neyfilm.rozblog.com/cat/300
79.127.127.68200 OK 11 kB URL HTTP/1.1 neyfilm.rozblog.com/cat/300
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1574), with CRLF, LF line terminators
Hash f356d12c12d0832a88da4e66afd44fe1
76e510e61461e3ab61bb45d205b3cdf863e4684e
5a3dadc476501376522b849fbc336bc1b7ffb26d13a0ab9f266641748e48c6ac
Analyzer Verdict Alert fortinet Malware
GET /cat/300 HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
set-cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-language: fa
content-type: text/html; charset=utf-8
vary: Accept-Encoding,User-Agent
transfer-encoding: chunked
content-encoding: gzip
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 2d2e7649ce9e9ba6fc8b68aa89352e3c
0153d1d3d830a457043e16bb40d48a0b9ddef4b8
8eed57c91b42ef7b2d5eff1309e306e23e13c3de21219af24a693cbf3e8977fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8EED57C91B42EF7B2D5EFF1309E306E23E13C3DE21219AF24A693CBF3E8977FC"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3690
Expires: Wed, 30 Nov 2022 02:59:57 GMT
Date: Wed, 30 Nov 2022 01:58:27 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 9fce5679881bf302a8978a0b462f01a9
b699fe030ea13ac73813e655c42ed9b531925e2b
a3ec545a8f9364ac9062eddb41279e1465687a1b60f9c1dec6b3a3df8b033eb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3EC545A8F9364AC9062EDDB41279E1465687A1B60F9C1DEC6B3A3DF8B033EB3"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6541
Expires: Wed, 30 Nov 2022 03:47:28 GMT
Date: Wed, 30 Nov 2022 01:58:27 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: C5uQvVwHG7C6hd/qcMx2IuWMIL78jtPTmY3LtoXjcejuyd2i3dH0b1lSzFZYxhTqT/cdPFQvxNw=
x-amz-request-id: GPZCCAB7Q75H5EBS
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 30 Nov 2022 01:45:02 GMT
age: 805
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
neyfilm.rozblog.com/temp/site.css?22
79.127.127.68200 OK 3.9 kB URL HTTP/1.1 neyfilm.rozblog.com/temp/site.css?22
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (860)
Hash 787a6674aa05de4919a7c90cdbb150c9
2159cc3ec669621f05f361bd91b956e573faef9a
e234a5881c33e5ff75519381140d07f15611e92efbb0bb45ecf73437048d376c
Analyzer Verdict Alert fortinet Malware
GET /temp/site.css?22 HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/300
Cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 30 Dec 2022 01:58:27 GMT
content-type: text/css
last-modified: Wed, 02 Mar 2022 08:28:27 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 3945
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
ocsp.digicert.com/
93.184.220.29200 OK 55 B IP 93.184.220.29:0
File type HTML document, ASCII text
Hash 9f073354411bbaf7a319b1519f10b4b7
571498f38548829bf186f49f5be9d5fa6e689a68
4a7aaaa1c093dee8a191d4469c9f701c5e62e88896bc778a13cc4ffedf9be89a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4703
Cache-Control: public, max-age=1209600
Content-Type: text/html
Date: Wed, 30 Nov 2022 01:58:27 GMT
Etag: "638651c5-37"
Last-Modified: Tue, 29 Nov 2022 18:39:01 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 55
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 30 Nov 2022 01:19:38 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2329
alt-svc: clear
X-Firefox-Spdy: h2
neyfilm.rozblog.com/temp/tarahi/styles.css
79.127.127.68200 OK 6.1 kB URL HTTP/1.1 neyfilm.rozblog.com/temp/tarahi/styles.css
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 (with BOM) text
Hash 28cf21c53411f845b0888677cbc74828
25bf3bc9920ad37a3f81d88e46001cab51eea3f6
d18ec6839084bfa3a36008f9f5f03cf0de9c8c656677aac9a5a62c2b6890f5ab
GET /temp/tarahi/styles.css HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/300
Cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 30 Dec 2022 01:58:27 GMT
content-type: text/css
last-modified: Tue, 15 Feb 2022 00:08:30 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 6091
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
neyfilm.rozblog.com/temp/default/script.js
79.127.127.68200 OK 302 B URL HTTP/1.1 neyfilm.rozblog.com/temp/default/script.js
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
Hash f63434fb5b29fa6044b1a1e30e6c1162
2e7ada06c79c670f0dff3bd7d0474d07c49104e0
a9396929db33b5a927292dc2e2f33891c594811b1b37dd993abbc9db9afbb7cb
Analyzer Verdict Alert fortinet Malware
GET /temp/default/script.js HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/300
Cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Wed, 07 Dec 2022 01:58:27 GMT
content-type: application/javascript
last-modified: Wed, 18 Jul 2018 10:51:39 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 302
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
neyfilm.rozblog.com/js/site.js?7
79.127.127.68200 OK 9.4 kB URL HTTP/1.1 neyfilm.rozblog.com/js/site.js?7
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 (with BOM) text, with very long lines (5730)
Hash 3a9e608b97ff4d23f8a1649f24b6ed66
794e50a615ef78e2f2bd7616c7d9e033fc4bbe9d
82faf31dfa45299d23061f2c05579901ca592090ce35f1dc48a6ff61f24ac28a
Analyzer Verdict Alert fortinet Malware
GET /js/site.js?7 HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/300
Cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Wed, 07 Dec 2022 01:58:27 GMT
content-type: application/javascript
last-modified: Sat, 14 May 2022 01:34:44 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 9422
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
neyfilm.rozblog.com/code/popup
79.127.127.68200 OK 1.2 kB URL HTTP/1.1 neyfilm.rozblog.com/code/popup
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
Hash 6cf949584b4421ba81caf35b73a51ecf
0d78cad48e829f9251f34c42d523d2f5b83f8c60
277b7c2e300ea218046fe1329a244abbf41c487e8d11c49b3d2caeffb0dfbdb9
Analyzer Verdict Alert fortinet Malware
GET /code/popup HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/300
Cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-language: fa
content-type: text/html; charset=charset
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Wed, 30 Nov 2022 01:58:27 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: pop_id=11095%2C; expires=Wed, 30-Nov-2022 13:58:27 GMT; Max-Age=43200; path=/
c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; expires=Thu, 01-Dec-2022 01:58:27 GMT; Max-Age=86400; path=/
c_t=367626386b8c395160593047150774327107; expires=Thu, 01-Dec-2022 01:58:27 GMT; Max-Age=86400; path=/
vary: Accept-Encoding,User-Agent
content-length: 1180
content-encoding: gzip
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:58:27 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
neyfilm.rozblog.com/weblog/file/loading/88.gif
79.127.127.68200 OK 6.0 kB URL HTTP/1.1 neyfilm.rozblog.com/weblog/file/loading/88.gif
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 50 x 50\012- data
Hash 093445ee241c72e6dca01dc570c230dc
32adb71ec06b5d29ec62c5511328d5970228b86d
d40495f2a0e830c47fe4cd50574c68e206292f63545a0684516db0cd8716ee0e
