Report - zeroideas.net/download/?filename=WinMedkit.rar

Report Overview

Visited public
2025-03-14 14:39:15
Tags
Submit Tags
URL
zeroideas.net/download/?filename=WinMedkit.rar
Finishing URL
zeroideas.net/download/?filename=WinMedkit.rar
IP / ASN
172.67.198.213
#13335 CLOUDFLARENET
Title
Download - ZeroIdeas

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
zeroideas.net	unknown	2008-08-28	2012-08-26	2024-11-05	18 kB	915 kB	104.21.21.133
cdnjs.cloudflare.com	235	2009-02-17	2012-05-23	2025-03-12	474 B	30 kB	104.17.24.14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
zeroideas.net/wp-content/themes/zeroideas/page-templates/down.php?path=WinMedkit.rar
IP
104.21.21.133
ASN
#13335 CLOUDFLARENET

File type
RAR archive data, v4, os: Win32, flags: Locked Solid
Size
110 kB (109629 bytes)
Hash
79b0ae89d5f73c588d4a701562224199
6cced2d559d1946cf3a225b93479eb854cd68970
7bfcc3e316835bb9ddcc846a5dc9b9035f985ae4ba54f8666f2b0e5a599a678c

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/60

JavaScript (12)

	URL	From	Size	First Seen	Last Seen
	zeroideas.net/wp-content/plugins/zeroideas-mailling-list/js/ajax.js	ScriptElement	4.6 kB	2024-05-19	2025-05-05
Pretty URL zeroideas.net/wp-content/plugins/zeroideas-mailling-list/js/ajax.js IP 104.21.21.133 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-19 04:12 Last Seen2025-05-05 19:35 Times Seen17 Hash 68245bb91a9117a12a66474f70c769dc b318366457d80fba7c2bc2ca425bb3abb50ad6c4 7a5f505bc9934296b257996ac907b6535afae70d7f6fb82ec1e51ac29ed1f26a Loading...

	zeroideas.net/download/?filename=WinMedkit.rar	ScriptElement	100 B	2024-05-19	2025-05-05
Pretty URL zeroideas.net/download/?filename=WinMedkit.rar IP 104.21.21.133 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-19 04:12 Last Seen2025-05-05 19:35 Times Seen17 Hash c39818e79380aaedf5de813e707266eb d635c73193de83897a404746eb51bfe3aecf09b3 3dfb10fa41464db93f4fbd1fecc0cd68557570f1329503d538da2b26d2222707 Loading...

	zeroideas.net/download/?filename=WinMedkit.rar	ScriptElement	635 B	2023-03-07	2025-05-05
Pretty URL zeroideas.net/download/?filename=WinMedkit.rar IP 104.21.21.133 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:12 Last Seen2025-05-05 19:35 Times Seen21 Hash 18f91e34edb7befe84104fe6642c305c 80dbb264a44e0604bfa18509ad80917e3ed182b0 0cfadeb3eaa7553552eabd77ef85b637baf09f83e6e81ba0375f3900ae47e907 Loading...

	zeroideas.net/download/?filename=WinMedkit.rar	ScriptElement	290 B	2024-05-19	2025-05-05
Pretty URL zeroideas.net/download/?filename=WinMedkit.rar IP 104.21.21.133 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-19 04:12 Last Seen2025-05-05 19:35 Times Seen17 Hash 826e3a6d34afe2903c1b6d082affbcc4 061b457e085f6a0ee0348a5e7bb38f8e448e98b2 1967a3ca4c6d1cb31e56385f7b799a704d73ade12be8688cfb55ebc26aa6e494 Loading...

	zeroideas.net/wp-content/plugins/sassy-social-share/public/js/sassy-social-share-public.js	ScriptElement	126 kB	2024-03-05	2025-07-10
Pretty URL zeroideas.net/wp-content/plugins/sassy-social-share/public/js/sassy-social-share-public.js IP 104.21.21.133 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-05 14:09 Last Seen2025-07-10 07:35 Times Seen93 Hash 8ea9723653de2a89e89a9aa95091814d 09e35b9672242002bf6fab333bd1c3a66d6a670d 88e837b16a510d57917487740558a4e2cd531680b4822617f86cf3aa32f23686 Loading...

