885dcd24b
Sha256: 17949d9d0af7f8b9c1b03c9ab7dd16b299eada335e0fe569770482472ee1afec
                                        
                                            GET /up/neyfilm/Pishnehadi/%D8%B3%D8%B1%DB%8C%D8%A7%D9%84.png HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Length: 1781
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-6f5"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Size:   1781
Md5:    74129318d41ce8423b398eb065ca602e
Sha1:   729a39c43ac02096ae498aeb81bbbc8ef6037e77
Sha256: 7eb0ecc1747e9764403efca2dd8ef549290722622ddf6a5698a122cc14dc2f20
                                        
                                            GET /up/neyfilm/ALIZARANDI/%D8%B4%D8%A7%D9%BE.jpg HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Length: 96193
Last-Modified: Wed, 22 Apr 2015 16:54:41 GMT
Connection: keep-alive
ETag: "5537d251-177c1"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2015:04:22 21:18:35], baseline, precision 8, 500x200, components 3\012- data
Size:   96193
Md5:    a79cd97fefcaae507b0e318118f5eca7
Sha1:   9ce2679f1c62daca1f42a4153897e59204a92cf8
Sha256: 082823c4a671332c70ceb39c1c207b1c047472fe9881141819c6d455e4ddc089
                                        
                                            GET /up/neyfilm/Pishnehadi/%D9%81%DB%8C%D9%84%D9%85-%D8%AE%D8%A7%D8%B1%D8%AC%DB%8C.png HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Length: 1757
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-6dd"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Size:   1757
Md5:    2a02e9f195f2080b3a80b78139c02cc1
Sha1:   5cf949d1cc9bb726f2c1d7cfb153dbd1466385a8
Sha256: 0a3e637590da21a24465d1c0c0a88a5b2aada6eeb0fa321bac0eb743be44e215
                                        
                                            GET /up/neyfilm/Pishnehadi/%D9%86%D8%B1%D9%85-%D8%A7%D9%81%D8%B2%D8%A7%D8%B1.png HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Length: 1659
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-67b"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Size:   1659
Md5:    91486a703eee1715a0e0e24a789b7667
Sha1:   321a4eb4aed702db0350e808b1ab4b546ea83d40
Sha256: a23d0207fe8a0afc2854b6943ba59cce740d5c775c476df8c4ac3ab8947e124a
                                        
                                            GET /up/neyfilm/Pishnehadi/%D8%A7%D8%B3-%D8%A7%D9%85-%D8%A7%D8%B3.png HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Length: 1685
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-695"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Size:   1685
Md5:    71bc0cfb0e8f19da2d7fe06928985de0
Sha1:   61835ad6add92d2b04c5fdef29537fc688f37ee1
Sha256: bdd623adfc6ae6fce7ee6bb2f8801f1e9fbae91ab002af25bda12d7e4b93b04e
                                        
                                            GET /up/neyfilm/ALIZARANDI/uc_2328.jpg HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Length: 96141
Last-Modified: Wed, 22 Apr 2015 16:59:54 GMT
Connection: keep-alive
ETag: "5537d38a-1778d"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 450x500, components 3\012- data
Size:   96141
Md5:    77e9363d7d3ebed21e182b9d077f1c41
Sha1:   3244408fe2b465a9d2ca387d7f0dd34d905b05b4
Sha256: 33a7d4badf04654881a442dcc51c09456de998d3371416303d97c15c8f2116cd
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "9326C805E4E15550D339F08BC82C6CA9283CE229740838AD3C6A99700CFF3B66"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3191
Expires: Wed, 30 Nov 2022 02:51:39 GMT
Date: Wed, 30 Nov 2022 01:58:28 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5371
Cache-Control: max-age=117471
Date: Wed, 30 Nov 2022 01:58:28 GMT
Etag: "6385cba8-1d7"
Expires: Thu, 01 Dec 2022 10:36:19 GMT
Last-Modified: Tue, 29 Nov 2022 09:06:48 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /up/neyfilm/ALIZARANDI/axenarmafzar/NOD32-logo2-100x100.png HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Length: 10749
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-29fd"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   10749
Md5:    7cc3630c20ae4097b1b5f504e2326a99
Sha1:   28fb1365a8b52995b1f90ba428a767e90a9c3aca
Sha256: c6104e4261eba13131bda269fca29f9ff8da34b82ec67a89e0ae033a546b3f9e
                                        
