| zeroupload.com/cache/themes/spirit/logo.png |  188.114.96.1 | 200 OK | 6.3 kB |
URL GET HTTP/2zeroupload.com/cache/themes/spirit/logo.png IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typePNG image data, 431 x 94, 8-bit/color RGBA, non-interlaced Hash856825ef23856ec8f9a80285773eb573 ac37ffefb0a0b3c5c0b378212072bb912ee0281f c5229b08c020a064d2cb4ce038f4641e065a795a5cb90f2becd81b93d5277070
GET /cache/themes/spirit/logo.png HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: image/png
content-length: 6346
last-modified: Thu, 09 Feb 2023 11:31:34 GMT
etag: "63e4d996-18ca"
expires: Mon, 03 Jun 2024 21:47:04 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 199598
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f4OjctVI5QnsMrNkEZl9fNKnTX0VAZJrsXWLvA6EFjslDcLz4zcmrB5hw9UUA4%2FfVsPZLYgRXpbafxNTuvMAIuXl8YzfqZmZQys7uHPRFBz9eKqCLdqKYKEsTRZbADIo0Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881e42bf1ac056bb-OSL
X-Firefox-Spdy: h2
|
|
| zeroupload.com/cache/themes/spirit/logo_inverse.png | 188.114.96.1 | 200 OK | 6.3 kB |
URL GET HTTP/2zeroupload.com/cache/themes/spirit/logo_inverse.png IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typePNG image data, 431 x 94, 8-bit/color RGBA, non-interlaced Hash856825ef23856ec8f9a80285773eb573 ac37ffefb0a0b3c5c0b378212072bb912ee0281f c5229b08c020a064d2cb4ce038f4641e065a795a5cb90f2becd81b93d5277070
GET /cache/themes/spirit/logo_inverse.png HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: image/png
content-length: 6346
last-modified: Thu, 09 Feb 2023 11:31:34 GMT
etag: "63e4d996-18ca"
expires: Sat, 04 May 2024 21:23:24 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 895414
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8fP%2FlpIdIo0%2Bg97PNldnYsvQMsmcLIuu6BMbsYr2jo4Cyfpd09eXU2we1IRH%2BgK86Ze9J1ALerxYCsP3oXl8AjYk89syeP7t7wToi2lEEpTh4sOlwxdgsPDOYqFyYp1Iow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881e42bf0abf56bb-OSL
X-Firefox-Spdy: h2
|
|
| blog.zeroupload.com/wp-content/uploads/2024/04/Button-e1714339440821.png |  104.21.3.108 | 200 OK | 6.6 kB |
URL GET HTTP/2blog.zeroupload.com/wp-content/uploads/2024/04/Button-e1714339440821.png IP104.21.3.108:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typePNG image data, 496 x 94, 8-bit/color RGBA, non-interlaced Hasha0428b8d6c34294e1fd15d8ca1cea745 611eaafd07caf3c7c5ca05a0554d5ab2165853a6 3646409608f7ef1aa84dddea6851f743d16134757963b5ce011413bb253fea65
GET /wp-content/uploads/2024/04/Button-e1714339440821.png HTTP/1.1
Host: blog.zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: image/png
content-length: 6602
last-modified: Sun, 28 Apr 2024 21:24:00 GMT
etag: "662ebe70-19ca"
expires: Tue, 28 May 2024 21:24:07 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 895414
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BjjTOdO13EUE5XOf7RW7G0HosAFHpnuF1fWMwI5cJvcEDRklwzqVGaIesV%2BWuTMeglDiIdvuSaJ0TnM1quGA%2BaO%2B92V4UfEfITfiB1cbEmobXp0ioCfWlSmqLW4%2FfQaCTimYNmYi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881e42bf58b356a5-OSL
X-Firefox-Spdy: h2
|
|
| zeroupload.com/themes/spirit/assets/frontend/css/flickity.css | 188.114.96.1 | 200 OK | 1.3 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/css/flickity.css IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typegzip compressed data, from Unix Hasha04b39a59ea7e12c23214a9d3b2e6363 a51c2fb9612170afdc33e10e7841c739d3df5bdd bb3c516a283b38fb29a297af6aeb3e2d5dc28fda7ac1739fe38168556d04068b
GET /themes/spirit/assets/frontend/css/flickity.css HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: text/css
last-modified: Mon, 28 Sep 2020 14:26:44 GMT
vary: Accept-Encoding
etag: W/"5f71f2a4-958"
expires: Sat, 11 May 2024 08:35:45 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xYQTwIIU%2BtFN8kYxaWrAdPUzfO2uIh9lE7%2Fdym2ZWXYhX9ljms4HfUpnvbGzdaI8ZSb8NRi6ZZz0PsfQaFJO15UMRK1vOw6ONt8KsNvklcPY2RLo%2BzK4ivjwcPU6KpXRaA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e42bf0ab456bb-OSL
X-Firefox-Spdy: h2
|
|
| zeroupload.com/themes/spirit/assets/frontend/css/jquery.steps.css | 188.114.96.1 | 200 OK | 1.8 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/css/jquery.steps.css IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typegzip compressed data, from Unix Hash870582eb2295b49b704a03976cfd9212 b3bb0c3ed5374ece770b04d5b109013122411f43 3f8f443daf80b102ec80b64b137d2f7084e8b29e6c3847f55fb8cdff0561c072
GET /themes/spirit/assets/frontend/css/jquery.steps.css HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: text/css
last-modified: Mon, 28 Sep 2020 14:26:44 GMT
vary: Accept-Encoding
etag: W/"5f71f2a4-1606"
expires: Sat, 11 May 2024 09:42:10 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LmIE7CILI0vhFlbL5ATGAIjadJefJ7Lq8otPMZo9UB9iwtTTYSt5kFHEjmC4Edo%2FtWSgg8grJLMqUFOWUH6xofUCSVF9MZsbKZ%2BDv7%2FNorOW2bgdvH3vL6vxQYMAoIeQyA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e42bf0ab756bb-OSL
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-QDB60Q47TN |  142.250.74.168 | 200 OK | 101 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-QDB60Q47TN IP142.250.74.168:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (4242) Size101 kB (100789 bytes) Hash87cc469614f733caba89774fd1683323 10d134f9cd0437a02835dce15a380f936a36cca7 3f5d82c067dd1e69eaf865bcc0c6528cec5ff1321e168dc42df817aeeccdfd3f
GET /gtag/js?id=G-QDB60Q47TN HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 11 May 2024 01:05:27 GMT
expires: Sat, 11 May 2024 01:05:27 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 100789
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| zeroupload.com/themes/spirit/assets/frontend/css/cookiealert.css | 188.114.96.1 | 200 OK | 9.5 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/css/cookiealert.css IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typegzip compressed data, from Unix Hash4e04b70874f8c81c96a064ac6b4d7ad1 405a02fd836620fc05dd9e93d8403be14a5815bb 5e605b74703c6025a2e01d2a3d2b77a7ddf8d66c42b10d17c037860f48195fa9
GET /themes/spirit/assets/frontend/css/cookiealert.css HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: text/css
last-modified: Mon, 28 Sep 2020 14:26:44 GMT
vary: Accept-Encoding
etag: W/"5f71f2a4-3051"
expires: Sat, 11 May 2024 07:25:30 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t%2B3mRxsfDLTJzfkHajL8A3Z8dhLmDc1RyMsuWjR2L1I0gsOcj5t9Ey2aGs9aEteVIpJWaI7N2Sc9KI0gHtR11y3%2FWbDOgWDse1fh8JqyBqDtVQNdL6nsnnkiZbPgRyEOmA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e42bf0ab856bb-OSL
X-Firefox-Spdy: h2
|
|
| zeroupload.com/themes/spirit/assets/frontend/css/custom.css | 188.114.96.1 | 200 OK | 2.8 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/css/custom.css IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typegzip compressed data, from Unix Hash55e2a55dabf25741c7f7b65cbd9f2f11 0b4dd998eb6cefc154ad34a0ccefb62f576c092c 2c4353283e6346f71bfa942073be40e8d3632ebe8778032ecda4d3d06c79af23
GET /themes/spirit/assets/frontend/css/custom.css HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: text/css
last-modified: Thu, 04 Feb 2021 16:28:50 GMT
vary: Accept-Encoding
etag: W/"601c20c2-22e8"
expires: Sat, 11 May 2024 09:38:44 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NzZUi%2BElwTqr12foa%2BQ1uS2wuSmMUWcweW4w7nbNXspu7HhQSb0YGycnf82u8jjg54BauNOkYYDznF5VxPeqdiVdIqSkIzOoNkJm7ZK4rM8vh6gYGOnEPxG6O4X0EL9%2Beg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e42bf0abc56bb-OSL
X-Firefox-Spdy: h2
|
|
| zeroupload.com/themes/spirit/assets/frontend/css/font-awesome.min.css | 188.114.96.1 | 200 OK | 19 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/css/font-awesome.min.css IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typegzip compressed data, from Unix Hashb89219f7cb992029b37e6e02c56605be 363921d3a15ffdaf0f6199a51498ea3ffd84e75a 8c619363122087e9f1ff7bc82fe775fcdb364e5b32159623a3aa19f5e24238af
GET /themes/spirit/assets/frontend/css/font-awesome.min.css HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: text/css
last-modified: Mon, 28 Sep 2020 14:26:44 GMT
vary: Accept-Encoding
etag: W/"5f71f2a4-e6eb"
expires: Sat, 11 May 2024 09:53:00 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RtJBl3hjgHdh6WZ5gvZKS3DtlXPqWNP0yN4llW4eLEqp%2Fc7sG2%2FS3ViSDq9PQ2U%2Bsw7zjaFdwDw%2FsyJGIEfYgrra8DszDCp9%2BGvV0w7QAyzU5BiUqlVBp%2BgD1gU9KV96dg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e42bf0aba56bb-OSL
X-Firefox-Spdy: h2
|
|
| zeroupload.com/themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2 | 188.114.96.1 | 200 OK | 80 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2 IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 80148, version 331.17301 Hashc500da19d776384ba69573ae6fe274e7 6290834672aba86d5b6c1c73b30b57c9c53996f7 cfe3b7382e477059da11be2099914b94f0e2a4f08240c60542c376957b8d9658
GET /themes/spirit/assets/frontend/fonts/font-awesome/fa-solid-900.woff2 HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/themes/spirit/assets/frontend/css/font-awesome.min.css
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:27 GMT
content-type: font/woff2
content-length: 80148
last-modified: Mon, 28 Sep 2020 14:26:42 GMT
etag: "5f71f2a2-13914"
strict-transport-security: max-age=31536000
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kiNua%2Bv9vGsQTDDw%2FjfWdLjiEIfmGuKOZpp3hgoDIw9g7CRCEGZcD5JLtyht%2BG6D6TuHYuvbMAkJzxyEwj0Eo5OP9Zp8WlZ23IXgfp51hLiWK1aJ8gsSyENTWUKQoKG5Pw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881e42c14b8856bb-OSL
X-Firefox-Spdy: h2
|
|
| zeroupload.com/themes/spirit/assets/frontend/js/granim.min.js | 188.114.96.1 | 200 OK | 3.6 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/js/granim.min.js IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typegzip compressed data, from Unix Hashc4372096619130016c807de046ca2f32 adac29413f540bf829a238eef128ccdec9cdda50 b51368f7b628966fe456614b92b87ec069cbb4160b549c7ed63395aa5c556490
GET /themes/spirit/assets/frontend/js/granim.min.js HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: application/javascript
last-modified: Mon, 28 Sep 2020 14:26:40 GMT
vary: Accept-Encoding
etag: W/"5f71f2a0-298a"
expires: Sat, 11 May 2024 09:38:45 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j71oKfh0JmxwwbkUkYSHgp3Q4R18MgIJBKaPlqWPP7LqnUAk5NAhyefjfijmi1sZsoWKS2cByTROlOqyZPUP8W0SJXC%2BmDZmH9fpgjaxYAEUxzuw2hYdw7VrUkeT65o5Ww%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e42bf1aca56bb-OSL
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-QDB60Q47TN | 142.250.74.168 | 200 OK | 101 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-QDB60Q47TN IP142.250.74.168:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (4242) Size101 kB (100782 bytes) Hash22362c33104e5fda5c1026f28aaf727c 2fce73412f23887c4100888055653d87c08ff4b7 57af5b06136bf75cf7edabcccc08df891dc4fc52dd21ecc543d418ffc5e5e29d