	zeroideas.net/wp-content/themes/twentyfourteen/js/functions.js	ScriptElement	5.4 kB	2023-08-10	2025-07-16
Pretty URL zeroideas.net/wp-content/themes/twentyfourteen/js/functions.js IP 104.21.21.133 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-10 19:05 Last Seen2025-07-16 07:52 Times Seen144 Hash 20ea6bb2e918feb5392be0617397ec15 0164130ce5cb19b9cc60faff5ce9cfa0ec874c63 1b37e5c81077342fa855ca18e5802fb629fef3ab2f93a655108dc0e5827d99c6 Loading...

	zeroideas.net/wp-includes/js/jquery/jquery.min.js	ScriptElement	88 kB	2023-11-03	2025-07-19
Pretty URL zeroideas.net/wp-includes/js/jquery/jquery.min.js IP 104.21.21.133 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-03 09:26 Last Seen2025-07-19 06:17 Times Seen148728 Hash 826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf Loading...

	zeroideas.net/wp-includes/js/jquery/jquery-migrate.min.js	ScriptElement	14 kB	2023-05-09	2025-07-19
Pretty URL zeroideas.net/wp-includes/js/jquery/jquery-migrate.min.js IP 104.21.21.133 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-09 19:21 Last Seen2025-07-19 06:17 Times Seen154960 Hash 9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89 Loading...

	zeroideas.net/wp-content/plugins/pootle-page-builder//js/front-end.js	ScriptElement	23 kB	2023-03-13	2025-05-05
Pretty URL zeroideas.net/wp-content/plugins/pootle-page-builder//js/front-end.js IP 104.21.21.133 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 14:58 Last Seen2025-05-05 19:35 Times Seen20 Hash 747c5c516c3b37b3f7a69de9fb4ba316 254905d42c3acbd8c1d0e389ffada2d9534f71fd 1bdbed761faa16f5aeb432036c4f71795a2088c5aa834fa10230a69af18c81f7 Loading...

	zeroideas.net/wp-content/plugins/wp-show-more/wpsm-script.js	ScriptElement	531 B	2023-03-07	2025-07-17
Pretty URL zeroideas.net/wp-content/plugins/wp-show-more/wpsm-script.js IP 104.21.21.133 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:57 Last Seen2025-07-17 01:04 Times Seen171 Hash c47923bc6ec80f68d6bea3aaa036ad3f 828d1a9c562e2f730f5687919412d1908ce5819e 07ed98a3b2e3e5f1d3c8f5feb13211b469f30dd6aba8274652a10aeea3c44c7f Loading...

	zeroideas.net/download/?filename=WinMedkit.rar	ScriptElement	961 B	2024-05-19	2025-05-05
Pretty URL zeroideas.net/download/?filename=WinMedkit.rar IP 104.21.21.133 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-19 04:12 Last Seen2025-05-05 19:35 Times Seen17 Hash 22fb6cdf0882591c57c8dae943ffc876 02c2a72f9be15133458258ed6ee841c1d2c1a4f9 e9a115c4e843b8ed3c79d282c25d6eb3a744f01249ab5b0af4241c9c1a736933 Loading...

	zeroideas.net/wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js	ScriptElement	23 kB	2023-03-08	2025-07-17
Pretty URL zeroideas.net/wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js IP 104.21.21.133 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:35 Last Seen2025-07-17 12:06 Times Seen1347 Hash 63fad256b41b5d84bc1e86461a96a318 20d44c76509b9fb61a6e005112d60a1f3b73b8ec a69c12ccd186a899db79fce802b46c08e71f69c2c422be2666ed8565e3add026 Loading...

HTTP Transactions (31)

URL IP Response Size

GET zeroideas.net/wp-includes/js/jquery/jquery.min.js

104.21.21.133

200 OK

88 kB

URL GET
zeroideas.net/wp-includes/js/jquery/jquery.min.js
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
88 kB (87553 bytes)
Hash
826eb77e86b02ab7724fe3d0141ff87c
79cd3587d565afe290076a8d36c31c305a573d18
cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf

HTTP Headers

GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/download/?filename=WinMedkit.rar
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:56 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:56 GMT
last-modified: Sun, 21 Apr 2024 19:19:52 GMT
etag: W/"15601-662566d8-600ec97d293826d3;br"
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ecg28fH%2BzLnpvFq7EmMrFijEbQWGUSJtvSorfyfknlYsVO%2BhoDq%2BpGxKklo3G2XKtoYnd1rGy6oygexxQUp41GVU1OVq0ZkYgOJYjpwmc38G23KgGjJRlYNqfEf938lD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204847eb89f8f55-CPH
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=73798&min_rtt=70976&rtt_var=978&sent=93&recv=50&lost=0&retrans=0&sent_bytes=62269&recv_bytes=3831&delivery_rate=465709&cwnd=137&unsent_bytes=18744&cid=6e218ebbd9481924&ts=3442&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/plugins/pootle-page-builder//js/front-end.js

