r3.o.lencr.org/
184.51.252.197200 OK 503 B IP 184.51.252.197:0
ASN #20940 Akamai International B.V.
Hash ec332b81a27117ce9c16b67a5a8e4fac
b6d2afa2c859d000ad830d3d8d73f57bac6ffce2
1dc32c78e4e850303813338fd4e9616a41c8c05d1063748a1e76a92c397a5e8f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1DC32C78E4E850303813338FD4E9616A41C8C05D1063748A1E76A92C397A5E8F"
Last-Modified: Mon, 20 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11937
Expires: Wed, 22 Mar 2023 05:09:00 GMT
Date: Wed, 22 Mar 2023 01:50:03 GMT
Connection: keep-alive
r3.o.lencr.org/
184.51.252.197200 OK 503 B IP 184.51.252.197:0
ASN #20940 Akamai International B.V.
Hash 28774b36cf8bb6b054329393a33f6239
728313ddff6d5ceb6db3eb8445f039779616a140
08378fe6a897ab5a9c8d3bc2748c9670659d0d0d164317fdfac88d23fee78fa0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08378FE6A897AB5A9C8D3BC2748C9670659D0D0D164317FDFAC88D23FEE78FA0"
Last-Modified: Sun, 19 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11371
Expires: Wed, 22 Mar 2023 04:59:34 GMT
Date: Wed, 22 Mar 2023 01:50:03 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bc86ef2a0cee04915bc360f5821adc8f
3658f9028cce204d38f7f48fcfaa2a8e4f54383a
aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Backoff, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 22 Mar 2023 01:14:59 GMT
content-type: application/json
age: 2104
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
184.51.252.197200 OK 503 B IP 184.51.252.197:0
ASN #20940 Akamai International B.V.
Hash 5285a032a285729d3e4a546310ed052d
d370c14bbc2d168cc3703bcb6b94ea0ece26e69d
a811aac1eb89de0666a7de8d3eda1dc3affa7ce5353219211a1beee1211536b5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A811AAC1EB89DE0666A7DE8D3EDA1DC3AFFA7CE5353219211A1BEEE1211536B5"
Last-Modified: Mon, 20 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15396
Expires: Wed, 22 Mar 2023 06:06:39 GMT
Date: Wed, 22 Mar 2023 01:50:03 GMT
Connection: keep-alive
mashhad-film.r98.ir/tag/%D8%B9%DA%A9%D8%B3+%D9%81%D8%B1%D8%B2%D8%A7%D8%AF+%D8%AD%D8%B3%D9%86%DB%8C+%D8%AF%D8%B1+%DA%A9%D9%86%D8%B3%D8%B1%D8%AA+%D8%B9%D9%84%DB%8C+%D9%84%D9%87%D8%B1%D8%A7%D8%B3%D8%A8%DB%8C
79.127.127.68200 OK 8.6 kB URL HTTP/1.1 mashhad-film.r98.ir/tag/%D8%B9%DA%A9%D8%B3+%D9%81%D8%B1%D8%B2%D8%A7%D8%AF+%D8%AD%D8%B3%D9%86%DB%8C+%D8%AF%D8%B1+%DA%A9%D9%86%D8%B3%D8%B1%D8%AA+%D8%B9%D9%84%DB%8C+%D9%84%D9%87%D8%B1%D8%A7%D8%B3%D8%A8%DB%8C
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1212), with CRLF, LF line terminators
Hash e70db7c51dec3ce628d31c6e74037481
115247681da1ad7be7d06e8b2546ea2ee38b06e3
6690863779f74d3492974c8b4132bb94591bb0977d89aa7aafbb845e4ea26908
Analyzer Verdict Alert fortinet Malware
GET /tag/%D8%B9%DA%A9%D8%B3+%D9%81%D8%B1%D8%B2%D8%A7%D8%AF+%D8%AD%D8%B3%D9%86%DB%8C+%D8%AF%D8%B1+%DA%A9%D9%86%D8%B3%D8%B1%D8%AA+%D8%B9%D9%84%DB%8C+%D9%84%D9%87%D8%B1%D8%A7%D8%B3%D8%A8%DB%8C HTTP/1.1
Host: mashhad-film.r98.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
set-cookie: PHPSESSID=7ffcbfc60a91e0574c7ed909c4b62a04; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-language: fa
content-type: text/html; charset=utf-8
vary: Accept-Encoding,User-Agent
transfer-encoding: chunked
content-encoding: gzip
date: Wed, 22 Mar 2023 01:50:03 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: edEItlxMgXfQ9bAV6tU5LzU2OI+qWg0XlI8d0/MN0lwwPoAarQI5rcoZ1cT7CB+iN6A/V5mO688=
x-amz-request-id: TJD26ND8VTR37CRB
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 22 Mar 2023 00:53:25 GMT
age: 3398
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 01:50:03 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
mashhad-film.r98.ir/temp/site.css?22
79.127.127.68200 OK 3.9 kB URL HTTP/1.1 mashhad-film.r98.ir/temp/site.css?22
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type ASCII text, with very long lines (860)
Hash 787a6674aa05de4919a7c90cdbb150c9
2159cc3ec669621f05f361bd91b956e573faef9a
e234a5881c33e5ff75519381140d07f15611e92efbb0bb45ecf73437048d376c
GET /temp/site.css?22 HTTP/1.1
Host: mashhad-film.r98.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/tag/%D8%B9%DA%A9%D8%B3+%D9%81%D8%B1%D8%B2%D8%A7%D8%AF+%D8%AD%D8%B3%D9%86%DB%8C+%D8%AF%D8%B1+%DA%A9%D9%86%D8%B3%D8%B1%D8%AA+%D8%B9%D9%84%DB%8C+%D9%84%D9%87%D8%B1%D8%A7%D8%B3%D8%A8%DB%8C
Cookie: PHPSESSID=7ffcbfc60a91e0574c7ed909c4b62a04
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 21 Apr 2023 01:50:03 GMT
content-type: text/css
last-modified: Wed, 02 Mar 2022 08:28:27 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 3945
date: Wed, 22 Mar 2023 01:50:03 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
mashhad-film.r98.ir/temp/tarahi/styles.css
