r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5fe582397f3003b225cb9058e02c2190
68174a54a8f6c4de9247ccea2dcae3c9b76bdb9f
238a2ef5b61d56353d0a5e97ec3092b8f2792cde7cecf40e1a858f8c129d3a9d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "238A2EF5B61D56353D0A5E97EC3092B8F2792CDE7CECF40E1A858F8C129D3A9D"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5017
Expires: Fri, 27 Jan 2023 19:01:47 GMT
Date: Fri, 27 Jan 2023 17:38:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 58ffdcb539c3b250fdf31ed761627fc1
5b55b1522ef84c39b5c42f9bbfbc62b806c1269f
eb783cfa8c8544b0574b345abc0bf3c150979d4efce1a013f17b6cd48076fc63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB783CFA8C8544B0574B345ABC0BF3C150979D4EFCE1A013F17B6CD48076FC63"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7965
Expires: Fri, 27 Jan 2023 19:50:55 GMT
Date: Fri, 27 Jan 2023 17:38:10 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 27 Jan 2023 17:35:23 GMT
content-type: application/json
age: 167
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 49049f3c92aad686cd7ff28ecd2a5a4f
9cc2bc9c055450dbc4fae93eabe4ef8509b3ff57
02cf421968192286bb174ff0e6c818a843c4eca61a02cd493e6f95bb58a37015
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "02CF421968192286BB174FF0E6C818A843C4ECA61A02CD493E6F95BB58A37015"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2356
Expires: Fri, 27 Jan 2023 18:17:27 GMT
Date: Fri, 27 Jan 2023 17:38:11 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: zvBdhGJF5Z1XE9V7Ml3+XmeEOf2llDtdybesk0SP/1I94l1ZmJYvizN+svMGrTBIrUNdr2cpadI=
x-amz-request-id: JA25SQ7FFH82MT09
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 27 Jan 2023 16:49:29 GMT
age: 2922
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 17:38:11 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
jen-roh.rozblog.com/post/159
200 OK 17 kB URL HTTP/1.1 jen-roh.rozblog.com/post/159
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1816), with CRLF, LF line terminators
Hash 78173346aed4faf23bbeefefcfccb5f5
bdcf31cfeab9f41ecb108efced55629ef0e69546
4ac07949395b257b6ede98e4cb6833a854eabe58e9488a0d574581a5575b4e6d
GET /post/159 HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-language: fa
content-type: text/html; charset=utf-8
set-cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a; path=/
visit_jen-roh_159=91.90.42.154; expires=Sat, 28-Jan-2023 17:38:10 GMT; Max-Age=86400
vary: Accept-Encoding,User-Agent
transfer-encoding: chunked
content-encoding: gzip
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
jen-roh.rozblog.com/temp/site.css?22
200 OK 3.9 kB URL HTTP/1.1 jen-roh.rozblog.com/temp/site.css?22
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (860)
Hash 787a6674aa05de4919a7c90cdbb150c9
2159cc3ec669621f05f361bd91b956e573faef9a
e234a5881c33e5ff75519381140d07f15611e92efbb0bb45ecf73437048d376c
GET /temp/site.css?22 HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sun, 26 Feb 2023 17:38:11 GMT
content-type: text/css
last-modified: Wed, 02 Mar 2022 08:28:27 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 3945
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
jen-roh.rozblog.com/temp/tarahi/styles.css
200 OK 6.1 kB URL HTTP/1.1 jen-roh.rozblog.com/temp/tarahi/styles.css
IP
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 (with BOM) text
Hash 28cf21c53411f845b0888677cbc74828
25bf3bc9920ad37a3f81d88e46001cab51eea3f6
d18ec6839084bfa3a36008f9f5f03cf0de9c8c656677aac9a5a62c2b6890f5ab
GET /temp/tarahi/styles.css HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sun, 26 Feb 2023 17:38:11 GMT
content-type: text/css
last-modified: Tue, 15 Feb 2022 00:08:30 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 6091
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
jen-roh.rozblog.com/temp/default/script.js
200 OK 302 B URL HTTP/1.1 jen-roh.rozblog.com/temp/default/script.js
IP
ASN #43754 Asiatech Data Transmission company
Hash f63434fb5b29fa6044b1a1e30e6c1162
2e7ada06c79c670f0dff3bd7d0474d07c49104e0
a9396929db33b5a927292dc2e2f33891c594811b1b37dd993abbc9db9afbb7cb
GET /temp/default/script.js HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 03 Feb 2023 17:38:11 GMT
content-type: application/javascript
last-modified: Wed, 18 Jul 2018 10:51:39 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 302
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
jen-roh.rozblog.com/code/popup
200 OK 84 B URL HTTP/1.1 jen-roh.rozblog.com/code/popup
IP
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 text, with no line terminators
Hash 274e6aae19b1687827217b4b936ac6da
5b5bba34ad42842ad247b00970e70f7fc639de69
5d90eabf33e955bb11cf5600ff9a501351404df37b82a2a12e7befc146770529
GET /code/popup HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-language: fa
content-type: text/html; charset=utf-8
vary: Accept-Encoding,User-Agent
content-length: 84
content-encoding: gzip
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
jen-roh.rozblog.com/js/site.js?7
200 OK 9.4 kB URL HTTP/1.1 jen-roh.rozblog.com/js/site.js?7
IP
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 (with BOM) text, with very long lines (5730)
Hash 3a9e608b97ff4d23f8a1649f24b6ed66
794e50a615ef78e2f2bd7616c7d9e033fc4bbe9d
82faf31dfa45299d23061f2c05579901ca592090ce35f1dc48a6ff61f24ac28a
GET /js/site.js?7 HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 03 Feb 2023 17:38:11 GMT
content-type: application/javascript
last-modified: Sat, 14 May 2022 01:34:44 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 9422
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
jen-roh.rozblog.com/images/smilies/smile%20(2).gif
200 OK 1.0 kB URL HTTP/1.1 jen-roh.rozblog.com/images/smilies/smile%20(2).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash 4bc8e6787527cdf7bb61efc409d49168
04dce5fb45dc3945fd87984d804cd9e6fa6defea
6c799bdee0667cbaecc9db6160e76df91dd615800a797b1c63ec14c9fb013c32
GET /images/smilies/smile%20(2).gif HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 27 Jan 2024 17:38:11 GMT
content-type: image/gif
last-modified: Tue, 05 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 1001
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
rozblog.com/temp/nuke/FBarrow.gif
200 OK 59 B URL HTTP/1.1 rozblog.com/temp/nuke/FBarrow.gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 9 x 9\012- data
Hash 08f58683f752ec50ab890d4162cf9a03
2a0e3923b77ab35c273bf5307fc980f4d4de42fe
d8359b38e288d654bf46c6c01ea58f896a998390f848ca99eb4015900f1cdb42
GET /temp/nuke/FBarrow.gif HTTP/1.1
Host: rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 27 Jan 2024 17:38:11 GMT
content-type: image/gif
last-modified: Sat, 26 Nov 2011 12:58:49 GMT
accept-ranges: bytes
content-length: 59
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
jen-roh.rozblog.com/images/smilies/smile%20(29).gif
200 OK 3.9 kB URL HTTP/1.1 jen-roh.rozblog.com/images/smilies/smile%20(29).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash 20b1b66758da1d25ffc010878c85dfe9
813b390b37cd2a0eca90a481b08cee612b400147
93803a1e9f9c1fcd2835ff9da87c0d8557a50cf1fa09bb8ea5181a75b5a1649c
GET /images/smilies/smile%20(29).gif HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 27 Jan 2024 17:38:11 GMT
content-type: image/gif
last-modified: Tue, 05 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 3870
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
jen-roh.rozblog.com/images/smilies/smile%20(5).gif