104.21.21.133

200 OK

23 kB

URL GET
zeroideas.net/wp-content/plugins/pootle-page-builder//js/front-end.js
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
JavaScript source, ASCII text, with very long lines (12478)
Size
23 kB (23168 bytes)
Hash
747c5c516c3b37b3f7a69de9fb4ba316
254905d42c3acbd8c1d0e389ffada2d9534f71fd
1bdbed761faa16f5aeb432036c4f71795a2088c5aa834fa10230a69af18c81f7

HTTP Headers

GET /wp-content/plugins/pootle-page-builder//js/front-end.js HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/download/?filename=WinMedkit.rar
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:56 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:56 GMT
last-modified: Fri, 01 Jul 2022 06:25:21 GMT
etag: W/"5a80-62be9351-509ca7e99139b176;br"
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tTXRCjPOMgiW%2F85Fje94Pgz10EWXvod9Lc7dw7%2F261Wtan0yDHgaHe%2BCJsQJ9Ve6pvhkexVPWG7074ogjd77zooeQs0SCGlTqfHomIHq9To%2B6egsLHFsHurP%2F%2B3rBRKy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204847eb8b08f55-CPH
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=73194&min_rtt=70976&rtt_var=4472&sent=53&recv=30&lost=0&retrans=0&sent_bytes=30910&recv_bytes=3491&delivery_rate=256941&cwnd=137&unsent_bytes=31&cid=6e218ebbd9481924&ts=3251&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-includes/js/jquery/jquery-migrate.min.js

104.21.21.133

200 OK

14 kB

URL GET
zeroideas.net/wp-includes/js/jquery/jquery-migrate.min.js
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
JavaScript source, ASCII text, with very long lines (13479)
Size
14 kB (13577 bytes)
Hash
9ffeb32e2d9efbf8f70caabded242267
3ad0c10e501ac2a9bfa18f9cd7e700219b378738
5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89

HTTP Headers

GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/download/?filename=WinMedkit.rar
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:57 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:57 GMT
last-modified: Sun, 21 Apr 2024 19:19:52 GMT
etag: W/"3509-662566d8-42e9b038ebfea696;br"
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gsk%2FzMz0mvWcgTqyRRNmgZYXS6eTwcoRdz8d8WSB3bpFXoIP4Qpk2tNe5WxcCnJ5FZKbqewkFKDEVlXeJ7w5yiIU3dXo2rtXwsdhsl7CvBZyDD10y1LxD%2Ft6mM%2BAeMer"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204847eb8a98f55-CPH
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=71500&min_rtt=70740&rtt_var=587&sent=188&recv=106&lost=0&retrans=0&sent_bytes=160784&recv_bytes=3831&delivery_rate=1182938&cwnd=194&unsent_bytes=0&cid=6e218ebbd9481924&ts=4296&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/download/?filename=WinMedkit.rar

104.21.21.133

200 OK

50 kB

URL User Request GET
zeroideas.net/download/?filename=WinMedkit.rar
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type

Size
50 kB (49858 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /download/?filename=WinMedkit.rar HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:55 GMT
content-type: text/html; charset=UTF-8
wpo-cache-status: not cached
wpo-cache-message: In the settings, caching is disabled for matches for one of the current request's GET parameters
set-cookie: vvoi7mbm=i5arww0sexh8; expires=Wed, 19-Mar-2025 14:38:54 GMT; Max-Age=432000; path=/; secure; HttpOnly
58b42shk=px475hqgzex8; expires=Wed, 19-Mar-2025 14:38:54 GMT; Max-Age=432000; path=/; secure; HttpOnly
5oyffvy0=laha7kt7ltw2; expires=Wed, 19-Mar-2025 14:38:54 GMT; Max-Age=432000; path=/; secure; HttpOnly
PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5; path=/; secure
link: <https://zeroideas.net/?p=451>; rel=shortlink
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
refresh: 0; URL=/wp-content/themes/zeroideas/page-templates/down.php?path=WinMedkit.rar
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BS49pgOx9lqMM7lykQBETQCfRgxlEKr5HkxAMcrjwWF0elE%2FH9IIOgznTaGJYUPp6rwu1xD5qHINYGxRuE%2B38E%2BVVpXBnt80S24ZIPDtdnh0SCAPl8GvQYHcohLP7xq7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204846facd78f55-CPH
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=71299&min_rtt=71096&rtt_var=11517&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3182&recv_bytes=1147&delivery_rate=52286&cwnd=134&unsent_bytes=0&cid=6e218ebbd9481924&ts=1926&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/plugins/widget-options/assets/css/widget-options.css