79.127.127.68200 OK 6.6 kB URL HTTP/1.1 mashhad-film.r98.ir/temp/tarahi/styles.css
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 (with BOM) text
Hash 1c2b1461ef3f45c6a5749c37853e4ed5
514b7710482ffa97b4c121390a4ded8c851a08e0
6c16f0ba3642e262f51f58894970a2ab9a3cbe043bf18285c8b4fd919a667f9f
GET /temp/tarahi/styles.css HTTP/1.1
Host: mashhad-film.r98.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/tag/%D8%B9%DA%A9%D8%B3+%D9%81%D8%B1%D8%B2%D8%A7%D8%AF+%D8%AD%D8%B3%D9%86%DB%8C+%D8%AF%D8%B1+%DA%A9%D9%86%D8%B3%D8%B1%D8%AA+%D8%B9%D9%84%DB%8C+%D9%84%D9%87%D8%B1%D8%A7%D8%B3%D8%A8%DB%8C
Cookie: PHPSESSID=7ffcbfc60a91e0574c7ed909c4b62a04
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 21 Apr 2023 01:50:03 GMT
content-type: text/css
last-modified: Tue, 21 Feb 2023 20:42:05 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 6617
date: Wed, 22 Mar 2023 01:50:03 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
mashhad-film.r98.ir/temp/default/script.js
79.127.127.68200 OK 302 B URL HTTP/1.1 mashhad-film.r98.ir/temp/default/script.js
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
Hash f63434fb5b29fa6044b1a1e30e6c1162
2e7ada06c79c670f0dff3bd7d0474d07c49104e0
a9396929db33b5a927292dc2e2f33891c594811b1b37dd993abbc9db9afbb7cb
GET /temp/default/script.js HTTP/1.1
Host: mashhad-film.r98.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/tag/%D8%B9%DA%A9%D8%B3+%D9%81%D8%B1%D8%B2%D8%A7%D8%AF+%D8%AD%D8%B3%D9%86%DB%8C+%D8%AF%D8%B1+%DA%A9%D9%86%D8%B3%D8%B1%D8%AA+%D8%B9%D9%84%DB%8C+%D9%84%D9%87%D8%B1%D8%A7%D8%B3%D8%A8%DB%8C
Cookie: PHPSESSID=7ffcbfc60a91e0574c7ed909c4b62a04
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Wed, 29 Mar 2023 01:50:03 GMT
content-type: application/javascript
last-modified: Wed, 18 Jul 2018 10:51:39 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 302
date: Wed, 22 Mar 2023 01:50:03 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
mashhad-film.r98.ir/code/popup
79.127.127.68200 OK 1.2 kB URL HTTP/1.1 mashhad-film.r98.ir/code/popup
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
Hash 43f2dd3fdf87a698a66bcbcb09273104
a2f2dea740dafcb50c39db6bb9db6f2dbc2de5ba
ac2a66b1031c416f054b5d08ad45db3eceda73e75bc9d9d7609cf7d9e7eca091
Analyzer Verdict Alert fortinet Malware
GET /code/popup HTTP/1.1
Host: mashhad-film.r98.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/tag/%D8%B9%DA%A9%D8%B3+%D9%81%D8%B1%D8%B2%D8%A7%D8%AF+%D8%AD%D8%B3%D9%86%DB%8C+%D8%AF%D8%B1+%DA%A9%D9%86%D8%B3%D8%B1%D8%AA+%D8%B9%D9%84%DB%8C+%D9%84%D9%87%D8%B1%D8%A7%D8%B3%D8%A8%DB%8C
Cookie: PHPSESSID=7ffcbfc60a91e0574c7ed909c4b62a04
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-language: fa
content-type: text/html; charset=charset
expires: Mon, 26 Jul 1997 05:00:00 GMT
last-modified: Wed, 22 Mar 2023 01:50:03 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: pop_id=11926%2C; expires=Wed, 22-Mar-2023 13:50:03 GMT; Max-Age=43200; path=/
c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; expires=Thu, 23-Mar-2023 01:50:03 GMT; Max-Age=86400; path=/
c_t=80865641a5ecb84088575468387944370921; expires=Thu, 23-Mar-2023 01:50:03 GMT; Max-Age=86400; path=/
vary: Accept-Encoding,User-Agent
content-length: 1177
content-encoding: gzip
date: Wed, 22 Mar 2023 01:50:03 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
mashhad-film.r98.ir/js/site.js?7
79.127.127.68200 OK 9.4 kB URL HTTP/1.1 mashhad-film.r98.ir/js/site.js?7
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type Unicode text, UTF-8 (with BOM) text, with very long lines (5730)
Hash 3a9e608b97ff4d23f8a1649f24b6ed66
794e50a615ef78e2f2bd7616c7d9e033fc4bbe9d
82faf31dfa45299d23061f2c05579901ca592090ce35f1dc48a6ff61f24ac28a
GET /js/site.js?7 HTTP/1.1
Host: mashhad-film.r98.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/tag/%D8%B9%DA%A9%D8%B3+%D9%81%D8%B1%D8%B2%D8%A7%D8%AF+%D8%AD%D8%B3%D9%86%DB%8C+%D8%AF%D8%B1+%DA%A9%D9%86%D8%B3%D8%B1%D8%AA+%D8%B9%D9%84%DB%8C+%D9%84%D9%87%D8%B1%D8%A7%D8%B3%D8%A8%DB%8C
Cookie: PHPSESSID=7ffcbfc60a91e0574c7ed909c4b62a04
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Wed, 29 Mar 2023 01:50:03 GMT
content-type: application/javascript
last-modified: Sat, 14 May 2022 01:34:44 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding,User-Agent
content-length: 9422
date: Wed, 22 Mar 2023 01:50:03 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
mashhad-film.r98.ir/weblog/file/loading/88.gif
79.127.127.68200 OK 6.0 kB URL HTTP/1.1 mashhad-film.r98.ir/weblog/file/loading/88.gif
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type GIF image data, version 89a, 50 x 50\012- data
Hash 093445ee241c72e6dca01dc570c230dc
32adb71ec06b5d29ec62c5511328d5970228b86d
