| www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar |  95.211.200.52 | 200 OK | 178 B |
URL User Request GET HTTP/1.1www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar IP95.211.200.52:443 ASN#60781 LeaseWeb Netherlands B.V.
CertificateIssuerGlobalSign nv-sa Subject*.filefactory.com Fingerprint56:09:43:41:41:C8:6C:BA:13:2E:84:EB:4C:97:9F:59:2E:EE:AB:36 ValidityFri, 18 Mar 2022 07:39:09 GMT - Wed, 19 Apr 2023 07:39:08 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hashcd2e0e43980a00fb6a2742d3afd803b8 81ffbd1712afe8cdf138b570c0fc9934742c33c1 bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar HTTP/1.1
Host: www.filefactory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 11 Apr 2023 15:28:26 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar
|
|
| ocsp2.globalsign.com/gsalphasha2g2 |  104.18.21.226 | | 1.4 kB |
URL ocsp2.globalsign.com/gsalphasha2g2 IP104.18.21.226:0
Hashf4a2f17c395ae229f7658ff13a1972f8 e76135e7b5470358c0b612760a7a0b0023eab3bf cc6ff5bb17fecd781ba723980df24e10eda306342fbcd0ada6fdd2b4dfb4afa1
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 11 Apr 2023 16:02:22 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Sat, 15 Apr 2023 14:35:45 GMT
ETag: "e76135e7b5470358c0b612760a7a0b0023eab3bf"
Last-Modified: Tue, 11 Apr 2023 14:35:46 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b647418d847b529-OSL
|
|
| filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar | 95.211.200.52 | 301 Moved Permanently | 178 B |
URL User Request GET HTTP/1.1filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar IP95.211.200.52:443 ASN#60781 LeaseWeb Netherlands B.V.
CertificateIssuerGlobalSign nv-sa Subject*.filefactory.com Fingerprint56:09:43:41:41:C8:6C:BA:13:2E:84:EB:4C:97:9F:59:2E:EE:AB:36 ValidityFri, 18 Mar 2022 07:39:09 GMT - Wed, 19 Apr 2023 07:39:08 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hashcd2e0e43980a00fb6a2742d3afd803b8 81ffbd1712afe8cdf138b570c0fc9934742c33c1 bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar HTTP/1.1
Host: filefactory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 11 Apr 2023 15:28:26 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar
|
|
| www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar | 95.211.200.52 | 200 OK | 5.0 kB |
URL User Request GET HTTP/1.1www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar IP95.211.200.52:443 ASN#60781 LeaseWeb Netherlands B.V.
CertificateIssuerGlobalSign nv-sa Subject*.filefactory.com Fingerprint56:09:43:41:41:C8:6C:BA:13:2E:84:EB:4C:97:9F:59:2E:EE:AB:36 ValidityFri, 18 Mar 2022 07:39:09 GMT - Wed, 19 Apr 2023 07:39:08 GMT
Hash2cb590afec3d881e1d00e527f52c5678 fb970afe6914fbc6f6960b01c0ce8d063a4ad8ec 17f2fddc620aa053d6ed81bcf49c4f4eaa95c354d22457ca933466efeacc09aa
GET /file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar HTTP/1.1
Host: www.filefactory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 11 Apr 2023 15:28:26 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 4979
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=h0avpftvu5j5bsf4hf7ehctj27; path=/
locale=en_US.utf8; expires=Wed, 12-Apr-2023 16:02:22 GMT; path=/; domain=.filefactory.com
LBPERSIST=persist_w1; path=/
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| www.filefactory.com/css/vendor/bootstrap.min.css?v=004000000024 | 95.211.200.52 | 200 OK | 19 kB |
URL GET HTTP/1.1www.filefactory.com/css/vendor/bootstrap.min.css?v=004000000024 IP95.211.200.52:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGlobalSign nv-sa Subject*.filefactory.com Fingerprint56:09:43:41:41:C8:6C:BA:13:2E:84:EB:4C:97:9F:59:2E:EE:AB:36 ValidityFri, 18 Mar 2022 07:39:09 GMT - Wed, 19 Apr 2023 07:39:08 GMT
File typeASCII text, with very long lines (65371) Hashd9c4e81d89198caf489562c850e6c515 e3da6be0dca0ea45d190dd5fe3ac3f7fda0219fb 8243a13ef5d4e10a2ff5b6f171137f74c77b1ccff30b1e7157779242196e04cd
GET /css/vendor/bootstrap.min.css?v=004000000024 HTTP/1.1
Host: www.filefactory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar
Cookie: PHPSESSID=h0avpftvu5j5bsf4hf7ehctj27; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 11 Apr 2023 15:28:27 GMT
Content-Type: text/css
Content-Length: 18734
Connection: keep-alive
Last-Modified: Tue, 10 Nov 2015 22:36:29 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Thu, 11 May 2023 16:02:22 GMT
|
|
| www.filefactory.com/css/vendor/bootstrap-dialog.css?v=004000000024 | 95.211.200.52 | 200 OK | 516 B |
URL GET HTTP/1.1www.filefactory.com/css/vendor/bootstrap-dialog.css?v=004000000024 IP95.211.200.52:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGlobalSign nv-sa Subject*.filefactory.com Fingerprint56:09:43:41:41:C8:6C:BA:13:2E:84:EB:4C:97:9F:59:2E:EE:AB:36 ValidityFri, 18 Mar 2022 07:39:09 GMT - Wed, 19 Apr 2023 07:39:08 GMT
File typeASCII text, with very long lines (2012), with no line terminators Hash0369f3f2323383c427de48d1826d3f36 c4badfee0621c82fc0a10920d3228cea11111378 47910de5c7f0bb200606b508202690a36dc0055805dffe7b6972fc037430a3c4
GET /css/vendor/bootstrap-dialog.css?v=004000000024 HTTP/1.1
Host: www.filefactory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar
Cookie: PHPSESSID=h0avpftvu5j5bsf4hf7ehctj27; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 11 Apr 2023 15:28:27 GMT
Content-Type: text/css
Content-Length: 516
Connection: keep-alive
Last-Modified: Tue, 10 Nov 2015 22:36:28 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Thu, 11 May 2023 16:02:22 GMT
|
|
| www.filefactory.com/js/vendor/bootstrap-dialog.js?v=004000000024 | 95.211.200.52 | 200 OK | 4.2 kB |
URL GET HTTP/1.1www.filefactory.com/js/vendor/bootstrap-dialog.js?v=004000000024 IP95.211.200.52:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGlobalSign nv-sa Subject*.filefactory.com Fingerprint56:09:43:41:41:C8:6C:BA:13:2E:84:EB:4C:97:9F:59:2E:EE:AB:36 ValidityFri, 18 Mar 2022 07:39:09 GMT - Wed, 19 Apr 2023 07:39:08 GMT
File typeASCII text, with very long lines (16771), with no line terminators Hash2e9e8a0844e9bb269412720e30ec518c 4e1ef0cfa65000b885a1d9512e030edb354eff44 a94d3e76ce47a9501f02dbe231a9f7c4b1a8a9dae4a74497dd551a4aa349a58a
GET /js/vendor/bootstrap-dialog.js?v=004000000024 HTTP/1.1
Host: www.filefactory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar
Cookie: PHPSESSID=h0avpftvu5j5bsf4hf7ehctj27; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 11 Apr 2023 15:28:27 GMT
Content-Type: application/javascript
Content-Length: 4188
Connection: keep-alive
Last-Modified: Tue, 10 Nov 2015 22:36:41 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Thu, 11 May 2023 16:02:22 GMT
|
|
| www.filefactory.com/js/vendor/jquery.cookie.js?v=004000000024 | 95.211.200.52 | 200 OK | 616 B |
URL GET HTTP/1.1www.filefactory.com/js/vendor/jquery.cookie.js?v=004000000024 IP95.211.200.52:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGlobalSign nv-sa Subject*.filefactory.com Fingerprint56:09:43:41:41:C8:6C:BA:13:2E:84:EB:4C:97:9F:59:2E:EE:AB:36 ValidityFri, 18 Mar 2022 07:39:09 GMT - Wed, 19 Apr 2023 07:39:08 GMT
File typeASCII text, with very long lines (1143), with no line terminators Hash9dc410259b911c91103b71b0da4db1b4 8bbfe01b65bd9ba687c1407131f7dd4d31ca51e3 76c01394e846761a9d20c84a4919d42558cb6619ec2c44577681e72f495e853a
GET /js/vendor/jquery.cookie.js?v=004000000024 HTTP/1.1
Host: www.filefactory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar
Cookie: PHPSESSID=h0avpftvu5j5bsf4hf7ehctj27; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 11 Apr 2023 15:28:27 GMT
Content-Type: application/javascript
Content-Length: 616
Connection: keep-alive
Last-Modified: Tue, 10 Nov 2015 22:36:52 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Thu, 11 May 2023 16:02:22 GMT
|
|
| www.filefactory.com/css/filefactory.wp.css?v=004000000024 | 95.211.200.52 | 200 OK | 2.0 kB |