GET /gtag/js?id=G-QDB60Q47TN HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 11 May 2024 01:05:27 GMT
expires: Sat, 11 May 2024 01:05:27 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 100782
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| zeroupload.com/themes/spirit/assets/frontend/css/stack-interface.css | 188.114.96.1 | 200 OK | 49 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/css/stack-interface.css IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typegzip compressed data, from Unix Hash8815317943827e91cd886e0f73bf776a 1ab436844845be7cb30c324fe8f9f586f4c4cf49 f072ece1c58440320f010afbbb66a25a3def1dfedd9fdfaee5368c5fd780c93a
GET /themes/spirit/assets/frontend/css/stack-interface.css HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: text/css
last-modified: Mon, 28 Sep 2020 14:26:44 GMT
vary: Accept-Encoding
etag: W/"5f71f2a4-c0a"
expires: Sat, 11 May 2024 07:02:25 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VxK2lyhSzkCT%2FF7MB6RqyD2ZVxxMa1mvmgcSJPla7LZWWiEqE7Te03e9yw9VdNiRcfXYZVTg%2BwviFj0JGMIuFlfsUArgr0D%2B7ZFCAHH6%2FHLj6RYyEvphbZQUDlM99mepYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e42befab156bb-OSL
X-Firefox-Spdy: h2
|
|
| zeroupload.com/themes/spirit/assets/frontend/css/theme.css | 188.114.96.1 | 200 OK | 87 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/css/theme.css IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typegzip compressed data, from Unix Hash1d0462c6d84dc8fcb49d3bde977b2037 b38a3b5d979ead4402f538d33e382fe1765c7a8a 1d2231e2ed7b0304451c77632c939177e56991b1420bf542d2796b2d8e3072db
GET /themes/spirit/assets/frontend/css/theme.css HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: text/css
last-modified: Mon, 28 Sep 2020 14:26:44 GMT
vary: Accept-Encoding
etag: W/"5f71f2a4-301d8"
expires: Sat, 11 May 2024 06:58:11 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CPewOyrlAsiUYEtsxD4rVKqXlgHRydFGovrbqLJPs%2Ffzc8RUIlTSe%2FruzYBxIiW2ZCy6BS9tVVxixjOn9tDc6zABuVkU8j3wa9I2ocz6bAqgxNuI0MMqbWlRFvAhPlXYtg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e42bf0ab956bb-OSL
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.74.67 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.74.67:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://zeroupload.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 02:35:00 GMT
expires: Fri, 09 May 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 167427
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.74.67 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.74.67:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://zeroupload.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 02:35:00 GMT
expires: Fri, 09 May 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 167427
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i | 142.250.74.106 | 200 OK | 50 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i IP142.250.74.106:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hashab59683497af0ad68d2db53eb06a3185 cbd7587cb41573a177535585d36378f17e7d5684 275e3599d0266c343e399f182ac1d965093e6f82b21477bb35e14dbe0485537d
GET /css?family=Open+Sans:200,300,400,400i,500,600,700%7CMerriweather:300,300i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 11 May 2024 01:05:27 GMT
date: Sat, 11 May 2024 01:05:27 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/icon?family=Material+Icons | 142.250.74.106 | 200 OK | 20 kB |
URL GET HTTP/2fonts.googleapis.com/icon?family=Material+Icons IP142.250.74.106:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hash6a2c165181d681dccfa9a90950474429 9823369bdbdc920a89e7fd50d99d52f193ccbeca ad3127159167d9367b8c1c7b10de8f62aadf94077d336151da8ef9c219ae598a
GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 11 May 2024 01:05:27 GMT
date: Sat, 11 May 2024 01:05:27 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pl23045510.highcpmgate.com/6c4ad0bb2ddc2c1cfbaa52cf8fb24a90/invoke.js | 192.243.59.13 | 200 OK | 9.8 kB |
URL GET HTTP/1.1pl23045510.highcpmgate.com/6c4ad0bb2ddc2c1cfbaa52cf8fb24a90/invoke.js IP192.243.59.13:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerLet's Encrypt Subjecthighcpmgate.com FingerprintE7:53:32:23:DA:D6:BE:EB:98:90:05:4B:AC:AC:8C:89:F2:4D:FB:2E ValidityFri, 19 Apr 2024 10:31:16 GMT - Thu, 18 Jul 2024 10:31:15 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (26633), with no line terminators Hash746985b09b60576f445dbe41f1668266 9a21ec5b2fef3d30a3119a93f3b7e82347bf23a9 fb9b026b413d657d1a3bb46e3db84e01a19bbf7f8c59fe4bb9738c3bbafcecba
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /6c4ad0bb2ddc2c1cfbaa52cf8fb24a90/invoke.js HTTP/1.1
Host: pl23045510.highcpmgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sat, 11 May 2024 01:05:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 524182c4bd9544a99806c66501c937e6
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| zeroupload.com/themes/spirit/assets/frontend/js/typed.min.js | 188.114.96.1 | 200 OK | 2.1 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/js/typed.min.js IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typegzip compressed data, from Unix Hashea4f1e02d2c18e55e14aaa69a462b889 f280fc7baf6567f0645266a75ed5976e1c4c8ddb afe7b668b1c46bf2c96b6554e1a263cb0e7d9dd8bd38ffc025c47c5715b3188e
GET /themes/spirit/assets/frontend/js/typed.min.js HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: application/javascript
last-modified: Mon, 28 Sep 2020 14:26:40 GMT
vary: Accept-Encoding
etag: W/"5f71f2a0-f6d"
expires: Sat, 11 May 2024 09:53:00 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GgCRWpbtQnY53JOabXShtaXoQyduXUkHuxJ5TlQyi9Gej9U8hBhuzkux0WXlvSbTTYzR1MhXI9ynzl2b7Kh1beQ%2BFpGlJ15vAyOM31H9nU5b3dFayFlo0mJBgIvQMb8Zeg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e42bf1ac656bb-OSL
X-Firefox-Spdy: h2
|
|
| proftrafficcounter.com/stats |  18.185.9.67 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP18.185.9.67:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash8399b85d38fcddeca1ae2a4c30d9e891 b8b1ac4f3cdabdb552f1c3fdef2dfcc2058b6762 1976bb8017e1ad4bb38e465fcf2e8aa8a5ccb50637002acca033f4196d579064
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zeroupload.com
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:27 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://zeroupload.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=4d693bce-1a11-4f90-8c2b-433d05fb912e:2:1; expires=Tue, 09 May 2034 01:05:27 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| embed.tawk.to/_s/v4/app/6625f366c87/js/twk-vendor.js | 172.67.38.66 | 200 OK | 30 kB |
URL GET HTTP/2embed.tawk.to/_s/v4/app/6625f366c87/js/twk-vendor.js IP172.67.38.66:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
File typeJavaScript source, ASCII text, with very long lines (65472) Hash3b341e35b39f6195793ecaf5db7c1d63 3ef56ed9ac8bfbf5347dc4592653703f59763083 548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305
GET /_s/v4/app/6625f366c87/js/twk-vendor.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zeroupload.com
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:27 GMT
content-type: application/javascript
last-modified: Mon, 22 Apr 2024 05:20:13 GMT
etag: W/"3b341e35b39f6195793ecaf5db7c1d63"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 879138
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881e42c598a5569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zeroupload.com/themes/spirit/assets/frontend/js/jquery-3.1.1.min.js | 188.114.96.1 | 200 OK | 34 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/js/jquery-3.1.1.min.js IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typegzip compressed data, from Unix Hash271680442e20af031a9c361f9cd539d0 217276f82f9a8c34d753eff05526f56cbef06b78 ccd07c1dbec9e8384a066e8885164b3e7c16892efa351a05a95bf3d4d48ae3ab
GET /themes/spirit/assets/frontend/js/jquery-3.1.1.min.js HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: application/javascript
last-modified: Mon, 28 Sep 2020 14:26:40 GMT
vary: Accept-Encoding
etag: W/"5f71f2a0-152b5"
expires: Sat, 11 May 2024 06:58:11 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mjuwZepbBQ9RVAJ5OmY4wzXcts2k8bV1hyG8VW9wYG5F1yxYPABUuor9Tg1lcynOKONNyTWcazHhCL%2BCP6PHyWaMe6uvxWWVPiihZAACkDsPQjD3HcVr43mxk0MyxFBs4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e42bf1ac356bb-OSL
X-Firefox-Spdy: h2
|
|
| embed.tawk.to/_s/v4/app/6625f366c87/js/twk-runtime.js | 172.67.38.66 | 200 OK | 5.2 kB |
URL GET HTTP/3embed.tawk.to/_s/v4/app/6625f366c87/js/twk-runtime.js IP172.67.38.66:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
File typeJavaScript source, ASCII text, with very long lines (2306), with no line terminators Hashd1dc816c161b3a7313b3d42f478f140a 66e30073ff65f5b96fed00992224f97dd93453bc cc6265bb78fc4f136d1e4843b385d90a1faba320821361b71895dcaf2077630f
GET /_s/v4/app/6625f366c87/js/twk-runtime.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zeroupload.com
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 11 May 2024 01:05:27 GMT
content-type: application/javascript
last-modified: Mon, 22 Apr 2024 05:20:13 GMT
etag: W/"d1dc816c161b3a7313b3d42f478f140a"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 893224
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881e42c5b991568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-common.js | 172.67.38.66 | 200 OK | 49 kB |
URL GET HTTP/2embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-common.js IP172.67.38.66:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65458) Hash5ff5b56dd253d3fd717915b2773593d3 3fcb89abd877241f130e2712b54233763d0d2b03 162951e9132b74bf11c97d7f234d998954df2729c604e2925291a28699aca260
GET /_s/v4/app/6625f366c87/js/twk-chunk-common.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zeroupload.com
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:27 GMT
content-type: application/javascript
last-modified: Mon, 22 Apr 2024 05:20:13 GMT
etag: W/"5ff5b56dd253d3fd717915b2773593d3"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 893224
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881e42c5a8ae569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zeroupload.com/themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png | 188.114.96.1 | 200 OK | 5.0 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hasha9a8c24cea41bed7ef78ed1d12d48291 cd86d71e15b97ab602e0e39bb6e9bbaf6779f4d7 3b379c83d1c0b117cec88debed9390723daffc2fb99cf51cc2175c47169d190e
GET /themes/spirit/assets/frontend/img/favicon/apple-touch-icon.png HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30; _ga_QDB60Q47TN=GS1.1.1715389527.1.0.1715389527.0.0.0; _ga=GA1.1.367768750.1715389527; dom3ic8zudi28v8lr6fgphwffqoz0j6c=4d693bce-1a11-4f90-8c2b-433d05fb912e%3A2%3A1; TawkConnectionTime=1715389528087; twk_idm_key=dUHzl6PsBTyX2oQzQ59QH