GET /weblog/file/loading/88.gif HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/300
Cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 30 Nov 2023 01:58:27 GMT
content-type: image/gif
last-modified: Thu, 02 Feb 2012 21:52:24 GMT
accept-ranges: bytes
content-length: 5972
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
neyfilm.rozblog.com/images/no_image.png
79.127.127.68200 OK 6.3 kB URL HTTP/1.1 neyfilm.rozblog.com/images/no_image.png
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 5c675d607343c154f0ef074dc145988a
2f3713c21ed04a225f16439b200e2b2a6062454e
2e8f7285f7325ed8db6a0d253158db2c8962125173a1e6973e8fcb39a325a7ba
GET /images/no_image.png HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/300
Cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 30 Nov 2023 01:58:27 GMT
content-type: image/png
last-modified: Sat, 12 Jan 2013 13:14:07 GMT
accept-ranges: bytes
content-length: 6278
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
neyfilm.rozblog.com/include/captcha/cap9.php
79.127.127.68200 OK 2.0 kB URL HTTP/1.1 neyfilm.rozblog.com/include/captcha/cap9.php
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 30, 8-bit/color RGB, non-interlaced\012- data
Hash 85ef9d75ad45afef504e599e7f80f536
d4d9f5ea106de8dd1cdc09d6007fecc1f42ffb07
3307b5798757648145eccc3b50aa25a585bce9e8303732f88be1586140dcb3c3
Analyzer Verdict Alert fortinet Malware
GET /include/captcha/cap9.php HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/300
Cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: image/png
content-length: 1952
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
rozblog.com/temp/pro/ads_468.jpg
79.127.127.68200 OK 6.3 kB URL HTTP/1.1 rozblog.com/temp/pro/ads_468.jpg
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: "LEAD Technologies Inc. V1.01", baseline, precision 8, 468x60, components 3\012- data
Hash db8cac5e50e0f1be65a3ec0756ea6612
3053609e1039ab6d0d0be6adefeaf7ba7a243cf6
8f10f1e719bda34ecfc3af6b50f8273e9c9676d10612eff12aad2382d458ef1d
GET /temp/pro/ads_468.jpg HTTP/1.1
Host: rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 30 Nov 2023 01:58:27 GMT
content-type: image/jpeg
last-modified: Fri, 20 Feb 2015 09:52:01 GMT
accept-ranges: bytes
content-length: 6286
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
neyfilm.rozblog.com/images/refresh2.svg
79.127.127.68200 OK 276 B URL HTTP/1.1 neyfilm.rozblog.com/images/refresh2.svg
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash 7082e86e2a3c9646fa1aa922b8e3a2d6
7f704127e872b5b94b8e2dd7959e2d5c9b9379a8
d1254b0bb9112500f8f39e1130f0a6c8dca1037d416e7f7d6524894b31b06b00
Analyzer Verdict Alert fortinet Malware
GET /images/refresh2.svg HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/cat/300
Cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Wed, 07 Dec 2022 01:58:27 GMT
content-type: image/svg+xml
last-modified: Wed, 28 Apr 2021 22:57:34 GMT
etag: "114-6089e85e-9f2e18d89b796b95;;;"
accept-ranges: bytes
content-length: 276
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6d2246edf6781ee35b74d6b30f510f3d
8811fb3f0fa705d9eefadc99c826233938fccbe4
0128c255ebd7c3af4a564d12cc91caea143b9631db5d7a47a1acd752f2caf322
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0128C255EBD7C3AF4A564D12CC91CAEA143B9631DB5D7A47A1ACD752F2CAF322"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11983
Expires: Wed, 30 Nov 2022 05:18:10 GMT
Date: Wed, 30 Nov 2022 01:58:27 GMT
Connection: keep-alive
rozblog.com/temp/nuke/FBarrow.gif
79.127.127.68200 OK 59 B URL HTTP/1.1 rozblog.com/temp/nuke/FBarrow.gif
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 9 x 9\012- data
Hash 08f58683f752ec50ab890d4162cf9a03
2a0e3923b77ab35c273bf5307fc980f4d4de42fe
d8359b38e288d654bf46c6c01ea58f896a998390f848ca99eb4015900f1cdb42
GET /temp/nuke/FBarrow.gif HTTP/1.1
Host: rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 30 Nov 2023 01:58:27 GMT
content-type: image/gif
last-modified: Sat, 26 Nov 2011 12:58:49 GMT
accept-ranges: bytes
content-length: 59
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6d2246edf6781ee35b74d6b30f510f3d
8811fb3f0fa705d9eefadc99c826233938fccbe4
0128c255ebd7c3af4a564d12cc91caea143b9631db5d7a47a1acd752f2caf322
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0128C255EBD7C3AF4A564D12CC91CAEA143B9631DB5D7A47A1ACD752F2CAF322"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11983
Expires: Wed, 30 Nov 2022 05:18:10 GMT
Date: Wed, 30 Nov 2022 01:58:27 GMT
Connection: keep-alive
rozblog.com/temp/music3/MTForumBlock_row_over.png
79.127.127.68200 OK 139 B URL HTTP/1.1 rozblog.com/temp/music3/MTForumBlock_row_over.png
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 1 x 18, 8-bit/color RGB, non-interlaced\012- data
Hash 1fd885e3d0a8fc062470706ae84ea56b
f0e6c850b1794c523ca16bf087054cb843daf6fa
e0dc411ff39139fd39b2cf6d027ab2d56fbd3b51bacc0935e1ae284e65c64e40
GET /temp/music3/MTForumBlock_row_over.png HTTP/1.1
Host: rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 30 Nov 2023 01:58:27 GMT
content-type: image/png
last-modified: Sun, 03 Jul 2011 21:44:44 GMT
accept-ranges: bytes
content-length: 139
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
neyfilm.rozblog.com/temp/tarahi/fonts/wdtv.woff
79.127.127.68200 OK 15 kB URL HTTP/1.1 neyfilm.rozblog.com/temp/tarahi/fonts/wdtv.woff
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, TrueType, length 14648, version 1.0\012- data
Hash 259c4490256daceb6a5f275cee137627
5c0eae14870f1ec6527aa64f3f675cb9063034ee
bd4bdb99aa4a1cf56a05d7a913dce42b23b4cb021148b0a0f22d836105d98fc5
Analyzer Verdict Alert fortinet Malware
GET /temp/tarahi/fonts/wdtv.woff HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/temp/tarahi/styles.css
Cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4; pop_id=11095%2C; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=367626386b8c395160593047150774327107
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 02 Dec 2022 01:58:27 GMT
content-type: font/woff
last-modified: Thu, 26 Feb 2015 19:00:22 GMT
etag: "3938-54ef6d46-daf654b8921ad10f;;;"
accept-ranges: bytes
content-length: 14648
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
rozblog.com/temp/rang/like.png
79.127.127.68200 OK 2.3 kB URL HTTP/1.1 rozblog.com/temp/rang/like.png
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 22 x 42, 8-bit/color RGBA, non-interlaced\012- data
Hash dd370ffbcd679da0d5c8547f34c6e2fb
6df3b9ec0e82b1a6ef41bc83041d2b2e16200077
2f14531974b17d9fd89de532694faf69ed7aa61b04ea990108b138d772ba96f7
GET /temp/rang/like.png HTTP/1.1
Host: rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 30 Nov 2023 01:58:27 GMT
content-type: image/png
last-modified: Sat, 14 Feb 2015 11:52:19 GMT
accept-ranges: bytes
content-length: 2272
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
rozblog.com/temp/music3/MTForumBlock_row.png
79.127.127.68200 OK 155 B URL HTTP/1.1 rozblog.com/temp/music3/MTForumBlock_row.png