                                            GET /up/neyfilm/Pishnehadi/%D9%87%D9%85%D8%B1%D8%A7%D9%87-%D8%A7%D9%88%D9%84.png HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Length: 1881
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-759"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Size:   1881
Md5:    d55010f4d04529f02c1971042c38ab3d
Sha1:   0242dacd41a110041687fba3470af08138bf120b
Sha256: 5806f844be81f3b88a52143a61704d7a22c986e3b8e56d8813208d2b1481b4cb
                                        
                                            GET /up/neyfilm/ALIZARANDI/axenarmafzar/Nero-100x100.png HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Length: 12912
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-3270"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   12912
Md5:    170f21ee06dea2afc5328b9c9dbe27e0
Sha1:   e6e8317b9a60ea23a0fe5ab75d0ac91c1fd72a8b
Sha256: e2cd6704d1aa143d18900380dcbff71c66661695ff8fc754428ed074ce2cc9c2
                                        
                                            GET /up/neyfilm/ALIZARANDI/axenarmafzar/winrar4-100x100.png HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Length: 9364
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-2494"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   9364
Md5:    da360bbf560923e761b8bc660df161b7
Sha1:   e50c20e56c2c08cf1d1497eee84ff7f02e4e58db
Sha256: 4319a0555c961ca43d107616696afd30bdd6f30fec461a37271c48731bf9fe61
                                        
                                            GET /up/neyfilm/ALIZARANDI/axenarmafzar/chrome-100x100.png HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Length: 6510
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-196e"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   6510
Md5:    4cd1101c6d95e009d1299de1644be63b
Sha1:   e85ab709713ffb1a24949cd05d336a93a33bb7e0
Sha256: 91e7fa0e42c31ebfe1abf6e0a8caa813b06ff202e8e0dfd8963bbe713718deab
                                        
                                            GET /up/neyfilm/ALIZARANDI/axenarmafzar/Adobe-Flash-Player1-100x100.png HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Length: 6918
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-1b06"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   6918
Md5:    713a59cac516394ac6d234187c50c949
Sha1:   cf9a0b1caf1ef51c76696ae10030589437629382
Sha256: 21bc08eae9a8050d2e7226e6ccfb7b5a576dc3865f3114b5856a25f139f566b8
                                        
                                            GET /up/neyfilm/ALIZARANDI/axenarmafzar/Internet-Download-Manager-61-100x100.png HTTP/1.1 
Host: rozup.ir
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         79.127.127.67
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Length: 14493
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-389d"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   14493
Md5:    cfdbce4fe6a135178bcaee284033eeee
Sha1:   dd417174542ecff236d648a05e3b985f45b6cad0
Sha256: 6dba2fec1bf54f8caa9fba0ad7ae539ef23a5646715bf0577488f24984b746d3
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ZnnYgTcW/9GLZBHkJ76YPQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.39.62.124
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Bh6xNBFDI/4A0sIKO9JLWF1S2tQ=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "28D79E22CB6271F4963A3697527540A988B8A7E9629DBA627715FB1384243942"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5269
Expires: Wed, 30 Nov 2022 03:26:17 GMT
Date: Wed, 30 Nov 2022 01:58:28 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: dvcasha2.ocsp-certum.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.79.10
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=447
Date: Wed, 30 Nov 2022 01:58:28 GMT
Connection: keep-alive
X-N: S