200 OK 2.3 kB URL HTTP/1.1 jen-roh.rozblog.com/images/smilies/smile%20(5).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash fa1910d94b83caa6e9a61dfe2e04103f
34c3ed6096db71d86b84b6ecaf3e444acb20ebfd
4063598ee349698a6e8ac7fcea8f46a3d949a05aa3c46033313033104dd809ed
GET /images/smilies/smile%20(5).gif HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 27 Jan 2024 17:38:11 GMT
content-type: image/gif
last-modified: Tue, 05 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 2323
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
jen-roh.rozblog.com/images/smilies/smile%20(12).gif
200 OK 1.0 kB URL HTTP/1.1 jen-roh.rozblog.com/images/smilies/smile%20(12).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash 26e1a5a12b7cc8ab49ef0358618f0e6f
3a005a05a0aa8dae61d8ac9d8e114585ee797e5b
1d424977e57e0895a86a6b8368bcc5bc9acfe389a3f7708cc92997c05219ec21
GET /images/smilies/smile%20(12).gif HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 27 Jan 2024 17:38:11 GMT
content-type: image/gif
last-modified: Tue, 05 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 1017
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
rozblog.com/temp/pro/ads_468.jpg
200 OK 6.3 kB URL HTTP/1.1 rozblog.com/temp/pro/ads_468.jpg
IP
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: "LEAD Technologies Inc. V1.01", baseline, precision 8, 468x60, components 3\012- data
Hash db8cac5e50e0f1be65a3ec0756ea6612
3053609e1039ab6d0d0be6adefeaf7ba7a243cf6
8f10f1e719bda34ecfc3af6b50f8273e9c9676d10612eff12aad2382d458ef1d
GET /temp/pro/ads_468.jpg HTTP/1.1
Host: rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 27 Jan 2024 17:38:11 GMT
content-type: image/jpeg
last-modified: Fri, 20 Feb 2015 09:52:01 GMT
accept-ranges: bytes
content-length: 6286
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
jen-roh.rozblog.com/images/smilies/smile%20(7).gif
200 OK 845 B URL HTTP/1.1 jen-roh.rozblog.com/images/smilies/smile%20(7).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash 03719bd2e66d16ac9166413e9874fabc
e660b1316e52d5d43e5d9d1a9cfe8ebdccfe2afb
4743fc126b332eeef5d8615a74678aae3291a8c9cc68fe7db1d09a46a7e8c243
GET /images/smilies/smile%20(7).gif HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 27 Jan 2024 17:38:11 GMT
content-type: image/gif
last-modified: Tue, 05 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 845
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 27 Jan 2023 16:41:40 GMT
age: 3391
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
susawebtools.ir/services/yahoostat/yahoo.php?yid=Amir_1993_1376@yahoo.com&skin=2
200 OK 472 B URL HTTP/1.1 susawebtools.ir/services/yahoostat/yahoo.php?yid=Amir_1993_1376@yahoo.com&skin=2
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (793), with no line terminators
Hash 4ec038244f19f23e91d77fafc638e758
8b9c04fa82ef3ebc233be1bfb99e364569612b39
1e214116df5c34ab65fe7c3de29b65ad80529e425898e498125b5ee02d8f00f3
GET /services/yahoostat/yahoo.php?yid=Amir_1993_1376@yahoo.com&skin=2 HTTP/1.1
Host: susawebtools.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/javascript; charset=utf-8
content-length: 472
content-encoding: gzip
vary: Accept-Encoding,User-Agent
date: Fri, 27 Jan 2023 17:38:11 GMT
jen-roh.rozblog.com/temp/tarahi/fonts/yekanregular.woff
200 OK 22 kB URL HTTP/1.1 jen-roh.rozblog.com/temp/tarahi/fonts/yekanregular.woff
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, CFF, length 21500, version 2.0\012- data
Hash 05727d32400b2008acbf7fc49251ede0
b6c1a82539a2531eb1aad7d1cf05554d5a999154
da78e001fab6f5d7b1c68e17d00fb1595c9b10085d6769a86aeb6a39dc7e43d6
GET /temp/tarahi/fonts/yekanregular.woff HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/temp/tarahi/styles.css
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sun, 29 Jan 2023 17:38:11 GMT
content-type: font/woff
last-modified: Thu, 26 Feb 2015 19:00:25 GMT
etag: "53fc-54ef6d49-80b982f1d7ce7ee2;;;"
accept-ranges: bytes
content-length: 21500
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
www.zirebaran.org/share/1.js
200 OK 6.7 kB URL HTTP/1.1 www.zirebaran.org/share/1.js
IP
ASN #49981 WorldStream B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (15575)
Hash eb7770dbf552141b9acce39b4b8b6a5b
463d884f5759db444f2bf3f1dfedb662a96d97f5
6b84a18103f0825c340e6644a8ded878b0dba727430a0b1cf00f1ea219dbb537
GET /share/1.js HTTP/1.1
Host: www.zirebaran.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Fri, 27 Jan 2023 17:38:11 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/7.2.34
Content-Encoding: gzip
pichak.net/zekr-rooz/show.php?n=6
200 OK 201 B URL HTTP/1.1 pichak.net/zekr-rooz/show.php?n=6
IP
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with no line terminators
Hash 844260245992064d7a93e8bd24bad225
11fc7e8d1eadbed29483b96978dc8e839a3dfdf9
dba78e3021172610517a26e3e672ba97554474d1f8064be34cc9c72077040103
GET /zekr-rooz/show.php?n=6 HTTP/1.1
Host: pichak.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html; charset=UTF-8
content-length: 201
content-encoding: gzip
vary: Accept-Encoding
date: Fri, 27 Jan 2023 17:38:09 GMT
server: LiteSpeed
tools.pichak.net/poll/nazar.php?id=3998&width=160&height=300&bgchart=green&titlebgcolor=D60000&titlefontcolor=FFFFFF&qbgcolor=FFE74D&qfontcolor=000000&itembgcolor=FEFFD9&itemfontcolor=000000
200 OK 267 B URL HTTP/1.1 tools.pichak.net/poll/nazar.php?id=3998&width=160&height=300&bgchart=green&titlebgcolor=D60000&titlefontcolor=FFFFFF&qbgcolor=FFE74D&qfontcolor=000000&itembgcolor=FEFFD9&itemfontcolor=000000
IP
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 (with BOM) text, with very long lines (383), with no line terminators
Hash f364e795f491bb2179c9fcca2e1e28e6
4e85209ed5152085ddefbe52449fc6e805c3b8c1
260045737387531ec81d595988ac84cbdf48561b6b8978f4c938bf826aeb38a8
GET /poll/nazar.php?id=3998&width=160&height=300&bgchart=green&titlebgcolor=D60000&titlefontcolor=FFFFFF&qbgcolor=FFE74D&qfontcolor=000000&itembgcolor=FEFFD9&itemfontcolor=000000 HTTP/1.1
Host: tools.pichak.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html; charset=UTF-8
content-length: 267
content-encoding: gzip
vary: Accept-Encoding
date: Fri, 27 Jan 2023 17:38:09 GMT
server: LiteSpeed
www.zirebaran.org/share/3.js
200 OK 7.0 kB URL HTTP/1.1 www.zirebaran.org/share/3.js
IP
ASN #49981 WorldStream B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (16090)
Hash 42d9d03b6fb27e518b266e6e9ad98f72
221c292d5a6520def9fbda8ef8e599c3df0ad368
6ec7ec21d14993beb907fe44a29309afac6b6d2c7aab6beff40f1c8e4c46b1d3
GET /share/3.js HTTP/1.1
Host: www.zirebaran.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Fri, 27 Jan 2023 17:38:11 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/7.2.34
Content-Encoding: gzip
pagerank.pichak.net/rank/icon/?n=33&url=http://jen-roh.rozblog.com
200 OK 219 B URL HTTP/1.1 pagerank.pichak.net/rank/icon/?n=33&url=http://jen-roh.rozblog.com
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document, Unicode text, UTF-8 text, with no line terminators
Hash 15dd88c1815a4ef1d9f77e74b8a18056
a50bf7ff654835af2556d940ccea26ee74adb123
f4681050431722a48b0753c52e308d025c38e511c3b5239f17deef1ac178086a
GET /rank/icon/?n=33&url=http://jen-roh.rozblog.com HTTP/1.1
Host: pagerank.pichak.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html; charset=UTF-8
content-length: 219
content-encoding: gzip
vary: Accept-Encoding
date: Fri, 27 Jan 2023 17:38:09 GMT
server: LiteSpeed
www.zirebaran.org/share/2.js