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 1 x 18, 8-bit/color RGB, non-interlaced\012- data
Hash 3ae7d651d73f3b247f9737655c53e08e
476c9a585906552a1054a74f88de640142ce40f5
d5496cde5cf105a1cf8c8fe59e0efefba5859a4fbff07a4701ec4f4a7c6e5ac5
GET /temp/music3/MTForumBlock_row.png HTTP/1.1
Host: rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 30 Nov 2023 01:58:27 GMT
content-type: image/png
last-modified: Sun, 03 Jul 2011 21:45:04 GMT
accept-ranges: bytes
content-length: 155
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
neyfilm.rozblog.com/temp/tarahi/fonts/yekanregular.woff
79.127.127.68200 OK 22 kB URL HTTP/1.1 neyfilm.rozblog.com/temp/tarahi/fonts/yekanregular.woff
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, CFF, length 21500, version 2.0\012- data
Hash 05727d32400b2008acbf7fc49251ede0
b6c1a82539a2531eb1aad7d1cf05554d5a999154
da78e001fab6f5d7b1c68e17d00fb1595c9b10085d6769a86aeb6a39dc7e43d6
Analyzer Verdict Alert fortinet Malware
GET /temp/tarahi/fonts/yekanregular.woff HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/temp/tarahi/styles.css
Cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4; pop_id=11095%2C; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=367626386b8c395160593047150774327107
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 02 Dec 2022 01:58:27 GMT
content-type: font/woff
last-modified: Thu, 26 Feb 2015 19:00:25 GMT
etag: "53fc-54ef6d49-80b982f1d7ce7ee2;;;"
accept-ranges: bytes
content-length: 21500
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
rozup.ir/up/neyfilm/Pishnehadi/%D9%81%DB%8C%D9%84%D9%85-%D8%A7%DB%8C%D8%B1%D8%A7%D9%86%DB%8C.png
79.127.127.67200 OK 1.8 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D9%81%DB%8C%D9%84%D9%85-%D8%A7%DB%8C%D8%B1%D8%A7%D9%86%DB%8C.png
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash d374b5e228b80c66ab9efa2539fe77e5
4333b4566a54d5f359ff14ac6198ad87bdd494a7
f72e96a56633fc5a48ae42b41477cc82aec1a3b82d5cdbf2d83913c2cb964805
GET /up/neyfilm/Pishnehadi/%D9%81%DB%8C%D9%84%D9%85-%D8%A7%DB%8C%D8%B1%D8%A7%D9%86%DB%8C.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:26 GMT
Content-Type: image/png
Content-Length: 1837
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-72d"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D8%A7%DB%8C%D8%B1%D8%A7%D9%86%D8%B3%D9%84.png
79.127.127.67200 OK 1.9 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D8%A7%DB%8C%D8%B1%D8%A7%D9%86%D8%B3%D9%84.png
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash d10a8dcd31f75b6398401268901111cf
52a2051f5204351e4913171d9c84feb7aedc6292
9d3a20aa83028843d3c8638584e54615cdf9f0dcdbd838cfe3739bedcbf73de1
GET /up/neyfilm/Pishnehadi/%D8%A7%DB%8C%D8%B1%D8%A7%D9%86%D8%B3%D9%84.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:26 GMT
Content-Type: image/png
Content-Length: 1924
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-784"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D9%85%D9%88%D8%B2%DB%8C%DA%A9-%D9%88%DB%8C%D8%AF%DB%8C%D9%88.png
79.127.127.67200 OK 1.8 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D9%85%D9%88%D8%B2%DB%8C%DA%A9-%D9%88%DB%8C%D8%AF%DB%8C%D9%88.png
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash c8e85fd80b37039786d675e208fbf738
a29c317df996992ceb50ac3b404c1ee78ba77b14
a22c9f1b49635541f6207fd2d548078373d980b0f0f12e833b8382df987c7e8d
GET /up/neyfilm/Pishnehadi/%D9%85%D9%88%D8%B2%DB%8C%DA%A9-%D9%88%DB%8C%D8%AF%DB%8C%D9%88.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:26 GMT
Content-Type: image/png
Content-Length: 1823
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-71f"
Accept-Ranges: bytes
neyfilm.rozblog.com/temp/tarahi/fonts/fontawesome-webfont.woff?v=4.2.0
79.127.127.68200 OK 66 kB URL HTTP/1.1 neyfilm.rozblog.com/temp/tarahi/fonts/fontawesome-webfont.woff?v=4.2.0
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, TrueType, length 65452, version 1.0\012- data
Hash d95d6f5d5ab7cfefd09651800b69bd54
7d65e0227d0d7cdc1718119cd2a7dce0638f151c
199411f659f41aaccb959bacb1b0de30e54f244352a48c6f9894e65ae0f8a9a1
GET /temp/tarahi/fonts/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1
Host: neyfilm.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/temp/tarahi/styles.css
Cookie: PHPSESSID=68cb17c4d5b31be245e9d546d345d1d4; pop_id=11095%2C; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=367626386b8c395160593047150774327107
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 02 Dec 2022 01:58:27 GMT
content-type: font/woff
last-modified: Thu, 26 Feb 2015 19:00:20 GMT
etag: "ffac-54ef6d44-11fea27943efc11b;;;"
accept-ranges: bytes
content-length: 65452
date: Wed, 30 Nov 2022 01:58:27 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/vlc-player-100x100.png
79.127.127.67200 OK 9.6 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/vlc-player-100x100.png
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 4ff98c2c912b58c49d9dcdd8efa7f355
ed2a816b81ac32bcb590b02679c8178e97590458
fb5ce6eefde1ab8db11311213b11bd09de4388b557f2985f70f22769de52e47e
GET /up/neyfilm/ALIZARANDI/axenarmafzar/vlc-player-100x100.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:26 GMT
Content-Type: image/png
Content-Length: 9646
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-25ae"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/Firefox-37-100x100.png
79.127.127.67200 OK 16 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/Firefox-37-100x100.png
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash ceef5adb5e29d1f961ee6664fbe09e38
b145852a8dc3ca9fbe950808c4404e97d5c0fa95
8c03ac20400e7191a57a8f5901d2a69f2a0a97cc610b6d081d0abdcff17ead5d
GET /up/neyfilm/ALIZARANDI/axenarmafzar/Firefox-37-100x100.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:26 GMT
Content-Type: image/png
Content-Length: 16114
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-3ef2"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/uc_1359.png
79.127.127.67200 OK 4.3 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/uc_1359.png
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 300 x 45, 8-bit colormap, non-interlaced\012- data
Hash a82be12fddef1b066a5b6fa4b23f6069
2da26d09c759bba1f3ed9953cba6fd53daa61baa
b635f006fe79bc69a5829eca84804f0ac7bb272e12f6617a08fe1a3750da248d
GET /up/neyfilm/ALIZARANDI/uc_1359.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Type: image/png
Content-Length: 4265
Last-Modified: Thu, 23 Apr 2015 15:03:48 GMT
Connection: keep-alive
ETag: "553909d4-10a9"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/uc_886.jpg
79.127.127.67200 OK 80 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/uc_886.jpg
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0 ME, datetime=2012:10:06 15:08:24], progressive, precision 8, 450x350, components 3\012- data
Hash 7bb099bab559328fc8d97c3c5726d8b5
21da02c63ea5568ac511063bf354e1ca0b25e69b
6674025cc2a7f9f4b338b4529f8f22927ca6fc646ceca0326808e0fbe8366df2