104.21.21.133

200 OK

2.8 kB

URL GET
zeroideas.net/wp-content/plugins/widget-options/assets/css/widget-options.css
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
ASCII text, with very long lines (3014), with no line terminators
Size
2.8 kB (2792 bytes)
Hash
1078edef4228fe59898b90b6cf2d00da
a0271b3f9b352367ab7544fa498ef808fb5919ec
ca818e17a89f8b272e02f3d3a1b770f9f56dd89a975213d54f528560ef2b6a29

HTTP Headers

GET /wp-content/plugins/widget-options/assets/css/widget-options.css HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/download/?filename=WinMedkit.rar
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:56 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:56 GMT
last-modified: Sun, 21 Apr 2024 18:15:19 GMT
etag: W/"ae8-662557b7-9c76e4db9c4f5d31;br"
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uKIfXr6NJhS0v%2BxEEsfuRN46F9SBOio1UVhdvArAo2KMeupwg98%2ByccXbDhc9LKHXQBUGjefSDBDEfkzLJqV%2FCBItY3TAZJaa8t7DdJlP9XmO%2BsQ6KnGtPcZhHIofuE%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204847e4fdc8f55-CPH
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=73798&min_rtt=70976&rtt_var=978&sent=69&recv=50&lost=0&retrans=0&sent_bytes=42130&recv_bytes=3831&delivery_rate=465709&cwnd=137&unsent_bytes=0&cid=6e218ebbd9481924&ts=3426&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-includes/css/dist/block-library/style.min.css

104.21.21.133

200 OK

113 kB

URL GET
zeroideas.net/wp-includes/css/dist/block-library/style.min.css
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type

Size
113 kB (113381 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/download/?filename=WinMedkit.rar
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:56 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:56 GMT
last-modified: Sun, 21 Apr 2024 19:19:48 GMT
etag: W/"1bae5-662566d4-489a768b80ee84e4;br"
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mhRaqRYH2MjeMCPL1nt33uIEZHRp%2BjQcpfY5Q7vlI0l37sETaqyN8Fqx%2FeyYTm%2FSxi09irtHM3YDzEK8EkDxgem%2Biu0TgBNISA1Ihlu2mgqj2ZtSYGgkzC20bxu22El1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204847e4fd38f55-CPH
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=71772&min_rtt=70845&rtt_var=275&sent=152&recv=86&lost=0&retrans=0&sent_bytes=132928&recv_bytes=3831&delivery_rate=1182938&cwnd=166&unsent_bytes=0&cid=6e218ebbd9481924&ts=3614&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/plugins/sassy-social-share/public/css/sassy-social-share-public.css

104.21.21.133

200 OK

10 kB

URL GET
zeroideas.net/wp-content/plugins/sassy-social-share/public/css/sassy-social-share-public.css
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
ASCII text, with very long lines (10502), with no line terminators
Size
10 kB (10502 bytes)
Hash
1b97775b3c1464101d0b61fd525778be
0ed1f2c1dd82086ddcf6acb33797fb8addd7d903
8396e354653781b37e6a1c869d145ae9d8b450854e4a6dcff667e1b78afe037e

HTTP Headers

GET /wp-content/plugins/sassy-social-share/public/css/sassy-social-share-public.css HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/download/?filename=WinMedkit.rar
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:56 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:56 GMT
last-modified: Sun, 21 Apr 2024 18:15:04 GMT
etag: W/"2906-662557a8-e1063cb64a8e6156;br"
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jQr4hLUH1QR9QM5sQ%2BGD6C1DKnNPTMzyC%2F33KAlmDnXtRRvU8Hd2s6HStSyCOxbHmhh6swv%2BDV5ZWFTh2ZgCPi%2FmqZ73aux6xwhWT%2BhNBdO4Wp7BADiZi9LSGD73tFTt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204847e5ff28f55-CPH
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=71772&min_rtt=70845&rtt_var=275&sent=170&recv=86&lost=0&retrans=0&sent_bytes=151035&recv_bytes=3831&delivery_rate=1182938&cwnd=166&unsent_bytes=0&cid=6e218ebbd9481924&ts=3623&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/themes/zeroideas/zeroideas.css