URL GET HTTP/1.1www.filefactory.com/css/filefactory.wp.css?v=004000000024 IP95.211.200.52:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGlobalSign nv-sa Subject*.filefactory.com Fingerprint56:09:43:41:41:C8:6C:BA:13:2E:84:EB:4C:97:9F:59:2E:EE:AB:36 ValidityFri, 18 Mar 2022 07:39:09 GMT - Wed, 19 Apr 2023 07:39:08 GMT
Hash8abbab6476fafabcaf7f435f4c498f21 86fce7af2f73e7dc00689c46ed7a7aa6ca777ff8 953878b3e7c4fe71dea5a70200582d38ef6a178f7f83095b677aa3f50dd37d38
GET /css/filefactory.wp.css?v=004000000024 HTTP/1.1
Host: www.filefactory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar
Cookie: PHPSESSID=h0avpftvu5j5bsf4hf7ehctj27; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 11 Apr 2023 15:28:27 GMT
Content-Type: text/css
Content-Length: 2030
Connection: keep-alive
Last-Modified: Tue, 14 Aug 2018 04:54:41 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Thu, 11 May 2023 16:02:22 GMT
|
|
| www.filefactory.com/css/filefactory.wp.download.css?v=004000000024 | 95.211.200.52 | 200 OK | 651 B |
URL GET HTTP/1.1www.filefactory.com/css/filefactory.wp.download.css?v=004000000024 IP95.211.200.52:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGlobalSign nv-sa Subject*.filefactory.com Fingerprint56:09:43:41:41:C8:6C:BA:13:2E:84:EB:4C:97:9F:59:2E:EE:AB:36 ValidityFri, 18 Mar 2022 07:39:09 GMT - Wed, 19 Apr 2023 07:39:08 GMT
File typeassembler source, ASCII text Hash67670bc7620a54bc2d4e7dec96399e77 3c84a45236e315a038a1598cc0a229c42d799c86 404089245c8aaa3a29cf57f852d664bbdb49f8aafd57708f3da51c18a35b5a43
GET /css/filefactory.wp.download.css?v=004000000024 HTTP/1.1
Host: www.filefactory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar
Cookie: PHPSESSID=h0avpftvu5j5bsf4hf7ehctj27; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 11 Apr 2023 15:28:27 GMT
Content-Type: text/css
Content-Length: 651
Connection: keep-alive
Last-Modified: Sat, 17 Jun 2017 04:44:44 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Thu, 11 May 2023 16:02:22 GMT
|
|
| www.filefactory.com/js/filefactory.common.js?v=004000000024 | 95.211.200.52 | 200 OK | 1.7 kB |
URL GET HTTP/1.1www.filefactory.com/js/filefactory.common.js?v=004000000024 IP95.211.200.52:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGlobalSign nv-sa Subject*.filefactory.com Fingerprint56:09:43:41:41:C8:6C:BA:13:2E:84:EB:4C:97:9F:59:2E:EE:AB:36 ValidityFri, 18 Mar 2022 07:39:09 GMT - Wed, 19 Apr 2023 07:39:08 GMT
File typeASCII text, with very long lines (2383), with CRLF line terminators Hash2c07a42028cdc50efce1586cc7175ba8 dc1a5da5eb06d466cc8860cd593bc7a0cf2b99ac 31f1cf190e5db84a4eebafd0bcbb48f80c2d3f0c9346f6e00406937fc5b8ba7e
GET /js/filefactory.common.js?v=004000000024 HTTP/1.1
Host: www.filefactory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar
Cookie: PHPSESSID=h0avpftvu5j5bsf4hf7ehctj27; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 11 Apr 2023 15:28:27 GMT
Content-Type: application/javascript
Content-Length: 1700
Connection: keep-alive
Last-Modified: Tue, 07 May 2019 08:33:04 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Thu, 11 May 2023 16:02:22 GMT
|
|
| www.filefactory.com/js/vendor/bootstrap.min.js?v=004000000024 | 95.211.200.52 | 200 OK | 9.7 kB |
URL GET HTTP/1.1www.filefactory.com/js/vendor/bootstrap.min.js?v=004000000024 IP95.211.200.52:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGlobalSign nv-sa Subject*.filefactory.com Fingerprint56:09:43:41:41:C8:6C:BA:13:2E:84:EB:4C:97:9F:59:2E:EE:AB:36 ValidityFri, 18 Mar 2022 07:39:09 GMT - Wed, 19 Apr 2023 07:39:08 GMT
File typeASCII text, with very long lines (36622), with no line terminators Hash19ffde9db3c06677e3c134246a77dc4a 4787610b6ee20909c031e97e5045c18496c8e4b7 12fae54989d035cf72a58295e88ede408b1470096bfa620fd31523e3c742bf45
GET /js/vendor/bootstrap.min.js?v=004000000024 HTTP/1.1
Host: www.filefactory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar
Cookie: PHPSESSID=h0avpftvu5j5bsf4hf7ehctj27; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 11 Apr 2023 15:28:27 GMT
Content-Type: application/javascript
Content-Length: 9691
Connection: keep-alive
Last-Modified: Tue, 10 Nov 2015 22:36:42 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Thu, 11 May 2023 16:02:22 GMT
|
|
| www.filefactory.com/js/vendor/jquery.selectBoxIt.js?v=004000000024 | 95.211.200.52 | 200 OK | 7.1 kB |
URL GET HTTP/1.1www.filefactory.com/js/vendor/jquery.selectBoxIt.js?v=004000000024 IP95.211.200.52:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGlobalSign nv-sa Subject*.filefactory.com Fingerprint56:09:43:41:41:C8:6C:BA:13:2E:84:EB:4C:97:9F:59:2E:EE:AB:36 ValidityFri, 18 Mar 2022 07:39:09 GMT - Wed, 19 Apr 2023 07:39:08 GMT
File typeASCII text, with very long lines (25709), with no line terminators Hash3418e0d552b349825bcbba8c5446d4c5 ac15f8e5059dd7f535538dbafb51d3dbb1aad877 6ee9075e709af09965a6b769d7fc6ca5825039dacad075112033b0235171f043
GET /js/vendor/jquery.selectBoxIt.js?v=004000000024 HTTP/1.1
Host: www.filefactory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar
Cookie: PHPSESSID=h0avpftvu5j5bsf4hf7ehctj27; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 11 Apr 2023 15:28:27 GMT
Content-Type: application/javascript
Content-Length: 7079
Connection: keep-alive
Last-Modified: Tue, 10 Nov 2015 22:36:55 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Thu, 11 May 2023 16:02:22 GMT
|
|
| ocsp.pki.goog/gts1c3 |  142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash161790a687cab983532f263fff75708d f41780628dffcdc203b1933dbcd2ec6a69fb5633 f1d60b3b6ce8d0b3de1b91100962296f6d71682379000ca0035ea9bc0243b020
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 11 Apr 2023 16:02:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.filefactory.com/js/vendor/countdown.js?v=004000000024 | 95.211.200.52 | 200 OK | 837 B |
URL GET HTTP/1.1www.filefactory.com/js/vendor/countdown.js?v=004000000024 IP95.211.200.52:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGlobalSign nv-sa Subject*.filefactory.com Fingerprint56:09:43:41:41:C8:6C:BA:13:2E:84:EB:4C:97:9F:59:2E:EE:AB:36 ValidityFri, 18 Mar 2022 07:39:09 GMT - Wed, 19 Apr 2023 07:39:08 GMT
File typeASCII text, with very long lines (3495), with no line terminators Hash427a0fc92994a6b92d0f4b65d1bee5aa 4f59883fd8e3e861872e76095beaa05e59b9037a 39fda67bbaba8165bcb44293edde7410ff29e149866141fc25e9774d7bfd7327
GET /js/vendor/countdown.js?v=004000000024 HTTP/1.1
Host: www.filefactory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar
Cookie: PHPSESSID=h0avpftvu5j5bsf4hf7ehctj27; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 11 Apr 2023 15:28:27 GMT
Content-Type: application/javascript
Content-Length: 837
Connection: keep-alive
Last-Modified: Tue, 10 Nov 2015 22:36:45 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Thu, 11 May 2023 16:02:22 GMT
|
|
| www.filefactory.com/js/vendor/jquery.zclip.js?v=004000000024 | 95.211.200.52 | 200 OK | 2.6 kB |
URL GET HTTP/1.1www.filefactory.com/js/vendor/jquery.zclip.js?v=004000000024 IP95.211.200.52:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGlobalSign nv-sa Subject*.filefactory.com Fingerprint56:09:43:41:41:C8:6C:BA:13:2E:84:EB:4C:97:9F:59:2E:EE:AB:36 ValidityFri, 18 Mar 2022 07:39:09 GMT - Wed, 19 Apr 2023 07:39:08 GMT
File typeASCII text, with very long lines (7482), with no line terminators Hash15514f102ce938370faf62a5935f98a4 9ab90f99b5113a7eacc89cf495e6d00bf7a97abf c8e2aebf568b1b0d4d96818f40020d0681a0ab5a7ff9ba2f61f546593559c9f1
GET /js/vendor/jquery.zclip.js?v=004000000024 HTTP/1.1
Host: www.filefactory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar
Cookie: PHPSESSID=h0avpftvu5j5bsf4hf7ehctj27; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 11 Apr 2023 15:28:27 GMT
Content-Type: application/javascript
Content-Length: 2603
Connection: keep-alive
Last-Modified: Tue, 10 Nov 2015 22:37:00 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Thu, 11 May 2023 16:02:22 GMT
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash161790a687cab983532f263fff75708d f41780628dffcdc203b1933dbcd2ec6a69fb5633 f1d60b3b6ce8d0b3de1b91100962296f6d71682379000ca0035ea9bc0243b020