GET /up/neyfilm/ALIZARANDI/uc_886.jpg HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:26 GMT
Content-Type: image/jpeg
Content-Length: 79552
Last-Modified: Wed, 22 Apr 2015 17:02:20 GMT
Connection: keep-alive
ETag: "5537d41c-136c0"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D8%A2%D9%84%D8%A8%D9%88%D9%85.png
79.127.127.67200 OK 1.5 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D8%A2%D9%84%D8%A8%D9%88%D9%85.png
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash eb09df11c673284e3303417a2e38a317
e8b564163cb716510ec812558bedce451b327ad2
0ecc84565303a256741b84151272ad7312d07ea486315565418b86912c69297f
GET /up/neyfilm/Pishnehadi/%D8%A2%D9%84%D8%A8%D9%88%D9%85.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Type: image/png
Content-Length: 1544
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-608"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D8%AA%DA%A9-%D8%A2%D9%87%D9%86%DA%AF.png
79.127.127.67200 OK 1.6 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D8%AA%DA%A9-%D8%A2%D9%87%D9%86%DA%AF.png
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash b75b545ac71d9dd520ea52b8927964db
173f3df176f22006216c8d04e87c11dff35c62f0
a0af35eb593109fcc4cd4427a9d4c6c159ff326c42612ae546d06cd2c9d656b7
GET /up/neyfilm/Pishnehadi/%D8%AA%DA%A9-%D8%A2%D9%87%D9%86%DA%AF.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Type: image/png
Content-Length: 1648
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-670"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/uc_2215.jpg
79.127.127.67200 OK 55 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/uc_2215.jpg
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 450x350, components 3\012- data
Hash 2bbae22da0bdf6880f41662c6ba92a67
298db2ff444800bd6e193f389a4c061b00f7fac1
0801d5bb892e6fc8c84680a4301bc711566e9313dcae29439280ffd7dbc42ef6
GET /up/neyfilm/ALIZARANDI/uc_2215.jpg HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Type: image/jpeg
Content-Length: 55243
Last-Modified: Wed, 22 Apr 2015 16:56:41 GMT
Connection: keep-alive
ETag: "5537d2c9-d7cb"
Accept-Ranges: bytes
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 30 Nov 2022 01:08:56 GMT
cache-control: public,max-age=3600
age: 2972
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
rozup.ir/up/neyfilm/Pishnehadi/%D8%A7%D8%AE%D8%A8%D8%A7%D8%B1-%D9%85%D9%88%D8%B3%DB%8C%D9%82%DB%8C.png
79.127.127.67200 OK 1.8 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D8%A7%D8%AE%D8%A8%D8%A7%D8%B1-%D9%85%D9%88%D8%B3%DB%8C%D9%82%DB%8C.png
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash d3274f11b841f3746d838d3970b4f76d
a2ea2e11a47ee418787f0dae95ba2ff6544576a2
a35522b12cf4248a86c2b7183fa893c750a635a0fad8a11186084113d71e4598
GET /up/neyfilm/Pishnehadi/%D8%A7%D8%AE%D8%A8%D8%A7%D8%B1-%D9%85%D9%88%D8%B3%DB%8C%D9%82%DB%8C.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Type: image/png
Content-Length: 1817
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-719"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D8%A2%D8%B1%D8%B4%DB%8C%D9%88-%D8%B3%D8%B1%DB%8C%D8%A7%D9%84.png
79.127.127.67200 OK 1.9 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D8%A2%D8%B1%D8%B4%DB%8C%D9%88-%D8%B3%D8%B1%DB%8C%D8%A7%D9%84.png
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash ed8ea3e5b5d48d4b2399e795d03a2552
edd02a3f45839dfd3ce791812101db7885dcd24b
17949d9d0af7f8b9c1b03c9ab7dd16b299eada335e0fe569770482472ee1afec
GET /up/neyfilm/Pishnehadi/%D8%A2%D8%B1%D8%B4%DB%8C%D9%88-%D8%B3%D8%B1%DB%8C%D8%A7%D9%84.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Type: image/png
Content-Length: 1892
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-764"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D8%B3%D8%B1%DB%8C%D8%A7%D9%84.png
79.127.127.67200 OK 1.8 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D8%B3%D8%B1%DB%8C%D8%A7%D9%84.png
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash 74129318d41ce8423b398eb065ca602e
729a39c43ac02096ae498aeb81bbbc8ef6037e77
7eb0ecc1747e9764403efca2dd8ef549290722622ddf6a5698a122cc14dc2f20
GET /up/neyfilm/Pishnehadi/%D8%B3%D8%B1%DB%8C%D8%A7%D9%84.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Type: image/png
Content-Length: 1781
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-6f5"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/%D8%B4%D8%A7%D9%BE.jpg
79.127.127.67200 OK 96 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/%D8%B4%D8%A7%D9%BE.jpg
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2015:04:22 21:18:35], baseline, precision 8, 500x200, components 3\012- data
Hash a79cd97fefcaae507b0e318118f5eca7
9ce2679f1c62daca1f42a4153897e59204a92cf8
082823c4a671332c70ceb39c1c207b1c047472fe9881141819c6d455e4ddc089
GET /up/neyfilm/ALIZARANDI/%D8%B4%D8%A7%D9%BE.jpg HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Type: image/jpeg
Content-Length: 96193
Last-Modified: Wed, 22 Apr 2015 16:54:41 GMT
Connection: keep-alive
ETag: "5537d251-177c1"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D9%81%DB%8C%D9%84%D9%85-%D8%AE%D8%A7%D8%B1%D8%AC%DB%8C.png
79.127.127.67200 OK 1.8 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D9%81%DB%8C%D9%84%D9%85-%D8%AE%D8%A7%D8%B1%D8%AC%DB%8C.png
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash 2a02e9f195f2080b3a80b78139c02cc1
5cf949d1cc9bb726f2c1d7cfb153dbd1466385a8
0a3e637590da21a24465d1c0c0a88a5b2aada6eeb0fa321bac0eb743be44e215
GET /up/neyfilm/Pishnehadi/%D9%81%DB%8C%D9%84%D9%85-%D8%AE%D8%A7%D8%B1%D8%AC%DB%8C.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Type: image/png
Content-Length: 1757
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-6dd"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D9%86%D8%B1%D9%85-%D8%A7%D9%81%D8%B2%D8%A7%D8%B1.png
79.127.127.67200 OK 1.7 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D9%86%D8%B1%D9%85-%D8%A7%D9%81%D8%B2%D8%A7%D8%B1.png
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash 91486a703eee1715a0e0e24a789b7667
321a4eb4aed702db0350e808b1ab4b546ea83d40
a23d0207fe8a0afc2854b6943ba59cce740d5c775c476df8c4ac3ab8947e124a
GET /up/neyfilm/Pishnehadi/%D9%86%D8%B1%D9%85-%D8%A7%D9%81%D8%B2%D8%A7%D8%B1.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Type: image/png
Content-Length: 1659
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-67b"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D8%A7%D8%B3-%D8%A7%D9%85-%D8%A7%D8%B3.png
79.127.127.67200 OK 1.7 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D8%A7%D8%B3-%D8%A7%D9%85-%D8%A7%D8%B3.png
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash 71bc0cfb0e8f19da2d7fe06928985de0
61835ad6add92d2b04c5fdef29537fc688f37ee1
bdd623adfc6ae6fce7ee6bb2f8801f1e9fbae91ab002af25bda12d7e4b93b04e
GET /up/neyfilm/Pishnehadi/%D8%A7%D8%B3-%D8%A7%D9%85-%D8%A7%D8%B3.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Type: image/png
Content-Length: 1685