200 OK 6.8 kB URL HTTP/1.1 www.zirebaran.org/share/2.js
IP
ASN #49981 WorldStream B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (15279)
Hash 4df19c4d1e2a67556f58219c811e362f
5b7c2b8ecbcda63866d2191c9e3e40dd11287dc4
7d68b7feeb8eeb6d3c6ca9ad2e5bd38716202de0737cf8d1d4c7d1dce8d7a7ce
GET /share/2.js HTTP/1.1
Host: www.zirebaran.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Fri, 27 Jan 2023 17:38:11 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/7.2.34
Content-Encoding: gzip
pichak.net/blogcod/email-tools/g.gif
200 OK 5.6 kB URL HTTP/1.1 pichak.net/blogcod/email-tools/g.gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 150 x 50\012- data
Hash f9d0e51ee79a1f116213614b7e17caa0
d8c686fb6e01d707db4593e11627a718bbc97907
f75b0a1b02c9618f4beefe87efd597073d5e786e2e2717fb60a3ed16f9dd7c4c
GET /blogcod/email-tools/g.gif HTTP/1.1
Host: pichak.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 03 Feb 2023 17:38:09 GMT
content-type: image/gif
last-modified: Mon, 11 Jul 2011 05:48:13 GMT
accept-ranges: bytes
content-length: 5554
date: Fri, 27 Jan 2023 17:38:09 GMT
server: LiteSpeed
jen-roh.rozblog.com/images/no_image.png
200 OK 6.3 kB URL HTTP/1.1 jen-roh.rozblog.com/images/no_image.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 5c675d607343c154f0ef074dc145988a
2f3713c21ed04a225f16439b200e2b2a6062454e
2e8f7285f7325ed8db6a0d253158db2c8962125173a1e6973e8fcb39a325a7ba
GET /images/no_image.png HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 27 Jan 2024 17:38:11 GMT
content-type: image/png
last-modified: Sat, 12 Jan 2013 13:14:07 GMT
accept-ranges: bytes
content-length: 6278
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
jen-roh.rozblog.com/temp/tarahi/fonts/fontawesome-webfont.woff?v=4.2.0
200 OK 66 kB URL HTTP/1.1 jen-roh.rozblog.com/temp/tarahi/fonts/fontawesome-webfont.woff?v=4.2.0
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, TrueType, length 65452, version 1.0\012- data
Hash d95d6f5d5ab7cfefd09651800b69bd54
7d65e0227d0d7cdc1718119cd2a7dce0638f151c
199411f659f41aaccb959bacb1b0de30e54f244352a48c6f9894e65ae0f8a9a1
GET /temp/tarahi/fonts/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/temp/tarahi/styles.css
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sun, 29 Jan 2023 17:38:11 GMT
content-type: font/woff
last-modified: Thu, 26 Feb 2015 19:00:20 GMT
etag: "ffac-54ef6d44-11fea27943efc11b;;;"
accept-ranges: bytes
content-length: 65452
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
jen-roh.rozblog.com/temp/tarahi/fonts/wdtv.woff
200 OK 15 kB URL HTTP/1.1 jen-roh.rozblog.com/temp/tarahi/fonts/wdtv.woff
IP
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, TrueType, length 14648, version 1.0\012- data
Hash 259c4490256daceb6a5f275cee137627
5c0eae14870f1ec6527aa64f3f675cb9063034ee
bd4bdb99aa4a1cf56a05d7a913dce42b23b4cb021148b0a0f22d836105d98fc5
GET /temp/tarahi/fonts/wdtv.woff HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/temp/tarahi/styles.css
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sun, 29 Jan 2023 17:38:11 GMT
content-type: font/woff
last-modified: Thu, 26 Feb 2015 19:00:22 GMT
etag: "3938-54ef6d46-daf654b8921ad10f;;;"
accept-ranges: bytes
content-length: 14648
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
rozblog.com/temp/music3/MTForumBlock_row_over.png
200 OK 139 B URL HTTP/1.1 rozblog.com/temp/music3/MTForumBlock_row_over.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 1 x 18, 8-bit/color RGB, non-interlaced\012- data
Hash 1fd885e3d0a8fc062470706ae84ea56b
f0e6c850b1794c523ca16bf087054cb843daf6fa
e0dc411ff39139fd39b2cf6d027ab2d56fbd3b51bacc0935e1ae284e65c64e40
GET /temp/music3/MTForumBlock_row_over.png HTTP/1.1
Host: rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 27 Jan 2024 17:38:11 GMT
content-type: image/png
last-modified: Sun, 03 Jul 2011 21:44:44 GMT
accept-ranges: bytes
content-length: 139
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
rozblog.com/temp/rang/like.png
200 OK 2.3 kB URL HTTP/1.1 rozblog.com/temp/rang/like.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 22 x 42, 8-bit/color RGBA, non-interlaced\012- data
Hash dd370ffbcd679da0d5c8547f34c6e2fb
6df3b9ec0e82b1a6ef41bc83041d2b2e16200077
2f14531974b17d9fd89de532694faf69ed7aa61b04ea990108b138d772ba96f7
GET /temp/rang/like.png HTTP/1.1
Host: rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 27 Jan 2024 17:38:11 GMT
content-type: image/png
last-modified: Sat, 14 Feb 2015 11:52:19 GMT
accept-ranges: bytes
content-length: 2272
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
jen-roh.rozblog.com/images/refresh2.svg
200 OK 276 B URL HTTP/1.1 jen-roh.rozblog.com/images/refresh2.svg
IP
ASN #43754 Asiatech Data Transmission company
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash 7082e86e2a3c9646fa1aa922b8e3a2d6
7f704127e872b5b94b8e2dd7959e2d5c9b9379a8
d1254b0bb9112500f8f39e1130f0a6c8dca1037d416e7f7d6524894b31b06b00
GET /images/refresh2.svg HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 03 Feb 2023 17:38:11 GMT
content-type: image/svg+xml
last-modified: Wed, 28 Apr 2021 22:57:34 GMT
etag: "114-6089e85e-9f2e18d89b796b95;;;"
accept-ranges: bytes
content-length: 276
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
jen-roh.rozblog.com/include/captcha/cap9.php?name_sess=330e55f92bd69f29bbfba348b79b12fc
200 OK 3.1 kB URL HTTP/1.1 jen-roh.rozblog.com/include/captcha/cap9.php?name_sess=330e55f92bd69f29bbfba348b79b12fc
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 30, 8-bit/color RGB, non-interlaced\012- data
Hash c89b4b625f6fd3032a9185d2044c087f
fd145e3cb0b8fd7cdf3095a77aa164e95961b054
255e81ca915ae49e9b2bf595177c6aca88bad568c06a8cca370a148079570e8c
GET /include/captcha/cap9.php?name_sess=330e55f92bd69f29bbfba348b79b12fc HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: image/png
content-length: 3104
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
jen-roh.rozblog.com/images/smilies/smile%20(24).gif
200 OK 987 B URL HTTP/1.1 jen-roh.rozblog.com/images/smilies/smile%20(24).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash da4b1372525e9bd4e81ed3083d1ade99
dfbd8b83029c88fab8bdd502e94c1e2cdb5f1e78
020b97e1fda4344e87cc91aaa96f7015d913e697a4169f066d37449e54b59633
GET /images/smilies/smile%20(24).gif HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 27 Jan 2024 17:38:11 GMT
content-type: image/gif
last-modified: Tue, 05 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 987
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
jen-roh.rozblog.com/images/smilies/smile%20(9).gif
200 OK 2.3 kB URL HTTP/1.1 jen-roh.rozblog.com/images/smilies/smile%20(9).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash e9dfcd8a0b7e8380af7d46101afcbb20
f85300a499338903fb81eb1b216a5828e02c2460
4e625176b1d0db2c3303c1c04dbb67ffdb1447cbc55d080bb439b2fedd8fa7ef
GET /images/smilies/smile%20(9).gif HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 27 Jan 2024 17:38:11 GMT
content-type: image/gif
last-modified: Mon, 25 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 2318
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
jen-roh.rozblog.com/images/smilies/smile%20(8).gif
200 OK 1.3 kB URL HTTP/1.1 jen-roh.rozblog.com/images/smilies/smile%20(8).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash 8fe036e92e61161e89bafcafcb07b87c
dee722bfa2cf1c506114abbcee0e0a7408392cec
69408195af42830e24e6bfab42b211bee01636d6e3dc26c96e253fc8e2fe85ea