d40495f2a0e830c47fe4cd50574c68e206292f63545a0684516db0cd8716ee0e
GET /weblog/file/loading/88.gif HTTP/1.1
Host: mashhad-film.r98.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/tag/%D8%B9%DA%A9%D8%B3+%D9%81%D8%B1%D8%B2%D8%A7%D8%AF+%D8%AD%D8%B3%D9%86%DB%8C+%D8%AF%D8%B1+%DA%A9%D9%86%D8%B3%D8%B1%D8%AA+%D8%B9%D9%84%DB%8C+%D9%84%D9%87%D8%B1%D8%A7%D8%B3%D8%A8%DB%8C
Cookie: PHPSESSID=7ffcbfc60a91e0574c7ed909c4b62a04
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 21 Mar 2024 01:50:03 GMT
content-type: image/gif
last-modified: Thu, 02 Feb 2012 21:52:24 GMT
accept-ranges: bytes
content-length: 5972
date: Wed, 22 Mar 2023 01:50:03 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.r98.ir/images/refresh2.svg
79.127.127.68200 OK 276 B URL HTTP/1.1 mashhad-film.r98.ir/images/refresh2.svg
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash 7082e86e2a3c9646fa1aa922b8e3a2d6
7f704127e872b5b94b8e2dd7959e2d5c9b9379a8
d1254b0bb9112500f8f39e1130f0a6c8dca1037d416e7f7d6524894b31b06b00
GET /images/refresh2.svg HTTP/1.1
Host: mashhad-film.r98.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/tag/%D8%B9%DA%A9%D8%B3+%D9%81%D8%B1%D8%B2%D8%A7%D8%AF+%D8%AD%D8%B3%D9%86%DB%8C+%D8%AF%D8%B1+%DA%A9%D9%86%D8%B3%D8%B1%D8%AA+%D8%B9%D9%84%DB%8C+%D9%84%D9%87%D8%B1%D8%A7%D8%B3%D8%A8%DB%8C
Cookie: PHPSESSID=7ffcbfc60a91e0574c7ed909c4b62a04
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Wed, 29 Mar 2023 01:50:03 GMT
content-type: image/svg+xml
last-modified: Wed, 28 Apr 2021 22:57:34 GMT
etag: "114-6089e85e-9f2e18d89b796b95;;;"
accept-ranges: bytes
content-length: 276
date: Wed, 22 Mar 2023 01:50:03 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.r98.ir/include/captcha/cap9.php
79.127.127.68200 OK 3.1 kB URL HTTP/1.1 mashhad-film.r98.ir/include/captcha/cap9.php
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 30, 8-bit/color RGB, non-interlaced\012- data
Hash 16c44a48048c3629f9ae1ea46c1a81b0
919de1543c5708da65b320d228f7cc55ff32bb10
01708c963207bac722877e88106a9b1abaae886b89ec3cc7fd9ff4c2c3a104f4
GET /include/captcha/cap9.php HTTP/1.1
Host: mashhad-film.r98.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/tag/%D8%B9%DA%A9%D8%B3+%D9%81%D8%B1%D8%B2%D8%A7%D8%AF+%D8%AD%D8%B3%D9%86%DB%8C+%D8%AF%D8%B1+%DA%A9%D9%86%D8%B3%D8%B1%D8%AA+%D8%B9%D9%84%DB%8C+%D9%84%D9%87%D8%B1%D8%A7%D8%B3%D8%A8%DB%8C
Cookie: PHPSESSID=7ffcbfc60a91e0574c7ed909c4b62a04
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
content-type: image/png
content-length: 3083
date: Wed, 22 Mar 2023 01:50:03 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.r98.ir/temp/pro/ads_468.jpg
79.127.127.68200 OK 6.3 kB URL HTTP/1.1 mashhad-film.r98.ir/temp/pro/ads_468.jpg
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type JPEG image data, JFIF standard 1.00, resolution (DPI), density 96x96, segment length 16, comment: "LEAD Technologies Inc. V1.01", baseline, precision 8, 468x60, components 3\012- data
Hash db8cac5e50e0f1be65a3ec0756ea6612
3053609e1039ab6d0d0be6adefeaf7ba7a243cf6
8f10f1e719bda34ecfc3af6b50f8273e9c9676d10612eff12aad2382d458ef1d
GET /temp/pro/ads_468.jpg HTTP/1.1
Host: mashhad-film.r98.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/tag/%D8%B9%DA%A9%D8%B3+%D9%81%D8%B1%D8%B2%D8%A7%D8%AF+%D8%AD%D8%B3%D9%86%DB%8C+%D8%AF%D8%B1+%DA%A9%D9%86%D8%B3%D8%B1%D8%AA+%D8%B9%D9%84%DB%8C+%D9%84%D9%87%D8%B1%D8%A7%D8%B3%D8%A8%DB%8C
Cookie: PHPSESSID=7ffcbfc60a91e0574c7ed909c4b62a04
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 21 Mar 2024 01:50:03 GMT
content-type: image/jpeg
last-modified: Fri, 20 Feb 2015 09:52:01 GMT
accept-ranges: bytes
content-length: 6286
date: Wed, 22 Mar 2023 01:50:03 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.r98.ir/images/no_image.png
79.127.127.68200 OK 6.3 kB URL HTTP/1.1 mashhad-film.r98.ir/images/no_image.png
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 5c675d607343c154f0ef074dc145988a
2f3713c21ed04a225f16439b200e2b2a6062454e
2e8f7285f7325ed8db6a0d253158db2c8962125173a1e6973e8fcb39a325a7ba
GET /images/no_image.png HTTP/1.1
Host: mashhad-film.r98.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/tag/%D8%B9%DA%A9%D8%B3+%D9%81%D8%B1%D8%B2%D8%A7%D8%AF+%D8%AD%D8%B3%D9%86%DB%8C+%D8%AF%D8%B1+%DA%A9%D9%86%D8%B3%D8%B1%D8%AA+%D8%B9%D9%84%DB%8C+%D9%84%D9%87%D8%B1%D8%A7%D8%B3%D8%A8%DB%8C
Cookie: PHPSESSID=7ffcbfc60a91e0574c7ed909c4b62a04
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 21 Mar 2024 01:50:03 GMT
content-type: image/png
last-modified: Sat, 12 Jan 2013 13:14:07 GMT
accept-ranges: bytes
content-length: 6278
date: Wed, 22 Mar 2023 01:50:03 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
mashhad-film.r98.ir/temp/tarahi/fonts/wdtv.woff