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-695"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/uc_2328.jpg
79.127.127.67200 OK 96 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/uc_2328.jpg
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 450x500, components 3\012- data
Hash 77e9363d7d3ebed21e182b9d077f1c41
3244408fe2b465a9d2ca387d7f0dd34d905b05b4
33a7d4badf04654881a442dcc51c09456de998d3371416303d97c15c8f2116cd
GET /up/neyfilm/ALIZARANDI/uc_2328.jpg HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Type: image/jpeg
Content-Length: 96141
Last-Modified: Wed, 22 Apr 2015 16:59:54 GMT
Connection: keep-alive
ETag: "5537d38a-1778d"
Accept-Ranges: bytes
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 266510e61498c26cf78a520cfad77bce
dbba50da1ff17cecc538bcacb61dd2693130d578
9326c805e4e15550d339f08bc82c6ca9283ce229740838ad3c6a99700cff3b66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9326C805E4E15550D339F08BC82C6CA9283CE229740838AD3C6A99700CFF3B66"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3191
Expires: Wed, 30 Nov 2022 02:51:39 GMT
Date: Wed, 30 Nov 2022 01:58:28 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 3c8c689bd654417640d85f3da51af313
85123b6d46230a23d03768bf304b386e5d301305
516138ca79703b45e904d32d7dde1c1e9fd35995b9f1bb1331c547542745676d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5371
Cache-Control: max-age=117471
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:58:28 GMT
Etag: "6385cba8-1d7"
Expires: Thu, 01 Dec 2022 10:36:19 GMT
Last-Modified: Tue, 29 Nov 2022 09:06:48 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/NOD32-logo2-100x100.png
79.127.127.67200 OK 11 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/NOD32-logo2-100x100.png
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 7cc3630c20ae4097b1b5f504e2326a99
28fb1365a8b52995b1f90ba428a767e90a9c3aca
c6104e4261eba13131bda269fca29f9ff8da34b82ec67a89e0ae033a546b3f9e
GET /up/neyfilm/ALIZARANDI/axenarmafzar/NOD32-logo2-100x100.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Type: image/png
Content-Length: 10749
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-29fd"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/Pishnehadi/%D9%87%D9%85%D8%B1%D8%A7%D9%87-%D8%A7%D9%88%D9%84.png
79.127.127.67200 OK 1.9 kB URL HTTP/1.1 rozup.ir/up/neyfilm/Pishnehadi/%D9%87%D9%85%D8%B1%D8%A7%D9%87-%D8%A7%D9%88%D9%84.png
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 150 x 50, 8-bit colormap, non-interlaced\012- data
Hash d55010f4d04529f02c1971042c38ab3d
0242dacd41a110041687fba3470af08138bf120b
5806f844be81f3b88a52143a61704d7a22c986e3b8e56d8813208d2b1481b4cb
GET /up/neyfilm/Pishnehadi/%D9%87%D9%85%D8%B1%D8%A7%D9%87-%D8%A7%D9%88%D9%84.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Type: image/png
Content-Length: 1881
Last-Modified: Mon, 20 Apr 2015 10:44:44 GMT
Connection: keep-alive
ETag: "5534d89c-759"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/Nero-100x100.png
79.127.127.67200 OK 13 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/Nero-100x100.png
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 170f21ee06dea2afc5328b9c9dbe27e0
e6e8317b9a60ea23a0fe5ab75d0ac91c1fd72a8b
e2cd6704d1aa143d18900380dcbff71c66661695ff8fc754428ed074ce2cc9c2
GET /up/neyfilm/ALIZARANDI/axenarmafzar/Nero-100x100.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Type: image/png
Content-Length: 12912
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-3270"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/winrar4-100x100.png
79.127.127.67200 OK 9.4 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/winrar4-100x100.png
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash da360bbf560923e761b8bc660df161b7
e50c20e56c2c08cf1d1497eee84ff7f02e4e58db
4319a0555c961ca43d107616696afd30bdd6f30fec461a37271c48731bf9fe61
GET /up/neyfilm/ALIZARANDI/axenarmafzar/winrar4-100x100.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Type: image/png
Content-Length: 9364
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-2494"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/chrome-100x100.png
79.127.127.67200 OK 6.5 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/chrome-100x100.png
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 4cd1101c6d95e009d1299de1644be63b
e85ab709713ffb1a24949cd05d336a93a33bb7e0
91e7fa0e42c31ebfe1abf6e0a8caa813b06ff202e8e0dfd8963bbe713718deab
GET /up/neyfilm/ALIZARANDI/axenarmafzar/chrome-100x100.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Type: image/png
Content-Length: 6510
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-196e"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/Adobe-Flash-Player1-100x100.png
79.127.127.67200 OK 6.9 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/Adobe-Flash-Player1-100x100.png
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 713a59cac516394ac6d234187c50c949
cf9a0b1caf1ef51c76696ae10030589437629382
21bc08eae9a8050d2e7226e6ccfb7b5a576dc3865f3114b5856a25f139f566b8
GET /up/neyfilm/ALIZARANDI/axenarmafzar/Adobe-Flash-Player1-100x100.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Type: image/png
Content-Length: 6918
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-1b06"
Accept-Ranges: bytes
rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/Internet-Download-Manager-61-100x100.png
79.127.127.67200 OK 14 kB URL HTTP/1.1 rozup.ir/up/neyfilm/ALIZARANDI/axenarmafzar/Internet-Download-Manager-61-100x100.png
IP 79.127.127.67:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash cfdbce4fe6a135178bcaee284033eeee
dd417174542ecff236d648a05e3b985f45b6cad0
6dba2fec1bf54f8caa9fba0ad7ae539ef23a5646715bf0577488f24984b746d3
GET /up/neyfilm/ALIZARANDI/axenarmafzar/Internet-Download-Manager-61-100x100.png HTTP/1.1
Host: rozup.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0
Date: Wed, 30 Nov 2022 01:58:27 GMT
Content-Type: image/png
Content-Length: 14493
Last-Modified: Thu, 23 Apr 2015 15:25:04 GMT
Connection: keep-alive
ETag: "55390ed0-389d"
Accept-Ranges: bytes
push.services.mozilla.com/
52.39.62.124101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.39.62.124:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ZnnYgTcW/9GLZBHkJ76YPQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Bh6xNBFDI/4A0sIKO9JLWF1S2tQ=
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash f0d3f725e5cdfb761b0d6b9e461d00e9
a2942d4abe423311d433be4e002029634c871e89
28d79e22cb6271f4963a3697527540a988b8a7e9629dba627715fb1384243942
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "28D79E22CB6271F4963A3697527540A988B8A7E9629DBA627715FB1384243942"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5269
Expires: Wed, 30 Nov 2022 03:26:17 GMT
Date: Wed, 30 Nov 2022 01:58:28 GMT
Connection: keep-alive
dvcasha2.ocsp-certum.com/
23.36.79.10200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP 23.36.79.10:0
ASN #20940 Akamai International B.V.