GET /images/smilies/smile%20(8).gif HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 27 Jan 2024 17:38:11 GMT
content-type: image/gif
last-modified: Tue, 05 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 1317
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
rozblog.com/temp/music3/MTForumBlock_row.png
200 OK 155 B URL HTTP/1.1 rozblog.com/temp/music3/MTForumBlock_row.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 1 x 18, 8-bit/color RGB, non-interlaced\012- data
Hash 3ae7d651d73f3b247f9737655c53e08e
476c9a585906552a1054a74f88de640142ce40f5
d5496cde5cf105a1cf8c8fe59e0efefba5859a4fbff07a4701ec4f4a7c6e5ac5
GET /temp/music3/MTForumBlock_row.png HTTP/1.1
Host: rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 27 Jan 2024 17:38:11 GMT
content-type: image/png
last-modified: Sun, 03 Jul 2011 21:45:04 GMT
accept-ranges: bytes
content-length: 155
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
jen-roh.rozblog.com/images/smilies/smile%20(27).gif
200 OK 263 B URL HTTP/1.1 jen-roh.rozblog.com/images/smilies/smile%20(27).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash f621e45da725a0a64059734c278af763
59350efa657a24a2657f567301de8e1fc946c74d
3e6b4357f238814c69d03ed27f302e6fbdf2df35587e93ecb9fd9576d7355972
GET /images/smilies/smile%20(27).gif HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 27 Jan 2024 17:38:11 GMT
content-type: image/gif
last-modified: Tue, 05 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 263
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
susawebtools.ir/services/yahoostat/skin/2of.png
200 OK 10 kB URL HTTP/1.1 susawebtools.ir/services/yahoostat/skin/2of.png
IP
File type PNG image data, 154 x 94, 8-bit/color RGBA, non-interlaced\012- data
Hash 0178672d15912c8b921a6851964f8caa
5fc4587e7c9e84d535ba12c3b5a07c3312627753
4623275eb64e1fa6af9efd9a928a62dfc2596271f8c96fb755c9119d47f00d9e
GET /services/yahoostat/skin/2of.png HTTP/1.1
Host: susawebtools.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 03 Feb 2023 17:38:11 GMT
content-type: image/png
last-modified: Thu, 23 Jun 2016 18:05:45 GMT
accept-ranges: bytes
content-length: 10518
date: Fri, 27 Jan 2023 17:38:11 GMT
vary: User-Agent
jen-roh.rozblog.com/images/smilies/smile%20(10).gif
200 OK 1.7 kB URL HTTP/1.1 jen-roh.rozblog.com/images/smilies/smile%20(10).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash 99f42d956240d0bbcfd3df166ba7b42d
7470e40e21b3c9e319d0ec7cc279655f63d66b0c
9589d448636d9b6ee869497ec60e3a2d60239287d1b74b5b1d0f22156e80041c
GET /images/smilies/smile%20(10).gif HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 27 Jan 2024 17:38:11 GMT
content-type: image/gif
last-modified: Tue, 05 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 1668
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6757
Expires: Fri, 27 Jan 2023 19:30:48 GMT
Date: Fri, 27 Jan 2023 17:38:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e08a06f0287039069bd968cbd72a217d
390d39e80871eb18d02d9713f6aa26dc82ea2d8f
dfd2df712d4e0d9672ee05ad40a311a62447af9a64ca2c46e703c58da639278f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DFD2DF712D4E0D9672EE05AD40A311A62447AF9A64CA2C46E703C58DA639278F"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=563
Expires: Fri, 27 Jan 2023 17:47:34 GMT
Date: Fri, 27 Jan 2023 17:38:11 GMT
Connection: keep-alive
jen-roh.rozblog.com/weblog/file/loading/88.gif
200 OK 6.0 kB URL HTTP/1.1 jen-roh.rozblog.com/weblog/file/loading/88.gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 50 x 50\012- data
Hash 093445ee241c72e6dca01dc570c230dc
32adb71ec06b5d29ec62c5511328d5970228b86d
d40495f2a0e830c47fe4cd50574c68e206292f63545a0684516db0cd8716ee0e
GET /weblog/file/loading/88.gif HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 27 Jan 2024 17:38:11 GMT
content-type: image/gif
last-modified: Thu, 02 Feb 2012 21:52:24 GMT
accept-ranges: bytes
content-length: 5972
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
jen-roh.rozblog.com/images/smilies/smile%20(13).gif
200 OK 1.2 kB URL HTTP/1.1 jen-roh.rozblog.com/images/smilies/smile%20(13).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash 514e1cfa8f84c79da4d96d8cb5e93aeb
516bbc4f4ac1a1765cb45e9d67d300656ac5e0cc
a06f503e9559e46ea4dea87cd1bce2854a3c2c6897f239407d774cab36f843a4
GET /images/smilies/smile%20(13).gif HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 27 Jan 2024 17:38:11 GMT
content-type: image/gif
last-modified: Tue, 05 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 1203
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
jen-roh.rozblog.com/include/captcha/cap9.php
200 OK 3.0 kB URL HTTP/1.1 jen-roh.rozblog.com/include/captcha/cap9.php
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 30, 8-bit/color RGB, non-interlaced\012- data
Hash 8b56e3be5cb12c8b3e7bfd7486dd509b
b5610d9d6459b1c4a9d0fdb46dc5daca9da8d1be
2a4984c7a001d7bc4be3e68960aad0f9dd4cd28483c658174f18dbb74057122c
GET /include/captcha/cap9.php HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: image/png
content-length: 3000
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0307f41c1d1ae16f25d0b1ac5bcfed82
d139b2c1f923d01f95a949830043e4ef60e91c89
1d81bb42b835154c50c96ed75b7db461a49cfe611c73370b07f4bd6882344a65
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1D81BB42B835154C50C96ED75B7DB461A49CFE611C73370B07F4BD6882344A65"
Last-Modified: Thu, 26 Jan 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5111
Expires: Fri, 27 Jan 2023 19:03:22 GMT
Date: Fri, 27 Jan 2023 17:38:11 GMT
Connection: keep-alive
jen-roh.rozblog.com/images/smilies/smile%20(3).gif
200 OK 536 B URL HTTP/1.1 jen-roh.rozblog.com/images/smilies/smile%20(3).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash f1e05c82c7d3af8df68c934bb4ca5f37
93ee757596b622f23eda97fe2c43a038e96034e2
90444038b976c070a1e5a423a84d6c6cd8d9d08b60ec58fff377ffcd74549b92
GET /images/smilies/smile%20(3).gif HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 27 Jan 2024 17:38:11 GMT
content-type: image/gif
last-modified: Mon, 25 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 536
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
jen-roh.rozblog.com/images/smilies/smile%20(0).gif
200 OK 1.2 kB URL HTTP/1.1 jen-roh.rozblog.com/images/smilies/smile%20(0).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash 7acab697005b42df765344852bb92543
8ecda921e08e3da132042ad4d0d737180e2bc011
e80814ecc035b9c8d9bb98c6acdcd2b9452d99d57f57c885b7ed722cbfbe5b07
GET /images/smilies/smile%20(0).gif HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 27 Jan 2024 17:38:11 GMT
content-type: image/gif
last-modified: Mon, 25 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 1197
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
statinside.com/counter.js
200 OK 3.7 kB URL HTTP/1.1 statinside.com/counter.js
IP
ASN #49981 WorldStream B.V.
File type exported SGML document, ASCII text, with very long lines (8439)
Hash b5aa25093742549715a6dfbe795232e7
7438c6075282dd839122f3ba3634ad405fb2067b
59c784457013ec85621d34cb7df09cab6398599ef6fabd2de565bc0a2649271d
GET /counter.js HTTP/1.1
Host: statinside.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 27 Jan 2023 17:38:11 GMT
Content-Type: application/javascript
Last-Modified: Fri, 13 Jan 2023 16:16:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"63c183d4-20f8"
Content-Encoding: gzip
cleverjump.org/counter.js
200 OK 5.6 kB URL HTTP/1.1 cleverjump.org/counter.js
IP
ASN #49981 WorldStream B.V.