104.21.21.133

200 OK

3.3 kB

URL GET
zeroideas.net/wp-content/themes/zeroideas/zeroideas.css
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
ASCII text, with very long lines (3564), with no line terminators
Size
3.3 kB (3321 bytes)
Hash
0a585e7b249b18486397fc61ccd97496
324ec85d28a76218bfabc8dc92847f6edfffb447
6898394da0747b5269551accaa1dd19eac42112b7c1699c7888cde1280f95f89

HTTP Headers

GET /wp-content/themes/zeroideas/zeroideas.css HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/wp-content/themes/zeroideas/style.css
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:57 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:57 GMT
last-modified: Sat, 30 Jul 2022 13:29:46 GMT
etag: W/"cf9-62e5324a-c2ff287ab530f6ea;br"
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fFhxP4st8HHECh%2BMnQuCJvwIRYfUfFOy30TDKNfUAAbIuaCATN%2BEpdVDevRvRgLzpxWlqIEyIW7Z0AvqRWyH3FnbX6Zv0aITbqfXPbsWH%2FIvEPyLjY7h%2BoG2pxG%2BYIKB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 920484842a938f55-CPH
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=71832&min_rtt=70845&rtt_var=557&sent=177&recv=103&lost=0&retrans=0&sent_bytes=155198&recv_bytes=3831&delivery_rate=1182938&cwnd=191&unsent_bytes=0&cid=6e218ebbd9481924&ts=4183&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/themes/zeroideas/plugins.css

104.21.21.133

200 OK

1.1 kB

URL GET
zeroideas.net/wp-content/themes/zeroideas/plugins.css
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
ASCII text, with very long lines (1240), with no line terminators
Size
1.1 kB (1144 bytes)
Hash
e7bccb05fb472c59453ea2842c23b9d5
d8408a7f612cfc753b16ae24b557c347ed54e69d
f63ed47637fee5ca3e8ca8688244df52cf65d296e4954b23b2503e2192738d43

HTTP Headers

GET /wp-content/themes/zeroideas/plugins.css HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/wp-content/themes/zeroideas/style.css
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:57 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:57 GMT
last-modified: Tue, 09 Mar 2021 09:34:22 GMT
etag: W/"478-6047411e-b882e261fd84d152;br"
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qdCSmGngXQeUxU8%2Bx%2FbcnG6YjZ2hdncm23ZUOtQEbS0DORaYGTCTkscjwFa9VHKoMRPTpPWCmj6fwFtUSkw0%2BOefQ6vQZUX%2FmRYGzAtIzk1vDuxKhR3%2BVsRcSkT%2FA08t"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 920484842a948f55-CPH
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=71735&min_rtt=70845&rtt_var=695&sent=175&recv=101&lost=0&retrans=0&sent_bytes=154223&recv_bytes=3831&delivery_rate=1182938&cwnd=189&unsent_bytes=0&cid=6e218ebbd9481924&ts=4052&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/themes/twentyfourteen/fonts/lato/lato-latin-400-normal.woff2?ver=23

104.21.21.133

200 OK

24 kB

URL GET
zeroideas.net/wp-content/themes/twentyfourteen/fonts/lato/lato-latin-400-normal.woff2?ver=23
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
Web Open Font Format (Version 2), TrueType, length 23580, version 1.0
Size
24 kB (23580 bytes)
Hash
e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537

HTTP Headers

GET /wp-content/themes/twentyfourteen/fonts/lato/lato-latin-400-normal.woff2?ver=23 HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/wp-content/themes/twentyfourteen/fonts/font-lato.css
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:58 GMT
content-type: font/woff2
content-length: 23580
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:58 GMT
last-modified: Sun, 21 Apr 2024 18:26:14 GMT
etag: "5c1c-66255a46-58a0e3d59f05a167;;;"
accept-ranges: bytes
vary: User-Agent, Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M1tF4aTc%2Fkyd006nNFVb7L2vJRq2cvhMyN2BxDD3ztjWJRPaQx3B3bXcHihYl9ZXk7arXpDkVNUSb5qKpIDs9yg%2B6TpXb1vvCkDYYe3Yj1cEUFHrUG2JkMETHiWC6GR9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204848b68408f55-CPH
server-timing: cfL4;desc="?proto=TCP&rtt=71757&min_rtt=70740&rtt_var=605&sent=292&recv=166&lost=0&retrans=0&sent_bytes=272641&recv_bytes=4536&delivery_rate=1182938&cwnd=210&unsent_bytes=0&cid=6e218ebbd9481924&ts=5519&x=0"
X-Firefox-Spdy: h2