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 11 Apr 2023 16:02:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.filefactory.com/js/filefactory.download.js?v=004000000024 | 95.211.200.52 | 200 OK | 3.9 kB |
URL GET HTTP/1.1www.filefactory.com/js/filefactory.download.js?v=004000000024 IP95.211.200.52:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGlobalSign nv-sa Subject*.filefactory.com Fingerprint56:09:43:41:41:C8:6C:BA:13:2E:84:EB:4C:97:9F:59:2E:EE:AB:36 ValidityFri, 18 Mar 2022 07:39:09 GMT - Wed, 19 Apr 2023 07:39:08 GMT
File typeASCII text, with very long lines (12559), with no line terminators Hash0e8beb3e9e301026a8696b9b8ac607d5 b0e8de3dc6fd295f87bbb4495639811a5ac02eae d25eddf5332fcc8d069e66ec73a005e34d8d59d0d98d09780758af14fb310eff
GET /js/filefactory.download.js?v=004000000024 HTTP/1.1
Host: www.filefactory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar
Cookie: PHPSESSID=h0avpftvu5j5bsf4hf7ehctj27; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 11 Apr 2023 15:28:27 GMT
Content-Type: application/javascript
Content-Length: 3941
Connection: keep-alive
Last-Modified: Tue, 10 Nov 2015 22:36:35 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Thu, 11 May 2023 16:02:22 GMT
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash161790a687cab983532f263fff75708d f41780628dffcdc203b1933dbcd2ec6a69fb5633 f1d60b3b6ce8d0b3de1b91100962296f6d71682379000ca0035ea9bc0243b020
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 11 Apr 2023 16:02:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.filefactory.com/js/vendor/countdown_plugins.js?v=004000000024 | 95.211.200.52 | 200 OK | 15 kB |
URL GET HTTP/1.1www.filefactory.com/js/vendor/countdown_plugins.js?v=004000000024 IP95.211.200.52:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGlobalSign nv-sa Subject*.filefactory.com Fingerprint56:09:43:41:41:C8:6C:BA:13:2E:84:EB:4C:97:9F:59:2E:EE:AB:36 ValidityFri, 18 Mar 2022 07:39:09 GMT - Wed, 19 Apr 2023 07:39:08 GMT
File typeASCII text, with very long lines (45450), with no line terminators Hashf34475e9958e420955c700820b870ded ef50b2ea27da3fe99502e01c5320a8a0b80de17f 1205aa096ef6cdffe92d6705b7c0e1b1a963b1d3c5a86816c0a5362b6ab3d5b2
GET /js/vendor/countdown_plugins.js?v=004000000024 HTTP/1.1
Host: www.filefactory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar
Cookie: PHPSESSID=h0avpftvu5j5bsf4hf7ehctj27; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 11 Apr 2023 15:28:27 GMT
Content-Type: application/javascript
Content-Length: 14997
Connection: keep-alive
Last-Modified: Tue, 10 Nov 2015 22:36:46 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=2592000
Expires: Thu, 11 May 2023 16:02:22 GMT
|
|
| ajax.googleapis.com/ajax/libs/jqueryui/1.11.1/jquery-ui.min.js | 216.58.207.202 | 200 OK | 64 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jqueryui/1.11.1/jquery-ui.min.js IP216.58.207.202:443
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint77:43:87:91:D0:0A:64:BD:84:1C:9A:F5:10:86:8E:8E:04:F1:F9:A3 ValidityMon, 20 Mar 2023 08:25:51 GMT - Mon, 12 Jun 2023 08:25:50 GMT
File typeASCII text, with very long lines (32119) Hash5fff368bebfbbc83919d7ddd9afac949 8b89f7c5ab4700ef0289ff30142082bd108e0354 a8969e8853f473ca839e9728872e08c1f0ac0851fe1431d29fa5ed7382910990
GET /ajax/libs/jqueryui/1.11.1/jquery-ui.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 63865
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 07 Apr 2023 18:05:14 GMT
expires: Sat, 06 Apr 2024 18:05:14 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 338228
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js | 216.58.207.202 | 200 OK | 33 kB |
URL GET HTTP/2ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js IP216.58.207.202:443
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint77:43:87:91:D0:0A:64:BD:84:1C:9A:F5:10:86:8E:8E:04:F1:F9:A3 ValidityMon, 20 Mar 2023 08:25:51 GMT - Mon, 12 Jun 2023 08:25:50 GMT
File typeASCII text, with very long lines (32086) Hash430e927c980ad4079de727fa59dd93f2 891aaada9a55a91292999f6d50fd300439905982 e8728df8617340bd8c10bc8d27d3a725a48871a269c850e8598689938ec6e2ed
GET /ajax/libs/jquery/1.11.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33434
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 10 Apr 2023 23:43:37 GMT
expires: Tue, 09 Apr 2024 23:43:37 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 58725
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.filefactory.com/wp/img/filefactory-logo-white.svg | 95.211.200.52 | 200 OK | 6.2 kB |
URL GET HTTP/1.1www.filefactory.com/wp/img/filefactory-logo-white.svg IP95.211.200.52:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGlobalSign nv-sa Subject*.filefactory.com Fingerprint56:09:43:41:41:C8:6C:BA:13:2E:84:EB:4C:97:9F:59:2E:EE:AB:36 ValidityFri, 18 Mar 2022 07:39:09 GMT - Wed, 19 Apr 2023 07:39:08 GMT
File typeSVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text, with CRLF line terminators Hash249acd65dbe7bf8bdf2477d1a7a1bdee f322b0d7e66ee18be95a820e463e957cc50e1238 8cd74251eda091402e01f67f217f5a466d87d0111cc9b5724a831cf21a938cd8
GET /wp/img/filefactory-logo-white.svg HTTP/1.1
Host: www.filefactory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar
Cookie: PHPSESSID=h0avpftvu5j5bsf4hf7ehctj27; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 11 Apr 2023 15:28:27 GMT
Content-Type: image/svg+xml
Content-Length: 6174
Connection: keep-alive
Last-Modified: Thu, 15 Jun 2017 23:34:39 GMT
Accept-Ranges: bytes
|
|
| fonts.googleapis.com/css?family=Open+Sans:400,600,700,800 | 142.250.74.74 | 200 OK | 1.2 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Open+Sans:400,600,700,800 IP142.250.74.74:443
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint77:43:87:91:D0:0A:64:BD:84:1C:9A:F5:10:86:8E:8E:04:F1:F9:A3 ValidityMon, 20 Mar 2023 08:25:51 GMT - Mon, 12 Jun 2023 08:25:50 GMT
Hash55860a2b8a8233bd0c20c5acb089a7a7 e7a0ff1f0e09d8caa320c0e7c842662adb1c3f16 6a4f0759afe5ccd50099d12909c2144d2f3b8d14106b0cc8352e6fb7a16acd5a
GET /css?family=Open+Sans:400,600,700,800 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 11 Apr 2023 16:02:22 GMT
date: Tue, 11 Apr 2023 16:02:22 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash161790a687cab983532f263fff75708d f41780628dffcdc203b1933dbcd2ec6a69fb5633 f1d60b3b6ce8d0b3de1b91100962296f6d71682379000ca0035ea9bc0243b020
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 11 Apr 2023 16:02:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash161790a687cab983532f263fff75708d f41780628dffcdc203b1933dbcd2ec6a69fb5633 f1d60b3b6ce8d0b3de1b91100962296f6d71682379000ca0035ea9bc0243b020
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 11 Apr 2023 16:02:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| henoticpipi.com/g9RbYoQO26rZA3R/55129 | 172.255.6.236 | 200 OK | 26 B |
URL GET HTTP/1.1henoticpipi.com/g9RbYoQO26rZA3R/55129 IP172.255.6.236:443
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerLet's Encrypt Subjecthenoticpipi.com Fingerprint09:E4:78:75:20:B0:4D:EC:25:0F:52:DB:69:6A:38:BD:27:BC:7A:62 ValiditySat, 11 Mar 2023 23:05:17 GMT - Fri, 09 Jun 2023 23:05:16 GMT
File typeASCII text, with no line terminators Hash4e5d65669f8dcd928dad06adf883f025 d771713d758c3348dd7e5b38bb40c7935399ae46 0bebbf029fa045e4f462855e6c44edf8aaa36ded05b07a8ce456b67416d20c95
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /g9RbYoQO26rZA3R/55129 HTTP/1.1
Host: henoticpipi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 11 Apr 2023 16:02:23 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.filefactory.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9jU1Sg0AQhSH8RQ1oV3EAj8AQMcnSTVbegZphGhwD06lmQuLtHa3S3fteffVeEASr8hHCJY0husgGnl8aXe97Ve31tsZq34vda9UoIbp6u1PycIA7M7dOqhFdDOt5kuxat8SwGdAim67tSGMOT976a06WrjaGRLG0Oodk8saYQ6aYrjNyGUFs5YSQHQ1jTzdvyE9iiIQQPhvrc1jBiuYyKu4heTf2cis2aVAUaQAP51G6nnhqjfaYDCw1QvgG6046HIi%2FINM4nxydAWjU7b%2F%2Fe5qMP2uQalxM55HcB%2FI3ouZOdQ%3D%3D; expires=Wed, 12-Apr-2023 16:02:22 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJw9i8sKwjAURGuUYNVWBvwAf8D6QBdu1aXUhbgOtd6WYM0tTXzUr%2FcFruYwc8bzPDEIIXSJ3nIaLSfRfBZNF3M0c2KIeIdeylfjqlqZ5EKQMVf3pIasKNdsAnR%2FoFI%2BETrxbnQwZ8N38x8%2BtwCtVLs6gP%2BJrxu20dS2RLgq9GO45%2BLq3raFb8gpWxKd4K%2BTY0HjzX6L8N9%2Bz7KBtraqrPhRv7nv9IWebEhxlllyUqBxk%2BIFsdRBIw%3D%3D; expires=Wed, 12-Apr-2023 16:02:23 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| www.filefactory.com/wp/img/icon-check.svg | 95.211.200.52 | 200 OK | 22 kB |