File type ASCII text, with CRLF line terminators
Hash 83126dc4af783a2179ab362a5bbec530
b1fe91477d92ab09066f28ddda5b31a4bf0f1689
cb1ef4607e93916a5dd30beae4617069924cb5f10edb65d8f93468c3fbdc1dc4
GET /counter.js HTTP/1.1
Host: cleverjump.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 27 Jan 2023 17:38:11 GMT
Content-Type: application/javascript
Content-Length: 5571
Last-Modified: Wed, 20 Jan 2021 12:50:32 GMT
Connection: keep-alive
ETag: "60082718-15c3"
Expires: Sat, 28 Jan 2023 17:38:11 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
pichak.net/blogcod/pagerank/icon/33/pr5.gif
200 OK 1.2 kB URL HTTP/1.1 pichak.net/blogcod/pagerank/icon/33/pr5.gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 80 x 15\012- data
Hash df6bd952c05c687ad9eea5473786a8a3
a0598c57b9ce0af469b0ea4421a5b4e981f78692
ffcc2bdad180185ae81b96484211dc0ae8b759b9f5af4458d08903621ee0a6c8
GET /blogcod/pagerank/icon/33/pr5.gif HTTP/1.1
Host: pichak.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 03 Feb 2023 17:38:09 GMT
content-type: image/gif
last-modified: Thu, 15 Apr 2010 17:01:38 GMT
accept-ranges: bytes
content-length: 1151
date: Fri, 27 Jan 2023 17:38:09 GMT
server: LiteSpeed
jen-roh.rozblog.com/post/copyright.png
404 Not Found 238 B URL HTTP/1.1 jen-roh.rozblog.com/post/copyright.png
IP
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a13215a134029a92f686826a029a9d8d
6d80a0cc56931d362add6ca9e49897a9155d814e
983816056b21e76ae8f5fb3528ac71ce7adf88ba202857d37d8dc31fb8fab773
GET /post/copyright.png HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: visit_jen-roh_159=91.90.42.154; PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 238
content-encoding: gzip
vary: Accept-Encoding,User-Agent
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
jen-roh.rozblog.com/images/smilies/smile%20(1).gif
200 OK 1.0 kB URL HTTP/1.1 jen-roh.rozblog.com/images/smilies/smile%20(1).gif
IP
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 18 x 18\012- data
Hash 8ff7886d573e7ce876fafe18e38256c0
69285dcb190e5d8fb419bf682cd67fea32095fbf
929f0885478c8f10c7b60e0a6f5a520f7f7055a994ab31a12cf95fd8ab8b2973
GET /images/smilies/smile%20(1).gif HTTP/1.1
Host: jen-roh.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/post/159
Cookie: PHPSESSID=16de6a6b64c88b3bdc772a7bbd392a2a
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 27 Jan 2024 17:38:11 GMT
content-type: image/gif
last-modified: Tue, 05 Jul 2005 00:00:00 GMT
accept-ranges: bytes
content-length: 1001
date: Fri, 27 Jan 2023 17:38:11 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
cleverjump.org/hit?z0;s1280*1024*24;fc52JdRCmuxp4dA4ZRqjKKuk0Ypa7XG;cshb2;r;uhttp%3A%2F%2Fjen-roh.rozblog.com%2Fpost%2F159;h%D8%B4%D8%AE%D8%B5%DB%8C%D8%AA%20%D8%A7%D9%81%D8%B1%D8%A7%D8%AF%20%D8%A8%D8%B1%20%D8%A7%D8%B3%D8%A7%D8%B3%20%D8%B3%D8%A7%D9%84%20%D8%AA%D9%88%D9%84%D8%AF-%20%D9%86%D9%88%D8%B4%D8%AA%D9%87%3A%20%D8%AF%DA%A9%D8%AA%D8%B1%20%D8%A7%D8%B3%D8%AF%D8%A7%D9%84%D9%84%D9%87%20%D8%B4%D8%B9%D9%88%D8%B1;0.7793036034244958
200 OK 0 B URL HTTP/1.1 cleverjump.org/hit?z0;s1280*1024*24;fc52JdRCmuxp4dA4ZRqjKKuk0Ypa7XG;cshb2;r;uhttp%3A%2F%2Fjen-roh.rozblog.com%2Fpost%2F159;h%D8%B4%D8%AE%D8%B5%DB%8C%D8%AA%20%D8%A7%D9%81%D8%B1%D8%A7%D8%AF%20%D8%A8%D8%B1%20%D8%A7%D8%B3%D8%A7%D8%B3%20%D8%B3%D8%A7%D9%84%20%D8%AA%D9%88%D9%84%D8%AF-%20%D9%86%D9%88%D8%B4%D8%AA%D9%87%3A%20%D8%AF%DA%A9%D8%AA%D8%B1%20%D8%A7%D8%B3%D8%AF%D8%A7%D9%84%D9%84%D9%87%20%D8%B4%D8%B9%D9%88%D8%B1;0.7793036034244958
IP
ASN #49981 WorldStream B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hit?z0;s1280*1024*24;fc52JdRCmuxp4dA4ZRqjKKuk0Ypa7XG;cshb2;r;uhttp%3A%2F%2Fjen-roh.rozblog.com%2Fpost%2F159;h%D8%B4%D8%AE%D8%B5%DB%8C%D8%AA%20%D8%A7%D9%81%D8%B1%D8%A7%D8%AF%20%D8%A8%D8%B1%20%D8%A7%D8%B3%D8%A7%D8%B3%20%D8%B3%D8%A7%D9%84%20%D8%AA%D9%88%D9%84%D8%AF-%20%D9%86%D9%88%D8%B4%D8%AA%D9%87%3A%20%D8%AF%DA%A9%D8%AA%D8%B1%20%D8%A7%D8%B3%D8%AF%D8%A7%D9%84%D9%84%D9%87%20%D8%B4%D8%B9%D9%88%D8%B1;0.7793036034244958 HTTP/1.1
Host: cleverjump.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 27 Jan 2023 17:38:11 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34
P3P: CP=CleverJump
Set-Cookie: _cjuh=GkpTmyfxn7MlC4hFmipr65F20XRxdm; expires=Sat, 27-Jan-2024 17:38:11 GMT; Max-Age=31536000; path=/hit; httponly; SameSite=None; Secure
statinside.com/api/add-page-view
200 OK 111 B URL HTTP/1.1 statinside.com/api/add-page-view
IP
ASN #49981 WorldStream B.V.
File type JSON data\012- , ASCII text
Hash 480b966418088f986aeb246e4676798d
7a007c5f2d1a081b9e9c4ae9ba6b30140e1b8023
6042add5120e4b2674d746d70504317e32a2a307c4776d9a36baca8cd1b71023
POST /api/add-page-view HTTP/1.1
Host: statinside.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 263
Origin: http://jen-roh.rozblog.com
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 27 Jan 2023 17:38:12 GMT
Content-Type: application/json; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34
Access-Control-Allow-Origin: *
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 19cf27db96e741c270c2b1cedb078159
b633008b9e90df7f7d66130ca05273ae20651422
e22a9491295eb63d63b41e0fdd90982f0b30192b9de3ee7b37d35e1919e5e3e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E22A9491295EB63D63B41E0FDD90982F0B30192B9DE3EE7B37D35E1919E5E3E7"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14229
Expires: Fri, 27 Jan 2023 21:35:21 GMT
Date: Fri, 27 Jan 2023 17:38:12 GMT
Connection: keep-alive
www.tools.pichak.net/poll/view.php?id=3998&width=160&height=300&bgchart=green&titlebgcolor=D60000&titlefontcolor=FFFFFF&qbgcolor=FFE74D&qfontcolor=000000&itembgcolor=FEFFD9&itemfontcolor=000000
200 OK 23 B URL HTTP/1.1 www.tools.pichak.net/poll/view.php?id=3998&width=160&height=300&bgchart=green&titlebgcolor=D60000&titlefontcolor=FFFFFF&qbgcolor=FFE74D&qfontcolor=000000&itembgcolor=FEFFD9&itemfontcolor=000000
IP
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 text, with no line terminators
Hash 7ef3933d0347a8eb9b3dbf6f4b035b78
772121927ca42ae6345bcfc9eea8a0a3dcefc369
1645ef4e05613302e213e91b4ef584695a22391778e12d0dff49b0fdbd0208da
GET /poll/view.php?id=3998&width=160&height=300&bgchart=green&titlebgcolor=D60000&titlefontcolor=FFFFFF&qbgcolor=FFE74D&qfontcolor=000000&itembgcolor=FEFFD9&itemfontcolor=000000 HTTP/1.1
Host: www.tools.pichak.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html; charset=UTF-8
content-length: 23
content-encoding: gzip
vary: Accept-Encoding
date: Fri, 27 Jan 2023 17:38:10 GMT
server: LiteSpeed
cleverjump.org/hit/get-uid.php
200 OK 30 B URL HTTP/1.1 cleverjump.org/hit/get-uid.php
IP
ASN #49981 WorldStream B.V.