79.127.127.68200 OK 15 kB URL HTTP/1.1 mashhad-film.r98.ir/temp/tarahi/fonts/wdtv.woff
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, TrueType, length 14648, version 1.0\012- data
Hash 259c4490256daceb6a5f275cee137627
5c0eae14870f1ec6527aa64f3f675cb9063034ee
bd4bdb99aa4a1cf56a05d7a913dce42b23b4cb021148b0a0f22d836105d98fc5
GET /temp/tarahi/fonts/wdtv.woff HTTP/1.1
Host: mashhad-film.r98.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/temp/tarahi/styles.css
Cookie: PHPSESSID=7ffcbfc60a91e0574c7ed909c4b62a04; pop_id=11926%2C; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=80865641a5ecb84088575468387944370921
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 24 Mar 2023 01:50:03 GMT
content-type: font/woff
last-modified: Thu, 26 Feb 2015 19:00:22 GMT
etag: "3938-54ef6d46-daf654b8921ad10f;;;"
accept-ranges: bytes
content-length: 14648
date: Wed, 22 Mar 2023 01:50:03 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Last-Modified, Retry-After, Content-Length, Alert, Cache-Control, Expires, Content-Type, Backoff, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 22 Mar 2023 01:14:33 GMT
age: 2130
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
mashhad-film.r98.ir/temp/tarahi/fonts/yekanregular.woff
79.127.127.68200 OK 22 kB URL HTTP/1.1 mashhad-film.r98.ir/temp/tarahi/fonts/yekanregular.woff
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, CFF, length 21500, version 2.0\012- data
Hash 05727d32400b2008acbf7fc49251ede0
b6c1a82539a2531eb1aad7d1cf05554d5a999154
da78e001fab6f5d7b1c68e17d00fb1595c9b10085d6769a86aeb6a39dc7e43d6
GET /temp/tarahi/fonts/yekanregular.woff HTTP/1.1
Host: mashhad-film.r98.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/temp/tarahi/styles.css
Cookie: PHPSESSID=7ffcbfc60a91e0574c7ed909c4b62a04; pop_id=11926%2C; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=80865641a5ecb84088575468387944370921
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 24 Mar 2023 01:50:03 GMT
content-type: font/woff
last-modified: Thu, 26 Feb 2015 19:00:25 GMT
etag: "53fc-54ef6d49-80b982f1d7ce7ee2;;;"
accept-ranges: bytes
content-length: 21500
date: Wed, 22 Mar 2023 01:50:03 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
rozblog.com/temp/rang/like.png
79.127.127.68200 OK 2.3 kB URL HTTP/1.1 rozblog.com/temp/rang/like.png
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type PNG image data, 22 x 42, 8-bit/color RGBA, non-interlaced\012- data
Hash dd370ffbcd679da0d5c8547f34c6e2fb
6df3b9ec0e82b1a6ef41bc83041d2b2e16200077
2f14531974b17d9fd89de532694faf69ed7aa61b04ea990108b138d772ba96f7
GET /temp/rang/like.png HTTP/1.1
Host: rozblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 21 Mar 2024 01:50:03 GMT
content-type: image/png
last-modified: Sat, 14 Feb 2015 11:52:19 GMT
accept-ranges: bytes
content-length: 2272
date: Wed, 22 Mar 2023 01:50:03 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
r3.o.lencr.org/
184.51.252.197200 OK 503 B IP 184.51.252.197:0
ASN #20940 Akamai International B.V.
Hash 3462d41d9283fedf24f278089d5d1570
b8bcea77656f775cdc34620322cc616216ed2b95
55e47b413ba648a98eb6e92ab73aee602912cd13e7da23ef3cea1490c1b9de50
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "55E47B413BA648A98EB6E92AB73AEE602912CD13E7DA23EF3CEA1490C1B9DE50"
Last-Modified: Sun, 19 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5941
Expires: Wed, 22 Mar 2023 03:29:04 GMT
Date: Wed, 22 Mar 2023 01:50:03 GMT
Connection: keep-alive
mashhad-film.r98.ir/temp/tarahi/fonts/fontawesome-webfont.woff?v=4.2.0
79.127.127.68200 OK 66 kB URL HTTP/1.1 mashhad-film.r98.ir/temp/tarahi/fonts/fontawesome-webfont.woff?v=4.2.0
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type Web Open Font Format, TrueType, length 65452, version 1.0\012- data
Hash d95d6f5d5ab7cfefd09651800b69bd54
7d65e0227d0d7cdc1718119cd2a7dce0638f151c
199411f659f41aaccb959bacb1b0de30e54f244352a48c6f9894e65ae0f8a9a1
GET /temp/tarahi/fonts/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1
Host: mashhad-film.r98.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/temp/tarahi/styles.css
Cookie: PHPSESSID=7ffcbfc60a91e0574c7ed909c4b62a04; pop_id=11926%2C; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=80865641a5ecb84088575468387944370921
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Fri, 24 Mar 2023 01:50:03 GMT
content-type: font/woff
last-modified: Thu, 26 Feb 2015 19:00:20 GMT
etag: "ffac-54ef6d44-11fea27943efc11b;;;"
accept-ranges: bytes
content-length: 65452
date: Wed, 22 Mar 2023 01:50:03 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
r3.o.lencr.org/
184.51.252.197200 OK 503 B IP 184.51.252.197:0
ASN #20940 Akamai International B.V.