--- Additional Info ---
Magic:  data
Size:   1599
Md5:    0a9ad881a2da1aa304f24654dcda86cc
Sha1:   5c744299397af162a7ebfb0720f0fc79aea97ec7
Sha256: d3eaf430e86887fdfbfde82f14bd14e364d183e68a6cdb17035025ca2d165b89
                                        
                                            GET /theme/rozblog_v4/favi1.ico HTTP/1.1 
Host: www.rozblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Cookie: analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}

search
                                         79.127.127.68
HTTP/1.1 200 OK
content-type: image/x-icon
                                        
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 30 Nov 2023 01:58:28 GMT
last-modified: Tue, 18 Nov 2014 15:12:07 GMT
accept-ranges: bytes
content-length: 1150
date: Wed, 30 Nov 2022 01:58:28 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size:   1150
Md5:    129e0e4681906fae60ea32d066a7b4c5
Sha1:   33c024415db44baa3aba0f13df1399d9b81ac9e6
Sha256: 0a14eb14e53df8201b78084ab9a276a1f4ca01e55a20c3b8b0b6f3b660ee3ff0
                                        
                                            GET /api/v1/scripts/preview/validate/?app_id=xywHAyqU HTTP/1.1 
Host: audience.yektanet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://neyfilm.rozblog.com
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         185.143.233.120
HTTP/2 200 OK
content-type: application/json
                                        
server: ArvanCloud
date: Wed, 30 Nov 2022 01:58:28 GMT
content-length: 5
access-control-allow-origin: http://neyfilm.rozblog.com
allow: GET, OPTIONS
access-control-allow-methods: GET, OPTIONS
access-control-allow-credentials: true
access-control-allow-headers: Authorization
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2023
ar-atime: 0.170
ar-cache: BYPASS
ar-request-id: 5c303442c26c8567a0080681c98c75c2
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   5
Md5:    68934a3e9455fa72420237eb05902327
Sha1:   7cb6efb98ba5972a9b5090dc2e517fe14d12cb04
Sha256: fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa
                                        
                                            GET /__fake.gif/?aa=event&abe=L&abf=9ccd67bd-7f56-4395-bca2-12bdaf14464f&abj=1&aed=pub&ac=http%3A%2F%2Fneyfilm.rozblog.com%2Fcat%2F300&ae=%7B%7D&ad=neyfilm.rozblog.com&as=%D8%B1%DB%8C%D9%86%DA%AF%D8%AA%D9%88%D9%86%20%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84&aef=xywHAyqU&aec=156927&aaa=direct&aab=null&ai=5bbe336f-e6f6-51c3-c378-9a07ab5d8d27&abw=1268&abb=5054&aby=1280&abz=1024&al=1280&am=939&abk=%D8%B1%D8%B3%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D8%A7%D9%86%D9%87%20%D9%86%DB%8C%D8%B4%D8%A7%D8%A8%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%88%D8%B1%20%D9%85%D9%88%D8%B2%DB%8C%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%DA%A9 HTTP/1.1 
Host: ua.yektanet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         185.143.233.120
HTTP/2 200 OK
content-type: image/gif
                                        
server: ArvanCloud
date: Wed, 30 Nov 2022 01:58:29 GMT
content-length: 42
set-cookie: gearbox_ad_token=065da2af-fa163-3d6b1-19e89-91b20aed84097; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Sat, 27-Nov-32 01:58:29 GMT analytics_global_token=065da2af-fa163-3d6b1-19e89-91b20aed84097; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Sat, 27-Nov-32 01:58:29 GMT
last-modified: Wednesday, 30-Nov-2022 01:58:29 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2022
ar-atime: 0.182
ar-cache: BYPASS
ar-request-id: 1d0df5a18a41a4fe968a5afe41a075c4
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /csync/3P/pixel?id=yektanet HTTP/1.1 
Host: plus.sabavision.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         185.147.178.24
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Wed, 30 Nov 2022 01:58:29 GMT
content-length: 597
cache-control: no-cache
cache-directive: no-cache
expires: 0
pragma: no-cache
pragma-directive: no-cache
server: nginx
x-upstream-ct: 0.001
x-upstream-ht: 0.253
x-upstream: 0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, baseline, precision 8, 1x1, components 3\012- data
Size:   597
Md5:    91c97a3dd65bdf0bcd2fa45d5b1c1b86
Sha1:   68cf099726f6e1cc8f3b31ff481a1d2479fc682d
Sha256: af64a6f3ffc388b91cd70eae25893f7bea7e8e7d84d2c2b41c378cfbe13651ff
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "7079E97D32E5DFD6909D5CEBB1FDB533DDE8830E961C5DFCA9A9FF77D9EA8C32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4580
Expires: Wed, 30 Nov 2022 03:14:49 GMT
Date: Wed, 30 Nov 2022 01:58:29 GMT
Connection: keep-alive