File type ASCII text, with no line terminators
Hash ee07404cdb4d1a4349c156e2769b112a
69022bee4e4bbb8886e63d95905a241be6c84af5
069d603645f2914c8f4c46d6ded1f103472e41fee173816764eba7225d2801eb
Analyzer Verdict Alert fortinet Malware
GET /hit/get-uid.php HTTP/1.1
Host: cleverjump.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://jen-roh.rozblog.com
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
Cookie: _cjuh=GkpTmyfxn7MlC4hFmipr65F20XRxdm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 27 Jan 2023 17:38:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34
Access-Control-Allow-Origin: http://jen-roh.rozblog.com
Access-Control-Allow-Credentials: true
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: UhJJuWYIgRfBt1+uMFM1Cg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: hokLvj4dhOdW8t4/hAzkbXbee/4=
nfetch.yektanet.com/api/v2/load
204 No Content 0 B URL HTTP/2 nfetch.yektanet.com/api/v2/load
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/v2/load HTTP/1.1
Host: nfetch.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://jen-roh.rozblog.com/
Origin: http://jen-roh.rozblog.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: ArvanCloud
date: Fri, 27 Jan 2023 17:38:12 GMT
vary: Origin, Access-Control-Request-Headers
access-control-allow-origin: http://jen-roh.rozblog.com
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-headers: content-type
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2052
ar-atime: 0.012
ar-request-id: e27d26a2c602ff189d56df957de679eb
X-Firefox-Spdy: h2
pichak.net/zekr-rooz/6/7.png
200 OK 38 kB URL HTTP/1.1 pichak.net/zekr-rooz/6/7.png
IP
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 121 x 170, 8-bit/color RGB, non-interlaced\012- data
Hash 16894742b2d347730f64d162ab221b61
7433f7e5f14a46e50a366ef526e416f79789b83d
617c26e3570d153e523e399b57f4862cd2f5c139edc4a712507e8c04c50b9848
GET /zekr-rooz/6/7.png HTTP/1.1
Host: pichak.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Fri, 03 Feb 2023 17:38:10 GMT
content-type: image/png
last-modified: Fri, 20 Apr 2012 19:12:44 GMT
accept-ranges: bytes
content-length: 38004
date: Fri, 27 Jan 2023 17:38:10 GMT
server: LiteSpeed
audience.yektanet.com/api/v1/scripts/preview/validate/?app_id=xywHAyqU
200 OK 5 B URL HTTP/2 audience.yektanet.com/api/v1/scripts/preview/validate/?app_id=xywHAyqU
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type ASCII text, with no line terminators
Hash 68934a3e9455fa72420237eb05902327
7cb6efb98ba5972a9b5090dc2e517fe14d12cb04
fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa
GET /api/v1/scripts/preview/validate/?app_id=xywHAyqU HTTP/1.1
Host: audience.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://jen-roh.rozblog.com
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Fri, 27 Jan 2023 17:38:12 GMT
content-type: application/json
content-length: 5
access-control-allow-origin: http://jen-roh.rozblog.com
allow: GET, OPTIONS
access-control-allow-methods: GET, OPTIONS
access-control-allow-credentials: true
access-control-allow-headers: Authorization
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2056
ar-atime: 0.022
ar-cache: BYPASS
ar-request-id: 514e1c276d31107c5d6cd57a5d2f1af8
accept-ranges: bytes
X-Firefox-Spdy: h2
ua.yektanet.com/__fake.gif/?aa=event&abe=L&abf=9ccd67bd-7f56-4395-bca2-12bdaf14464f&abj=1&aed=pub&ac=http%3A%2F%2Fjen-roh.rozblog.com%2Fpost%2F159&ae=%7B%7D&ad=jen-roh.rozblog.com&as=%D8%B4%D8%AE%D8%B5%DB%8C%D8%AA%20%D8%A7%D9%81%D8%B1%D8%A7%D8%AF%20%D8%A8%D8%B1%20%D8%A7%D8%B3%D8%A7%D8%B3%20%D8%B3%D8%A7%D9%84%20%D8%AA%D9%88%D9%84%D8%AF-%20%D9%86%D9%88%D8%B4%D8%AA%D9%87%3A%20%D8%AF%DA%A9%D8%AA%D8%B1%20%D8%A7%D8%B3%D8%AF%D8%A7%D9%84%D9%84%D9%87%20%D8%B4%D8%B9%D9%88%D8%B1&aef=xywHAyqU&aec=156927&aaa=direct&aab=null&ai=658592ce-bf70-21d5-6efd-4b9ed4706b57&abw=1268&abb=6931&aby=1280&abz=1024&al=1280&am=939&abk=%D8%B9%D9%84%D9%88%D9%85%20%D8%BA%D8%B1%DB%8C%D8%A8%D9%87%20%D8%B7%D9%84%D8%B3%D9%85%D8%A7%D8%AA%20%D9%88%20%D8%AF%D8%B9%D8%A7
200 OK 42 B URL HTTP/2 ua.yektanet.com/__fake.gif/?aa=event&abe=L&abf=9ccd67bd-7f56-4395-bca2-12bdaf14464f&abj=1&aed=pub&ac=http%3A%2F%2Fjen-roh.rozblog.com%2Fpost%2F159&ae=%7B%7D&ad=jen-roh.rozblog.com&as=%D8%B4%D8%AE%D8%B5%DB%8C%D8%AA%20%D8%A7%D9%81%D8%B1%D8%A7%D8%AF%20%D8%A8%D8%B1%20%D8%A7%D8%B3%D8%A7%D8%B3%20%D8%B3%D8%A7%D9%84%20%D8%AA%D9%88%D9%84%D8%AF-%20%D9%86%D9%88%D8%B4%D8%AA%D9%87%3A%20%D8%AF%DA%A9%D8%AA%D8%B1%20%D8%A7%D8%B3%D8%AF%D8%A7%D9%84%D9%84%D9%87%20%D8%B4%D8%B9%D9%88%D8%B1&aef=xywHAyqU&aec=156927&aaa=direct&aab=null&ai=658592ce-bf70-21d5-6efd-4b9ed4706b57&abw=1268&abb=6931&aby=1280&abz=1024&al=1280&am=939&abk=%D8%B9%D9%84%D9%88%D9%85%20%D8%BA%D8%B1%DB%8C%D8%A8%D9%87%20%D8%B7%D9%84%D8%B3%D9%85%D8%A7%D8%AA%20%D9%88%20%D8%AF%D8%B9%D8%A7
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /__fake.gif/?aa=event&abe=L&abf=9ccd67bd-7f56-4395-bca2-12bdaf14464f&abj=1&aed=pub&ac=http%3A%2F%2Fjen-roh.rozblog.com%2Fpost%2F159&ae=%7B%7D&ad=jen-roh.rozblog.com&as=%D8%B4%D8%AE%D8%B5%DB%8C%D8%AA%20%D8%A7%D9%81%D8%B1%D8%A7%D8%AF%20%D8%A8%D8%B1%20%D8%A7%D8%B3%D8%A7%D8%B3%20%D8%B3%D8%A7%D9%84%20%D8%AA%D9%88%D9%84%D8%AF-%20%D9%86%D9%88%D8%B4%D8%AA%D9%87%3A%20%D8%AF%DA%A9%D8%AA%D8%B1%20%D8%A7%D8%B3%D8%AF%D8%A7%D9%84%D9%84%D9%87%20%D8%B4%D8%B9%D9%88%D8%B1&aef=xywHAyqU&aec=156927&aaa=direct&aab=null&ai=658592ce-bf70-21d5-6efd-4b9ed4706b57&abw=1268&abb=6931&aby=1280&abz=1024&al=1280&am=939&abk=%D8%B9%D9%84%D9%88%D9%85%20%D8%BA%D8%B1%DB%8C%D8%A8%D9%87%20%D8%B7%D9%84%D8%B3%D9%85%D8%A7%D8%AA%20%D9%88%20%D8%AF%D8%B9%D8%A7 HTTP/1.1
Host: ua.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Fri, 27 Jan 2023 17:38:12 GMT
content-type: image/gif
content-length: 42
set-cookie: gearbox_ad_token=a9a2499c-c5af5-59db8-8336d-dd7a85ecee3fe; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Mon, 24-Jan-33 17:38:12 GMT
analytics_global_token=a9a2499c-c5af5-59db8-8336d-dd7a85ecee3fe; Path=/; Domain=.yektanet.com; SameSite=None; Secure; HttpOnly; Max-Age=315360000; Expires=Mon, 24-Jan-33 17:38:12 GMT
last-modified: Friday, 27-Jan-2023 17:38:12 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2056
ar-atime: 0.020
ar-cache: BYPASS
ar-request-id: 43899d0632f38e99299ebd57c4cdddb4
accept-ranges: bytes
X-Firefox-Spdy: h2
dvcasha2.ocsp-certum.com/
200 OK 1.6 kB URL HTTP/1.1 dvcasha2.ocsp-certum.com/
IP
ASN #20940 Akamai International B.V.