URL GET HTTP/1.1www.filefactory.com/wp/img/icon-check.svg IP95.211.200.52:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGlobalSign nv-sa Subject*.filefactory.com Fingerprint56:09:43:41:41:C8:6C:BA:13:2E:84:EB:4C:97:9F:59:2E:EE:AB:36 ValidityFri, 18 Mar 2022 07:39:09 GMT - Wed, 19 Apr 2023 07:39:08 GMT
File typeSVG Scalable Vector Graphics image\012- , Unicode text, UTF-8 text, with very long lines (19596) Hash579390788f26cffc187c3b213e7d6de8 e59bf4557c47f482b1b354957151e6497b0d7ded ba629a33ef0767607e2539945008431805ea1d2d2ebc4ffd877ab3c3b23991a7
GET /wp/img/icon-check.svg HTTP/1.1
Host: www.filefactory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar
Cookie: PHPSESSID=h0avpftvu5j5bsf4hf7ehctj27; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: embed
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 11 Apr 2023 15:28:27 GMT
Content-Type: image/svg+xml
Content-Length: 22124
Connection: keep-alive
Last-Modified: Thu, 15 Jun 2017 23:34:39 GMT
Accept-Ranges: bytes
|
|
| www.filefactory.com/wp/img/icon-cloud.svg | 95.211.200.52 | 200 OK | 17 kB |
URL GET HTTP/1.1www.filefactory.com/wp/img/icon-cloud.svg IP95.211.200.52:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGlobalSign nv-sa Subject*.filefactory.com Fingerprint56:09:43:41:41:C8:6C:BA:13:2E:84:EB:4C:97:9F:59:2E:EE:AB:36 ValidityFri, 18 Mar 2022 07:39:09 GMT - Wed, 19 Apr 2023 07:39:08 GMT
File typeSVG Scalable Vector Graphics image\012- , Unicode text, UTF-8 text, with very long lines (14564) Hash1036571f93a23865267246ebf737a0c2 5a08d068303aecabf2fdc2d203101f8063a3cc42 e751c9f7db67a14fa7e5c3a51a8c62a4e3a151a06cc2f0bcec8e11ca6c2c57fe
GET /wp/img/icon-cloud.svg HTTP/1.1
Host: www.filefactory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar
Cookie: PHPSESSID=h0avpftvu5j5bsf4hf7ehctj27; locale=en_US.utf8; LBPERSIST=persist_w1
Sec-Fetch-Dest: embed
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 11 Apr 2023 15:28:27 GMT
Content-Type: image/svg+xml
Content-Length: 17092
Connection: keep-alive
Last-Modified: Thu, 15 Jun 2017 23:34:39 GMT
Accept-Ranges: bytes
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash050c7347515fd2221f7d297b33a9aa5c a8d7b94084ceeb054c3085c681f8cd5f72bd4fc4 34edc6a07cd8fd2117cb12821723b2e71ddfb2434bac56c73515baf1a81ab837
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 11 Apr 2023 16:02:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash050c7347515fd2221f7d297b33a9aa5c a8d7b94084ceeb054c3085c681f8cd5f72bd4fc4 34edc6a07cd8fd2117cb12821723b2e71ddfb2434bac56c73515baf1a81ab837
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 11 Apr 2023 16:02:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| usingswhoring.com/r3ZwU3RRZQUni7/55128 | 142.91.159.141 | 200 OK | 25 B |
URL GET HTTP/1.1usingswhoring.com/r3ZwU3RRZQUni7/55128 IP142.91.159.141:443
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerLet's Encrypt Subjectusingswhoring.com FingerprintE0:3C:05:3F:5A:C3:9C:93:3B:8A:8F:88:0C:61:04:6C:AA:25:F9:F9 ValidityMon, 27 Mar 2023 23:03:57 GMT - Sun, 25 Jun 2023 23:03:56 GMT
File typeASCII text, with no line terminators Hash2339750dbbbcbd8fe83612a65b72e03d 672074d493c051cffcc96bce7d15f77ec6ef1889 1fa220e7725025343d910d83e9f0e663b82419a3422e5465dc73c092b0853ccd
GET /r3ZwU3RRZQUni7/55128 HTTP/1.1
Host: usingswhoring.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 11 Apr 2023 16:02:23 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.filefactory.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jU1Sg0AQhSH8RQ1oV3EAj8AQMcnSTVbegZphGhwD06lmQuLtHa3S3fteffVeEASr8hHCJY0husgGnl8aXe97Ve31tsZq34vda9UoIbp6u1PycIA7M7dOqhFdDOt5kuxat8SwGdAim67tSGMOT976a06WrjaGRLG0Oodk8saYQ6aYrjNyGUFs5YSQHQ1jTzdvyE9iiIQQPhvrc1jBiuYyKu4heTf2cis2aVAUaQAP51G6nnhqjfaYDCw1QvgG6046HIi%2FINM4nxydAWjU7b%2F%2Fe5qMP2uQalxM55HcB%2FI3ouZOdQ%3D%3D; expires=Wed, 12-Apr-2023 16:02:23 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJw9i8sKwjAURGuUYNVWBvwAf8D6QBdu1aXUhbgOtd6WYM0tTXzUr%2FcFruYwc8bzPDEIIXSJ3nIaLSfRfBZNF3M0c2KIeIdeylfjqlqZ5EKQMVf3pIasKNdsAnR%2FoFI%2BETrxbnQwZ8N38x8%2BtwCtVLs6gP%2BJrxu20dS2RLgq9GO45%2BLq3raFb8gpWxKd4K%2BTY0HjzX6L8N9%2Bz7KBtraqrPhRv7nv9IWebEhxlllyUqBxk%2BIFsdRBIw%3D%3D; expires=Wed, 12-Apr-2023 16:02:23 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.74.35 | 200 OK | 45 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.74.35:443
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint76:06:6A:AA:FB:72:F8:BA:90:67:2F:91:97:14:FB:68:D0:65:E9:22 ValidityMon, 20 Mar 2023 08:25:51 GMT - Mon, 12 Jun 2023 08:25:50 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data Hash565ce506190ad3af920b40baf1794cec ad3cba5d06100e09449a864d3b5e58403b478b3d 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.filefactory.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 07 Apr 2023 13:55:28 GMT
expires: Sat, 06 Apr 2024 13:55:28 GMT
cache-control: public, max-age=31536000
age: 353215
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.74.35 | 200 OK | 45 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.74.35:443
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint76:06:6A:AA:FB:72:F8:BA:90:67:2F:91:97:14:FB:68:D0:65:E9:22 ValidityMon, 20 Mar 2023 08:25:51 GMT - Mon, 12 Jun 2023 08:25:50 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data Hash565ce506190ad3af920b40baf1794cec ad3cba5d06100e09449a864d3b5e58403b478b3d 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.filefactory.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 07 Apr 2023 13:55:28 GMT
expires: Sat, 06 Apr 2024 13:55:28 GMT
cache-control: public, max-age=31536000
age: 353215
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| chimpstatic.com/mcjs-connected/js/users/cc27616a935143f3234e68708/058c28910046bb6b1c91d8684.js |  96.6.17.210 | 200 OK | 1.2 kB |
URL GET HTTP/1.1chimpstatic.com/mcjs-connected/js/users/cc27616a935143f3234e68708/058c28910046bb6b1c91d8684.js IP96.6.17.210:443
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerDigiCert Inc Subjectwildcardsan.us15.list-manage.com FingerprintBC:30:B2:9F:2F:A4:DF:B4:9F:C1:CC:A8:FD:DB:40:44:24:C3:79:6E ValidityTue, 15 Nov 2022 00:00:00 GMT - Wed, 15 Nov 2023 23:59:59 GMT
Hash8273d84537cadc5b9a2e738d212a798d 2b428dac0ccadd8ad81471b89b983a6ab83cb58c 26b0237c699edce2075e43f5a8dd37c73e091a06ac0bee1de767bf0c4dbba16e
GET /mcjs-connected/js/users/cc27616a935143f3234e68708/058c28910046bb6b1c91d8684.js HTTP/1.1
Host: chimpstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: Kw8NyVkAhaEzpbBAe1UULVkCfyhPyXiK6756y+dTLUGJM/92rDCGNMDIAFMZyiyf8eLaANJiM/w=
x-amz-request-id: BH396Q8W05D9PSXE
Last-Modified: Wed, 26 Oct 2022 04:19:23 GMT
ETag: "f93507267e71f50f984e4493f1eec056"
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
X-EdgeConnect-MidMile-RTT: 17
X-EdgeConnect-Origin-MEX-Latency: 96
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=1545
Expires: Tue, 11 Apr 2023 16:28:08 GMT
Date: Tue, 11 Apr 2023 16:02:23 GMT
Content-Length: 1223
Connection: keep-alive
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash050c7347515fd2221f7d297b33a9aa5c a8d7b94084ceeb054c3085c681f8cd5f72bd4fc4 34edc6a07cd8fd2117cb12821723b2e71ddfb2434bac56c73515baf1a81ab837
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 11 Apr 2023 16:02:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| forgivenessimpact.com/b6/6f/f7/b66ff7c1636b152673f970d2464db83f.js | 173.233.137.36 | 200 OK | 18 kB |
URL GET HTTP/1.1forgivenessimpact.com/b6/6f/f7/b66ff7c1636b152673f970d2464db83f.js IP173.233.137.36:443