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:28 GMT
content-type: image/png
content-length: 5016
last-modified: Mon, 28 Sep 2020 14:26:42 GMT
etag: "5f71f2a2-1398"
expires: Sat, 18 May 2024 00:38:30 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 880190
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rodx4hJwfLUgQESyyI1iw%2BlwbNP1TBYeqHeLygNjVhJI4Q61KbsZdOcWO5cgSn1LIu%2BJkaHTW6NBjRS2Fy3TX%2BhFM1Iyii0amB9i3SUgf3DnhdUqt0HPfZPLMlJcfZl5qQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881e42c6bdbd56bb-OSL
X-Firefox-Spdy: h2
|
|
| zeroupload.com/themes/spirit/assets/frontend/css/bootstrap.min.css | 188.114.96.1 | 200 OK | 79 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/css/bootstrap.min.css IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typegzip compressed data, from Unix Hash62d934751587b51ac46e387f703c78e6 40cc69a1b10c5613cd0c7b1570ef3e95196442ba 217e2ca9610ee775792c6ddd1c6bfde0c6a2a9c3f3fd1682f843e8fdf1862a14
GET /themes/spirit/assets/frontend/css/bootstrap.min.css HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: text/css
last-modified: Mon, 28 Sep 2020 14:26:44 GMT
vary: Accept-Encoding
etag: W/"5f71f2a4-12c75"
expires: Sat, 11 May 2024 09:53:00 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yMCWSVTHyEAu0rx6gh7G8mSM5Jkb4UKCEox5b9KPQQa9VxCl4aUFTkodAtH1jM4j3jl6Y0mEYQqoSrcXdY0PEv22GVS5x6a6w9MDyAv4t0DXH2iKAWl2G8uBi8mj9Qv1dA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e42befaae56bb-OSL
X-Firefox-Spdy: h2
|
|
| zeroupload.com/themes/spirit/assets/frontend/js/flickity.min.js | 188.114.96.1 | 200 OK | 18 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/js/flickity.min.js IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typegzip compressed data, from Unix Hashe4e222b0047a7cfb59d0fbdcd84fb69d 75610b1c0525ef6df67b21678c2e4a0f50b74010 4feacd376fbfd95397b92fea1a192462f92963eca4673b3fc3c789409e1038b9
GET /themes/spirit/assets/frontend/js/flickity.min.js HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: application/javascript
last-modified: Mon, 28 Sep 2020 14:26:40 GMT
vary: Accept-Encoding
etag: W/"5f71f2a0-d265"
expires: Sat, 11 May 2024 10:05:48 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CIBHOrl3Wl6WZc6B3YL8Lw95M%2FvVPsMs1F5vUJng1fK6tznrCOGJ5cfHk2W2m0hV1jP%2FY4zpHui2yG%2F3IOv9hCHcEgK3f3TlUw4Q5fv7KJq1Rgi8Qvg9T%2BPw3gPPbvRFaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e42bf1ac556bb-OSL
X-Firefox-Spdy: h2
|
|
| upsettingfirstobserved.com/ntv.json?key=6c4ad0bb2ddc2c1cfbaa52cf8fb24a90&vstc=4 | 172.240.108.84 | 200 OK | 17 kB |
URL GET HTTP/1.1upsettingfirstobserved.com/ntv.json?key=6c4ad0bb2ddc2c1cfbaa52cf8fb24a90&vstc=4 IP172.240.108.84:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerLet's Encrypt Subjectupsettingfirstobserved.com FingerprintAB:6B:C9:1B:C1:3C:AE:B5:3E:F7:1E:50:A8:F7:2F:3E:63:2D:FF:15 ValidityMon, 06 May 2024 08:21:06 GMT - Sun, 04 Aug 2024 08:21:05 GMT
Hashba1073ef6131fd1e8728d2d36503238a cad81f8acf97c929c727171a55bbd8751be2b814 adc7a72b2b0174d35bc3c2e667207689d124bd68dc449fb3e09e141fd7c0d96b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ntv.json?key=6c4ad0bb2ddc2c1cfbaa52cf8fb24a90&vstc=4 HTTP/1.1
Host: upsettingfirstobserved.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zeroupload.com
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 11 May 2024 01:05:28 GMT
Content-Type: application/json
Content-Length: 17138
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://zeroupload.com
Access-Control-Allow-Origin: https://zeroupload.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=22945011; expires=Sun, 12 May 2024 01:05:27 GMT; secure; SameSite=None
pdhtkv=true; expires=Sun, 12 May 2024 01:05:28 GMT; secure; SameSite=None
uncs=1; expires=Sun, 12 May 2024 01:05:28 GMT; secure; SameSite=None
pdhtkv49=true; expires=Sun, 12 May 2024 01:05:28 GMT; secure; SameSite=None
uncs49=1; expires=Sun, 12 May 2024 01:05:28 GMT; secure; SameSite=None
nlec6c4ad0bb2ddc2c1cfbaa52cf8fb24a90=[2229329,2229333,2019380,2229337]; expires=Sat, 11 May 2024 01:05:33 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 41e565769f9cbc11a0684f67139b8851
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| upsettingfirstobserved.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuXucUL%2F6Ip5VlEAQFmXR3Jj0ZFw3GmCUYN%2FvDxfWgUl3VPSlT3dVUdU1PxktwQfbgYQ5e9NT5JtmgLkH%2FABeZBBYJipmL5GDAP8DTwuJRegxGH3S%2F79X3FXzvvfps254SH5aeLL2j%2BkJKOjPXcOsv3fa8y%2FVVkdpevTcffBQ0L9d199V20HBfrl%2BJ2Iaa8V3PdT3Xqy8LHcWqN1ORENn9ttdou42m3%2FDmmujp%2F9fGOjDUAe%2Bekmcg%2BLh26ExDsBHS5LulyGzkKnvlrcRKmiuNLt%2B7lW6kqkiRnMNYO4jTvTM1lDlefgCV7k7sQnX%2FFYZiTJyHDxCme2cmEXZ3Jj5DiShFyJ9E0R0hkiMIOgJTdyD4MQEYx9U1pMm9q0oXdPMfllbsmNQeP4IoxqT2%2BzTSZH9Ril79ppI2Fyo16MUlRG8E0RkhswfI%2BxcgigOw%2FFMI%2FguZebyKNNlZM1JB8HLSuxAjiHgEGQ1AjQNbfcKBjR3YzEHCT%2BrM87yWyxl159uMzfJWFAbc9Wgr9qjnBvOwrLI3QJ4NwOQATG8h01vYEANo%2ByPMegnDHZh8TJzrW%2BjyEkVEUBiCghIUgqDICYpuucul8U15j0tjQ%2B8s%2B2d5thyqvLNNd1XeiVICqgfQvNzOTsnT1XycD59%2FhI3opB6wJuVuGPqcM595LA4pnfNZPB%2BHfpO2XRhRQpgLk5b7Ykzay58jE2Ny8YNLCOkBjDwAE8%2BBWg%2B0KEHXS%2FTT%2FX6klc2korzBVAKuSmR5Dfmmsy1PycXJjl6oXUfEjhYeTr2WDX%2BbAtMlMl3iY3FI0JF3hzdUQXZuqMKQ79eyXCSiT6v93cxpHj3xzdvRZqE0X1kyg6%2FfYBVRwfvvRiZfpSkXaceQbxcF55FeVppF5IcV814UXrNmfdHq1Gar195cXkkyHRkjVDoCFcdrf4GJMam9%2BOzkYT71858QegRtSyT2iJwFhDoAy7ZgsqOFvP%2FHlf3pT2AUgZbnmjBzUNhyqP3w%2FFAKAhmd1zQsYf5Th%2Bd4qGl1m4py29xFR9dA8ztIkxJdXaIrS1A5gLFTwzzTRws%2FfVnFVwhlbRhKXdsJpZZfTIZc%2FW6NyaVfmxV6H0ac1Fuzsy4N2nNeq0WjVtj05%2BPA45T6zcAPAjqL3Izj1w9v%2Fw0AAP%2F%2FAQAA%2F%2F8lLShIfAQAAA%3D%3D | 172.240.108.84 | 200 OK | 7 B |
URL GET HTTP/1.1upsettingfirstobserved.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuXucUL%2F6Ip5VlEAQFmXR3Jj0ZFw3GmCUYN%2FvDxfWgUl3VPSlT3dVUdU1PxktwQfbgYQ5e9NT5JtmgLkH%2FABeZBBYJipmL5GDAP8DTwuJRegxGH3S%2F79X3FXzvvfps254SH5aeLL2j%2BkJKOjPXcOsv3fa8y%2FVVkdpevTcffBQ0L9d199V20HBfrl%2BJ2Iaa8V3PdT3Xqy8LHcWqN1ORENn9ttdou42m3%2FDmmujp%2F9fGOjDUAe%2Bekmcg%2BLh26ExDsBHS5LulyGzkKnvlrcRKmiuNLt%2B7lW6kqkiRnMNYO4jTvTM1lDlefgCV7k7sQnX%2FFYZiTJyHDxCme2cmEXZ3Jj5DiShFyJ9E0R0hkiMIOgJTdyD4MQEYx9U1pMm9q0oXdPMfllbsmNQeP4IoxqT2%2BzTSZH9Ril79ppI2Fyo16MUlRG8E0RkhswfI%2BxcgigOw%2FFMI%2FguZebyKNNlZM1JB8HLSuxAjiHgEGQ1AjQNbfcKBjR3YzEHCT%2BrM87yWyxl159uMzfJWFAbc9Wgr9qjnBvOwrLI3QJ4NwOQATG8h01vYEANo%2ByPMegnDHZh8TJzrW%2BjyEkVEUBiCghIUgqDICYpuucul8U15j0tjQ%2B8s%2B2d5thyqvLNNd1XeiVICqgfQvNzOTsnT1XycD59%2FhI3opB6wJuVuGPqcM595LA4pnfNZPB%2BHfpO2XRhRQpgLk5b7Ykzay58jE2Ny8YNLCOkBjDwAE8%2BBWg%2B0KEHXS%2FTT%2FX6klc2korzBVAKuSmR5Dfmmsy1PycXJjl6oXUfEjhYeTr2WDX%2BbAtMlMl3iY3FI0JF3hzdUQXZuqMKQ79eyXCSiT6v93cxpHj3xzdvRZqE0X1kyg6%2FfYBVRwfvvRiZfpSkXaceQbxcF55FeVppF5IcV814UXrNmfdHq1Gar195cXkkyHRkjVDoCFcdrf4GJMam9%2BOzkYT71858QegRtSyT2iJwFhDoAy7ZgsqOFvP%2FHlf3pT2AUgZbnmjBzUNhyqP3w%2FFAKAhmd1zQsYf5Th%2Bd4qGl1m4py29xFR9dA8ztIkxJdXaIrS1A5gLFTwzzTRws%2FfVnFVwhlbRhKXdsJpZZfTIZc%2FW6NyaVfmxV6H0ac1Fuzsy4N2nNeq0WjVtj05%2BPA45T6zcAPAjqL3Izj1w9v%2Fw0AAP%2F%2FAQAA%2F%2F8lLShIfAQAAA%3D%3D IP172.240.108.84:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerLet's Encrypt Subjectupsettingfirstobserved.com FingerprintAB:6B:C9:1B:C1:3C:AE:B5:3E:F7:1E:50:A8:F7:2F:3E:63:2D:FF:15 ValidityMon, 06 May 2024 08:21:06 GMT - Sun, 04 Aug 2024 08:21:05 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuXucUL%2F6Ip5VlEAQFmXR3Jj0ZFw3GmCUYN%2FvDxfWgUl3VPSlT3dVUdU1PxktwQfbgYQ5e9NT5JtmgLkH%2FABeZBBYJipmL5GDAP8DTwuJRegxGH3S%2F79X3FXzvvfps254SH5aeLL2j%2BkJKOjPXcOsv3fa8y%2FVVkdpevTcffBQ0L9d199V20HBfrl%2BJ2Iaa8V3PdT3Xqy8LHcWqN1ORENn9ttdou42m3%2FDmmujp%2F9fGOjDUAe%2Bekmcg%2BLh26ExDsBHS5LulyGzkKnvlrcRKmiuNLt%2B7lW6kqkiRnMNYO4jTvTM1lDlefgCV7k7sQnX%2FFYZiTJyHDxCme2cmEXZ3Jj5DiShFyJ9E0R0hkiMIOgJTdyD4MQEYx9U1pMm9q0oXdPMfllbsmNQeP4IoxqT2%2BzTSZH9Ril79ppI2Fyo16MUlRG8E0RkhswfI%2BxcgigOw%2FFMI%2FguZebyKNNlZM1JB8HLSuxAjiHgEGQ1AjQNbfcKBjR3YzEHCT%2BrM87yWyxl159uMzfJWFAbc9Wgr9qjnBvOwrLI3QJ4NwOQATG8h01vYEANo%2ByPMegnDHZh8TJzrW%2BjyEkVEUBiCghIUgqDICYpuucul8U15j0tjQ%2B8s%2B2d5thyqvLNNd1XeiVICqgfQvNzOTsnT1XycD59%2FhI3opB6wJuVuGPqcM595LA4pnfNZPB%2BHfpO2XRhRQpgLk5b7Ykzay58jE2Ny8YNLCOkBjDwAE8%2BBWg%2B0KEHXS%2FTT%2FX6klc2korzBVAKuSmR5Dfmmsy1PycXJjl6oXUfEjhYeTr2WDX%2BbAtMlMl3iY3FI0JF3hzdUQXZuqMKQ79eyXCSiT6v93cxpHj3xzdvRZqE0X1kyg6%2FfYBVRwfvvRiZfpSkXaceQbxcF55FeVppF5IcV814UXrNmfdHq1Gar195cXkkyHRkjVDoCFcdrf4GJMam9%2BOzkYT71858QegRtSyT2iJwFhDoAy7ZgsqOFvP%2FHlf3pT2AUgZbnmjBzUNhyqP3w%2FFAKAhmd1zQsYf5Th%2Bd4qGl1m4py29xFR9dA8ztIkxJdXaIrS1A5gLFTwzzTRws%2FfVnFVwhlbRhKXdsJpZZfTIZc%2FW6NyaVfmxV6H0ac1Fuzsy4N2nNeq0WjVtj05%2BPA45T6zcAPAjqL3Izj1w9v%2Fw0AAP%2F%2FAQAA%2F%2F8lLShIfAQAAA%3D%3D HTTP/1.1
Host: upsettingfirstobserved.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Cookie: u_pl=22945011; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec6c4ad0bb2ddc2c1cfbaa52cf8fb24a90=[2229329,2229333,2019380,2229337]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 11 May 2024 01:05:28 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 40c1d87a7bd85f56808e3b2ea0446aed
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| zeroupload.com/themes/spirit/assets/frontend/js/datepicker.js | 188.114.96.1 | 200 OK | 31 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/js/datepicker.js IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typegzip compressed data, from Unix Hash4504d855c4fddb4fd5edd824d912470d 311021ddb0bdcabc38deb8e832010ff89052fc66 a2eab7ccbdb2727e42d593490d1df76a6413eb82e66ec646b846bf784eb3d8ee
GET /themes/spirit/assets/frontend/js/datepicker.js HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: application/javascript
last-modified: Mon, 28 Sep 2020 14:26:40 GMT
vary: Accept-Encoding
etag: W/"5f71f2a0-51ef"
expires: Sat, 11 May 2024 09:38:45 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1fQjhl20Y9Zfdx7Od0rDI5%2FyI%2BfCf%2Bt%2FcV6iwdQDCW5AhEcjKvvUt%2BXerwzoH0VhsHr2r21jKhhpFV6f%2FlJ4UXe9Wql6K6r8pGLDxvamJ3%2BldaNBGoA5WeQn6D081RsYWg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e42bf1ac756bb-OSL
X-Firefox-Spdy: h2
|
|
| upsettingfirstobserved.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuXucUL%2F5YTyvLIAgKMunuTHoyLroYYyQYN%2FvDxfWgUl3VPSlT3dVUdU1P5hRckD14mIMXPXW%2BSTaoy6J%2FgItMAosExcxFcjD%2FgoeFxaP07ODog%2B73Xn1fwfe%2BV1%2Fs2jPiw9LTlfdVX0hJ5xcbbv2VW553qb4uUtur95aCT4Pmpbruvt4OGu6r9XcjtqXmfddzXc%2F16qtCR7HqzVcgRHav7TXabqPpN7zFJnr6%2F72xDgx1wLtn5DkIPq4dOech2Ahp8sNKZLZylb32TmIlzZVGlx%2FcTLdSVaRIZmWsHcTpwZQNZU5WH0Cl%2BxO5UN1%2FiaEYE%2BfhA4TpwVQkwu7eRGcoEaUI%2BdMouiNEcgRBR2DqNgQ%2FIQDjuLKBNLl7RemCbj9BaYWOSe3xI4hiTGp%2Fnkea3F%2BWole%2FoaTNhUoNenEJ0RtBdEbI7CHy%2FjmI4hAs%2FxyC%2F0bmH68jTfY2jFQQvJzMLsQIIh5BRgNQ48BWn3BgYwc2c5Dw0zrzPK%2FlckbdpTZjC7wVhQF3PdqKPeq5wRIsq%2BQNkGcDMDkA0zvI9A62xADa%2FgyzWcJwByYfE%2BfaDrq8RBERFIagoASFIChygqJb7nNpfFPe5dLY0Jtmf5oXyqHKO7t0X%2BWdKCWgegDNy93sjDxb%2BeN88uIjbEWn9YA1KXfD0Oec%2BcxjcUjpos%2FipTj0m7TtwogSwpybjNwXY9Je%2FRKZGJMLH19ESA9h5CGYeAHUeqBFCbpZop%2Fe70da2UwqyhtMJeCqRJbXkG87u%2FKMXJjs6KXaR4jY8eWHc29kwz%2FmwHSJTJf4TBwRdOSd4XVVkL3rqjDkx40sF4no02p%2FN3KaR0999160XSjN11bM4Nu3WAVU5b0PIpOv05SLtGPI98uC80ivKs0i8tOa%2BTAKr1qzuWx1arP1q2%2BvriWZjowRKh2BipONv8HEmNRefn7yMJ%2F59S8IPYK2JRJ7TKYBoQ7Bsh2YbKbeKAItZ5wwq6Gw5VD74exQCgIZzXoaljD%2F6cNZPdS0uk1FuWvuoKNroPltpEmJri7RlSWoHMDYuWGe6ePLv3xdxTcIZW0YSl3bC6WWX1UmX6t%2BN8fk4u%2FNJ54bcVpvLSy4NGgveq0WjVph01%2BKA49T6jcDPwjoAnIzjt88uvUPAAAA%2F%2F8BAAD%2F%2F4m7zEV8BAAA | 172.240.108.84 | 200 OK | 7 B |