Hash 05d4a1ae7f3e6802465e22b0b98d0b66
c0be74c97e07d9ec9afc2c8b5efb78ef26d86b3e
097d2eec10d4bed211b60e36439830a7fa1f2ab52e4cec5078d2effb8bbaba89
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "097D2EEC10D4BED211B60E36439830A7FA1F2AB52E4CEC5078D2EFFB8BBABA89"
Last-Modified: Sun, 19 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12531
Expires: Wed, 22 Mar 2023 05:18:54 GMT
Date: Wed, 22 Mar 2023 01:50:03 GMT
Connection: keep-alive
s1.mediaad.org/serve/rozblog.com/loader.js
45.94.255.25302 Found 138 B URL HTTP/2 s1.mediaad.org/serve/rozblog.com/loader.js
IP 45.94.255.25:0
ASN #48551 Sindad Network Technology Ltd.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /serve/rozblog.com/loader.js HTTP/1.1
Host: s1.mediaad.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Wed, 22 Mar 2023 01:50:04 GMT
content-type: text/html
content-length: 138
location: https://mediacdn.mediaad.org/static/loader.js
X-Firefox-Spdy: h2
push.services.mozilla.com/
35.165.24.114101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.165.24.114:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: qtm+C3+TCqBzVxONQ7MI/Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: I1jJy7Jwy+x2sA6Wdl4FMpjtbIE=
mashhad-film.r98.ir/theme/rozblog_v4/favi1.ico
79.127.127.68200 OK 1.2 kB URL HTTP/1.1 mashhad-film.r98.ir/theme/rozblog_v4/favi1.ico
IP 79.127.127.68:0
ASN #43754 Asiatech Data Transmission company
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 129e0e4681906fae60ea32d066a7b4c5
33c024415db44baa3aba0f13df1399d9b81ac9e6
0a14eb14e53df8201b78084ab9a276a1f4ca01e55a20c3b8b0b6f3b660ee3ff0
GET /theme/rozblog_v4/favi1.ico HTTP/1.1
Host: mashhad-film.r98.ir
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/tag/%D8%B9%DA%A9%D8%B3+%D9%81%D8%B1%D8%B2%D8%A7%D8%AF+%D8%AD%D8%B3%D9%86%DB%8C+%D8%AF%D8%B1+%DA%A9%D9%86%D8%B3%D8%B1%D8%AA+%D8%B9%D9%84%DB%8C+%D9%84%D9%87%D8%B1%D8%A7%D8%B3%D8%A8%DB%8C
Cookie: PHPSESSID=7ffcbfc60a91e0574c7ed909c4b62a04; pop_id=11926%2C; c_ref=9ab68fd6d6d09f35ca12c9a76bf3c880; c_t=80865641a5ecb84088575468387944370921
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000, no-transform
expires: Thu, 21 Mar 2024 01:50:04 GMT
content-type: image/x-icon
last-modified: Tue, 18 Nov 2014 15:12:07 GMT
accept-ranges: bytes
content-length: 1150
date: Wed, 22 Mar 2023 01:50:04 GMT
server: LiteSpeed
strict-transport-security: max-age=0;
vary: User-Agent
www.zibapix.com/myup/images/89910214832741744201.jpg
47.91.170.222404 Not Found 204 B URL HTTP/1.1 www.zibapix.com/myup/images/89910214832741744201.jpg
IP 47.91.170.222:0
ASN #45102 Alibaba US Technology Co., Ltd.
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash eae76889205a22004a985547b8c2a952
ad01d247f8563ef1dade3fdf40b325319eac362a
977922f5a8c2499b1f8fbb0deb492812a3f14a94a85787656974819fd09f062d
GET /myup/images/89910214832741744201.jpg HTTP/1.1
Host: www.zibapix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/
HTTP/1.1 404 Not Found
Date: Wed, 22 Mar 2023 01:50:04 GMT
Content-Type: text/html
Content-Length: 204
Connection: keep-alive
ETag: "634fb1e4-cc"
r3.o.lencr.org/
184.51.252.197200 OK 503 B IP 184.51.252.197:0
ASN #20940 Akamai International B.V.
Hash bbb44f816e906ae79c3aeae4b9b8be62
ddc6fef4a7980555eaf3760355e1b59f644d9af4
8b373ef3fcaa405099a82401585edbb0651f8816e12e2acc84f490ffbd72263d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B373EF3FCAA405099A82401585EDBB0651F8816E12E2ACC84F490FFBD72263D"
Last-Modified: Sun, 19 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19710
Expires: Wed, 22 Mar 2023 07:18:34 GMT
Date: Wed, 22 Mar 2023 01:50:04 GMT
Connection: keep-alive
r3.o.lencr.org/
184.51.252.197200 OK 503 B IP 184.51.252.197:0
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5914
Expires: Wed, 22 Mar 2023 03:28:39 GMT
Date: Wed, 22 Mar 2023 01:50:05 GMT
Connection: keep-alive
r3.o.lencr.org/
184.51.252.197200 OK 503 B IP 184.51.252.197:0
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5914
Expires: Wed, 22 Mar 2023 03:28:39 GMT
Date: Wed, 22 Mar 2023 01:50:05 GMT
Connection: keep-alive
r3.o.lencr.org/
184.51.252.197200 OK 503 B IP 184.51.252.197:0
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5914
Expires: Wed, 22 Mar 2023 03:28:39 GMT
Date: Wed, 22 Mar 2023 01:50:05 GMT
Connection: keep-alive
r3.o.lencr.org/
184.51.252.197200 OK 503 B IP 184.51.252.197:0
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5914
Expires: Wed, 22 Mar 2023 03:28:39 GMT
Date: Wed, 22 Mar 2023 01:50:05 GMT
Connection: keep-alive
r3.o.lencr.org/
184.51.252.197200 OK 503 B IP 184.51.252.197:0
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5914
Expires: Wed, 22 Mar 2023 03:28:39 GMT
Date: Wed, 22 Mar 2023 01:50:05 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb82c45e-4e2d-4710-a844-d72c20f8a55f.png
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb82c45e-4e2d-4710-a844-d72c20f8a55f.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 960d88f7af5f1490f5af8ee55ba1a4b5
3cfa883f31989cc1c84a685fcf29c2c1d473c0e3
ed0c1d5b5a43a5057b2be29d16366f7d451bc4fb87df9d52f5d1f8d14a06e42d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb82c45e-4e2d-4710-a844-d72c20f8a55f.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11729
x-amzn-requestid: edfe7cd1-1496-4c13-beaa-205b2876d45a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CHqIAFXjoAMF41g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641956ff-1ad0261b52fc50b95a8c5c77;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 07:04:31 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: xjZS-0HUeetH4ESeX5S1KENLWdo3MSJUotPuMynGLiJ7NEnOjnKF1w==
via: 1.1 0a166b53605851fe961f5a2952e5a748.cloudfront.net (CloudFront), 1.1 0906d4887f6625f4a4467d8d4fd268d2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 07:04:32 GMT
age: 67533
etag: "3cfa883f31989cc1c84a685fcf29c2c1d473c0e3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
34.120.237.76200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 85351059b67b0a42eda7e69a31b3b4b4
b798268806dc2f79f033e5872676019faf0e0cc1
86e163b7159b197d6358ab01333ac6da221de0ebe1c5da8d5cef2977d38625fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4000