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerLet's Encrypt Subjectforgivenessimpact.com FingerprintD5:79:C3:DD:BC:A8:86:E3:BA:74:BF:D5:27:A2:D6:C2:EE:5C:7C:3C ValidityFri, 24 Mar 2023 06:29:19 GMT - Thu, 22 Jun 2023 06:29:18 GMT
File typeASCII text, with very long lines (46874), with no line terminators Hash697bf6ce1d34c2529a1e58cab756e3ca 89214f55779bd7a5735bffeaedaa9b5cbeac1c85 0e348f28bb38d25fcf1050608dfcc19c11ffd2d2cad34f3b32b6e66a413a9695
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /b6/6f/f7/b66ff7c1636b152673f970d2464db83f.js HTTP/1.1
Host: forgivenessimpact.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 11 Apr 2023 16:02:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_ebt1205=1; expires=Fri, 14 Apr 2023 16:02:23 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2b2b275b6c4c65c9165f2b375dbdaf7d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| ocsp.r2m01.amazontrust.com/ | 54.230.80.227 | | 471 B |
URL ocsp.r2m01.amazontrust.com/ IP54.230.80.227:0
Hasheb40f03e5d5e55a34c7982112907e9c1 a5cc1c1ee685df29f8357fd405cbb589c55080e9 ff5f93c4e1b0a767f0ac033532b3b4710990630f7cc7394ca3645555ba65c065
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=93036
Date: Tue, 11 Apr 2023 16:02:23 GMT
Etag: "643439d1-1d7"
Expires: Wed, 12 Apr 2023 17:52:59 GMT
Last-Modified: Mon, 10 Apr 2023 16:31:13 GMT
Server: ECAcc (nya/789D)
X-Cache: Miss from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: OU1n8M6u2sWkhuOwldV4EOiLzTLg7RhjYhRgBjTpdax1rgMnKu7KPw==
Age: 4906
|
|
| simplewebanalysis.com/stats |  52.58.253.53 | 200 OK | 40 B |
URL GET HTTP/2simplewebanalysis.com/stats IP52.58.253.53:443
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerAmazon Subjectsimplewebanalysis.com FingerprintE5:9D:30:D3:0E:8A:EF:0D:43:46:4C:4C:53:AD:05:78:63:E9:04:07 ValidityThu, 02 Mar 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash14f02b8715f8bb9f692048ee6bd24ab2 07e54d557d8461d728e326e49a3960983508e5c8 70a2ab0cc16b9b51435e56e8690013543a8c23df26116d2165062cc2fc56d5c9
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.filefactory.com
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 11 Apr 2023 16:02:23 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.filefactory.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=edbddb09-82ff-4473-a133-eb9c8637748c:3:1; expires=Fri, 08 Apr 2033 16:02:23 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| downloads.mailchimp.com/js/signup-forms/popup/unique-methods/embed.js | 143.204.237.123 | 200 OK | 72 kB |
URL GET HTTP/1.1downloads.mailchimp.com/js/signup-forms/popup/unique-methods/embed.js IP143.204.237.123:443
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerAmazon Subjectdownloads.mailchimp.com Fingerprint71:CA:F4:D1:5C:6A:B9:FA:41:B9:63:28:DB:BB:2F:BE:05:00:31:46 ValidityThu, 23 Feb 2023 00:00:00 GMT - Thu, 03 Aug 2023 23:59:59 GMT
File typeASCII text, with very long lines (65526) Hash94bcb804e09508acf5725d9da48afde1 a1640a76072d9e4cbbab49c2bb6736a519feb093 f242c3d31be00e498dc63a8a01832146d5b147c816bd60d6078f80b5af3d3bf9
GET /js/signup-forms/popup/unique-methods/embed.js HTTP/1.1
Host: downloads.mailchimp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 20 Jan 2023 18:27:57 GMT
x-amz-server-side-encryption: AES256
Server: AmazonS3
Content-Encoding: gzip
Date: Mon, 10 Apr 2023 18:23:49 GMT
ETag: W/"3281ba63652083b7a938a78b62fe19d4"
X-Cache: Hit from cloudfront
Via: 1.1 79222e94ad9d7455e475fd04f37068c4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: CPH50-C1
X-Amz-Cf-Id: nW7hFDdBUotafnG3uH7M3GgtrTXBO5RPnJBt4SHKt1h47B_78PDz2w==
Age: 78337
Vary: Accept-Encoding, Origin
|
|
| www.filefactory.com/favicon.ico | 95.211.200.52 | 200 OK | 100 kB |
URL GET HTTP/1.1www.filefactory.com/favicon.ico IP95.211.200.52:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGlobalSign nv-sa Subject*.filefactory.com Fingerprint56:09:43:41:41:C8:6C:BA:13:2E:84:EB:4C:97:9F:59:2E:EE:AB:36 ValidityFri, 18 Mar 2022 07:39:09 GMT - Wed, 19 Apr 2023 07:39:08 GMT
File typeMS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data Hash90e3dcc0cc6a5c4809b7dfd50e966015 17e2063b061ea56bc5bd7b65901765289b5b6824 3eacac1f0142be27236ddad54cf1450ffe8aa60175af254938e7f7c5f99532a9
GET /favicon.ico HTTP/1.1
Host: www.filefactory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar
Cookie: PHPSESSID=h0avpftvu5j5bsf4hf7ehctj27; locale=en_US.utf8; LBPERSIST=persist_w1; dom3ic8zudi28v8lr6fgphwffqoz0j6c=edbddb09-82ff-4473-a133-eb9c8637748c%3A3%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 11 Apr 2023 15:28:28 GMT
Content-Type: image/x-icon
Content-Length: 99678
Connection: keep-alive
Last-Modified: Thu, 22 Oct 2015 02:35:05 GMT
Accept-Ranges: bytes
|
|
| connect.facebook.net/en_US/fbevents.js | 157.240.247.8 | 200 OK | 28 kB |
URL GET HTTP/2connect.facebook.net/en_US/fbevents.js IP157.240.247.8:443
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerDigiCert Inc Subject*.facebook.com FingerprintCD:4C:BE:6E:79:43:3B:20:4B:AD:FD:AF:43:01:EB:11:7E:D9:C4:43 ValidityWed, 18 Jan 2023 00:00:00 GMT - Tue, 18 Apr 2023 23:59:59 GMT
File typeASCII text, with very long lines (64347) Hash7716e124e19760049484d1bcde4a8af2 51d50c9e9b7fc658c1316d1844418cee0baffa2a fa7968a9a888e1a6dc6ac6126b8edd6e73974c2b0629f669bfb74916f0e7d534
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 0cATUtaBfDXP24gDdlCx0yy3NPUSTb+9b8y+tBWciJEjP9pv4JH2eRosAp8IcEm2cSodUFaZXlo9x7LNCkhpXQ==
content-length: 27909
x-fb-trip-id: 1679558926
date: Tue, 11 Apr 2023 16:02:24 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| sootconform.com/pixel/purst?dl=0&th=0&sc=0&rs=1561&rd=1561&fd=979&bv=&tmpl=70 | 192.243.59.12 | 200 OK | 0 B |
URL GET HTTP/1.1sootconform.com/pixel/purst?dl=0&th=0&sc=0&rs=1561&rd=1561&fd=979&bv=&tmpl=70 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerLet's Encrypt Subject*.sootconform.com Fingerprint4A:D2:18:BF:A0:CF:F1:06:36:74:6A:D7:5C:0E:D4:81:E9:86:4F:AB ValiditySun, 02 Apr 2023 04:12:19 GMT - Sat, 01 Jul 2023 04:12:18 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /pixel/purst?dl=0&th=0&sc=0&rs=1561&rd=1561&fd=979&bv=&tmpl=70 HTTP/1.1
Host: sootconform.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Tue, 11 Apr 2023 16:02:24 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| connect.facebook.net/signals/plugins/identity.js?v=2.9.100 | 157.240.247.8 | 200 OK | 21 kB |
URL GET HTTP/3connect.facebook.net/signals/plugins/identity.js?v=2.9.100 IP157.240.247.8:443
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerDigiCert Inc Subject*.facebook.com FingerprintCD:4C:BE:6E:79:43:3B:20:4B:AD:FD:AF:43:01:EB:11:7E:D9:C4:43 ValidityWed, 18 Jan 2023 00:00:00 GMT - Tue, 18 Apr 2023 23:59:59 GMT
File typeASCII text, with very long lines (60008) Hash4ab212d67df0d744f74a6f6a257b2653 7844504c6b52741b4467b98856b2da4d2e276630 6b5ed11f9d9bfad094e0177b6339804dbdccfece80ea0636343349543ca69c63
GET /signals/plugins/identity.js?v=2.9.100 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: p7jITmHp4+7Ih8EunxvAHEUhjuNl2jp5B7/aTMnmBtl+dsCAcJBL5sCmt7x1IIQ7mWi1cebCDrztI1xwDFayaA==
content-length: 20722
date: Tue, 11 Apr 2023 16:02:24 GMT
alt-svc: h3=":443"; ma=86400
priority: u=3,i
|
|
| poshhateful.com/advertisers.js | 173.233.137.44 | 200 OK | 0 B |
URL GET HTTP/1.1poshhateful.com/advertisers.js IP173.233.137.44:443
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerLet's Encrypt Subjectposhhateful.com Fingerprint94:B7:2B:71:44:7D:94:F0:16:96:C4:F5:8D:E2:4C:1F:F2:CA:38:47 ValidityWed, 15 Feb 2023 06:37:04 GMT - Tue, 16 May 2023 06:37:03 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /advertisers.js HTTP/1.1
Host: poshhateful.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 11 Apr 2023 16:02:24 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 579b4bb57fd34aa515a3ddf2141b3732
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| connect.facebook.net/signals/config/559928301484091?v=2.9.100&r=stable | 157.240.247.8 | 200 OK | 110 kB |