URL GET HTTP/1.1upsettingfirstobserved.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuXucUL%2F5YTyvLIAgKMunuTHoyLroYYyQYN%2FvDxfWgUl3VPSlT3dVUdU1P5hRckD14mIMXPXW%2BSTaoy6J%2FgItMAosExcxFcjD%2FgoeFxaP07ODog%2B73Xn1fwfe%2BV1%2Fs2jPiw9LTlfdVX0hJ5xcbbv2VW553qb4uUtur95aCT4Pmpbruvt4OGu6r9XcjtqXmfddzXc%2F16qtCR7HqzVcgRHav7TXabqPpN7zFJnr6%2F72xDgx1wLtn5DkIPq4dOech2Ahp8sNKZLZylb32TmIlzZVGlx%2FcTLdSVaRIZmWsHcTpwZQNZU5WH0Cl%2BxO5UN1%2FiaEYE%2BfhA4TpwVQkwu7eRGcoEaUI%2BdMouiNEcgRBR2DqNgQ%2FIQDjuLKBNLl7RemCbj9BaYWOSe3xI4hiTGp%2Fnkea3F%2BWole%2FoaTNhUoNenEJ0RtBdEbI7CHy%2FjmI4hAs%2FxyC%2F0bmH68jTfY2jFQQvJzMLsQIIh5BRgNQ48BWn3BgYwc2c5Dw0zrzPK%2FlckbdpTZjC7wVhQF3PdqKPeq5wRIsq%2BQNkGcDMDkA0zvI9A62xADa%2FgyzWcJwByYfE%2BfaDrq8RBERFIagoASFIChygqJb7nNpfFPe5dLY0Jtmf5oXyqHKO7t0X%2BWdKCWgegDNy93sjDxb%2BeN88uIjbEWn9YA1KXfD0Oec%2BcxjcUjpos%2FipTj0m7TtwogSwpybjNwXY9Je%2FRKZGJMLH19ESA9h5CGYeAHUeqBFCbpZop%2Fe70da2UwqyhtMJeCqRJbXkG87u%2FKMXJjs6KXaR4jY8eWHc29kwz%2FmwHSJTJf4TBwRdOSd4XVVkL3rqjDkx40sF4no02p%2FN3KaR0999160XSjN11bM4Nu3WAVU5b0PIpOv05SLtGPI98uC80ivKs0i8tOa%2BTAKr1qzuWx1arP1q2%2BvriWZjowRKh2BipONv8HEmNRefn7yMJ%2F59S8IPYK2JRJ7TKYBoQ7Bsh2YbKbeKAItZ5wwq6Gw5VD74exQCgIZzXoaljD%2F6cNZPdS0uk1FuWvuoKNroPltpEmJri7RlSWoHMDYuWGe6ePLv3xdxTcIZW0YSl3bC6WWX1UmX6t%2BN8fk4u%2FNJ54bcVpvLSy4NGgveq0WjVph01%2BKA49T6jcDPwjoAnIzjt88uvUPAAAA%2F%2F8BAAD%2F%2F4m7zEV8BAAA IP172.240.108.84:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerLet's Encrypt Subjectupsettingfirstobserved.com FingerprintAB:6B:C9:1B:C1:3C:AE:B5:3E:F7:1E:50:A8:F7:2F:3E:63:2D:FF:15 ValidityMon, 06 May 2024 08:21:06 GMT - Sun, 04 Aug 2024 08:21:05 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuXucUL%2F5YTyvLIAgKMunuTHoyLroYYyQYN%2FvDxfWgUl3VPSlT3dVUdU1P5hRckD14mIMXPXW%2BSTaoy6J%2FgItMAosExcxFcjD%2FgoeFxaP07ODog%2B73Xn1fwfe%2BV1%2Fs2jPiw9LTlfdVX0hJ5xcbbv2VW553qb4uUtur95aCT4Pmpbruvt4OGu6r9XcjtqXmfddzXc%2F16qtCR7HqzVcgRHav7TXabqPpN7zFJnr6%2F72xDgx1wLtn5DkIPq4dOech2Ahp8sNKZLZylb32TmIlzZVGlx%2FcTLdSVaRIZmWsHcTpwZQNZU5WH0Cl%2BxO5UN1%2FiaEYE%2BfhA4TpwVQkwu7eRGcoEaUI%2BdMouiNEcgRBR2DqNgQ%2FIQDjuLKBNLl7RemCbj9BaYWOSe3xI4hiTGp%2Fnkea3F%2BWole%2FoaTNhUoNenEJ0RtBdEbI7CHy%2FjmI4hAs%2FxyC%2F0bmH68jTfY2jFQQvJzMLsQIIh5BRgNQ48BWn3BgYwc2c5Dw0zrzPK%2FlckbdpTZjC7wVhQF3PdqKPeq5wRIsq%2BQNkGcDMDkA0zvI9A62xADa%2FgyzWcJwByYfE%2BfaDrq8RBERFIagoASFIChygqJb7nNpfFPe5dLY0Jtmf5oXyqHKO7t0X%2BWdKCWgegDNy93sjDxb%2BeN88uIjbEWn9YA1KXfD0Oec%2BcxjcUjpos%2FipTj0m7TtwogSwpybjNwXY9Je%2FRKZGJMLH19ESA9h5CGYeAHUeqBFCbpZop%2Fe70da2UwqyhtMJeCqRJbXkG87u%2FKMXJjs6KXaR4jY8eWHc29kwz%2FmwHSJTJf4TBwRdOSd4XVVkL3rqjDkx40sF4no02p%2FN3KaR0999160XSjN11bM4Nu3WAVU5b0PIpOv05SLtGPI98uC80ivKs0i8tOa%2BTAKr1qzuWx1arP1q2%2BvriWZjowRKh2BipONv8HEmNRefn7yMJ%2F59S8IPYK2JRJ7TKYBoQ7Bsh2YbKbeKAItZ5wwq6Gw5VD74exQCgIZzXoaljD%2F6cNZPdS0uk1FuWvuoKNroPltpEmJri7RlSWoHMDYuWGe6ePLv3xdxTcIZW0YSl3bC6WWX1UmX6t%2BN8fk4u%2FNJ54bcVpvLSy4NGgveq0WjVph01%2BKA49T6jcDPwjoAnIzjt88uvUPAAAA%2F%2F8BAAD%2F%2F4m7zEV8BAAA HTTP/1.1
Host: upsettingfirstobserved.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Cookie: u_pl=22945011; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec6c4ad0bb2ddc2c1cfbaa52cf8fb24a90=[2229329,2229333,2019380,2229337]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 11 May 2024 01:05:28 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: fffb6f541486947829dd9e8b247ef17b
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.cloudimagesb.com/cti/5e/78/a9/5e78a94057ff65f06ec19e727c7be04f/1588233511.jpg | 45.133.44.9 | 200 OK | 24 kB |
URL GET HTTP/2cdn.cloudimagesb.com/cti/5e/78/a9/5e78a94057ff65f06ec19e727c7be04f/1588233511.jpg IP45.133.44.9:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3 Hashd71c872fb9f50bd9383abc0721d1d51e 1f69b40ef2f95798b4e0fd738d630ad4319cd739 6b4a622b9de1ffab8fe905fc8c4633994c732476664b5190ceedd62a3795ab08
GET /cti/5e/78/a9/5e78a94057ff65f06ec19e727c7be04f/1588233511.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:28 GMT
content-type: image/jpeg
content-length: 24518
server: nginx/1.21.6
last-modified: Thu, 30 Apr 2020 07:58:34 GMT
etag: "5eaa852a-5fc6"
expires: Mon, 13 May 2024 01:05:28 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn.cloudimagesb.com/cti/d6/e8/37/d6e83777d7311d26f1ac5b2b62a81218/1588233535.jpg | 45.133.44.9 | 200 OK | 28 kB |
URL GET HTTP/2cdn.cloudimagesb.com/cti/d6/e8/37/d6e83777d7311d26f1ac5b2b62a81218/1588233535.jpg IP45.133.44.9:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3 Hash1dcde64d47d24d151a1433ecf4403dd7 443d6704b5a294e000084d7a8ac823e526093928 d11bcd65a82589c2c31d6fd87cb16ec673dd5640462ad3d20ff53e014a435376
GET /cti/d6/e8/37/d6e83777d7311d26f1ac5b2b62a81218/1588233535.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:28 GMT
content-type: image/jpeg
content-length: 27832
server: nginx/1.21.6
last-modified: Thu, 30 Apr 2020 07:58:58 GMT
etag: "5eaa8542-6cb8"
expires: Mon, 13 May 2024 01:05:28 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| zeroupload.com/themes/spirit/assets/frontend/js/smooth-scroll.min.js | 188.114.96.1 | 200 OK | 35 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/js/smooth-scroll.min.js IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typegzip compressed data, from Unix Hashc1c8e15f30c7a824f67641a46bf52ede 72b911e42de36c4bd5db7128aa5449fce23330c9 8617971407f0002499b525aa40fb904c9563a313088a359fc128df467d2e43d0
GET /themes/spirit/assets/frontend/js/smooth-scroll.min.js HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: application/javascript
last-modified: Mon, 28 Sep 2020 14:26:40 GMT
vary: Accept-Encoding
etag: W/"5f71f2a0-1776"
expires: Sat, 11 May 2024 09:38:45 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TMaILdm2d8jJ%2FT1SDpGlRkYRBhQ2HSdQvjX0%2BJz34SGpn2zvhQfk5vJvsRJu1CTNvhbQPuf5G6zySz%2FxYlvhgtE0n%2FAddGEwgJUJp6dAT7AwBRufY8I4FxKzmiCFYcAodQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e42bf1ace56bb-OSL
X-Firefox-Spdy: h2
|
|
| upsettingfirstobserved.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSu3p1TBEFdTyvLIAgqMunuTHoyLroYYyQYN%2FvDxfWgUl3VPSlT3dVUdU1P5hRckD14mIMXPXW%2BSTaoy6J%2FgItMAosExMxFcjD%2FxMLiUXocHPdB9%2FtefV%2FB996rr3btGfFh6enKh6ovpKTziw23%2Fuptz7tcXxep7dV7S8HnQfNyXXffbAcN97X6%2BxHbUvO%2B67mu53r1VaGjWPXmKxIiu9%2F2Gm230fQb3mITPf10bawDQx3w7hl5HoKPa0fOBQg2Qpr8tBKZrVxlb7yXWElzpdHlB7fSrVQVKZIZjLWDOD2YqqHMyepDqHR%2FYheq%2B58wFGPiPHqIMD2YmkTY3Zv4DCWiFCF%2FBkV3hEiOIOgITN2B4CcEYBxXN5Am964qXdDtf1lasWNSe%2FIYohiT2l8XkCYPlqXo1W8qaXOhUoNeXEL0RhCdETJ7iLx%2FDqI4BMu%2FhOC%2Fk%2Fkn60iTvQ0jFQQvJ70LMYKIR5DRANQ4sNUnHNjYgc0cJPy0zjzPa7mcUXepzdgCb0VhwF2PtmKPem6wBMsqewPk2QBMDsD0DjK9gy0xgLa%2FwmyWMNyBycfEub6DLi9RRASFISgoQSEIipyg6Jb7XBrflPe4NDb0ptmf5oVyqPLOLt1XeSdKCageQPNyNzsjz1XzcT576TG2otN6wJqUu2Hoc8585rE4pHTRZ%2FFSHPpN2nZhRAlhzk1a7osxaa9%2BjUyMycVPLyGkhzDyEEy8CGo90KIE3SzRTx%2F0I61sJhXlDaYScFUiy2vIt51deUYuTnZ06Y8mInZ85dHcW9nwzzkwXSLTJb4QRwQdeXd4QxVk74YqDPl5I8tFIvq02t%2FNnObR%2BR8%2BiLYLpfnaihl8%2Fw6riAre%2Fygy%2BTpNuUg7hvy4LDiP9KrSLCK%2FrJmPo%2FCaNZvLVqc2W7%2F27upakunIGKHSEag42fgbTIxJ7ZUXJg%2Fz2ZPXIfQI2pZI7DGZBoQ6BMt2YLKZe6MItJxpwuw8ClsOtR%2FODqUgkNGspmEJ8786nOGhptVtKspdcxcdXQPN7yBNSnR1ia4sQeUAxs4N80wfX%2Fnt2yq%2BQyhrw1Dq2l4otfxmTF6uXa9%2BtybjrtAnMOK03lpYcGnQXvRaLRq1wqa%2FFAcep9RvBn4Q0AXkZhy%2FfXT7HwAAAP%2F%2FAQAA%2F%2F8IV0xRfAQAAA%3D%3D | 192.243.61.225 | 200 OK | 7 B |
URL GET HTTP/1.1upsettingfirstobserved.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSu3p1TBEFdTyvLIAgqMunuTHoyLroYYyQYN%2FvDxfWgUl3VPSlT3dVUdU1P5hRckD14mIMXPXW%2BSTaoy6J%2FgItMAosExMxFcjD%2FxMLiUXocHPdB9%2FtefV%2FB996rr3btGfFh6enKh6ovpKTziw23%2Fuptz7tcXxep7dV7S8HnQfNyXXffbAcN97X6%2BxHbUvO%2B67mu53r1VaGjWPXmKxIiu9%2F2Gm230fQb3mITPf10bawDQx3w7hl5HoKPa0fOBQg2Qpr8tBKZrVxlb7yXWElzpdHlB7fSrVQVKZIZjLWDOD2YqqHMyepDqHR%2FYheq%2B58wFGPiPHqIMD2YmkTY3Zv4DCWiFCF%2FBkV3hEiOIOgITN2B4CcEYBxXN5Am964qXdDtf1lasWNSe%2FIYohiT2l8XkCYPlqXo1W8qaXOhUoNeXEL0RhCdETJ7iLx%2FDqI4BMu%2FhOC%2Fk%2Fkn60iTvQ0jFQQvJ70LMYKIR5DRANQ4sNUnHNjYgc0cJPy0zjzPa7mcUXepzdgCb0VhwF2PtmKPem6wBMsqewPk2QBMDsD0DjK9gy0xgLa%2FwmyWMNyBycfEub6DLi9RRASFISgoQSEIipyg6Jb7XBrflPe4NDb0ptmf5oVyqPLOLt1XeSdKCageQPNyNzsjz1XzcT576TG2otN6wJqUu2Hoc8585rE4pHTRZ%2FFSHPpN2nZhRAlhzk1a7osxaa9%2BjUyMycVPLyGkhzDyEEy8CGo90KIE3SzRTx%2F0I61sJhXlDaYScFUiy2vIt51deUYuTnZ06Y8mInZ85dHcW9nwzzkwXSLTJb4QRwQdeXd4QxVk74YqDPl5I8tFIvq02t%2FNnObR%2BR8%2BiLYLpfnaihl8%2Fw6riAre%2Fygy%2BTpNuUg7hvy4LDiP9KrSLCK%2FrJmPo%2FCaNZvLVqc2W7%2F27upakunIGKHSEag42fgbTIxJ7ZUXJg%2Fz2ZPXIfQI2pZI7DGZBoQ6BMt2YLKZe6MItJxpwuw8ClsOtR%2FODqUgkNGspmEJ8786nOGhptVtKspdcxcdXQPN7yBNSnR1ia4sQeUAxs4N80wfX%2Fnt2yq%2BQyhrw1Dq2l4otfxmTF6uXa9%2BtybjrtAnMOK03lpYcGnQXvRaLRq1wqa%2FFAcep9RvBn4Q0AXkZhy%2FfXT7HwAAAP%2F%2FAQAA%2F%2F8IV0xRfAQAAA%3D%3D IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerLet's Encrypt Subjectupsettingfirstobserved.com FingerprintAB:6B:C9:1B:C1:3C:AE:B5:3E:F7:1E:50:A8:F7:2F:3E:63:2D:FF:15 ValidityMon, 06 May 2024 08:21:06 GMT - Sun, 04 Aug 2024 08:21:05 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSu3p1TBEFdTyvLIAgqMunuTHoyLroYYyQYN%2FvDxfWgUl3VPSlT3dVUdU1P5hRckD14mIMXPXW%2BSTaoy6J%2FgItMAosExMxFcjD%2FxMLiUXocHPdB9%2FtefV%2FB996rr3btGfFh6enKh6ovpKTziw23%2Fuptz7tcXxep7dV7S8HnQfNyXXffbAcN97X6%2BxHbUvO%2B67mu53r1VaGjWPXmKxIiu9%2F2Gm230fQb3mITPf10bawDQx3w7hl5HoKPa0fOBQg2Qpr8tBKZrVxlb7yXWElzpdHlB7fSrVQVKZIZjLWDOD2YqqHMyepDqHR%2FYheq%2B58wFGPiPHqIMD2YmkTY3Zv4DCWiFCF%2FBkV3hEiOIOgITN2B4CcEYBxXN5Am964qXdDtf1lasWNSe%2FIYohiT2l8XkCYPlqXo1W8qaXOhUoNeXEL0RhCdETJ7iLx%2FDqI4BMu%2FhOC%2Fk%2Fkn60iTvQ0jFQQvJ70LMYKIR5DRANQ4sNUnHNjYgc0cJPy0zjzPa7mcUXepzdgCb0VhwF2PtmKPem6wBMsqewPk2QBMDsD0DjK9gy0xgLa%2FwmyWMNyBycfEub6DLi9RRASFISgoQSEIipyg6Jb7XBrflPe4NDb0ptmf5oVyqPLOLt1XeSdKCageQPNyNzsjz1XzcT576TG2otN6wJqUu2Hoc8585rE4pHTRZ%2FFSHPpN2nZhRAlhzk1a7osxaa9%2BjUyMycVPLyGkhzDyEEy8CGo90KIE3SzRTx%2F0I61sJhXlDaYScFUiy2vIt51deUYuTnZ06Y8mInZ85dHcW9nwzzkwXSLTJb4QRwQdeXd4QxVk74YqDPl5I8tFIvq02t%2FNnObR%2BR8%2BiLYLpfnaihl8%2Fw6riAre%2Fygy%2BTpNuUg7hvy4LDiP9KrSLCK%2FrJmPo%2FCaNZvLVqc2W7%2F27upakunIGKHSEag42fgbTIxJ7ZUXJg%2Fz2ZPXIfQI2pZI7DGZBoQ6BMt2YLKZe6MItJxpwuw8ClsOtR%2FODqUgkNGspmEJ8786nOGhptVtKspdcxcdXQPN7yBNSnR1ia4sQeUAxs4N80wfX%2Fnt2yq%2BQyhrw1Dq2l4otfxmTF6uXa9%2BtybjrtAnMOK03lpYcGnQXvRaLRq1wqa%2FFAcep9RvBn4Q0AXkZhy%2FfXT7HwAAAP%2F%2FAQAA%2F%2F8IV0xRfAQAAA%3D%3D HTTP/1.1