x-amzn-requestid: 68dc01d7-3eed-48f6-8532-8efaa96cc1ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJpraEqyoAMFgNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-3852cc8961365a560d1fa02f;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: 2e9Y7K5xIkpbhFR8a4kGAVX7X2-97lB13zHrjOuqlkalxzdbCDcfPA==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 abbf2df97f9d83839470842dc2e68cb6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 21:41:23 GMT
age: 14922
etag: "b798268806dc2f79f033e5872676019faf0e0cc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22c3f36a-d800-4eab-8a32-e2b5ef86e386.jpeg
34.120.237.76200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22c3f36a-d800-4eab-8a32-e2b5ef86e386.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 412bd6aea60211324e649d7d920601d2
a813976bda850a584b5ab94d9a70bfe0da69aca0
d36ef17fc6ab3cd4e5e43836f7df2c6fdf1781f1bac73e42c9a09e8594f797f9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22c3f36a-d800-4eab-8a32-e2b5ef86e386.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9459
x-amzn-requestid: 1b374321-f2df-404f-ab91-4e73d830fac9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJqmAEhHoAMFgRQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a248c-217d81154ecfe0c44ca70432;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:41:32 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: DL7vQgu72hwpt7yHbmIKnAZnoIaR4CQPE1JJAjq8M4jg0REUsq5lOw==
via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 446e26a256db1310ae719d818e420898.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 21:48:25 GMT
age: 14500
etag: "a813976bda850a584b5ab94d9a70bfe0da69aca0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7448874a-86d5-4c34-b675-b71037ef71ac.jpeg
34.120.237.76200 OK 17 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7448874a-86d5-4c34-b675-b71037ef71ac.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f5698f1af89c557551dfd0cb1c0d186a
de8b17bc7527517db4d2d0c5f0b77617969e8a55
e80eef6ea76da09f35a588d77186f5110a0d8631646f73fb4aa1ecf7de751f13
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7448874a-86d5-4c34-b675-b71037ef71ac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16968
x-amzn-requestid: 0b5d1157-e52b-4efe-8ce5-e11845b257b5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJqOpHF1oAMFVjQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a23f7-38278f07532ce3fe0a52c114;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:39:03 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: tKfSiC95frj9or9ULZ2u30SCixukdMGR5QiVnY_A0I4AMOgsSxGjHw==
via: 1.1 4e4278a2778e72cc34feef6db603088c.cloudfront.net (CloudFront), 1.1 219e8f088c8c2a564bdacafe44be620a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 22:09:39 GMT
age: 13226
etag: "de8b17bc7527517db4d2d0c5f0b77617969e8a55"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F725f0930-57cc-4b81-8685-8be1acf4b380.jpeg
34.120.237.76200 OK 3.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F725f0930-57cc-4b81-8685-8be1acf4b380.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7a9178701002b637a130aec44024349b
d51674c9b6d98baa4ec3905e2982ffecfcb1e9cb
d3888f5cc4aef7239fe7d1ae8cee2f1ca94d1c1524b1629a1da5d6327376b5da
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F725f0930-57cc-4b81-8685-8be1acf4b380.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3474
x-amzn-requestid: ac3a81e6-328d-4944-beda-d9c85de30aff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJqP6F8gIAMFoww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a23ff-52d04e4a6adace9e17003e80;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:39:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: WzP3lkcd3AEE-N0bujYeE5UWkvfG5xmGfqLCbIv04YMkJ_E4OaThEg==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 9adef5b1c5fc9ca80d6f4f8d19e103a2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 21:59:58 GMT
age: 13807
etag: "d51674c9b6d98baa4ec3905e2982ffecfcb1e9cb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F140913d8-f59f-4684-8c5f-6b7bacd2ea2e.jpeg
34.120.237.76200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F140913d8-f59f-4684-8c5f-6b7bacd2ea2e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f6590130a54c765dc666e36ff4aa2173
4cf14cdb893f9f22f4b51f98b75d5e07deb90e58
08cfa51d0dd9e9ea345c7db78bd2935593c48f04713cdf54c2f156833899622c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F140913d8-f59f-4684-8c5f-6b7bacd2ea2e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5279
x-amzn-requestid: 44deb98c-dc8f-46df-8f44-60efd929ed24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJpsfF26IAMF7kA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a231c-776b1ff931fc840b14e714f5;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:24 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: douvoCXPRHtl-PEA9ItOBELe1CEJKHoEEd9mt27bnoAnMPfoBn55sg==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 3f3347264bcaae7af741e2a2f692c6a0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 21 Mar 2023 21:41:30 GMT
age: 14915
etag: "4cf14cdb893f9f22f4b51f98b75d5e07deb90e58"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
api.mediaad.org/v2/events/rozblog.com/page/loaded
45.94.254.24200 OK 0 B URL HTTP/2 api.mediaad.org/v2/events/rozblog.com/page/loaded
IP 45.94.254.24:0
ASN #48551 Sindad Network Technology Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v2/events/rozblog.com/page/loaded HTTP/1.1
Host: api.mediaad.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://mashhad-film.r98.ir/
Origin: http://mashhad-film.r98.ir
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Mar 2023 01:50:05 GMT
content-length: 0
access-control-allow-origin: http://mashhad-film.r98.ir
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, PUT, OPTIONS, DELETE
access-control-allow-headers: x-auth-token, x-requested-with, content-type, content-encoding, accept, origin, referer, Authorization, x-xsrf-token, x-csrf-token
access-control-expose-headers: x-requested-with
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
api.mediaad.org/v1/rozblog.com/serve
45.94.254.24200 OK 0 B URL HTTP/2 api.mediaad.org/v1/rozblog.com/serve