URL GET HTTP/3connect.facebook.net/signals/config/559928301484091?v=2.9.100&r=stable IP157.240.247.8:443
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerDigiCert Inc Subject*.facebook.com FingerprintCD:4C:BE:6E:79:43:3B:20:4B:AD:FD:AF:43:01:EB:11:7E:D9:C4:43 ValidityWed, 18 Jan 2023 00:00:00 GMT - Tue, 18 Apr 2023 23:59:59 GMT
File typeASCII text, with very long lines (64471) Size110 kB (110224 bytes) Hash4ac2710a0d96baffa41f85a3a7ca6336 14f5d7c57a28d5788c8e544340e54984fd40bdad 21aecd57e678abc899e6bf112cd03de8567ff402634fbfbf5fecdb74550665d6
GET /signals/config/559928301484091?v=2.9.100&r=stable HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: connect.facebook.net
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
origin-agent-cluster: ?0
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 48FMaDujWzpzTo0tu2iZbBfq3GU78P76tFmbBmmJfWa3pAb7vbpLm/zz12dQ6AISfPAICF6Zdt5JNnfFU/jNXA==
content-length: 110224
date: Tue, 11 Apr 2023 16:02:24 GMT
alt-svc: h3=":443"; ma=86400
priority: u=3,i
|
|
| www.facebook.com/tr/?id=559928301484091&ev=PageView&dl=https%3A%2F%2Fwww.filefactory.com%2Ffile%2F2prv2pqq5f6c%2FBorisFX.Sapphire.AE.2023.02.CE.rar&rl=&if=false&ts=1681228963587&sw=1280&sh=1024&ud[country]=9390298f3fb0c5b160498935d79cb139aef28e1c47358b4bbba61862b9c26e59&ud[client_ip_address]=da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d&v=2.9.100&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1681228963586.1798595709&it=1681228963231&coo=false&rqm=GET |  157.240.200.35 | 200 OK | 0 B |
URL GET HTTP/2www.facebook.com/tr/?id=559928301484091&ev=PageView&dl=https%3A%2F%2Fwww.filefactory.com%2Ffile%2F2prv2pqq5f6c%2FBorisFX.Sapphire.AE.2023.02.CE.rar&rl=&if=false&ts=1681228963587&sw=1280&sh=1024&ud[country]=9390298f3fb0c5b160498935d79cb139aef28e1c47358b4bbba61862b9c26e59&ud[client_ip_address]=da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d&v=2.9.100&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1681228963586.1798595709&it=1681228963231&coo=false&rqm=GET IP157.240.200.35:443
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerDigiCert Inc Subject*.facebook.com FingerprintCD:4C:BE:6E:79:43:3B:20:4B:AD:FD:AF:43:01:EB:11:7E:D9:C4:43 ValidityWed, 18 Jan 2023 00:00:00 GMT - Tue, 18 Apr 2023 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=559928301484091&ev=PageView&dl=https%3A%2F%2Fwww.filefactory.com%2Ffile%2F2prv2pqq5f6c%2FBorisFX.Sapphire.AE.2023.02.CE.rar&rl=&if=false&ts=1681228963587&sw=1280&sh=1024&ud[country]=9390298f3fb0c5b160498935d79cb139aef28e1c47358b4bbba61862b9c26e59&ud[client_ip_address]=da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d&v=2.9.100&r=stable&ec=0&o=30&cs_est=true&fbp=fb.1.1681228963586.1798595709&it=1681228963231&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 11 Apr 2023 16:02:24 GMT
X-Firefox-Spdy: h2
|
|
| www.facebook.com/tr/?id=559928301484091&ev=ff_member&dl=https%3A%2F%2Fwww.filefactory.com%2Ffile%2F2prv2pqq5f6c%2FBorisFX.Sapphire.AE.2023.02.CE.rar&rl=&if=false&ts=1681228963589&cd[type]=free&cd[subends]=0&cd[subduration]=0&cd[files]=0&cd[filesdownloaded]=0&sw=1280&sh=1024&ud[country]=9390298f3fb0c5b160498935d79cb139aef28e1c47358b4bbba61862b9c26e59&ud[client_ip_address]=da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d&v=2.9.100&r=stable&ec=1&o=30&fbp=fb.1.1681228963586.1798595709&it=1681228963231&coo=false&rqm=GET | 157.240.200.35 | 200 OK | 0 B |
URL GET HTTP/2www.facebook.com/tr/?id=559928301484091&ev=ff_member&dl=https%3A%2F%2Fwww.filefactory.com%2Ffile%2F2prv2pqq5f6c%2FBorisFX.Sapphire.AE.2023.02.CE.rar&rl=&if=false&ts=1681228963589&cd[type]=free&cd[subends]=0&cd[subduration]=0&cd[files]=0&cd[filesdownloaded]=0&sw=1280&sh=1024&ud[country]=9390298f3fb0c5b160498935d79cb139aef28e1c47358b4bbba61862b9c26e59&ud[client_ip_address]=da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d&v=2.9.100&r=stable&ec=1&o=30&fbp=fb.1.1681228963586.1798595709&it=1681228963231&coo=false&rqm=GET IP157.240.200.35:443
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerDigiCert Inc Subject*.facebook.com FingerprintCD:4C:BE:6E:79:43:3B:20:4B:AD:FD:AF:43:01:EB:11:7E:D9:C4:43 ValidityWed, 18 Jan 2023 00:00:00 GMT - Tue, 18 Apr 2023 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=559928301484091&ev=ff_member&dl=https%3A%2F%2Fwww.filefactory.com%2Ffile%2F2prv2pqq5f6c%2FBorisFX.Sapphire.AE.2023.02.CE.rar&rl=&if=false&ts=1681228963589&cd[type]=free&cd[subends]=0&cd[subduration]=0&cd[files]=0&cd[filesdownloaded]=0&sw=1280&sh=1024&ud[country]=9390298f3fb0c5b160498935d79cb139aef28e1c47358b4bbba61862b9c26e59&ud[client_ip_address]=da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d&v=2.9.100&r=stable&ec=1&o=30&fbp=fb.1.1681228963586.1798595709&it=1681228963231&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Tue, 11 Apr 2023 16:02:24 GMT
X-Firefox-Spdy: h2
|
|
| mc.us6.list-manage.com/subscribe/form-settings?u=cc27616a935143f3234e68708&id=7870230735&u=cc27616a935143f3234e68708&id=7870230735&c=dojo_request_script_callbacks.dojo_request_script0 | 104.110.24.122 | | 6.2 kB |
URL GET mc.us6.list-manage.com/subscribe/form-settings?u=cc27616a935143f3234e68708&id=7870230735&u=cc27616a935143f3234e68708&id=7870230735&c=dojo_request_script_callbacks.dojo_request_script0 IP104.110.24.122:0
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerDigiCert Inc Subjectwildcardsan.list-manage.com FingerprintE8:D7:63:51:A8:58:2A:46:78:9F:A4:57:6C:BA:F5:A0:50:D7:9F:75 ValidityMon, 27 Jun 2022 00:00:00 GMT - Thu, 29 Jun 2023 23:59:59 GMT
File typeASCII text, with very long lines (12781), with no line terminators Hashb4b632cc92b7497665a00ea7f4e4185d 5784a1a702feff336a9519e93cd53b8694b9b612 fec20cc62b53e3a458dadc074f5852889f18827319802df572056ce30bfdaa92
GET /subscribe/form-settings?u=cc27616a935143f3234e68708&id=7870230735&u=cc27616a935143f3234e68708&id=7870230735&c=dojo_request_script_callbacks.dojo_request_script0 HTTP/1.1
Host: mc.us6.list-manage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
content-type: application/json; charset=utf-8
content-length: 6179
x-ua-compatible: IE=edge,chrome=1
referrer-policy: same-origin
content-encoding: gzip
cache-control: max-age=300
expires: Tue, 11 Apr 2023 16:07:24 GMT
date: Tue, 11 Apr 2023 16:02:24 GMT
vary: Accept-Encoding
set-cookie: _mcid=1.6369a03faaa02242d49bf7b85c322fd2.7d0ced7d8ed7e6ceb1321d6ecfac2a62ec250bfc97023bade114a9b75bc71fc9; expires=Wed, 10-Apr-2024 16:02:24 GMT; Max-Age=31536000; path=/
_mc_anon_id=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
_abck=1B761A8747FA9105F67D856B30F37D07~-1~YAAQ900kF5fc/hyHAQAA7dUNcQlUUWMzGXczTq1Fd8WNzqXUTi3ydTp4zGKSEiQuqkLa8VwhwJ7BNRdDggU1nOrRLxXu3qnzcWwf326LfaE4OcUmVsxJSiLCVH9MdVVEbhhX7zjWxxJ3BLhLbSlUQ3A1eLz2yON/8vhwl+dJ1VvdXfCdiqw0F58f7So0XAY7aJnI1FD4CZmVu+D803Q0/VEZOu7YI3RfxvU8NlVlXcrVfleLTQXm7N6avbM3fAix5ifxeH7F6GvsMkEf/Kd3MCE6G3FMg4hF9bCA39ppI0ij/J6R6juZhxrr8ZHwOnrru3CUiQV8nb1PcfaNBu3VOTG/C5zXU/HENK3BwKUS7ylW2X60I9xHpv/pN4tSnI8qmw==~-1~-1~-1; Domain=.list-manage.com; Path=/; Expires=Wed, 10 Apr 2024 16:02:24 GMT; Max-Age=31536000; SameSite=None; Secure
ak_bmsc=526D8069E9B8588C8B277480E0985CB5~000000000000000000000000000000~YAAQ900kF5jc/hyHAQAA7dUNcRMTOpxNOwbedpFrLr/FOqTyo2uJIe9IiQwr+Tz7LONJ/nmeBpVr4Z3SsG/lLPt1lNRt5rW2SLWCnFXBUflYmv/HrzJyac1gqvU0LUcFXkbjY+QSVzxJlJ0bxRseYOkYK6+UhBfmEnQSaeEmBMQwf0v2R+sJIHUzdeupPrfH7ms+0JOkvHoNezMnpC7HRK1kNoTi6lWph4OsEjQFglvE/lvQhxgNM4SWKZCLYMMYJIT/2j2cz4JHmih81Ppn+mLyq2soURLyPOyBmVJXNyZ6dfOhn3IWmeu+ufdrP8pHwRKLeotcYUwPQ48XxJ4w+DiV27/lyOw3xIBzPnbc/7jDdDeXNOaJGtlVY6HialrEmUk2z4k79UFRYETeZlZ+; Domain=.us6.list-manage.com; Path=/; Expires=Tue, 11 Apr 2023 18:02:24 GMT; Max-Age=7200; SameSite=None; Secure; HttpOnly