                                        
                                            OPTIONS /api/v2/load HTTP/1.1 
Host: nfetch.yektanet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://neyfilm.rozblog.com/
Origin: http://neyfilm.rozblog.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         87.107.144.247
HTTP/2 204 No Content
                                        
date: Wed, 30 Nov 2022 01:58:29 GMT
vary: Origin, Access-Control-Request-Headers
access-control-allow-origin: http://neyfilm.rozblog.com
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-headers: content-type
strict-transport-security: max-age=15724800; includeSubDomains
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2

                                        
                                            POST /api/v2/load HTTP/1.1 
Host: nfetch.yektanet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 307
Origin: http://neyfilm.rozblog.com
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         87.107.144.247
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
date: Wed, 30 Nov 2022 01:58:29 GMT
content-length: 1349
vary: Origin
access-control-allow-origin: http://neyfilm.rozblog.com
access-control-allow-credentials: true
strict-transport-security: max-age=15724800; includeSubDomains
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with very long lines (1295), with no line terminators
Size:   1349
Md5:    69ad0a64c2640acd43abca06c6949086
Sha1:   e1713fa10a3cda532d003b33d3f300985f1d682a
Sha256: 328a334d84ec7a89d0bbb032dfa51b9fdd2bc6cc64978928c4aea8e823d9e29c
                                        
                                            GET /cookie/iframe/ HTTP/1.1 
Host: ua.yektanet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         185.143.233.120
HTTP/2 200 OK
content-type: text/html
                                        