Host: upsettingfirstobserved.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Cookie: u_pl=22945011; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec6c4ad0bb2ddc2c1cfbaa52cf8fb24a90=[2229329,2229333,2019380,2229337]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 11 May 2024 01:05:28 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 76260249d583cb7898a12cfbe90f9a0a
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| upsettingfirstobserved.com/ren.gif?sid=H4sIAAAAAAAC%2F1RST2skxRuuzm9O%2BV38s55WlkEQFGTS3Zn0ZFx0McZIMG72j4vrQaW6qntSprqrqeqanswpuCB78DAHL3rqPJNsUJdFP4CLTAKLBMXMRXIwH8HLwuJRehwcfaF4n7eet%2BB5n7c%2B27PnxIelZ6vvqr6Qki4sNdz6S7c973J9Q6S2V%2B8tBx8Hzct13X21HTTcl%2BtvR2xbLfiu57qe69XXhI5i1VuoSIjsfttrtN1G0294S0309H9rYx0Y6oB3z8kzEHxcO3YuQLAR0uS71chs5yp75a3ESporjS4%2FvJVup6pIkcxgrB3E6eG0G8qcrj2ESg8mcqG6%2FzSGYkycRw8RpodTkQi7%2BxOdoUSUIuT%2FR9EdIZIjCDoCU3cg%2BCkBGMfVTaTJvatKF3Tnb5ZW7JjUnjyGKMak9vsFpMmDFSl69ZtK2lyo1KAXlxC9EURnhMweIe%2FPQRRHYPmnEPwXsvBkA2myv2mkguDlZHYhRhDxCDIagBoHtjrCgY0d2MxBws%2FqzPO8lssZdZfbjC3yVhQG3PVoK%2Fao5wbLsKySN0CeDcDkAEzvItO72BYDaPsjzFYJwx2YfEyc67vo8hJFRFAYgoISFIKgyAmKbnnApfFNeY9LY0Nvmv1pXiyHKu%2Fs0QOVd6KUgOoBNC%2F3snPydOWP89Hzj7EdndUD1qTcDUOfc%2BYzj8UhpUs%2Bi5fj0G%2FStgsjSggzNxm5L8akvfY5MjEmFz%2B8hJAewcgjMPEcqPVAixJ0q0Q%2FfdCPtLKZVJQ3mErAVYksryHfcfbkObk42dELtVuI2MmVR%2FOvZcPf5sF0iUyX%2BEQcE3Tk3eENVZD9G6ow5PvNLBeJ6NNqfzdzmkf%2F%2B%2BadaKdQmq%2BvmsHXb7CKqOD99yKTb9CUi7RjyLcrgvNIrynNIvLDunk%2FCq9Zs7VidWqzjWtvrq0nmY6MESodgYrTzT%2FBxJjUXnx28jGf%2BvkPCD2CtiUSe0KmAaGOwLJdmGym3igCLWc9YTaHwpZD7YezSykIZDSraVjC%2FKsOZ3ioafWainLP3EVH10DzO0iTEl1doitLUDmAsfPDPNMnV376soqvEMraMJS6th9KLb%2BoTL4%2BcXpMLv3arNAHMOKs3lpcdGnQXvJaLRq1wqa%2FHAcep9RvBn4Q0EXkZhy%2Ffnz7LwAAAP%2F%2FAQAA%2F%2F82XHiefAQAAA%3D%3D | 192.243.61.225 | 200 OK | 7 B |
URL GET HTTP/1.1upsettingfirstobserved.com/ren.gif?sid=H4sIAAAAAAAC%2F1RST2skxRuuzm9O%2BV38s55WlkEQFGTS3Zn0ZFx0McZIMG72j4vrQaW6qntSprqrqeqanswpuCB78DAHL3rqPJNsUJdFP4CLTAKLBMXMRXIwH8HLwuJRehwcfaF4n7eet%2BB5n7c%2B27PnxIelZ6vvqr6Qki4sNdz6S7c973J9Q6S2V%2B8tBx8Hzct13X21HTTcl%2BtvR2xbLfiu57qe69XXhI5i1VuoSIjsfttrtN1G0294S0309H9rYx0Y6oB3z8kzEHxcO3YuQLAR0uS71chs5yp75a3ESporjS4%2FvJVup6pIkcxgrB3E6eG0G8qcrj2ESg8mcqG6%2FzSGYkycRw8RpodTkQi7%2BxOdoUSUIuT%2FR9EdIZIjCDoCU3cg%2BCkBGMfVTaTJvatKF3Tnb5ZW7JjUnjyGKMak9vsFpMmDFSl69ZtK2lyo1KAXlxC9EURnhMweIe%2FPQRRHYPmnEPwXsvBkA2myv2mkguDlZHYhRhDxCDIagBoHtjrCgY0d2MxBws%2FqzPO8lssZdZfbjC3yVhQG3PVoK%2Fao5wbLsKySN0CeDcDkAEzvItO72BYDaPsjzFYJwx2YfEyc67vo8hJFRFAYgoISFIKgyAmKbnnApfFNeY9LY0Nvmv1pXiyHKu%2Fs0QOVd6KUgOoBNC%2F3snPydOWP89Hzj7EdndUD1qTcDUOfc%2BYzj8UhpUs%2Bi5fj0G%2FStgsjSggzNxm5L8akvfY5MjEmFz%2B8hJAewcgjMPEcqPVAixJ0q0Q%2FfdCPtLKZVJQ3mErAVYksryHfcfbkObk42dELtVuI2MmVR%2FOvZcPf5sF0iUyX%2BEQcE3Tk3eENVZD9G6ow5PvNLBeJ6NNqfzdzmkf%2F%2B%2BadaKdQmq%2BvmsHXb7CKqOD99yKTb9CUi7RjyLcrgvNIrynNIvLDunk%2FCq9Zs7VidWqzjWtvrq0nmY6MESodgYrTzT%2FBxJjUXnx28jGf%2BvkPCD2CtiUSe0KmAaGOwLJdmGym3igCLWc9YTaHwpZD7YezSykIZDSraVjC%2FKsOZ3ioafWainLP3EVH10DzO0iTEl1doitLUDmAsfPDPNMnV376soqvEMraMJS6th9KLb%2BoTL4%2BcXpMLv3arNAHMOKs3lpcdGnQXvJaLRq1wqa%2FHAcep9RvBn4Q0EXkZhy%2Ffnz7LwAAAP%2F%2FAQAA%2F%2F82XHiefAQAAA%3D%3D IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerLet's Encrypt Subjectupsettingfirstobserved.com FingerprintAB:6B:C9:1B:C1:3C:AE:B5:3E:F7:1E:50:A8:F7:2F:3E:63:2D:FF:15 ValidityMon, 06 May 2024 08:21:06 GMT - Sun, 04 Aug 2024 08:21:05 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RST2skxRuuzm9O%2BV38s55WlkEQFGTS3Zn0ZFx0McZIMG72j4vrQaW6qntSprqrqeqanswpuCB78DAHL3rqPJNsUJdFP4CLTAKLBMXMRXIwH8HLwuJRehwcfaF4n7eet%2BB5n7c%2B27PnxIelZ6vvqr6Qki4sNdz6S7c973J9Q6S2V%2B8tBx8Hzct13X21HTTcl%2BtvR2xbLfiu57qe69XXhI5i1VuoSIjsfttrtN1G0294S0309H9rYx0Y6oB3z8kzEHxcO3YuQLAR0uS71chs5yp75a3ESporjS4%2FvJVup6pIkcxgrB3E6eG0G8qcrj2ESg8mcqG6%2FzSGYkycRw8RpodTkQi7%2BxOdoUSUIuT%2FR9EdIZIjCDoCU3cg%2BCkBGMfVTaTJvatKF3Tnb5ZW7JjUnjyGKMak9vsFpMmDFSl69ZtK2lyo1KAXlxC9EURnhMweIe%2FPQRRHYPmnEPwXsvBkA2myv2mkguDlZHYhRhDxCDIagBoHtjrCgY0d2MxBws%2FqzPO8lssZdZfbjC3yVhQG3PVoK%2Fao5wbLsKySN0CeDcDkAEzvItO72BYDaPsjzFYJwx2YfEyc67vo8hJFRFAYgoISFIKgyAmKbnnApfFNeY9LY0Nvmv1pXiyHKu%2Fs0QOVd6KUgOoBNC%2F3snPydOWP89Hzj7EdndUD1qTcDUOfc%2BYzj8UhpUs%2Bi5fj0G%2FStgsjSggzNxm5L8akvfY5MjEmFz%2B8hJAewcgjMPEcqPVAixJ0q0Q%2FfdCPtLKZVJQ3mErAVYksryHfcfbkObk42dELtVuI2MmVR%2FOvZcPf5sF0iUyX%2BEQcE3Tk3eENVZD9G6ow5PvNLBeJ6NNqfzdzmkf%2F%2B%2BadaKdQmq%2BvmsHXb7CKqOD99yKTb9CUi7RjyLcrgvNIrynNIvLDunk%2FCq9Zs7VidWqzjWtvrq0nmY6MESodgYrTzT%2FBxJjUXnx28jGf%2BvkPCD2CtiUSe0KmAaGOwLJdmGym3igCLWc9YTaHwpZD7YezSykIZDSraVjC%2FKsOZ3ioafWainLP3EVH10DzO0iTEl1doitLUDmAsfPDPNMnV376soqvEMraMJS6th9KLb%2BoTL4%2BcXpMLv3arNAHMOKs3lpcdGnQXvJaLRq1wqa%2FHAcep9RvBn4Q0EXkZhy%2Ffnz7LwAAAP%2F%2FAQAA%2F%2F82XHiefAQAAA%3D%3D HTTP/1.1
Host: upsettingfirstobserved.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Cookie: u_pl=22945011; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec6c4ad0bb2ddc2c1cfbaa52cf8fb24a90=[2229329,2229333,2019380,2229337]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 11 May 2024 01:05:28 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 57e1710db7c30dd0c13b74e3a68caca3
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| vsa113.tawk.to/s/?k=663ec458ee771623a2b79ae5&cver=0&pop=false&asver=215&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2MTUxOTExNmQzMjY3MTdjYjY4MzdmMjUiLCJ2aWQiOiI2MTUxOTExNmQzMjY3MTdjYjY4MzdmMjUtTkhjaXVWMGlQdWxMMVRJVHdSR1RoIiwic2lkIjoiNjYzZWM0NThlZTc3MTYyM2EyYjc5YWU1IiwiaWF0IjoxNzE1Mzg5NTI4LCJleHAiOjE3MTUzOTEzMjgsImp0aSI6InNPQVZtREpmRm5JYVRPM2lwRmFRWSJ9.Ba_A-iPE3rgcc0byB3Bf-pJg5wg64y-dpdikgiJge6e6D-OvwQvuawlT7fwe_qI0eq22jf1ewcYAhaQoJIlLAw&EIO=3&transport=websocket&__t=OzbBlhh | 104.22.25.131 | | 0 B |
URL vsa113.tawk.to/s/?k=663ec458ee771623a2b79ae5&cver=0&pop=false&asver=215&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2MTUxOTExNmQzMjY3MTdjYjY4MzdmMjUiLCJ2aWQiOiI2MTUxOTExNmQzMjY3MTdjYjY4MzdmMjUtTkhjaXVWMGlQdWxMMVRJVHdSR1RoIiwic2lkIjoiNjYzZWM0NThlZTc3MTYyM2EyYjc5YWU1IiwiaWF0IjoxNzE1Mzg5NTI4LCJleHAiOjE3MTUzOTEzMjgsImp0aSI6InNPQVZtREpmRm5JYVRPM2lwRmFRWSJ9.Ba_A-iPE3rgcc0byB3Bf-pJg5wg64y-dpdikgiJge6e6D-OvwQvuawlT7fwe_qI0eq22jf1ewcYAhaQoJIlLAw&EIO=3&transport=websocket&__t=OzbBlhh IP104.22.25.131:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/?k=663ec458ee771623a2b79ae5&cver=0&pop=false&asver=215&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2MTUxOTExNmQzMjY3MTdjYjY4MzdmMjUiLCJ2aWQiOiI2MTUxOTExNmQzMjY3MTdjYjY4MzdmMjUtTkhjaXVWMGlQdWxMMVRJVHdSR1RoIiwic2lkIjoiNjYzZWM0NThlZTc3MTYyM2EyYjc5YWU1IiwiaWF0IjoxNzE1Mzg5NTI4LCJleHAiOjE3MTUzOTEzMjgsImp0aSI6InNPQVZtREpmRm5JYVRPM2lwRmFRWSJ9.Ba_A-iPE3rgcc0byB3Bf-pJg5wg64y-dpdikgiJge6e6D-OvwQvuawlT7fwe_qI0eq22jf1ewcYAhaQoJIlLAw&EIO=3&transport=websocket&__t=OzbBlhh HTTP/1.1
Host: vsa113.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://zeroupload.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: xwDrJcs7gQWTDoR3AgBgmA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sat, 11 May 2024 01:05:29 GMT
Connection: upgrade
upgrade: websocket
sec-websocket-accept: FXSTAezIsBrZjBJuyt/Oxa8KHHY=
sec-websocket-extensions: permessage-deflate
strict-transport-security: max-age=0; includeSubDomains; preload
CF-Cache-Status: DYNAMIC
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 881e42cb8f38569a-OSL
alt-svc: h3=":443"; ma=86400
|
|
| embed.tawk.to/_s/v4/app/6625f366c87/languages/en.js | 172.67.38.66 | 200 OK | 15 kB |
URL GET HTTP/3embed.tawk.to/_s/v4/app/6625f366c87/languages/en.js IP172.67.38.66:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
File typeJavaScript source, ASCII text, with CRLF, LF line terminators Hash7f37a030886ec7fce1d065ec482789ee 661ad608ac1513e2ccdec4cd55eb552a8604c8f6 75b20e74e3effa00e4b62b9da6df7d7542d91cb4b50078b8365112d556a73a7e
GET /_s/v4/app/6625f366c87/languages/en.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 11 May 2024 01:05:28 GMT
content-type: application/javascript
last-modified: Mon, 22 Apr 2024 05:20:13 GMT
etag: W/"7f37a030886ec7fce1d065ec482789ee"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 895654
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881e42caceca7130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-9294da6c.js | 172.67.38.66 | 200 OK | 13 kB |
URL GET HTTP/3embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-9294da6c.js IP172.67.38.66:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
File typeJavaScript source, ASCII text, with very long lines (18229), with no line terminators Hash6bf62c737dec7d16542425992be5986c 7f5ec461a46e4526fcf8ed0a24f758bd0168e5b0 2deaae9c5e06df6c98b9775e2a5fbb66eab1a591458f9d1982e8f0e350fdb59e
GET /_s/v4/app/6625f366c87/js/twk-chunk-9294da6c.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 11 May 2024 01:05:28 GMT
content-type: application/javascript
last-modified: Mon, 22 Apr 2024 05:20:13 GMT
etag: W/"6bf62c737dec7d16542425992be5986c"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 895662
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881e42cb1ef47130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| zeroupload.com/themes/spirit/assets/frontend/js/countdown.min.js | 188.114.96.1 | 200 OK | 5.3 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/js/countdown.min.js IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typeJavaScript source, ASCII text, with very long lines (5465), with no line terminators Hash0b3c9d3b99e7706b9c4bfe81939d5bb9 88d1fe7e60e7abeeeb7a05c362e23404a94f5e68 661e2d380688330acf43647d2eebca43fc0a2b246259352a04edfd7ff44fd0f4
GET /themes/spirit/assets/frontend/js/countdown.min.js HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: application/javascript
last-modified: Mon, 28 Sep 2020 14:26:40 GMT
vary: Accept-Encoding
etag: W/"5f71f2a0-14db"
expires: Sat, 11 May 2024 09:06:32 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D0lL6ckSr%2FCDpom%2BPZDN9vULcCmk0L1WbTXpSp3TJo35b8akrSpxI6NIn%2FrtBgWNrdWsh3X0LbBIKqhPTqJaDZpE5P%2FL6PGF4eOtSxT32stP0DeZluygDQbRbutU843P9g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e42bf1acc56bb-OSL
X-Firefox-Spdy: h2
|
|
| va.tawk.to/v1/session/start | 172.67.38.66 | 200 OK | 0 B |
URL OPTIONS HTTP/3va.tawk.to/v1/session/start IP172.67.38.66:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/session/start HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://zeroupload.com/
Origin: https://zeroupload.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 11 May 2024 01:05:28 GMT
content-type: text/html; charset=utf-8
x-served-by: visitor-application-preemptive-4mcr
access-control-allow-origin: https://zeroupload.com
access-control-allow-credentials: true
access-control-max-age: 3600
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
cache-control: public, s-maxage=600, max-age=600
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881e42c72a44568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-2c776523.js | 172.67.38.66 | 200 OK | 9.9 kB |