IP 45.94.254.24:0
ASN #48551 Sindad Network Technology Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/rozblog.com/serve HTTP/1.1
Host: api.mediaad.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://mashhad-film.r98.ir/
Origin: http://mashhad-film.r98.ir
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Mar 2023 01:50:05 GMT
content-length: 0
access-control-allow-origin: http://mashhad-film.r98.ir
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, PUT, OPTIONS, DELETE
access-control-allow-headers: x-auth-token, x-requested-with, content-type, content-encoding, accept, origin, referer, Authorization, x-xsrf-token, x-csrf-token
access-control-expose-headers: x-requested-with
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
api.mediaad.org/v2/events/rozblog.com/page/loaded
45.94.255.25200 OK 0 B URL HTTP/2 api.mediaad.org/v2/events/rozblog.com/page/loaded
IP 45.94.255.25:0
ASN #48551 Sindad Network Technology Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v2/events/rozblog.com/page/loaded HTTP/1.1
Host: api.mediaad.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=utf-8
Content-Length: 219
Origin: http://mashhad-film.r98.ir
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/
Cookie: USER_ID=b5a6a405-398a-4208-92a2-4b660026cd85
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 01:50:05 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: http://mashhad-film.r98.ir
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, PUT, OPTIONS, DELETE
access-control-allow-headers: x-auth-token, x-requested-with, content-type, content-encoding, accept, origin, referer, Authorization, x-xsrf-token, x-csrf-token
access-control-expose-headers: x-requested-with
set-cookie: USER_ID=b5a6a405-398a-4208-92a2-4b660026cd85; Path=/; Domain=.mediaad.org; Max-Age=86313600; Expires=Mon, 15 Dec 2025 01:50:05 GMT; Secure; SameSite=None
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
api.mediaad.org/v1/events/verify
45.94.254.24200 OK 0 B URL HTTP/2 api.mediaad.org/v1/events/verify
IP 45.94.254.24:0
ASN #48551 Sindad Network Technology Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/events/verify HTTP/1.1
Host: api.mediaad.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://mashhad-film.r98.ir/
Origin: http://mashhad-film.r98.ir
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 01:50:06 GMT
content-length: 0
access-control-allow-origin: http://mashhad-film.r98.ir
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, PUT, OPTIONS, DELETE
access-control-allow-headers: x-auth-token, x-requested-with, content-type, content-encoding, accept, origin, referer, Authorization, x-xsrf-token, x-csrf-token
access-control-expose-headers: x-requested-with
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
mediacdn.mediaad.org/static/mediaad_banner_logo_collapsed.jpg
45.94.255.10200 OK 8.5 kB URL HTTP/2 mediacdn.mediaad.org/static/mediaad_banner_logo_collapsed.jpg
IP 45.94.255.10:0
ASN #48551 Sindad Network Technology Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash 2a5a1ee9a484965b37a8398d7b29d378
0a67df6c6d80480d7dfb61c528b551993b44a160
1ef4acfe3384902966ae68dab97073b3d0c6a0f1442d65a245b776d78cce93db
GET /static/mediaad_banner_logo_collapsed.jpg HTTP/1.1
Host: mediacdn.mediaad.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/
Cookie: USER_ID=b5a6a405-398a-4208-92a2-4b660026cd85
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 01:50:06 GMT
content-type: image/jpeg
content-length: 8460
last-modified: Wed, 27 Apr 2022 12:15:24 GMT
etag: "626933dc-210c"
access-control-allow-origin: *
expires: Thu, 23 Mar 2023 01:50:06 GMT
x-cache-status: HIT
cache-control: max-age=86400, public
accept-ranges: bytes
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
api.mediaad.org/v1/rozblog.com/serve
45.94.255.25200 OK 6.2 kB URL HTTP/2 api.mediaad.org/v1/rozblog.com/serve
IP 45.94.255.25:0
ASN #48551 Sindad Network Technology Ltd.
Hash 9b4333d03e0ab4f925eef3547a78bffc
155af6b475d5df6c145f740e2a6d25562affc547
e0a1eb93bf30cc8e6e057e8cc4cd8a247da0eadf090820edce706869852d4966
POST /v1/rozblog.com/serve HTTP/1.1
Host: api.mediaad.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=utf-8
Content-Length: 286
Origin: http://mashhad-film.r98.ir
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/
Cookie: USER_ID=b5a6a405-398a-4208-92a2-4b660026cd85
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 01:50:06 GMT
content-type: application/json
vary: Accept-Encoding
access-control-allow-origin: http://mashhad-film.r98.ir
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, PUT, OPTIONS, DELETE
access-control-allow-headers: x-auth-token, x-requested-with, content-type, content-encoding, accept, origin, referer, Authorization, x-xsrf-token, x-csrf-token
access-control-expose-headers: x-requested-with
cache-control: no-cache, no-store, must-revalidate
set-cookie: USER_ID=b5a6a405-398a-4208-92a2-4b660026cd85; Path=/; Domain=.mediaad.org; Max-Age=86313600; Expires=Mon, 15 Dec 2025 01:50:06 GMT; Secure; SameSite=None
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
api.mediaad.org/v1/events/verify
45.94.254.24200 OK 0 B URL HTTP/2 api.mediaad.org/v1/events/verify
IP 45.94.254.24:0
ASN #48551 Sindad Network Technology Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/events/verify HTTP/1.1
Host: api.mediaad.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://mashhad-film.r98.ir/
Origin: http://mashhad-film.r98.ir
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 01:50:06 GMT
content-length: 0
access-control-allow-origin: http://mashhad-film.r98.ir
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, PUT, OPTIONS, DELETE
access-control-allow-headers: x-auth-token, x-requested-with, content-type, content-encoding, accept, origin, referer, Authorization, x-xsrf-token, x-csrf-token
access-control-expose-headers: x-requested-with
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
mediacdn.mediaad.org/3/21/creatives/48c9687b/1679404195333.jpg
45.94.255.10200 OK 35 kB URL HTTP/2 mediacdn.mediaad.org/3/21/creatives/48c9687b/1679404195333.jpg
IP 45.94.255.10:0