server: ArvanCloud
date: Wed, 30 Nov 2022 01:58:28 GMT
vary: Accept-Encoding
last-modified: Wednesday, 30-Nov-2022 01:58:28 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2022
ar-atime: 0.184
ar-cache: BYPASS
ar-request-id: 2ee96ba1f05b910f59728c3da8a19a54
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   12457
Md5:    c8b89e10e76e9208e9ba646be40ed9b5
Sha1:   fa7b668a530ad49d88660572420d45a2991547cb
Sha256: 44a3c1d66209a281945b8d4487d516bdf64e27fcd0824e399e4b4ba1a666abd1
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19069
Expires: Wed, 30 Nov 2022 07:16:18 GMT
Date: Wed, 30 Nov 2022 01:58:29 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19069
Expires: Wed, 30 Nov 2022 07:16:18 GMT
Date: Wed, 30 Nov 2022 01:58:29 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19069
Expires: Wed, 30 Nov 2022 07:16:18 GMT
Date: Wed, 30 Nov 2022 01:58:29 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19069
Expires: Wed, 30 Nov 2022 07:16:18 GMT
Date: Wed, 30 Nov 2022 01:58:29 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9674
x-amzn-requestid: 7e7d0183-9667-462a-8d44-d125998c1ae3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgEoHVAoAMFvAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a1d-280ba97e3fe1bf7244cbde35;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qftF-GQkcjKTs30KMGCTDymw2SVSXeAYKGNWUnaMfvIb8HjtfHUx8A==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:46 GMT
etag: "53650399f9a986ba54addd668b4557109d12003b"
age: 15223
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9674
Md5:    5508d05a290b663fd89ead9b58f2efd8
Sha1:   53650399f9a986ba54addd668b4557109d12003b
Sha256: 65704a961410fdd318c491fedf002c8e9b184cd34b76fe1b67026d42ce21be3f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2730750-552d-4852-8ce1-503874565f75.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9051
x-amzn-requestid: 1032dd9c-a15e-4e8a-9c81-07419e8caf67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhGvEMNIAMFaKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867bc4-1005c20a33320dbf6567ca31;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rtfl896JX35oFFEVmqyH9Nm62iSY6rqwzkLwZMcM45p_ySF6J2QwEQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:47 GMT
age: 15222
etag: "6170d6776615503e3e29f86783febc3e3e78ca66"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9051
Md5:    05196ec43964cf559caa0c0279148d62
Sha1:   6170d6776615503e3e29f86783febc3e3e78ca66
Sha256: 47f3a5cde661987e3496ce110a0170b10087dd9ba8d4fd691c4830587ba3fa3f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4f88ec5-5875-45d1-bcd3-d997040d6d42.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3719
x-amzn-requestid: 6fab3454-fedd-4a1e-ae47-468ddd6233bc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDaGQ4IAMFUkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-4b313cf054d6301e71cdc0c1;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KpgPP5VdjjU4rHaunbn3Yf-F5vLzZC7PhWu_QCF4WfuDHTqw3ufoyw==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:35 GMT
etag: "453067f6ab356aa87a3ad3b56e33545376597852"
age: 15234
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3719
Md5:    ceb8e975fb408de32c43f55febaa6414
Sha1:   453067f6ab356aa87a3ad3b56e33545376597852
Sha256: e0ecbb6052b4fef75f58da8dae589c81ab9ec9d304de08f26c144a2c3ce9eaac
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52cf4797-5177-4859-9523-faeb4e38f224.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9812
x-amzn-requestid: 70bfeb68-0703-44bf-8550-50c759d52d86
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDbFolIAMFYBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-73fb65ee2b9161372819207f;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jpQ-1qUf3ysXSe_j4z4PIc5e1zj0MaDF9qliEVxU_4RR66yWHwCWzg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:35 GMT
etag: "ce411cc5b0a37bbd89551d06d7d0349f45734e97"
age: 15234
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9812
Md5:    5c5277610f3a542571abb53ffb3d4df1
Sha1:   ce411cc5b0a37bbd89551d06d7d0349f45734e97
Sha256: 3bf1105631ef7fda0249a46390ca90f904ea73b0a4f017c2db85326550a80a3f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9330
x-amzn-requestid: 3fad352d-7664-43e0-9395-e840f671ca61
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgFQFIdoAMFSmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a21-5e9847852f8435231d401fe6;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mCEtSOenWKxay4vNy5mN9cexxXKXKt7TMuLaLw-M86tLKwQ2MwuxPg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:11:32 GMT
age: 13617
etag: "2f3a39a528d3b759060203931de33c12303592e1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9330
Md5:    bbe350ea797a0fec5a19a450fc5de4b4
Sha1:   2f3a39a528d3b759060203931de33c12303592e1
Sha256: 4d661dac2e19e07ae15d0f8cf00bd268c6c2defb2f5e4de38fcb6e7031dfd605
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2fcfcea6-8f79-45f4-b081-2b90a5d95f8f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5492
x-amzn-requestid: 4b09d9a8-09fa-40e5-a996-8a6ad9f8283e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgE9E5TIAMF6ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a1f-2f17467d7a6318796d01fd2e;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:11 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 8kjwcw34ssnai7n-fW6lGV5ZmFpHR7bTX5MvKPNSgqqzMAgGFCI5fA==
via: 1.1 42ef990e439ae115ff739f04e3945234.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:35 GMT
etag: "e1eec39299f081b53c647953b57da4f2f1ba10bc"
age: 15234
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5492
Md5:    acb1e555533322dbfeb8e0d8c956c43d
Sha1:   e1eec39299f081b53c647953b57da4f2f1ba10bc
Sha256: 579d2fd6aab6bba72a405bb1d0259856878adc90671a88b2b0edf5a284dba1f9
                                        