Hash 0a9ad881a2da1aa304f24654dcda86cc
5c744299397af162a7ebfb0720f0fc79aea97ec7
d3eaf430e86887fdfbfde82f14bd14e364d183e68a6cdb17035025ca2d165b89
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: HIT
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=447
Date: Wed, 30 Nov 2022 01:58:28 GMT
Connection: keep-alive
X-N: S
www.rozblog.com/theme/rozblog_v4/favi1.ico
79.127.127.68200 OK 1.2 kB URL HTTP/1.1 www.rozblog.com/theme/rozblog_v4/favi1.ico
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 129e0e4681906fae60ea32d066a7b4c5
33c024415db44baa3aba0f13df1399d9b81ac9e6
0a14eb14e53df8201b78084ab9a276a1f4ca01e55a20c3b8b0b6f3b660ee3ff0
GET /theme/rozblog_v4/favi1.ico HTTP/1.1
Host: www.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Cookie: analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 30 Nov 2023 01:58:28 GMT
content-type: image/x-icon
last-modified: Tue, 18 Nov 2014 15:12:07 GMT
accept-ranges: bytes
content-length: 1150
date: Wed, 30 Nov 2022 01:58:28 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
audience.yektanet.com/api/v1/scripts/preview/validate/?app_id=xywHAyqU
185.143.233.120200 OK 5 B URL HTTP/2 audience.yektanet.com/api/v1/scripts/preview/validate/?app_id=xywHAyqU
IP 185.143.233.120:0
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type ASCII text, with no line terminators
Hash 68934a3e9455fa72420237eb05902327
7cb6efb98ba5972a9b5090dc2e517fe14d12cb04
fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa
GET /api/v1/scripts/preview/validate/?app_id=xywHAyqU HTTP/1.1
Host: audience.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://neyfilm.rozblog.com
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 30 Nov 2022 01:58:28 GMT
content-type: application/json
content-length: 5
access-control-allow-origin: http://neyfilm.rozblog.com
allow: GET, OPTIONS
access-control-allow-methods: GET, OPTIONS
access-control-allow-credentials: true
access-control-allow-headers: Authorization
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2023
ar-atime: 0.170
ar-cache: BYPASS
ar-request-id: 5c303442c26c8567a0080681c98c75c2
accept-ranges: bytes
X-Firefox-Spdy: h2
ua.yektanet.com/__fake.gif/?aa=event&abe=L&abf=9ccd67bd-7f56-4395-bca2-12bdaf14464f&abj=1&aed=pub&ac=http%3A%2F%2Fneyfilm.rozblog.com%2Fcat%2F300&ae=%7B%7D&ad=neyfilm.rozblog.com&as=%D8%B1%DB%8C%D9%86%DA%AF%D8%AA%D9%88%D9%86%20%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84&aef=xywHAyqU&aec=156927&aaa=direct&aab=null&ai=5bbe336f-e6f6-51c3-c378-9a07ab5d8d27&abw=1268&abb=5054&aby=1280&abz=1024&al=1280&am=939&abk=%D8%B1%D8%B3%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D8%A7%D9%86%D9%87%20%D9%86%DB%8C%D8%B4%D8%A7%D8%A8%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%88%D8%B1%20%D9%85%D9%88%D8%B2%DB%8C%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%DA%A9
185.143.233.120200 OK 42 B URL HTTP/2 ua.yektanet.com/__fake.gif/?aa=event&abe=L&abf=9ccd67bd-7f56-4395-bca2-12bdaf14464f&abj=1&aed=pub&ac=http%3A%2F%2Fneyfilm.rozblog.com%2Fcat%2F300&ae=%7B%7D&ad=neyfilm.rozblog.com&as=%D8%B1%DB%8C%D9%86%DA%AF%D8%AA%D9%88%D9%86%20%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84&aef=xywHAyqU&aec=156927&aaa=direct&aab=null&ai=5bbe336f-e6f6-51c3-c378-9a07ab5d8d27&abw=1268&abb=5054&aby=1280&abz=1024&al=1280&am=939&abk=%D8%B1%D8%B3%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D8%A7%D9%86%D9%87%20%D9%86%DB%8C%D8%B4%D8%A7%D8%A8%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%88%D8%B1%20%D9%85%D9%88%D8%B2%DB%8C%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%DA%A9
IP 185.143.233.120:0
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /__fake.gif/?aa=event&abe=L&abf=9ccd67bd-7f56-4395-bca2-12bdaf14464f&abj=1&aed=pub&ac=http%3A%2F%2Fneyfilm.rozblog.com%2Fcat%2F300&ae=%7B%7D&ad=neyfilm.rozblog.com&as=%D8%B1%DB%8C%D9%86%DA%AF%D8%AA%D9%88%D9%86%20%D9%85%D9%88%D8%A8%D8%A7%DB%8C%D9%84&aef=xywHAyqU&aec=156927&aaa=direct&aab=null&ai=5bbe336f-e6f6-51c3-c378-9a07ab5d8d27&abw=1268&abb=5054&aby=1280&abz=1024&al=1280&am=939&abk=%D8%B1%D8%B3%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D8%A7%D9%86%D9%87%20%D9%86%DB%8C%D8%B4%D8%A7%D8%A8%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%88%D8%B1%20%D9%85%D9%88%D8%B2%DB%8C%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%D9%80%DA%A9 HTTP/1.1
Host: ua.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 30 Nov 2022 01:58:29 GMT
content-type: image/gif
content-length: 42
set-cookie: gearbox_ad_token=065da2af-fa163-3d6b1-19e89-91b20aed84097; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Sat, 27-Nov-32 01:58:29 GMT
analytics_global_token=065da2af-fa163-3d6b1-19e89-91b20aed84097; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Sat, 27-Nov-32 01:58:29 GMT
last-modified: Wednesday, 30-Nov-2022 01:58:29 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2022
ar-atime: 0.182
ar-cache: BYPASS
ar-request-id: 1d0df5a18a41a4fe968a5afe41a075c4
accept-ranges: bytes
X-Firefox-Spdy: h2
plus.sabavision.com/csync/3P/pixel?id=yektanet
185.147.178.24200 OK 597 B URL HTTP/2 plus.sabavision.com/csync/3P/pixel?id=yektanet
IP 185.147.178.24:0
ASN #44932 Fannavaran-e Idea Pardaz-e Saba PJSC
File type JPEG image data, baseline, precision 8, 1x1, components 3\012- data
Hash 91c97a3dd65bdf0bcd2fa45d5b1c1b86
68cf099726f6e1cc8f3b31ff481a1d2479fc682d
af64a6f3ffc388b91cd70eae25893f7bea7e8e7d84d2c2b41c378cfbe13651ff
GET /csync/3P/pixel?id=yektanet HTTP/1.1
Host: plus.sabavision.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:58:29 GMT
content-type: image/jpeg
content-length: 597
cache-control: no-cache
cache-directive: no-cache
expires: 0
pragma: no-cache
pragma-directive: no-cache
server: nginx
x-upstream-ct: 0.001
x-upstream-ht: 0.253
x-upstream: 0
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b0a30574b7bfe56bfb695fa7801f3907
c872e2a9ee0a72c4d7370e104d7494c19394441d
7079e97d32e5dfd6909d5cebb1fdb533dde8830e961c5dfca9a9ff77d9ea8c32
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7079E97D32E5DFD6909D5CEBB1FDB533DDE8830E961C5DFCA9A9FF77D9EA8C32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4580
Expires: Wed, 30 Nov 2022 03:14:49 GMT
Date: Wed, 30 Nov 2022 01:58:29 GMT
Connection: keep-alive
nfetch.yektanet.com/api/v2/load
87.107.144.247204 No Content 0 B URL HTTP/2 nfetch.yektanet.com/api/v2/load
IP 87.107.144.247:0
ASN #204544 Dade Pardazi Mobinhost Co LTD
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v2/load HTTP/1.1
Host: nfetch.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://neyfilm.rozblog.com/
Origin: http://neyfilm.rozblog.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Wed, 30 Nov 2022 01:58:29 GMT