URL GET HTTP/3embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-2c776523.js IP172.67.38.66:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
File typeJavaScript source, ASCII text, with very long lines (10730), with no line terminators Hash2ed46b3171b0456fda29f3bfda5f846e 0c4834c6f96e8640bcdd46c48396a1f1f7d287b2 0c9f49f27e34e05a7e4159648875b32880d3d986ee2d70d78d6138df5e9f1654
GET /_s/v4/app/6625f366c87/js/twk-chunk-2c776523.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 11 May 2024 01:05:28 GMT
content-type: application/javascript
last-modified: Mon, 22 Apr 2024 05:20:13 GMT
etag: W/"70aec2dd89cac4933594c25b71d61f46"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 895662
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881e42cb0eeb7130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| zeroupload.com/themes/spirit/assets/frontend/js/cookiealert.js | 188.114.96.1 | 200 OK | 1.8 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/js/cookiealert.js IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typeJavaScript source, ASCII text, with very long lines (1980), with no line terminators Hasha7a5edf0cc046521aa5bfbd295e0d038 14460f98c691620a2be6f50aa49fc7cb566e010d 66a9c0c6221ba721e95d2ad4aaf643858a4e86f66c8f00e25c37a017367d33d7
GET /themes/spirit/assets/frontend/js/cookiealert.js HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: application/javascript
last-modified: Mon, 28 Sep 2020 14:26:40 GMT
vary: Accept-Encoding
etag: W/"5f71f2a0-72c"
expires: Sat, 11 May 2024 10:22:23 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TMxuT4CRUONFjO133yRxampJpH5gq3nlEapQQ%2BT%2F7TDbaMphUmDlz2ffC%2BYvbMKgPAjN5IodawYtP7A%2Be7N0buyPQpYTG6o4T7H4evyF490Ar27hpCFDu8UxjVNvk0c6NQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e42bf2ad256bb-OSL
X-Firefox-Spdy: h2
|
|
| embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-f1565420.js | 172.67.38.66 | 200 OK | 11 kB |
URL GET HTTP/3embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-f1565420.js IP172.67.38.66:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
File typeJavaScript source, ASCII text, with very long lines (11139), with no line terminators Hash2c0a34eb401cadf7cbff6278fee2648e dbe67f8390375e1c733d456b2f99573ef65557a0 46c6d4802a043d5e6e655091ecbb961110943825f54f74f5364ad786a234976e
GET /_s/v4/app/6625f366c87/js/twk-chunk-f1565420.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 11 May 2024 01:05:28 GMT
content-type: application/javascript
last-modified: Mon, 22 Apr 2024 05:20:13 GMT
etag: W/"2c0a34eb401cadf7cbff6278fee2648e"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 891513
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881e42cb1ef57130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| va.tawk.to/v1/widget-settings?propertyId=61519116d326717cb6837f25&widgetId=1fgj9tggh&sv=null | 172.67.38.66 | 200 OK | 3.2 kB |
URL GET HTTP/3va.tawk.to/v1/widget-settings?propertyId=61519116d326717cb6837f25&widgetId=1fgj9tggh&sv=null IP172.67.38.66:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
File typetroff or preprocessor input, Unicode text, UTF-8 text, with very long lines (3659), with no line terminators Hash727e0c5aab60c20dc5c153cdd1816472 a3403f443a498a2720ae49fe3f59512844c79685 9decd9aad80271078a86b035e1db0fc95b0e22c77bf3b78febf7a7bba98e1bcc
GET /v1/widget-settings?propertyId=61519116d326717cb6837f25&widgetId=1fgj9tggh&sv=null HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zeroupload.com/
Origin: https://zeroupload.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 11 May 2024 01:05:28 GMT
content-type: application/json
x-served-by: visitor-application-preemptive-brgc
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-methods: GET,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
cache-control: public, max-age=7200, s-maxage=1800
etag: W/"2-89-0"
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: REVALIDATED
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881e42c72a43568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.cloudimagesb.com/cti/f7/13/0e/f7130e7f47db248dc886c97a1e4c3e2b/1588233482.jpg | 45.133.44.9 | 200 OK | 32 kB |
URL GET HTTP/2cdn.cloudimagesb.com/cti/f7/13/0e/f7130e7f47db248dc886c97a1e4c3e2b/1588233482.jpg IP45.133.44.9:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 321x240, components 3 Hash3528385dd0c31dbd2e5bfc4af7a6bec5 832c580ffd7711115d6c036ab4232f5bd88480a4 bfbfeebfcb679ca578055235614cc679b0757bad272996ef89b7fd5615a2db75
GET /cti/f7/13/0e/f7130e7f47db248dc886c97a1e4c3e2b/1588233482.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:28 GMT
content-type: image/jpeg
content-length: 32471
server: nginx/1.21.6
last-modified: Thu, 30 Apr 2020 07:58:05 GMT
etag: "5eaa850d-7ed7"
expires: Mon, 13 May 2024 01:05:28 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-4fe9d5dd.js | 172.67.38.66 | 200 OK | 906 B |
URL GET HTTP/3embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-4fe9d5dd.js IP172.67.38.66:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
File typeJavaScript source, ASCII text, with very long lines (956), with no line terminators Hash7b31fafdf609238b7f4574e44057af5b f4f849145e5beaff38b9e47e3c5c3e7e4945d70a 2b7dfb20a5ee49b709a4adc3412bd7d5e00539c1ef93a1a58c4ec58816c81ed3
GET /_s/v4/app/6625f366c87/js/twk-chunk-4fe9d5dd.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 11 May 2024 01:05:28 GMT
content-type: application/javascript
last-modified: Mon, 22 Apr 2024 05:20:13 GMT
etag: W/"1c5ecf371149feca23bd895ba9dfec4d"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: MISS
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 895662
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881e42cb1efd7130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| zeroupload.com/themes/spirit/assets/frontend/css/lightbox.min.css | 188.114.96.1 | 200 OK | 3.7 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/css/lightbox.min.css IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typeASCII text, with very long lines (3904), with no line terminators Hasha044c6d12a2d98da59db254ea59d9187 06303801ae397bc99fffb22c7cc30c3cb261cfd7 93f75670fe9270ca31d922b33bb13fa52c8dd89835e63c6cc92f2fe57e8d1456
GET /themes/spirit/assets/frontend/css/lightbox.min.css HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: text/css
last-modified: Mon, 28 Sep 2020 14:26:46 GMT
vary: Accept-Encoding
etag: W/"5f71f2a6-e54"
expires: Fri, 10 May 2024 21:40:44 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
age: 38078
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WLHLZsvlGdQNntmHlxZCo0YaywZeVh9Pdrln%2Ff1O3tBOuW0IkYmaFDHnXF4o4kJGBCOnbsdrE%2B3DuwMW78mMPXMfSvbtAGaQCluQzAdkosC%2BIxCq%2Bvc%2FMNhfLXRodU6RRA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e42bf0ab356bb-OSL
X-Firefox-Spdy: h2
|
|
| embed.tawk.to/_s/v4/app/6625f366c87/js/twk-app.js | 172.67.38.66 | 200 OK | 151 B |
URL GET HTTP/3embed.tawk.to/_s/v4/app/6625f366c87/js/twk-app.js IP172.67.38.66:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
File typeASCII text, with no line terminators Hash04a9862af6efaf787bc8fb8e99ba6987 a57bb8f258eb1a60dc3b288a608ad8ef9fbecef3 ecc74c329a700e3e6ca29aed5ffe3c166cf39670c8b11573fa7f837f79a71b5c
GET /_s/v4/app/6625f366c87/js/twk-app.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zeroupload.com
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 11 May 2024 01:05:27 GMT
content-type: application/javascript
last-modified: Mon, 22 Apr 2024 05:20:13 GMT
etag: W/"e736e189edb5d0d9d5b8e7f23dd9114a"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 889319
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881e42c5b992568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| embed.tawk.to/_s/v4/assets/images/attention-grabbers/168-r-bl.svg | 172.67.38.66 | 200 OK | 22 kB |
URL GET HTTP/3embed.tawk.to/_s/v4/assets/images/attention-grabbers/168-r-bl.svg IP172.67.38.66:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
File typeSVG Scalable Vector Graphics image Hashe7dadf91b87b093849cabb4f8d0a8aae 63604e0802a276572c3dbf3ce98d6da50e052c2b 76482d75d0e6c8d833e4afa1b0764afded6effc64bb1c6856492676fce963e37
GET /_s/v4/assets/images/attention-grabbers/168-r-bl.svg HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 11 May 2024 01:05:28 GMT
content-type: image/svg+xml
last-modified: Sat, 22 May 2021 07:25:19 GMT
etag: W/"e7dadf91b87b093849cabb4f8d0a8aae"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: MISS
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 887011
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881e42cbff7b7130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| va.tawk.to/v1/session/start | 172.67.38.66 | 200 OK | 1.0 kB |
URL POST HTTP/3va.tawk.to/v1/session/start IP172.67.38.66:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (1114), with no line terminators Hashcd31e79b7daad3f96236737477cde616 60124195175543ee490ecef9b40a072a8ed28c23 e961da038d147e5f2accd42645bce9958aeff800cb7cf29c77f520aff92bf33c
POST /v1/session/start HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zeroupload.com/
Content-Type: application/json; charset=utf-8
Content-Length: 227
Origin: https://zeroupload.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 11 May 2024 01:05:28 GMT
content-type: application/json
x-served-by: visitor-application-preemptive-kss6
access-control-allow-origin: https://zeroupload.com
access-control-allow-credentials: true
access-control-max-age: 3600
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881e42c82d497130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-24d8db78.js | 172.67.38.66 | 200 OK | 113 kB |
URL GET HTTP/3embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-24d8db78.js IP172.67.38.66:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
File typeJavaScript source, ASCII text, with very long lines (65464) Size113 kB (113121 bytes) Hash44934d48f839e3143311bc044e6e0d89 a96c3d95be19a80330977acead67fd9b92ac6e4b 500d20e95a2ed662891673d812fe9a71e2e2c31b170bcd331c33b97114879fa6
GET /_s/v4/app/6625f366c87/js/twk-chunk-24d8db78.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 11 May 2024 01:05:28 GMT
content-type: application/javascript
last-modified: Mon, 22 Apr 2024 05:20:13 GMT
etag: W/"44934d48f839e3143311bc044e6e0d89"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: STALE
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 891534