Hash 8cde51cd98c172e2d6996e5977420c6d
329899aab24ee5ee9d8cf1654eb150f00766fa0e
76df9c46beb25cd10b1ea49e9c318cae12225fd13313cf52096f86adb7224fb5
POST / HTTP/1.1
Host: dvcasha2.ocsp-certum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 1599
X-Cached: STALE
Strict-Transport-Security: max-age=63072000,includeSubDomains,preload
Cache-Control: max-age=237
Date: Fri, 27 Jan 2023 17:38:13 GMT
Connection: keep-alive
X-N: S
www.rozblog.com/theme/rozblog_v4/favi1.ico
200 OK 1.2 kB URL HTTP/1.1 www.rozblog.com/theme/rozblog_v4/favi1.ico
IP
ASN #43754 Asiatech Data Transmission company
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 129e0e4681906fae60ea32d066a7b4c5
33c024415db44baa3aba0f13df1399d9b81ac9e6
0a14eb14e53df8201b78084ab9a276a1f4ca01e55a20c3b8b0b6f3b660ee3ff0
GET /theme/rozblog_v4/favi1.ico HTTP/1.1
Host: www.rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
Cookie: analytics_campaign={%22source%22:%22direct%22%2C%22medium%22:null}
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Sat, 27 Jan 2024 17:38:13 GMT
content-type: image/x-icon
last-modified: Tue, 18 Nov 2014 15:12:07 GMT
accept-ranges: bytes
content-length: 1150
date: Fri, 27 Jan 2023 17:38:13 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
tasvir.yektanet.com/media/CACHE/images/ads/image_b5eed5ea-61a3-442b-affa-df749216ad0c__1eFDwoBor2/90/150x100.jpeg
200 OK 5.8 kB URL HTTP/2 tasvir.yektanet.com/media/CACHE/images/ads/image_b5eed5ea-61a3-442b-affa-df749216ad0c__1eFDwoBor2/90/150x100.jpeg
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x100, components 3\012- data
Hash 60c95c42636ad6efbdafdb1da73c904f
2a07685aa55cd871bfc0ad4ce666fc01cb5ebbfb
357ce69423fb7fec41f302c2a25c4f0287b4c8cef43d62d152d884772e992189
GET /media/CACHE/images/ads/image_b5eed5ea-61a3-442b-affa-df749216ad0c__1eFDwoBor2/90/150x100.jpeg HTTP/1.1
Host: tasvir.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
Cookie: gearbox_ad_token=a9a2499c-c5af5-59db8-8336d-dd7a85ecee3fe; analytics_global_token=a9a2499c-c5af5-59db8-8336d-dd7a85ecee3fe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Fri, 27 Jan 2023 17:38:13 GMT
content-type: image/jpeg
content-length: 5803
last-modified: Thu, 26 Jan 2023 02:44:37 GMT
x-rgw-object-type: Normal
etag: "60c95c42636ad6efbdafdb1da73c904f"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-max-age: 1728000
cache-control: max-age=3600
x-cache-status: MISS
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
expires: Fri, 27 Jan 2023 18:38:13 GMT
x-xss-protection: 1; mode=block
ar-sid: 2056
ar-atime: 0.000
ar-cache: HIT
ar-request-id: 13f870c29e9ef4f12e6e1e152a500e45
accept-ranges: bytes
X-Firefox-Spdy: h2
nfetch.yektanet.com/api/v2/load
200 OK 1.2 kB URL HTTP/2 nfetch.yektanet.com/api/v2/load
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (739), with no line terminators
Hash 0aeef1165d183f07a3ac3ae2bb581986
0304730b5b4769eaf07b984ad27d8f72f11ac1a7
4f007ebd05ae43e38e014b0c8368a571f3069742a84f8a1e918340d29b6788af
POST /api/v2/load HTTP/1.1
Host: nfetch.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 706
Origin: http://jen-roh.rozblog.com
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Fri, 27 Jan 2023 17:38:12 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding, Origin
access-control-allow-origin: http://jen-roh.rozblog.com
access-control-allow-credentials: true
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2056
ar-atime: 0.123
ar-request-id: e0646aae8f8e0b9f326aee7830394108
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2572
Expires: Fri, 27 Jan 2023 18:21:05 GMT
Date: Fri, 27 Jan 2023 17:38:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2572
Expires: Fri, 27 Jan 2023 18:21:05 GMT
Date: Fri, 27 Jan 2023 17:38:13 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2572
Expires: Fri, 27 Jan 2023 18:21:05 GMT
Date: Fri, 27 Jan 2023 17:38:13 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbccadbe9-ae35-4a03-bf17-9342e0629c81.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbccadbe9-ae35-4a03-bf17-9342e0629c81.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6e96f3ea585b5fa8ed6446ed16e2b4b2
f90c205f370a2426dffe3c21b24bfa551b385556
6967ba25887f87200fcb39a3e6f065fd27596b2ebcf0d33a2751c655d6e724f2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbccadbe9-ae35-4a03-bf17-9342e0629c81.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4272
x-amzn-requestid: e051c22b-c2ec-4e59-b29b-ba1464d8015b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fRz28G13oAMFeeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d099c5-48b013ff34b9702a6d2fd560;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 02:53:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: X4SfAYS0JvW4sUNqSuBERNBwaI_xgKugxZ76_fsih_LSnImMC7Pnzg==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 03:37:14 GMT
age: 85438
etag: "f90c205f370a2426dffe3c21b24bfa551b385556"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7a0759c043594fbe85af422b59b8227
a05cfaad16078f42218dae233da38f6f5dff8487
e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 79b70f1f-a157-4dd4-8743-825714195b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9T3UGA3oAMFSlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c86695-36e60aba09c152c73b8aefcb;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 21:37:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zt4bgV2C6Wb_Ufa5mZ7-UDTfCvhXJggPJw9668v5DEmyBnWZ-aNrCg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 23:01:22 GMT
age: 67011
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ba0a42dadf6a976df148f652e9cc1844
4d825b74865effa4a858ddcad1d0969671facc07
7276a38c9ba6b13a06f24ab8b802f210f98c5541df53fbcd8e879a14d2957d95
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6418a71b-f89d-45d1-bc77-36d6312f560b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5943
x-amzn-requestid: 6774f4a4-ed83-49df-868f-4517c2af914b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUXxNF2UIAMFlYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a007-75b1e8975c3f4b503e0a1c5b;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:32:55 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MeE0Qrn_yZvUApGQTbOKQ14Z2ipPLbPFPyVqkKTk0Bs7ETn0UU6yMg==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 21:48:43 GMT
age: 71370
etag: "4d825b74865effa4a858ddcad1d0969671facc07"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5e7158416f60576804ccff03307319fe
a342f94625e913fa6b8d862a59979f1e3ad80dd1
5c525df7d169cc7e033d920c11f4a0163a781c025a22b70530882b56964a9a52
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5737
x-amzn-requestid: 23239d1f-0228-4722-b826-40dc8c9a4af2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVzDbEacIAMFZtA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d23215-1604c24e272fbb657b9925cc;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:56:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lkM4qVkPHqOdWwmxP2ShOgbbR6fjFtWmdavpgPyn7SQDkuggfHad7g==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 12:26:22 GMT
age: 18711
etag: "a342f94625e913fa6b8d862a59979f1e3ad80dd1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F71e9b44e-6d59-411b-90e8-54e0efae62a5.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F71e9b44e-6d59-411b-90e8-54e0efae62a5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 41fd0074a6ce752b1271302feade4cee
6311d1365504f06cb7516606c56c502d553c9d16
544c508899fe8855b0975a87cb0bf35663ab4ad0ec8fd057b3962d50cc001b8c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F71e9b44e-6d59-411b-90e8-54e0efae62a5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7365
x-amzn-requestid: c2a8ae3d-47f8-415f-bf08-78dd12ede3d1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUYRwEUbIAMFnag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1a0d7-38f72fec78120cf113c7a4f7;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 21:36:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: w2YQTruAWzbdhCWhHu5V1Wj0DlkD6-BsEwgjtR9RJqqmStbW8mPS9w==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 21:51:32 GMT
age: 71201