vary: Origin, Access-Control-Request-Headers
access-control-allow-origin: http://neyfilm.rozblog.com
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-headers: content-type
strict-transport-security: max-age=15724800; includeSubDomains
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
nfetch.yektanet.com/api/v2/load
87.107.144.247200 OK 1.3 kB URL HTTP/2 nfetch.yektanet.com/api/v2/load
IP 87.107.144.247:0
ASN #204544 Dade Pardazi Mobinhost Co LTD
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (1295), with no line terminators
Hash 69ad0a64c2640acd43abca06c6949086
e1713fa10a3cda532d003b33d3f300985f1d682a
328a334d84ec7a89d0bbb032dfa51b9fdd2bc6cc64978928c4aea8e823d9e29c
POST /api/v2/load HTTP/1.1
Host: nfetch.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 307
Origin: http://neyfilm.rozblog.com
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:58:29 GMT
content-type: application/json; charset=utf-8
content-length: 1349
vary: Origin
access-control-allow-origin: http://neyfilm.rozblog.com
access-control-allow-credentials: true
strict-transport-security: max-age=15724800; includeSubDomains
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
ua.yektanet.com/cookie/iframe/
185.143.233.120200 OK 12 kB URL HTTP/2 ua.yektanet.com/cookie/iframe/
IP 185.143.233.120:0
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c8b89e10e76e9208e9ba646be40ed9b5
fa7b668a530ad49d88660572420d45a2991547cb
44a3c1d66209a281945b8d4487d516bdf64e27fcd0824e399e4b4ba1a666abd1
GET /cookie/iframe/ HTTP/1.1
Host: ua.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 30 Nov 2022 01:58:28 GMT
content-type: text/html
vary: Accept-Encoding
last-modified: Wednesday, 30-Nov-2022 01:58:28 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2022
ar-atime: 0.184
ar-cache: BYPASS
ar-request-id: 2ee96ba1f05b910f59728c3da8a19a54
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19069
Expires: Wed, 30 Nov 2022 07:16:18 GMT
Date: Wed, 30 Nov 2022 01:58:29 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19069
Expires: Wed, 30 Nov 2022 07:16:18 GMT
Date: Wed, 30 Nov 2022 01:58:29 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19069
Expires: Wed, 30 Nov 2022 07:16:18 GMT
Date: Wed, 30 Nov 2022 01:58:29 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19069
Expires: Wed, 30 Nov 2022 07:16:18 GMT
Date: Wed, 30 Nov 2022 01:58:29 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5508d05a290b663fd89ead9b58f2efd8
53650399f9a986ba54addd668b4557109d12003b
65704a961410fdd318c491fedf002c8e9b184cd34b76fe1b67026d42ce21be3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9674
x-amzn-requestid: 7e7d0183-9667-462a-8d44-d125998c1ae3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgEoHVAoAMFvAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a1d-280ba97e3fe1bf7244cbde35;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qftF-GQkcjKTs30KMGCTDymw2SVSXeAYKGNWUnaMfvIb8HjtfHUx8A==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:46 GMT
etag: "53650399f9a986ba54addd668b4557109d12003b"
content-type: image/jpeg
age: 15223
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2730750-552d-4852-8ce1-503874565f75.jpeg
34.120.237.76200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2730750-552d-4852-8ce1-503874565f75.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 05196ec43964cf559caa0c0279148d62
6170d6776615503e3e29f86783febc3e3e78ca66
47f3a5cde661987e3496ce110a0170b10087dd9ba8d4fd691c4830587ba3fa3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2730750-552d-4852-8ce1-503874565f75.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9051
x-amzn-requestid: 1032dd9c-a15e-4e8a-9c81-07419e8caf67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhGvEMNIAMFaKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867bc4-1005c20a33320dbf6567ca31;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rtfl896JX35oFFEVmqyH9Nm62iSY6rqwzkLwZMcM45p_ySF6J2QwEQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:47 GMT
age: 15222
etag: "6170d6776615503e3e29f86783febc3e3e78ca66"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4f88ec5-5875-45d1-bcd3-d997040d6d42.jpeg
34.120.237.76200 OK 3.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4f88ec5-5875-45d1-bcd3-d997040d6d42.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ceb8e975fb408de32c43f55febaa6414
453067f6ab356aa87a3ad3b56e33545376597852
e0ecbb6052b4fef75f58da8dae589c81ab9ec9d304de08f26c144a2c3ce9eaac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4f88ec5-5875-45d1-bcd3-d997040d6d42.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3719
x-amzn-requestid: 6fab3454-fedd-4a1e-ae47-468ddd6233bc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDaGQ4IAMFUkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-4b313cf054d6301e71cdc0c1;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KpgPP5VdjjU4rHaunbn3Yf-F5vLzZC7PhWu_QCF4WfuDHTqw3ufoyw==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:35 GMT
etag: "453067f6ab356aa87a3ad3b56e33545376597852"
content-type: image/jpeg
age: 15234
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52cf4797-5177-4859-9523-faeb4e38f224.jpeg
34.120.237.76200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52cf4797-5177-4859-9523-faeb4e38f224.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5c5277610f3a542571abb53ffb3d4df1
ce411cc5b0a37bbd89551d06d7d0349f45734e97
3bf1105631ef7fda0249a46390ca90f904ea73b0a4f017c2db85326550a80a3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52cf4797-5177-4859-9523-faeb4e38f224.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9812
x-amzn-requestid: 70bfeb68-0703-44bf-8550-50c759d52d86
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDbFolIAMFYBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-73fb65ee2b9161372819207f;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jpQ-1qUf3ysXSe_j4z4PIc5e1zj0MaDF9qliEVxU_4RR66yWHwCWzg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:35 GMT
etag: "ce411cc5b0a37bbd89551d06d7d0349f45734e97"
content-type: image/jpeg
age: 15234
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp
34.120.237.76200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bbe350ea797a0fec5a19a450fc5de4b4
2f3a39a528d3b759060203931de33c12303592e1
4d661dac2e19e07ae15d0f8cf00bd268c6c2defb2f5e4de38fcb6e7031dfd605
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9330
x-amzn-requestid: 3fad352d-7664-43e0-9395-e840f671ca61
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgFQFIdoAMFSmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a21-5e9847852f8435231d401fe6;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mCEtSOenWKxay4vNy5mN9cexxXKXKt7TMuLaLw-M86tLKwQ2MwuxPg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:11:32 GMT