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881e42cb2f067130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| vsa113.tawk.to/s/?k=663ec458ee771623a2b79ae5&cver=0&pop=false&asver=215&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2MTUxOTExNmQzMjY3MTdjYjY4MzdmMjUiLCJ2aWQiOiI2MTUxOTExNmQzMjY3MTdjYjY4MzdmMjUtTkhjaXVWMGlQdWxMMVRJVHdSR1RoIiwic2lkIjoiNjYzZWM0NThlZTc3MTYyM2EyYjc5YWU1IiwiaWF0IjoxNzE1Mzg5NTI4LCJleHAiOjE3MTUzOTEzMjgsImp0aSI6InNPQVZtREpmRm5JYVRPM2lwRmFRWSJ9.Ba_A-iPE3rgcc0byB3Bf-pJg5wg64y-dpdikgiJge6e6D-OvwQvuawlT7fwe_qI0eq22jf1ewcYAhaQoJIlLAw&EIO=3&transport=websocket&__t=OzbBlhh | 104.22.25.131 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1vsa113.tawk.to/s/?k=663ec458ee771623a2b79ae5&cver=0&pop=false&asver=215&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2MTUxOTExNmQzMjY3MTdjYjY4MzdmMjUiLCJ2aWQiOiI2MTUxOTExNmQzMjY3MTdjYjY4MzdmMjUtTkhjaXVWMGlQdWxMMVRJVHdSR1RoIiwic2lkIjoiNjYzZWM0NThlZTc3MTYyM2EyYjc5YWU1IiwiaWF0IjoxNzE1Mzg5NTI4LCJleHAiOjE3MTUzOTEzMjgsImp0aSI6InNPQVZtREpmRm5JYVRPM2lwRmFRWSJ9.Ba_A-iPE3rgcc0byB3Bf-pJg5wg64y-dpdikgiJge6e6D-OvwQvuawlT7fwe_qI0eq22jf1ewcYAhaQoJIlLAw&EIO=3&transport=websocket&__t=OzbBlhh IP104.22.25.131:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/?k=663ec458ee771623a2b79ae5&cver=0&pop=false&asver=215&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2MTUxOTExNmQzMjY3MTdjYjY4MzdmMjUiLCJ2aWQiOiI2MTUxOTExNmQzMjY3MTdjYjY4MzdmMjUtTkhjaXVWMGlQdWxMMVRJVHdSR1RoIiwic2lkIjoiNjYzZWM0NThlZTc3MTYyM2EyYjc5YWU1IiwiaWF0IjoxNzE1Mzg5NTI4LCJleHAiOjE3MTUzOTEzMjgsImp0aSI6InNPQVZtREpmRm5JYVRPM2lwRmFRWSJ9.Ba_A-iPE3rgcc0byB3Bf-pJg5wg64y-dpdikgiJge6e6D-OvwQvuawlT7fwe_qI0eq22jf1ewcYAhaQoJIlLAw&EIO=3&transport=websocket&__t=OzbBlhh HTTP/1.1
Host: vsa113.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://zeroupload.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: xwDrJcs7gQWTDoR3AgBgmA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sat, 11 May 2024 01:05:29 GMT
Connection: upgrade
upgrade: websocket
sec-websocket-accept: FXSTAezIsBrZjBJuyt/Oxa8KHHY=
sec-websocket-extensions: permessage-deflate
strict-transport-security: max-age=0; includeSubDomains; preload
CF-Cache-Status: DYNAMIC
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 881e42cb8f38569a-OSL
alt-svc: h3=":443"; ma=86400
|
|
| va.tawk.to/log-performance/v3 | 172.67.38.66 | 200 OK | 5 B |
URL POST HTTP/3va.tawk.to/log-performance/v3 IP172.67.38.66:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
File typeASCII text, with no line terminators Hash38a8a3e3b4b6a6e4f295b2e0f899b1f0 474f5fac3d23afbaf16c5a31c98dfcd956e4c186 7652c7891ed06bce4174ab00a6ee9721daf6a4286929213ecb7daf42cd866615
POST /log-performance/v3 HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zeroupload.com/
Content-Type: application/json; charset=utf-8
Content-Length: 94
Origin: https://zeroupload.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 11 May 2024 01:05:29 GMT
content-type: text/html; charset=utf-8
x-served-by: visitor-application-preemptive-ll8d
access-control-allow-origin: https://zeroupload.com
access-control-allow-credentials: true
access-control-max-age: 3600
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881e42d03a3d7130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-2d0b9454.js | 172.67.38.66 | 200 OK | 535 B |
URL GET HTTP/3embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-2d0b9454.js IP172.67.38.66:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
File typeJavaScript source, ASCII text, with very long lines (557), with no line terminators Hash3f4a6312d60391bda06462d7321ffcdc 9f09295297840a36d2ac95344b39b0af1a729f82 28d61df22c079e51c45b6f87db516f03cb85cf3f2c3a970be369944c3f91bcf1
GET /_s/v4/app/6625f366c87/js/twk-chunk-2d0b9454.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 11 May 2024 01:05:28 GMT
content-type: application/javascript
last-modified: Mon, 22 Apr 2024 05:20:13 GMT
etag: W/"c506281367048d4a134c9affbc68c8c6"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 887235
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881e42cb2f017130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| embed.tawk.to/_s/v4/app/6625f366c87/css/min-widget.css | 172.67.38.66 | 200 OK | 25 kB |
URL GET HTTP/3embed.tawk.to/_s/v4/app/6625f366c87/css/min-widget.css IP172.67.38.66:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
File typeASCII text, with very long lines (24751), with no line terminators Hashd4f9ad34fae3ba64cbc48057dc47e968 f8d0d55dc6e9b5d53f74b0b8bfc5e2edbdb0618d 2b5b9f68ace12b789b1371204754547021dcbf3e9df630e7e22b49ee56e05b8c
GET /_s/v4/app/6625f366c87/css/min-widget.css HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 11 May 2024 01:05:28 GMT
content-type: text/css
cache-control: public, max-age=2592000, immutable
cf-bgj: minify
cf-polished: origSize=24831
access-control-allow-origin: *
etag: W/"5742a34aaab2a5983c7c11cdeef1c0ee"
last-modified: Mon, 22 Apr 2024 05:20:12 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
x-cache-status: HIT
cf-cache-status: HIT
age: 891530
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881e42cbaf4b7130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| embed.tawk.to/_s/v4/app/6625f366c87/css/max-widget.css | 172.67.38.66 | 200 OK | 78 kB |
URL GET HTTP/3embed.tawk.to/_s/v4/app/6625f366c87/css/max-widget.css IP172.67.38.66:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashaa429d098305efeb3d236b3872f2da79 e0d6e416eb7c1c8f10ec76f835eda23d5c1d0ab0 5285275760ce24f97fc85a2aa7a705e2bfcdebe875a6028441382d2ca36b3f1c
GET /_s/v4/app/6625f366c87/css/max-widget.css HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 11 May 2024 01:05:28 GMT
content-type: text/css
cache-control: public, max-age=2592000, immutable
cf-bgj: minify
cf-polished: origSize=78232
access-control-allow-origin: *
etag: W/"05d886069cda40a8e20243d226b04764"
last-modified: Mon, 22 Apr 2024 05:20:12 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
x-cache-status: STALE
cf-cache-status: HIT
age: 881605
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881e42cbff757130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| zeroupload.com/themes/spirit/assets/frontend/css/iconsmind.css | 188.114.96.1 | 200 OK | 96 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/css/iconsmind.css IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
Hash39aa385af1cfd640bac73a09de3ac9fe 6d17dff21d04138cd8ab3ef9dfe1eae79994834c 0909de268b3276cb7464acb2f86701f62974a893dd374312908a3f8efc363438
GET /themes/spirit/assets/frontend/css/iconsmind.css HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: text/css
last-modified: Mon, 28 Sep 2020 14:26:44 GMT
vary: Accept-Encoding
etag: W/"5f71f2a4-178bf"
expires: Sat, 11 May 2024 09:38:44 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rOq6Ghg2KoB5f9Fs6SS4r%2BtnDGj7I3ky5m0J%2Bt167T065Dr8kWNKcDEBMg1TsdKIexe5c0ZOxzJaAI5WJ5UvKqn6UTD0ybzgU%2B8zq%2F38SWX0Vn0sybprRt%2BIj24UMkf%2BjQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e42bf0ab556bb-OSL
X-Firefox-Spdy: h2
|
|
| cdn.cloudimagesb.com/cti/d7/14/ea/d714ea0356c58a2679ce4074962c0e16/1588233398.jpeg | 45.133.44.9 | 200 OK | 23 kB |
URL GET HTTP/2cdn.cloudimagesb.com/cti/d7/14/ea/d714ea0356c58a2679ce4074962c0e16/1588233398.jpeg IP45.133.44.9:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3 Hash9a2dc4fe2ebb70df2dfb1566d22970b8 b85a5f4ef7bd68b834d03d8b9a552e2e546e8701 1983c705f5f4315c8cd002183eb9ed3c846abed8fc2a6f0a073185c249552efd
GET /cti/d7/14/ea/d714ea0356c58a2679ce4074962c0e16/1588233398.jpeg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:28 GMT
content-type: image/jpeg
content-length: 22757
server: nginx/1.21.6
last-modified: Thu, 30 Apr 2020 07:56:41 GMT
etag: "5eaa84b9-58e5"
expires: Mon, 13 May 2024 01:05:28 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2 | 142.250.74.67 | 200 OK | 19 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2 IP142.250.74.67:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 19280, version 1.0 Hash386fb59be54b2d819064af98e57cc226 9e2d14d736be97ec84bfca3513558450cd6e3249 b4855cc8ec721cbaf27f3c907345e101b1524858221c14faa79df34cb2f84991
GET /s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://zeroupload.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19280
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 10 May 2024 02:32:47 GMT
expires: Sat, 10 May 2025 02:32:47 GMT
cache-control: public, max-age=31536000
age: 81160
last-modified: Thu, 14 Dec 2023 02:02:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| embed.tawk.to/_s/v4/app/6625f366c87/js/twk-main.js | 172.67.38.66 | 200 OK | 121 B |
URL GET HTTP/2embed.tawk.to/_s/v4/app/6625f366c87/js/twk-main.js IP172.67.38.66:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
File typeASCII text, with no line terminators Hash3b41342f7e3be590563e8e3b5ff770c7 c9ca54d23ea78b320f080b76e22bb6b4e704d55f ef04d89daeed55613a63a4af62c147ce86e4a7f22c8ce700dd6bdb11ab187e43
GET /_s/v4/app/6625f366c87/js/twk-main.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zeroupload.com
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:27 GMT
content-type: application/javascript
last-modified: Mon, 22 Apr 2024 05:20:13 GMT
etag: W/"da5bb1dc647470204df0e49f5afac2de"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 889319
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881e42c598a4569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zeroupload.com/themes/spirit/assets/frontend/img/favicon/favicon-16x16.png | 188.114.96.1 | 200 OK | 447 B |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/img/favicon/favicon-16x16.png IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced Hashf3d5da06fe8d5a2425d5d229285e5eea 01032b864f3c74bbf44771e2ba41eeb2251fad90 d11d596429d3543bfb07191a87a67a8c22e198113c6f3a109158a5a85bf82f26
GET /themes/spirit/assets/frontend/img/favicon/favicon-16x16.png HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30; _ga_QDB60Q47TN=GS1.1.1715389527.1.0.1715389527.0.0.0; _ga=GA1.1.367768750.1715389527; dom3ic8zudi28v8lr6fgphwffqoz0j6c=4d693bce-1a11-4f90-8c2b-433d05fb912e%3A2%3A1; TawkConnectionTime=1715389528087; twk_idm_key=dUHzl6PsBTyX2oQzQ59QH
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:28 GMT
content-type: image/png
content-length: 447
last-modified: Mon, 28 Sep 2020 14:26:40 GMT
etag: "5f71f2a0-1bf"
expires: Sat, 04 May 2024 21:34:25 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 883305
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bNGOqgFEcLnTCbwuNLrzBRaMYyjoyfK9JFbHn9OzEnXOC%2FnSb2HgPm7ilxx5TSMFhXiybbKfmkoSGL5faD9ZMma5Db1ai1ne51d8T6Dkr9j3RL9m6rMKK7CPsx4hI%2FmImg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881e42c6bdbf56bb-OSL
X-Firefox-Spdy: h2
|
|
| embed.tawk.to/_s/v4/app/6625f366c87/css/bubble-widget.css | 172.67.38.66 | 200 OK | 14 kB |
URL GET HTTP/3embed.tawk.to/_s/v4/app/6625f366c87/css/bubble-widget.css IP172.67.38.66:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
File typeASCII text, with very long lines (13521), with no line terminators Hash950518e32fd92957181f766f08d3cf98 9fe20c86b818d3576e9d70e6ed091964cb8b7427 2f56f47d64037d5aa3a96b50c840580e5549fee6f9fafff8af3d1821d189fa5c