GET cdnjs.cloudflare.com/ajax/libs/font-awesome/4.6.3/css/font-awesome.min.css

104.17.24.14

200 OK

29 kB

URL GET
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.6.3/css/font-awesome.min.css
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32
ValidityFri, 24 Jan 2025 09:16:22 GMT - Thu, 24 Apr 2025 10:16:21 GMT

File type
ASCII text, with very long lines (28900)
Size
29 kB (29063 bytes)
Hash
4083f5d376eb849a458cc790b53ba080
fb5b49426dee7f1508500e698d1b3c6b04c8fcce
008a1d103902f15fdb1c191fcb1ce8954330e7b8de43d09abb08555ba609f420

HTTP Headers

GET /ajax/libs/font-awesome/4.6.3/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:55 GMT
content-type: text/css; charset=utf-8
content-length: 5336
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "65993d9c-14d8"
last-modified: Sat, 06 Jan 2024 12:46:36 GMT
cf-cdnjs-via: cfworker/r2
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1277291
expires: Wed, 04 Mar 2026 14:38:55 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ROEY%2FWV%2BneKNOGrqBiv%2F55p%2FFdTSzCq4NevL6m4R09Zm6n0%2FlC4up2NlXeDr6qgad%2BlssIlXRFNXZN%2B6sUB9vRThCkXjhVQEsB869FetQI1Tyd50gJD3%2FeJqXOrHWa8wRd90I9ER"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 9204847f9fe1b4fa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/themes/twentyfourteen/fonts/font-lato.css

104.21.21.133

200 OK

6.1 kB

URL GET
zeroideas.net/wp-content/themes/twentyfourteen/fonts/font-lato.css
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
ASCII text, with very long lines (6379), with no line terminators
Size
6.1 kB (6063 bytes)
Hash
cfc02a7a2ef1de4118db5eaa8c91c617
98fa4599db9f9786b943d247faf225bb4a7adb48
a7b2922ce2f9841066c04f744403ee80b94873e4807e4d65ba4c7308891033c7

HTTP Headers

GET /wp-content/themes/twentyfourteen/fonts/font-lato.css HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/download/?filename=WinMedkit.rar
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:56 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:56 GMT
last-modified: Sun, 21 Apr 2024 18:26:14 GMT
etag: W/"17af-66255a46-be27a27bb5cd8183;br"
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DRKZDrjnVSufEfKkWJydruxgtlqaOPoCzs5m%2FX5hQMb9ndbVmuCMut42XGchiLncIQNguyALyfOyCuCtty092z%2Fa9Oja8XvzAwvdA1u6mwx%2FhgbTJr6jxa%2FzOO2K85pY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204847e4fdf8f55-CPH
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=73798&min_rtt=70976&rtt_var=978&sent=72&recv=50&lost=0&retrans=0&sent_bytes=43088&recv_bytes=3831&delivery_rate=465709&cwnd=137&unsent_bytes=0&cid=6e218ebbd9481924&ts=3427&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/themes/twentyfourteen/style.css

104.21.21.133

200 OK

82 kB

URL GET
zeroideas.net/wp-content/themes/twentyfourteen/style.css
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
ASCII text, with very long lines (417)
Size
82 kB (82533 bytes)
Hash
10c8d19fda2b1b5014e54de180e8452a
0aa542cb32e65bde919bd5cf0510c7bf66a96b4b
33525413d4e9145335762a5f23bfc2b8882e3293bf1d8995e76c2a17cb3b5379