etag: "6311d1365504f06cb7516606c56c502d553c9d16"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52fbb3f0-e394-4245-a542-f5d9aa7b93cc.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52fbb3f0-e394-4245-a542-f5d9aa7b93cc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dc869235086902c4acc379733b6bfdb8
0170f6aa6bd83ddeb60cf1cb65e9f0443d8d4bae
e614e29b14e69209fd4b82a688290f7a3f541909833a6558cf480aca899bab6d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52fbb3f0-e394-4245-a542-f5d9aa7b93cc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9056
x-amzn-requestid: 81cf473d-8dc6-49e7-b012-d0b7dfaec7f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fB4COHTlIAMFtRg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ca3a0e-0848461c054db5c66fde9107;Sampled=0
x-amzn-remapped-date: Fri, 20 Jan 2023 06:51:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: fdefZSZfSJi1-C7ZTSahawckLN-To4P91H-n1cyPqw34f18VzTeHRg==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 12:53:58 GMT
age: 17055
etag: "0170f6aa6bd83ddeb60cf1cb65e9f0443d8d4bae"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
native-scripts.yektanet.com/public/chunk/minified/footer.63c50ff1a1b058430e9b.js
200 OK 0 B URL HTTP/2 native-scripts.yektanet.com/public/chunk/minified/footer.63c50ff1a1b058430e9b.js
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
GET /public/chunk/minified/footer.63c50ff1a1b058430e9b.js HTTP/1.1
Host: native-scripts.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
Cookie: gearbox_ad_token=a9a2499c-c5af5-59db8-8336d-dd7a85ecee3fe; analytics_global_token=a9a2499c-c5af5-59db8-8336d-dd7a85ecee3fe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Fri, 27 Jan 2023 17:38:13 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Tue, 24 Jan 2023 02:30:16 GMT
x-rgw-object-type: Normal
etag: W/"1f1822e28877edc675cd435a3020df54"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-max-age: 1728000
cache-control: max-age=3600
x-cache-status: MISS
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
expires: Fri, 27 Jan 2023 18:38:13 GMT
x-xss-protection: 1; mode=block
ar-sid: 2056
ar-atime: 0.000
ar-cache: HIT
ar-request-id: 16eb1a74b85843f5d0a8dcbf618c9245
content-encoding: br
X-Firefox-Spdy: h2
ua.yektanet.com/cookie/iframe/
200 OK 0 B URL HTTP/2 ua.yektanet.com/cookie/iframe/
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
GET /cookie/iframe/ HTTP/1.1
Host: ua.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Fri, 27 Jan 2023 17:38:12 GMT
content-type: text/html
vary: Accept-Encoding
last-modified: Friday, 27-Jan-2023 17:38:12 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
pragma: no-cache
expires: 0
x-xss-protection: 1; mode=block
ar-sid: 2056
ar-atime: 0.014
ar-cache: BYPASS
ar-request-id: e2373ad4d16fe3178818a4077b20f8c7
content-encoding: br
X-Firefox-Spdy: h2
native-scripts.yektanet.com/public/chunk/minified/929.23872a583b9486f5dd1a.js
200 OK 0 B URL HTTP/2 native-scripts.yektanet.com/public/chunk/minified/929.23872a583b9486f5dd1a.js
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
GET /public/chunk/minified/929.23872a583b9486f5dd1a.js HTTP/1.1
Host: native-scripts.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
Cookie: gearbox_ad_token=a9a2499c-c5af5-59db8-8336d-dd7a85ecee3fe; analytics_global_token=a9a2499c-c5af5-59db8-8336d-dd7a85ecee3fe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Fri, 27 Jan 2023 17:38:12 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Sat, 21 Jan 2023 08:43:45 GMT
x-rgw-object-type: Normal
etag: W/"90dd3fd68df9a5519678206c5b18e391"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-max-age: 1728000
cache-control: max-age=3600
x-cache-status: MISS
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
expires: Fri, 27 Jan 2023 18:38:12 GMT
x-xss-protection: 1; mode=block
ar-sid: 2056
ar-atime: 0.000
ar-cache: HIT
ar-request-id: 45586532a25397a24685bedaa8a36da5
content-encoding: br
X-Firefox-Spdy: h2
cdn.yektanet.com/fp/fingerprint.js?v=umd
200 OK 0 B URL HTTP/2 cdn.yektanet.com/fp/fingerprint.js?v=umd
IP
ASN #202319 Avaye Hamrahe Houshmande Hezardastan PJSC
GET /fp/fingerprint.js?v=umd HTTP/1.1
Host: cdn.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 17:38:12 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 25 Jan 2023 14:51:07 GMT
vary: Accept-Encoding, Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
etag: W/"63d141db-7c6a"
x-zrk-us: 206
cache-control: public, max-age=3600
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: *
access-control-expose-headers: *
strict-transport-security: max-age=31536000
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2
native-scripts.yektanet.com/public/chunk/minified/812.497cf7842468c9e9d124.js
200 OK 0 B URL HTTP/2 native-scripts.yektanet.com/public/chunk/minified/812.497cf7842468c9e9d124.js
IP
ASN #202468 Noyan Abr Arvan Co. ( Private Joint Stock)
GET /public/chunk/minified/812.497cf7842468c9e9d124.js HTTP/1.1
Host: native-scripts.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
Cookie: gearbox_ad_token=a9a2499c-c5af5-59db8-8336d-dd7a85ecee3fe; analytics_global_token=a9a2499c-c5af5-59db8-8336d-dd7a85ecee3fe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ArvanCloud
date: Fri, 27 Jan 2023 17:38:12 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Sat, 21 Jan 2023 08:43:45 GMT
x-rgw-object-type: Normal
etag: W/"5fff84b3c0c07eb0032ae092621d59fa"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-max-age: 1728000
cache-control: max-age=3600
x-cache-status: MISS
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
expires: Fri, 27 Jan 2023 18:38:12 GMT
x-xss-protection: 1; mode=block
ar-sid: 2056
ar-atime: 0.000
ar-cache: HIT
ar-request-id: 33b63dbcd31b52ee9f5f086cfc8427a8
content-encoding: br
X-Firefox-Spdy: h2
cdn.yektanet.com/js/rozblog.com/native-rozblog.com-23662.js?v=202300027017
200 OK 0 B URL HTTP/2 cdn.yektanet.com/js/rozblog.com/native-rozblog.com-23662.js?v=202300027017
IP
ASN #202319 Avaye Hamrahe Houshmande Hezardastan PJSC
GET /js/rozblog.com/native-rozblog.com-23662.js?v=202300027017 HTTP/1.1
Host: cdn.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 27 Jan 2023 17:38:11 GMT
content-type: application/javascript; charset=utf-8
cache-tag: native_rozblog.com,native
last-modified: Wed, 25 Jan 2023 12:20:41 GMT
x-rgw-object-type: Normal
etag: W/"268cfc1a66f39fa2aee211d3a2e13848"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: *
access-control-allow-headers: *
access-control-max-age: 1728000
cache-control: public, max-age=3600
x-cache-status: HIT
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
x-zrk-us: 206
access-control-expose-headers: *
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2
cdn.yektanet.com/rg_woebegone/scripts_v3/D138M2Bm/publisher.js?v=202300027017
200 OK 0 B URL HTTP/2 cdn.yektanet.com/rg_woebegone/scripts_v3/D138M2Bm/publisher.js?v=202300027017
IP
ASN #202319 Avaye Hamrahe Houshmande Hezardastan PJSC
GET /rg_woebegone/scripts_v3/D138M2Bm/publisher.js?v=202300027017 HTTP/1.1
Host: cdn.yektanet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://jen-roh.rozblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 27 Jan 2023 17:38:11 GMT
content-type: application/javascript; charset=utf-8
cache-tag: ua_D138M2Bm,ua
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://csp-reports.yektanet.com"}],"include_subdomains":true}
last-modified: Sat, 14 Jan 2023 22:33:24 GMT
x-rgw-object-type: Normal
etag: W/"a1059dde99a8e8401d32bc2427a1bdca"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: *
access-control-allow-headers: *
access-control-max-age: 1728000
cache-control: public, max-age=3600
content-security-policy-report-only: default-src 'self'; script-src 'report-sample' 'self'; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-to default
x-zrk-us: 206
access-control-expose-headers: *
vary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
server: Delivery
x-zrk-cs: HIT
x-zrk-sn: 3001
content-encoding: br
X-Firefox-Spdy: h2
79.127.127.68
34.160.144.191
217.23.10.44
23.36.79.10
37.187.132.157
0.0.0.0