bm_sz=DC379B17E823A7F735E1CE5202CC7618~YAAQ900kF5nc/hyHAQAA7dUNcRM75KkmKjdc0kQ4+shNTzZZjmISF11O+mL07lcvKF6lLmsfhbub96ldADuYTBUNjRZ5MqPAoZ2Zqx16OCvcdWOQpbe5uSnTqMTuITTNYfT5mmGbnVo/v+QSGjlOgVYOcV283mwoo4CSALCIkW/0nYQlnVmDiQLEkb54AcNc8McgAhFTrYcJoQFn9Np0DcAsfsbc1ACgDq270x4NmcEMvHxxEGqAxzmhc1lvklcgFu6LBTf/n3v3HeuPwHbBnVgVuhixN9fMhTI3fC+WXtn3JjSyhKM+Bg==~3159090~4408632; Domain=.list-manage.com; Path=/; Expires=Tue, 11 Apr 2023 20:02:24 GMT; Max-Age=14400; SameSite=None; Secure
X-Firefox-Spdy: h2
|
|
| engagecdn.filefactory.com/t246f07e0/img/e3t46_dycpm7_dddc0ed1.jpg | 89.149.201.79 | 200 OK | 196 kB |
URL GET HTTP/2engagecdn.filefactory.com/t246f07e0/img/e3t46_dycpm7_dddc0ed1.jpg IP89.149.201.79:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGlobalSign nv-sa Subject*.filefactory.com Fingerprint56:09:43:41:41:C8:6C:BA:13:2E:84:EB:4C:97:9F:59:2E:EE:AB:36 ValidityFri, 18 Mar 2022 07:39:09 GMT - Wed, 19 Apr 2023 07:39:08 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1200, components 3\012- data Size196 kB (196503 bytes) Hash13b8e8a5e5a70ca5ea52f6c67b0aea94 50616d039eff9db0e2ae0b935fec12a6c0a55909 a47dd290c2791fb9e153defda461bf8d1dd10d475711894c80d8c448b211ba6f
GET /t246f07e0/img/e3t46_dycpm7_dddc0ed1.jpg HTTP/1.1
Host: engagecdn.filefactory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Cookie: locale=en_US.utf8; _fbp=fb.1.1681228963586.1798595709
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 11 Apr 2023 16:02:24 GMT
content-type: image/jpeg
content-length: 196503
last-modified: Thu, 30 Apr 2020 18:25:15 GMT
expires: Wed, 10 Apr 2024 16:02:24 GMT
cache-control: max-age=31536000, public, no-transform
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| engagecdn.filefactory.com/t246f07e0/img/e3t46_huvsmw798b7sbtfd5wyk_bac6f6c2f517602ab8355add92356f9b.png | 89.149.201.79 | 200 OK | 122 kB |
URL GET HTTP/2engagecdn.filefactory.com/t246f07e0/img/e3t46_huvsmw798b7sbtfd5wyk_bac6f6c2f517602ab8355add92356f9b.png IP89.149.201.79:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGlobalSign nv-sa Subject*.filefactory.com Fingerprint56:09:43:41:41:C8:6C:BA:13:2E:84:EB:4C:97:9F:59:2E:EE:AB:36 ValidityFri, 18 Mar 2022 07:39:09 GMT - Wed, 19 Apr 2023 07:39:08 GMT
File typePNG image data, 580 x 200, 8-bit/color RGBA, non-interlaced\012- data Size122 kB (122137 bytes) Hashbac6f6c2f517602ab8355add92356f9b c8f5543e6256eea65c9711aeaeee099eca442718 88da400955be51edec77a77a57967be6716a7c223b7dda2064c9f7fa96f068b4
GET /t246f07e0/img/e3t46_huvsmw798b7sbtfd5wyk_bac6f6c2f517602ab8355add92356f9b.png HTTP/1.1
Host: engagecdn.filefactory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Cookie: locale=en_US.utf8; _fbp=fb.1.1681228963586.1798595709
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 11 Apr 2023 16:02:24 GMT
content-type: image/png
content-length: 122137
last-modified: Thu, 30 Apr 2020 18:25:15 GMT
expires: Wed, 10 Apr 2024 16:02:24 GMT
cache-control: max-age=31536000, public, no-transform
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| engagecdn.filefactory.com/t246f07e0/img/e3t46_mhf6gs_90edb18f.png | 89.149.201.79 | 200 OK | 225 kB |
URL GET HTTP/2engagecdn.filefactory.com/t246f07e0/img/e3t46_mhf6gs_90edb18f.png IP89.149.201.79:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGlobalSign nv-sa Subject*.filefactory.com Fingerprint56:09:43:41:41:C8:6C:BA:13:2E:84:EB:4C:97:9F:59:2E:EE:AB:36 ValidityFri, 18 Mar 2022 07:39:09 GMT - Wed, 19 Apr 2023 07:39:08 GMT
File typePNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced\012- data Size225 kB (224822 bytes) Hashf727c0a9d1a72b879569f5b5b260a84a 6eba15101c4542a635f1255e708e931cf087b845 b6d64fbdda7f88e20b6221df1ae9fb5378287f68c4743d5c47ba2e41dcaf007b
GET /t246f07e0/img/e3t46_mhf6gs_90edb18f.png HTTP/1.1
Host: engagecdn.filefactory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Cookie: locale=en_US.utf8; _fbp=fb.1.1681228963586.1798595709
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 11 Apr 2023 16:02:24 GMT
content-type: image/png
content-length: 224822
last-modified: Fri, 02 Apr 2021 01:40:21 GMT
expires: Wed, 10 Apr 2024 16:02:24 GMT
cache-control: max-age=31536000, public, no-transform
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| downloads.mailchimp.com/js/signup-forms/popup/unique-methods/73bf20a8fe762dee6abd0173cd576e53d748a0df/popup.js | 143.204.237.123 | 200 OK | 31 kB |
URL GET HTTP/1.1downloads.mailchimp.com/js/signup-forms/popup/unique-methods/73bf20a8fe762dee6abd0173cd576e53d748a0df/popup.js IP143.204.237.123:443
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerAmazon Subjectdownloads.mailchimp.com Fingerprint71:CA:F4:D1:5C:6A:B9:FA:41:B9:63:28:DB:BB:2F:BE:05:00:31:46 ValidityThu, 23 Feb 2023 00:00:00 GMT - Thu, 03 Aug 2023 23:59:59 GMT
File typeASCII text, with very long lines (65526) Hashdd24c20e5402733ca4b75566661d36c1 c04dec48306217964092a3d696561fc8329785b9 79ac7d2d5985f295e52589a7b5f1cea67411fa0cb50039cdbd6091b05c606a59
GET /js/signup-forms/popup/unique-methods/73bf20a8fe762dee6abd0173cd576e53d748a0df/popup.js HTTP/1.1
Host: downloads.mailchimp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 29 Sep 2022 15:39:29 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Tue, 11 Apr 2023 12:46:11 GMT
ETag: W/"d3149280c831cbf6538770c71a916f43"
X-Cache: Hit from cloudfront
Via: 1.1 79222e94ad9d7455e475fd04f37068c4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: CPH50-C1
X-Amz-Cf-Id: Gr-4qsYy_g7YXS0r6C25-TsPkV8lyyjwN0IY6elxk_GvC988v9CxWQ==
Age: 11775
Vary: Accept-Encoding, Origin
|
|
| downloads.mailchimp.com/css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/common.css | 143.204.237.123 | 200 OK | 2.4 kB |
URL GET HTTP/1.1downloads.mailchimp.com/css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/common.css IP143.204.237.123:443
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerAmazon Subjectdownloads.mailchimp.com Fingerprint71:CA:F4:D1:5C:6A:B9:FA:41:B9:63:28:DB:BB:2F:BE:05:00:31:46 ValidityThu, 23 Feb 2023 00:00:00 GMT - Thu, 03 Aug 2023 23:59:59 GMT
Hashd19b18b64fe30a64762d4a50ca861b1c cf0b39c5e4a85fa9cb916f074c62ec2315528c95 ddc117511a02d7e507e26304afa0f9877c6644f43ec83ca8a15ff81b00c1e79e
GET /css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/common.css HTTP/1.1
Host: downloads.mailchimp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 29 Sep 2022 15:39:29 GMT
Server: AmazonS3
Content-Encoding: br
Date: Tue, 11 Apr 2023 09:50:57 GMT
ETag: W/"82e72d627b04e1654282023cca1d1e69"
X-Cache: Hit from cloudfront
Via: 1.1 79222e94ad9d7455e475fd04f37068c4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: CPH50-C1
X-Amz-Cf-Id: eGUO20njWbaMhs96eLogvVlxlMauW6OYr1oClCy7iNIGWQmntGcDsw==
Age: 22289
Vary: Accept-Encoding, Origin
|
|
| downloads.mailchimp.com/css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/modal.css | 143.204.237.123 | 200 OK | 832 B |
URL GET HTTP/1.1downloads.mailchimp.com/css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/modal.css IP143.204.237.123:443
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerAmazon Subjectdownloads.mailchimp.com Fingerprint71:CA:F4:D1:5C:6A:B9:FA:41:B9:63:28:DB:BB:2F:BE:05:00:31:46 ValidityThu, 23 Feb 2023 00:00:00 GMT - Thu, 03 Aug 2023 23:59:59 GMT
Hash5b8a3e04763104af2a46282ffbca8175 2fd2d27177eb15cf14c6f2c862ff5839efeffe58 c28159711b8dc2ed11bb989d60a84c2196048d8822ff04ea70568041b0a36ae3
GET /css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/modal.css HTTP/1.1
Host: downloads.mailchimp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 29 Sep 2022 15:39:29 GMT
Server: AmazonS3
Content-Encoding: br
Date: Tue, 11 Apr 2023 07:45:57 GMT
ETag: W/"aa6f4416185bd7f299dd89e11dac117f"
X-Cache: Hit from cloudfront
Via: 1.1 79222e94ad9d7455e475fd04f37068c4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: CPH50-C1
X-Amz-Cf-Id: XnhFSM9cAoIsveVTgVmOSEEdkmkbCT3ZcO_Z0TOy0Xkt67uO-FpRpA==
Age: 29789
Vary: Accept-Encoding, Origin
|
|
| downloads.mailchimp.com/css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/banner.css | 143.204.237.85 | 200 OK | 439 B |
URL GET HTTP/1.1downloads.mailchimp.com/css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/banner.css IP143.204.237.85:443