                                            GET /public/chunk/minified/105.85c2d3e0a98cc9146357.js HTTP/1.1 
Host: native-scripts.yektanet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Cookie: gearbox_ad_token=55b5953f-7200-4da7-aca8-085ad78de3c3; analytics_global_token=55b5953f-7200-4da7-aca8-085ad78de3c3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.143.233.120
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: ArvanCloud
date: Wed, 30 Nov 2022 01:58:29 GMT
vary: Accept-Encoding
last-modified: Tue, 15 Nov 2022 11:03:35 GMT
x-rgw-object-type: Normal
etag: W/"a13ed01a77c4df76f1f9c6843b130ebf"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
expires: Wed, 30 Nov 2022 02:58:29 GMT
x-xss-protection: 1; mode=block
ar-sid: 2022
ar-atime: 0.000
ar-cache: HIT
ar-request-id: 7b5d266a240af39ea49c7ae078d97ae1
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /rg_woebegone/scripts_v3/D138M2Bm/publisher.js?v=202201003001 HTTP/1.1 
Host: cdn.yektanet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.166.104.4
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Wed, 30 Nov 2022 01:58:28 GMT
cache-tag: ua_D138M2Bm,ua
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
last-modified: Tue, 18 Oct 2022 09:48:05 GMT
x-rgw-object-type: Normal
etag: W/"483e3c65d46da98a641fddb5d5ec97c5"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
x-zrk-us: 206
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /fp/fingerprint.js?v=umd HTTP/1.1 
Host: cdn.yektanet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.166.104.4
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Wed, 30 Nov 2022 01:58:28 GMT
last-modified: Tue, 20 Sep 2022 08:24:54 GMT
vary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
etag: W/"632978d6-7c6a"
x-zrk-us: 206
cache-control: public, max-age=3600
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
strict-transport-security: max-age=31536000
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /js/rozblog.com/native-rozblog.com-23662.js?v=202201003001 HTTP/1.1 
Host: cdn.yektanet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         185.166.104.4
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Wed, 30 Nov 2022 01:58:27 GMT
cache-tag: native_rozblog.com,native
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
last-modified: Sun, 27 Nov 2022 13:24:37 GMT
x-rgw-object-type: Normal
etag: W/"2a72faf660ea1bb301b7bc70533cdac6"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
x-zrk-us: 206
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            OPTIONS /?hash=584304687,638410610,113953710,376297402,273726623 HTTP/1.1 
Host: native-removal.triboon.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: href
Referer: http://neyfilm.rozblog.com/
Origin: http://neyfilm.rozblog.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         185.143.234.120
HTTP/2 200 OK
content-type: application/json
                                        
server: ArvanCloud
date: Wed, 30 Nov 2022 01:58:28 GMT
vary: Accept-Encoding
access-control-allow-origin: http://neyfilm.rozblog.com
access-control-allow-headers: *
cache-control: public, max-age=14400, s-maxage=14400, stale-while-revalidate=3600, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2074
ar-atime: 0.186
ar-request-id: bba3fbe2db14717ad578859e0be009dc
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /?hash=584304687,638410610,113953710,376297402,273726623 HTTP/1.1 
Host: native-removal.triboon.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
href: http://neyfilm.rozblog.com/cat/300
Origin: http://neyfilm.rozblog.com
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.143.234.120
HTTP/2 200 OK
content-type: application/json
                                        
server: ArvanCloud
date: Wed, 30 Nov 2022 01:58:28 GMT
vary: Accept-Encoding
access-control-allow-origin: http://neyfilm.rozblog.com
access-control-allow-headers: *
cache-control: public, max-age=14400, s-maxage=14400, stale-while-revalidate=3600, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2074
ar-atime: 0.188
ar-cache: BYPASS
ar-request-id: ab406d89c2b8ae679dd2adc1a2d05a4b
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---