GET /_s/v4/app/6625f366c87/css/bubble-widget.css HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 11 May 2024 01:05:28 GMT
content-type: text/css
cache-control: public, max-age=2592000, immutable
cf-bgj: minify
cf-polished: origSize=13594
access-control-allow-origin: *
etag: W/"ce7913b80c763449b3895d46419f7a6b"
last-modified: Mon, 22 Apr 2024 05:20:12 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
x-cache-status: HIT
cf-cache-status: HIT
age: 891512
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881e42cbaf547130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-vendors.js | 172.67.38.66 | 200 OK | 217 kB |
URL GET HTTP/2embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-vendors.js IP172.67.38.66:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
Size217 kB (217197 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_s/v4/app/6625f366c87/js/twk-chunk-vendors.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zeroupload.com
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:27 GMT
content-type: application/javascript
last-modified: Mon, 22 Apr 2024 05:20:13 GMT
etag: W/"1c73b4eb89bbe24ecf154b671ddbcafc"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 889319
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881e42c5a8ab569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| va.tawk.to/log-performance/v3 | 172.67.38.66 | 200 OK | 0 B |
URL OPTIONS HTTP/3va.tawk.to/log-performance/v3 IP172.67.38.66:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log-performance/v3 HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://zeroupload.com/
Origin: https://zeroupload.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 11 May 2024 01:05:29 GMT
content-type: text/html; charset=utf-8
x-served-by: visitor-application-preemptive-ll8d
access-control-allow-origin: https://zeroupload.com
access-control-allow-credentials: true
access-control-max-age: 3600
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
cache-control: public, s-maxage=600, max-age=600
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881e42cf49657130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip | 188.114.96.1 | 200 OK | 23 kB |
URL User Request GET HTTP/2zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typeHTML document, ASCII text, with very long lines (431), with CRLF, LF line terminators Hash677faccea750e1124e5fd7c081e3b6d8 9745c64a25f1ac4082f2cf58e684cb3551e3423b cd0fe844a695a19d54b01fbc9aa98c93930a42f4ba1a51485f9a1f6ef8467daa
GET /610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, no-cache
pragma: no-cache
strict-transport-security: max-age=31536000
cf-cache-status: BYPASS
set-cookie: filehosting=q0ggta2k78sftnml5gghpd4u30; expires=Sun, 12-May-2024 01:05:26 GMT; Max-Age=86400; path=/
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GTXgD%2BwPVkEP3IQ6%2BBbsykbHqEZX2JmaFHsULnoHzHB3hbvUHRad6M5Hlbt6Ew2KeTNpEepULs%2FnzhRiSrgWB%2FJxCUO%2FtY%2FT1RgMjPRKaPmhafU5EpPxLM4X7MReqxA%2Feg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e42bd39c756bb-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| zeroupload.com/themes/spirit/assets/frontend/js/jquery.dataTables.min.js | 188.114.96.1 | 200 OK | 70 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/js/jquery.dataTables.min.js IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typeJavaScript source, ASCII text, with very long lines (768) Hash737f853e9fd6a31d62f5028e88663c9f cf144f2ab49f53a69fbfe10d3588fc23437d2736 6c3ca64b7acfdd29b3ca6f1b9b46696369abd462d4546182085c347f72211841
GET /themes/spirit/assets/frontend/js/jquery.dataTables.min.js HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: application/javascript
last-modified: Mon, 28 Sep 2020 14:26:40 GMT
vary: Accept-Encoding
etag: W/"5f71f2a0-10fe4"
expires: Sat, 11 May 2024 09:53:00 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ylqNIeck0qIMvsF0MzJ%2B5AzPbaX9HfLvgWwMB%2B5QS4oN%2BxCzb3jCsG0eAmNd3lQHdyFi%2FGLREwwhrurDm2b%2B%2BwrBTVnRsolMCUe0l0cimUI%2FuscdQwcAPidLSA57Z8Ek0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e42bf1ac456bb-OSL
X-Firefox-Spdy: h2
|
|
| zeroupload.com/themes/spirit/assets/frontend/js/jquery.steps.min.js | 188.114.96.1 | 200 OK | 14 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/js/jquery.steps.min.js IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typeJavaScript source, ASCII text, with very long lines (13686) Hash4c5e9f4e84d32b7df69af7420b355e03 14e1e287ec98e8cc0a992ee996783b0c42f9ec0f c9459a9e11e4c63fb7a30d2a644e80b733fc9599302ef3da8142cbe8f9d9333d
GET /themes/spirit/assets/frontend/js/jquery.steps.min.js HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: application/javascript
last-modified: Mon, 28 Sep 2020 14:26:40 GMT
vary: Accept-Encoding
etag: W/"5f71f2a0-3621"
expires: Sat, 11 May 2024 09:42:10 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J9QfZXq5nogXLCkqaU7UMmEJvriS2Yr7Er6133D0mz%2FbuUwySsalumevILkZ76j7bAn8zgeZnF%2BocOjMWPNkbXIRCsBbRvJrHotk%2B0PYPOlIrbGdJ7ni0DbH8%2BrT4ioRDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e42bf1acb56bb-OSL
X-Firefox-Spdy: h2
|
|
| zeroupload.com/themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631 | 188.114.96.1 | 200 OK | 4.3 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631 IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 4292, version 1.0 Hashae072782b361d2afdbf43db08d3cfb73 f3db2e65b53d97491672f8631e21d6d05905cc88 31205df908aed9881f6d2d3ae7d38975252bf99e38268978b4236dc3c314754b
GET /themes/spirit/assets/frontend/fonts/stack-interface.woff2?33839631 HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/themes/spirit/assets/frontend/css/stack-interface.css
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:27 GMT
content-type: font/woff2
content-length: 4292
last-modified: Mon, 28 Sep 2020 14:26:44 GMT
etag: "5f71f2a4-10c4"
strict-transport-security: max-age=31536000
cache-control: max-age=31536000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gii6yXfVam6A0ZTngdTkAf%2BiRCbOYIfIgQeCGugP2DNpZHr3wlDJ3ADseNW3AB8fKdKQFN5LJQnDVXVAcptMr0dvn0rMGJg4jAy4FEjZJ1tqeMrKi8D3Q3v3%2Fr4vq4KFqQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881e42c12b7a56bb-OSL
X-Firefox-Spdy: h2
|
|
| embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-2d0b383d.js | 172.67.38.66 | 200 OK | 699 B |
URL GET HTTP/3embed.tawk.to/_s/v4/app/6625f366c87/js/twk-chunk-2d0b383d.js IP172.67.38.66:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
File typeJavaScript source, ASCII text, with very long lines (725), with no line terminators Hash7c2c957f3cf80dadfd0cbb7c677a0869 30e8962bf64cc7349c9e61b40b8bab5aa598c63c 606127d882e34faee4895ad2cbf8a94d805fac37792c2cc2b9bc05ca3de743b1
GET /_s/v4/app/6625f366c87/js/twk-chunk-2d0b383d.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 11 May 2024 01:05:28 GMT
content-type: application/javascript
last-modified: Mon, 22 Apr 2024 05:20:13 GMT
etag: W/"838903127a65ec440893b4945c40ca4a"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 895662
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881e42cb2f027130-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| zeroupload.com/themes/spirit/assets/frontend/css/socicon.css | 188.114.96.1 | 200 OK | 9.3 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/css/socicon.css IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typeASCII text, with very long lines (10370), with no line terminators Hash86a26b35f2330e90bfcb2bba6058ea58 31d34471b40987d342c84e76f78ce94a0d30a0bc f2595c38918613786bd5ebb407960a91ff3ae7f422f239942489e98f2bbe90e8
GET /themes/spirit/assets/frontend/css/socicon.css HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:26 GMT
content-type: text/css
last-modified: Mon, 28 Sep 2020 14:26:44 GMT
vary: Accept-Encoding
etag: W/"5f71f2a4-2443"
expires: Sat, 11 May 2024 10:32:47 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=47dIrp4BDqsQUEf%2BUImSDqtgJlmyu9%2BdkjNQL37DQDSHn7TcMphYSxsXFIpDU9QPZPvsBEcdwVfh%2BjeNIQnHdb%2BkperWKTIRN5gWAqDDsyLMjF%2BoUS%2B9oCZ8Y%2BzrY%2FUfOQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e42befab256bb-OSL
X-Firefox-Spdy: h2
|
|
| zeroupload.com/themes/spirit/assets/frontend/js/scripts.js | 188.114.96.1 | 200 OK | 112 kB |
URL GET HTTP/2zeroupload.com/themes/spirit/assets/frontend/js/scripts.js IP188.114.96.1:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjectzeroupload.com FingerprintA6:34:A9:BC:46:8F:F2:E2:71:80:12:4F:9A:53:46:D2:4E:B9:2C:E5 ValidityTue, 02 Apr 2024 04:37:15 GMT - Mon, 01 Jul 2024 04:37:14 GMT
File typeJavaScript source, ASCII text, with very long lines (914) Size112 kB (111905 bytes) Hashccd6c308b2b8e36ae154d7bacea4240d f7d2f7195150771246dd599dbb4ff3bc2f0f2179 fc2a8bf60f1e7577697c0b457c01aeeecfd2b18ea68c93e2d374bf6d95fbe7a0
GET /themes/spirit/assets/frontend/js/scripts.js HTTP/1.1
Host: zeroupload.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip
Cookie: filehosting=q0ggta2k78sftnml5gghpd4u30
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:27 GMT
content-type: application/javascript
last-modified: Wed, 14 Oct 2020 16:17:02 GMT
vary: Accept-Encoding
etag: W/"5f87247e-1b521"
expires: Sat, 11 May 2024 09:38:45 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=31536000
content-encoding: gzip
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wjQ0m1cwoq%2FQCQBSYpanF8gxqmt4TM1RuAXtWVFYCPki7E%2FnsHMeBcD%2BOklOib8E3TxwyXtW6%2BVjEF5xzgn%2BpbdZ6MEhIw6ONqjnHT%2BzKPf7CA5uSffrGUU2OKaZpXBrKg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881e42bf2ad156bb-OSL
X-Firefox-Spdy: h2
|
|
| embed.tawk.to/61519116d326717cb6837f25/1fgj9tggh | 172.67.38.66 | 200 OK | 2.1 kB |
URL GET HTTP/2embed.tawk.to/61519116d326717cb6837f25/1fgj9tggh IP172.67.38.66:443
Requested byhttps://zeroupload.com/610dcbeb0f038982/DaVinci_Resolve_16.2.7_Mac_(2).zip CertificateIssuerGoogle Trust Services LLC Subjecttawk.to Fingerprint83:4E:6B:81:26:A0:67:FF:06:8D:D3:DC:E5:70:3F:A3:4B:08:C5:F5 ValidityThu, 28 Mar 2024 00:13:59 GMT - Wed, 26 Jun 2024 00:13:58 GMT
File typeJavaScript source, ASCII text, with very long lines (2310), with no line terminators Hashc8de7eb5b7237bfe01ed0bc0d896e7d6 0abdc24dbe5178b2f1175a0ee586a533dc8f9a4d 0e98ea5d6551e13694b630b69fba613fa3b0295a4e7a256a1d4ba7790fbed5fa
GET /61519116d326717cb6837f25/1fgj9tggh HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zeroupload.com
DNT: 1
Connection: keep-alive
Referer: https://zeroupload.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 11 May 2024 01:05:27 GMT
content-type: application/x-javascript
access-control-allow-origin: *
cache-control: public, max-age=7200, s-maxage=3600
etag: W/"stable-v4-6625f366c87"
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: REVALIDATED
x-content-type-options: nosniff
server: cloudflare
cf-ray: 881e42c1bf50569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|