age: 13617
etag: "2f3a39a528d3b759060203931de33c12303592e1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2fcfcea6-8f79-45f4-b081-2b90a5d95f8f.jpeg
34.120.237.76200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2fcfcea6-8f79-45f4-b081-2b90a5d95f8f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash acb1e555533322dbfeb8e0d8c956c43d
e1eec39299f081b53c647953b57da4f2f1ba10bc
579d2fd6aab6bba72a405bb1d0259856878adc90671a88b2b0edf5a284dba1f9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2fcfcea6-8f79-45f4-b081-2b90a5d95f8f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5492
x-amzn-requestid: 4b09d9a8-09fa-40e5-a996-8a6ad9f8283e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgE9E5TIAMF6ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a1f-2f17467d7a6318796d01fd2e;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:11 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 8kjwcw34ssnai7n-fW6lGV5ZmFpHR7bTX5MvKPNSgqqzMAgGFCI5fA==
via: 1.1 42ef990e439ae115ff739f04e3945234.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:35 GMT
etag: "e1eec39299f081b53c647953b57da4f2f1ba10bc"
content-type: image/jpeg
age: 15234
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
native-scripts.yektanet.com/public/chunk/minified/105.85c2d3e0a98cc9146357.js
185.143.233.120200 OK 0 B URL HTTP/2 native-scripts.yektanet.com/public/chunk/minified/105.85c2d3e0a98cc9146357.js
IP 185.143.233.120:0
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
GET /public/chunk/minified/105.85c2d3e0a98cc9146357.js HTTP/1.1
Host: native-scripts.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Cookie: gearbox_ad_token=55b5953f-7200-4da7-aca8-085ad78de3c3; analytics_global_token=55b5953f-7200-4da7-aca8-085ad78de3c3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 30 Nov 2022 01:58:29 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Tue, 15 Nov 2022 11:03:35 GMT
x-rgw-object-type: Normal
etag: W/"a13ed01a77c4df76f1f9c6843b130ebf"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
expires: Wed, 30 Nov 2022 02:58:29 GMT
x-xss-protection: 1; mode=block
ar-sid: 2022
ar-atime: 0.000
ar-cache: HIT
ar-request-id: 7b5d266a240af39ea49c7ae078d97ae1
content-encoding: br
X-Firefox-Spdy: h2
cdn.yektanet.com/rg_woebegone/scripts_v3/D138M2Bm/publisher.js?v=202201003001
185.166.104.4200 OK 0 B URL HTTP/2 cdn.yektanet.com/rg_woebegone/scripts_v3/D138M2Bm/publisher.js?v=202201003001
IP 185.166.104.4:0
ASN #202319 Avaye Hamrahe Houshmande Hezardastan PJSC
GET /rg_woebegone/scripts_v3/D138M2Bm/publisher.js?v=202201003001 HTTP/1.1
Host: cdn.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:58:28 GMT
content-type: application/javascript; charset=utf-8
cache-tag: ua_D138M2Bm,ua
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
last-modified: Tue, 18 Oct 2022 09:48:05 GMT
x-rgw-object-type: Normal
etag: W/"483e3c65d46da98a641fddb5d5ec97c5"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
x-zrk-us: 206
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2
cdn.yektanet.com/fp/fingerprint.js?v=umd
185.166.104.4200 OK 0 B URL HTTP/2 cdn.yektanet.com/fp/fingerprint.js?v=umd
IP 185.166.104.4:0
ASN #202319 Avaye Hamrahe Houshmande Hezardastan PJSC
GET /fp/fingerprint.js?v=umd HTTP/1.1
Host: cdn.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:58:28 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 20 Sep 2022 08:24:54 GMT
vary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
etag: W/"632978d6-7c6a"
x-zrk-us: 206
cache-control: public, max-age=3600
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
strict-transport-security: max-age=31536000
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2
cdn.yektanet.com/js/rozblog.com/native-rozblog.com-23662.js?v=202201003001
185.166.104.4200 OK 0 B URL HTTP/2 cdn.yektanet.com/js/rozblog.com/native-rozblog.com-23662.js?v=202201003001
IP 185.166.104.4:0
ASN #202319 Avaye Hamrahe Houshmande Hezardastan PJSC
GET /js/rozblog.com/native-rozblog.com-23662.js?v=202201003001 HTTP/1.1
Host: cdn.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 01:58:27 GMT
content-type: application/javascript; charset=utf-8
cache-tag: native_rozblog.com,native
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
last-modified: Sun, 27 Nov 2022 13:24:37 GMT
x-rgw-object-type: Normal
etag: W/"2a72faf660ea1bb301b7bc70533cdac6"
access-control-allow-origin: *
access-control-allow-credentials: true
cache-control: public, max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
x-zrk-us: 206
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2
native-removal.triboon.net/?hash=584304687,638410610,113953710,376297402,273726623
185.143.234.120200 OK 0 B URL HTTP/2 native-removal.triboon.net/?hash=584304687,638410610,113953710,376297402,273726623
IP 185.143.234.120:0
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
OPTIONS /?hash=584304687,638410610,113953710,376297402,273726623 HTTP/1.1
Host: native-removal.triboon.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: href
Referer: http://neyfilm.rozblog.com/
Origin: http://neyfilm.rozblog.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 30 Nov 2022 01:58:28 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: http://neyfilm.rozblog.com
access-control-allow-headers: *
cache-control: public, max-age=14400, s-maxage=14400, stale-while-revalidate=3600, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2074
ar-atime: 0.186
ar-request-id: bba3fbe2db14717ad578859e0be009dc
content-encoding: br
X-Firefox-Spdy: h2
native-removal.triboon.net/?hash=584304687,638410610,113953710,376297402,273726623
185.143.234.120200 OK 0 B URL HTTP/2 native-removal.triboon.net/?hash=584304687,638410610,113953710,376297402,273726623
IP 185.143.234.120:0
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
GET /?hash=584304687,638410610,113953710,376297402,273726623 HTTP/1.1
Host: native-removal.triboon.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
href: http://neyfilm.rozblog.com/cat/300
Origin: http://neyfilm.rozblog.com
Connection: keep-alive
Referer: http://neyfilm.rozblog.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Wed, 30 Nov 2022 01:58:28 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: http://neyfilm.rozblog.com
access-control-allow-headers: *
cache-control: public, max-age=14400, s-maxage=14400, stale-while-revalidate=3600, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2074
ar-atime: 0.188
ar-cache: BYPASS
ar-request-id: ab406d89c2b8ae679dd2adc1a2d05a4b
content-encoding: br
X-Firefox-Spdy: h2