ASN #48551 Sindad Network Technology Ltd.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 468x60, components 3\012- data
Hash 042045fbe0d1557bb35e91d16500e08c
c2d7b0fc9e092872c36b5856f571308244baa0c9
4e26ec654145feb51cb74dab539e31f331f5f739b5a25602dd1a85c63c6a960e
GET /3/21/creatives/48c9687b/1679404195333.jpg HTTP/1.1
Host: mediacdn.mediaad.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/
Cookie: USER_ID=b5a6a405-398a-4208-92a2-4b660026cd85
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 01:50:06 GMT
content-type: image/jpeg
content-length: 35248
last-modified: Tue, 21 Mar 2023 13:09:55 GMT
etag: "6419aca3-89b0"
access-control-allow-origin: *
expires: Thu, 23 Mar 2023 01:50:06 GMT
x-cache-status: HIT
cache-control: max-age=86400, public
accept-ranges: bytes
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
mediacdn.mediaad.org/static/close-bnr.jpg
45.94.255.10200 OK 1.3 kB URL HTTP/2 mediacdn.mediaad.org/static/close-bnr.jpg
IP 45.94.255.10:0
ASN #48551 Sindad Network Technology Ltd.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 30x30, components 3\012- data
Hash ddd7f1766743e1cdb3d58f59f44c997d
464a2a008d3dcd17dc7c67410060a68686970fd1
09c1c51a018f3b19f206ac632338024369519bea045884fa17f86fa6127610c7
GET /static/close-bnr.jpg HTTP/1.1
Host: mediacdn.mediaad.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/
Cookie: USER_ID=b5a6a405-398a-4208-92a2-4b660026cd85
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 01:50:06 GMT
content-type: image/jpeg
content-length: 1347
last-modified: Tue, 23 Feb 2021 11:47:47 GMT
etag: "6034eb63-543"
access-control-allow-origin: *
expires: Thu, 23 Mar 2023 01:50:06 GMT
x-cache-status: HIT
cache-control: max-age=86400, public
accept-ranges: bytes
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
api.mediaad.org/v1/events/verify
45.94.255.25200 OK 0 B URL HTTP/2 api.mediaad.org/v1/events/verify
IP 45.94.255.25:0
ASN #48551 Sindad Network Technology Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/events/verify HTTP/1.1
Host: api.mediaad.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=utf-8
Content-Length: 40
Origin: http://mashhad-film.r98.ir
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/
Cookie: USER_ID=b5a6a405-398a-4208-92a2-4b660026cd85
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 01:50:06 GMT
content-length: 0
access-control-allow-origin: http://mashhad-film.r98.ir
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, PUT, OPTIONS, DELETE
access-control-allow-headers: x-auth-token, x-requested-with, content-type, content-encoding, accept, origin, referer, Authorization, x-xsrf-token, x-csrf-token
access-control-expose-headers: x-requested-with
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
api.mediaad.org/v1/events/verify
45.94.255.25200 OK 0 B URL HTTP/2 api.mediaad.org/v1/events/verify
IP 45.94.255.25:0
ASN #48551 Sindad Network Technology Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /v1/events/verify HTTP/1.1
Host: api.mediaad.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json; charset=utf-8
Content-Length: 40
Origin: http://mashhad-film.r98.ir
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/
Cookie: USER_ID=b5a6a405-398a-4208-92a2-4b660026cd85
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 01:50:06 GMT
content-length: 0
access-control-allow-origin: http://mashhad-film.r98.ir
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, PUT, OPTIONS, DELETE
access-control-allow-headers: x-auth-token, x-requested-with, content-type, content-encoding, accept, origin, referer, Authorization, x-xsrf-token, x-csrf-token
access-control-expose-headers: x-requested-with
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
mediacdn.mediaad.org/static/loader.js
45.94.255.10200 OK 0 B URL HTTP/2 mediacdn.mediaad.org/static/loader.js
IP 45.94.255.10:0
ASN #48551 Sindad Network Technology Ltd.
GET /static/loader.js HTTP/1.1
Host: mediacdn.mediaad.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://mashhad-film.r98.ir/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Mar 2023 01:50:04 GMT
content-type: application/javascript
last-modified: Sun, 19 Mar 2023 09:28:11 GMT
etag: W/"6416d5ab-32c72"
access-control-allow-origin: *
expires: Thu, 23 Mar 2023 01:50:04 GMT
x-cache-status: HIT
cache-control: max-age=86400, public
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
mediacdn.mediaad.org/static/fingerprint.html
45.94.255.10200 OK 0 B URL HTTP/2 mediacdn.mediaad.org/static/fingerprint.html
IP 45.94.255.10:0
ASN #48551 Sindad Network Technology Ltd.
GET /static/fingerprint.html HTTP/1.1
Host: mediacdn.mediaad.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 22 Mar 2023 01:50:04 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: false
access-control-allow-methods: POST, GET, PUT, OPTIONS, DELETE
access-control-allow-headers: x-auth-token, x-requested-with, content-type, content-encoding, accept, origin, referer, Authorization, x-xsrf-token, x-csrf-token
access-control-expose-headers: x-requested-with
strict-transport-security: max-age=15724800; includeSubDomains
expires: Thu, 23 Mar 2023 01:50:04 GMT
x-cache-status: HIT
cache-control: max-age=86400, public
content-encoding: gzip
X-Firefox-Spdy: h2
ma-cdn.pegah.tech/serve/rozblog.com/publisher.json
45.94.255.25200 OK 0 B URL HTTP/2 ma-cdn.pegah.tech/serve/rozblog.com/publisher.json
IP 45.94.255.25:0
ASN #48551 Sindad Network Technology Ltd.
GET /serve/rozblog.com/publisher.json HTTP/1.1
Host: ma-cdn.pegah.tech
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://mashhad-film.r98.ir
Connection: keep-alive
Referer: http://mashhad-film.r98.ir/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 22 Mar 2023 01:50:04 GMT
content-type: application/json;charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: false
access-control-allow-methods: POST, GET, PUT, OPTIONS, DELETE
access-control-allow-headers: x-auth-token, x-requested-with, content-type, content-encoding, accept, origin, referer, Authorization, x-xsrf-token, x-csrf-token
access-control-expose-headers: x-requested-with
cache-control: max-age=300
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2