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerAmazon Subjectdownloads.mailchimp.com Fingerprint71:CA:F4:D1:5C:6A:B9:FA:41:B9:63:28:DB:BB:2F:BE:05:00:31:46 ValidityThu, 23 Feb 2023 00:00:00 GMT - Thu, 03 Aug 2023 23:59:59 GMT
Hashbab44801ec505a80a429748752285898 a8917d5696408a2c4d6bdd84e717765f8b26a3e4 784ca688890c4757427ee02c906c7dcf1b115ce4ff78307e170e75ee664d20b0
GET /css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/banner.css HTTP/1.1
Host: downloads.mailchimp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 29 Sep 2022 15:39:29 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Tue, 11 Apr 2023 12:46:12 GMT
ETag: W/"78d1bdd981816cfbeb6954a85f9efa58"
X-Cache: Hit from cloudfront
Via: 1.1 b9ba4bda57a72c60657b278a2341fc54.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: CPH50-C1
X-Amz-Cf-Id: E9sXcIDDqvuLI31HmYWTp6FszchxrUY19qTeZTdEdO8tiYURckOcvw==
Age: 11774
Vary: Accept-Encoding, Origin
|
|
| downloads.mailchimp.com/css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/layout-2.css | 143.204.237.85 | 200 OK | 378 B |
URL GET HTTP/1.1downloads.mailchimp.com/css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/layout-2.css IP143.204.237.85:443
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerAmazon Subjectdownloads.mailchimp.com Fingerprint71:CA:F4:D1:5C:6A:B9:FA:41:B9:63:28:DB:BB:2F:BE:05:00:31:46 ValidityThu, 23 Feb 2023 00:00:00 GMT - Thu, 03 Aug 2023 23:59:59 GMT
Hashcf3f32b87e7db0bc75850ee6a3971b0a f2cd301fb0f02e3f0268ff23b654a239113e4fb2 79357138bcdc91233e5196ca82ef83bed0fdcb2468b4cd1a433c9cb859ac5fdd
GET /css/signup-forms/popup/73bf20a8fe762dee6abd0173cd576e53d748a0df/layout-2.css HTTP/1.1
Host: downloads.mailchimp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 29 Sep 2022 15:39:29 GMT
Server: AmazonS3
Content-Encoding: br
Date: Tue, 11 Apr 2023 12:46:12 GMT
ETag: W/"38f50a83c6d5d15facb231447fa1ac56"
X-Cache: Hit from cloudfront
Via: 1.1 cfd12cc4ec21f43f7afaabc9c7275134.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: CPH50-C1
X-Amz-Cf-Id: 7Jnj6QZkDW7YKu1_mgi2mysHHi5jRGXmVjXEUL0YnaJbeXqKUbjqrw==
Age: 11774
Vary: Accept-Encoding, Origin
|
|
| www.facebook.com/tr/?id=559928301484091&ev=Microdata&dl=https%3A%2F%2Fwww.filefactory.com%2Ffile%2F2prv2pqq5f6c%2FBorisFX.Sapphire.AE.2023.02.CE.rar&rl=&if=false&ts=1681228965092&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22BorisFX.Sapphire.AE.2023.02.CE.rar%20-%20FileFactory%22%2C%22meta%3Adescription%22%3A%22FileFactory%20is%20the%20best%20place%20to%20upload%20and%20share%20files%20with%20no%20limits%20since%202005.%20Send%20and%20receive%20any%20type%20of%20file%20up%20to%20a%20massive%205GB%20with%20unlimited%20file%20bandwidth.%22%2C%22meta%3Akeywords%22%3A%22free%20music%20downloads%2Cfree%20mp3%20downloads%2Cdownload%20free%20music%2Cfree%20music%2Cdownload%20music%2Cimage%20hosting%2Conline%20photo%20storage%2Cfree%20cloud%20storage%2Ccloud%20storage%20free%2Cfile%20hosting%2Cfree%20file%20hosting%22%7D&cd[OpenGraph]=%7B%7D&cd[Schema.org]=%5B%5D&cd[JSON-LD]=%5B%5D&sw=1280&sh=1024&ud[country]=9390298f3fb0c5b160498935d79cb139aef28e1c47358b4bbba61862b9c26e59&ud[client_ip_address]=da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d&v=2.9.100&r=stable&ec=2&o=30&fbp=fb.1.1681228963586.1798595709&it=1681228963231&coo=false&es=automatic&tm=3&rqm=GET | 157.240.200.35 | 200 OK | 0 B |
URL GET HTTP/3www.facebook.com/tr/?id=559928301484091&ev=Microdata&dl=https%3A%2F%2Fwww.filefactory.com%2Ffile%2F2prv2pqq5f6c%2FBorisFX.Sapphire.AE.2023.02.CE.rar&rl=&if=false&ts=1681228965092&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22BorisFX.Sapphire.AE.2023.02.CE.rar%20-%20FileFactory%22%2C%22meta%3Adescription%22%3A%22FileFactory%20is%20the%20best%20place%20to%20upload%20and%20share%20files%20with%20no%20limits%20since%202005.%20Send%20and%20receive%20any%20type%20of%20file%20up%20to%20a%20massive%205GB%20with%20unlimited%20file%20bandwidth.%22%2C%22meta%3Akeywords%22%3A%22free%20music%20downloads%2Cfree%20mp3%20downloads%2Cdownload%20free%20music%2Cfree%20music%2Cdownload%20music%2Cimage%20hosting%2Conline%20photo%20storage%2Cfree%20cloud%20storage%2Ccloud%20storage%20free%2Cfile%20hosting%2Cfree%20file%20hosting%22%7D&cd[OpenGraph]=%7B%7D&cd[Schema.org]=%5B%5D&cd[JSON-LD]=%5B%5D&sw=1280&sh=1024&ud[country]=9390298f3fb0c5b160498935d79cb139aef28e1c47358b4bbba61862b9c26e59&ud[client_ip_address]=da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d&v=2.9.100&r=stable&ec=2&o=30&fbp=fb.1.1681228963586.1798595709&it=1681228963231&coo=false&es=automatic&tm=3&rqm=GET IP157.240.200.35:443
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerDigiCert Inc Subject*.facebook.com FingerprintCD:4C:BE:6E:79:43:3B:20:4B:AD:FD:AF:43:01:EB:11:7E:D9:C4:43 ValidityWed, 18 Jan 2023 00:00:00 GMT - Tue, 18 Apr 2023 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=559928301484091&ev=Microdata&dl=https%3A%2F%2Fwww.filefactory.com%2Ffile%2F2prv2pqq5f6c%2FBorisFX.Sapphire.AE.2023.02.CE.rar&rl=&if=false&ts=1681228965092&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22BorisFX.Sapphire.AE.2023.02.CE.rar%20-%20FileFactory%22%2C%22meta%3Adescription%22%3A%22FileFactory%20is%20the%20best%20place%20to%20upload%20and%20share%20files%20with%20no%20limits%20since%202005.%20Send%20and%20receive%20any%20type%20of%20file%20up%20to%20a%20massive%205GB%20with%20unlimited%20file%20bandwidth.%22%2C%22meta%3Akeywords%22%3A%22free%20music%20downloads%2Cfree%20mp3%20downloads%2Cdownload%20free%20music%2Cfree%20music%2Cdownload%20music%2Cimage%20hosting%2Conline%20photo%20storage%2Cfree%20cloud%20storage%2Ccloud%20storage%20free%2Cfile%20hosting%2Cfree%20file%20hosting%22%7D&cd[OpenGraph]=%7B%7D&cd[Schema.org]=%5B%5D&cd[JSON-LD]=%5B%5D&sw=1280&sh=1024&ud[country]=9390298f3fb0c5b160498935d79cb139aef28e1c47358b4bbba61862b9c26e59&ud[client_ip_address]=da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d&v=2.9.100&r=stable&ec=2&o=30&fbp=fb.1.1681228963586.1798595709&it=1681228963231&coo=false&es=automatic&tm=3&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: www.facebook.com
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
priority: u=6
date: Tue, 11 Apr 2023 16:02:26 GMT
|
|
| engagesrvr.filefactory.com/?938685878&keywords=guest | 213.227.142.29 | 200 OK | 2.8 kB |
URL GET HTTP/2engagesrvr.filefactory.com/?938685878&keywords=guest IP213.227.142.29:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar CertificateIssuerGlobalSign nv-sa Subject*.filefactory.com Fingerprint56:09:43:41:41:C8:6C:BA:13:2E:84:EB:4C:97:9F:59:2E:EE:AB:36 ValidityFri, 18 Mar 2022 07:39:09 GMT - Wed, 19 Apr 2023 07:39:08 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (3099), with no line terminators Hashb16de19cc7024edb5b59fb8ef6108333 06aed3bab5a782d6d00b9aef7633d94547c58952 12ca76f6a56ee12ae361c1d8c433f233e7bc82e5a9feeeb8d0512e583a2cf3b0
GET /?938685878&keywords=guest HTTP/1.1
Host: engagesrvr.filefactory.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.filefactory.com
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 11 Apr 2023 16:02:24 GMT
content-type: application/json
cache-control: no-store, no-cache, no-transform, must-revalidate, proxy-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-store, no-cache
expires: Sat, 26 Jul 1997 05:00:00 GMT
access-control-allow-origin: https://www.filefactory.com
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-headers: X-Requested-With, Content-Type, CSRFToken, Authorization
link: <//engagecdn.filefactory.com>; rel=dns-prefetch
content-encoding: br
X-Firefox-Spdy: h2
|
|
| addresseepaper.com/sfp.js | 0.0.0.0 | | 0 B |
URL GET addresseepaper.com/sfp.js IP0.0.0.0:0
Requested byhttps://www.filefactory.com/file/2prv2pqq5f6c/BorisFX.Sapphire.AE.2023.02.CE.rar
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /sfp.js HTTP/1.1
Host: addresseepaper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.filefactory.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
0.0.0.0