HTTP Headers

GET /wp-content/themes/twentyfourteen/style.css HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/wp-content/themes/zeroideas/style.css
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:57 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:57 GMT
last-modified: Sun, 21 Apr 2024 18:26:15 GMT
etag: W/"14265-66255a47-2ab7a3b7f1351e55;br"
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pwGF08edFbZPCS%2FHRaHbVhku%2B0uaXeRXMjzwoK8woR3dR8u5msc4qWdNn5ZNgSrf9vSflNWJaCtUI7%2FS0Wsj0jlo6JShpZxW0sIwQfQHdG9qPEk2kMbtKQDUCLMGsNes"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 920484842a9a8f55-CPH
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=71377&min_rtt=70740&rtt_var=215&sent=195&recv=115&lost=0&retrans=0&sent_bytes=166460&recv_bytes=3831&delivery_rate=1182938&cwnd=209&unsent_bytes=0&cid=6e218ebbd9481924&ts=4379&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/themes/twentyfourteen/fonts/lato/lato-latin-900-normal.woff2?ver=23

104.21.21.133

200 OK

22 kB

URL GET
zeroideas.net/wp-content/themes/twentyfourteen/fonts/lato/lato-latin-900-normal.woff2?ver=23
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
Web Open Font Format (Version 2), TrueType, length 22504, version 1.0
Size
22 kB (22504 bytes)
Hash
1c6c65523675abc6fcd78e804325bd77
898d9808304dc157f5dcb18ca169ec6e2b96b3d7
08664859baab5ed98f0bf818ed77e38464ff1826dc6406d5ecbd651409afbd92

HTTP Headers

GET /wp-content/themes/twentyfourteen/fonts/lato/lato-latin-900-normal.woff2?ver=23 HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/wp-content/themes/twentyfourteen/fonts/font-lato.css
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:59 GMT
content-type: font/woff2
content-length: 22504
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:58 GMT
last-modified: Sun, 21 Apr 2024 18:26:14 GMT
etag: "57e8-66255a46-886ac7cf528ffb36;;;"
vary: User-Agent, Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=47O5vDZSLwVM%2BbbD2pNZJL07BbIvSRBUoiyQkOh%2FJG6bFFpYfZb67z1kJHDXVTxMdOW8AYe3qezo%2BM9M5b8bgU9hjcaX47Qo3dbsPtQKcR91DA0oDrvjoXgQXhYqMv1X"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204848b88948f55-CPH
server-timing: cfL4;desc="?proto=TCP&rtt=78644&min_rtt=70740&rtt_var=13097&sent=322&recv=169&lost=0&retrans=0&sent_bytes=305167&recv_bytes=4536&delivery_rate=1182938&cwnd=210&unsent_bytes=0&cid=6e218ebbd9481924&ts=5710&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/plugins/wp-show-more/wpsm-script.js

104.21.21.133

200 OK

531 B

URL GET
zeroideas.net/wp-content/plugins/wp-show-more/wpsm-script.js
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
ASCII text, with very long lines (543), with no line terminators
Size
531 B (531 bytes)
Hash
19e9f39fc92c4bffb255008c3b7e072f
aad90648e2ceb9c339394b3a25d82bda1d722315
1309a42a2baf76c7aa132f461daee6f4b1f63aa0fcbfdbe8c3946d99f864f4ad

HTTP Headers

GET /wp-content/plugins/wp-show-more/wpsm-script.js HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/download/?filename=WinMedkit.rar
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:56 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:56 GMT
last-modified: Mon, 04 Jul 2022 19:59:38 GMT
etag: W/"213-62c346aa-edd3af3b630ebf07;br"
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yqKxWtXedB7TwdQ9jmaZMUH7jtPbymjslRq7L8XRs1%2Fob%2BiZMQPbm0TINxks3m7tDhmeCIimsd%2Bp8JwJGEvTEqExNuJoo4eC7k2YwRKrhykBorfrwNVlFssLWfeR2QpY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204847eb8ba8f55-CPH
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=73194&min_rtt=70976&rtt_var=4472&sent=34&recv=30&lost=0&retrans=0&sent_bytes=18239&recv_bytes=3491&delivery_rate=256941&cwnd=137&unsent_bytes=0&cid=6e218ebbd9481924&ts=3246&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js

104.21.21.133

200 OK

23 kB

URL GET
zeroideas.net/wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
JavaScript source, ASCII text, with very long lines (23432)
Size
23 kB (23433 bytes)
Hash
63fad256b41b5d84bc1e86461a96a318
20d44c76509b9fb61a6e005112d60a1f3b73b8ec
a69c12ccd186a899db79fce802b46c08e71f69c2c422be2666ed8565e3add026

HTTP Headers

GET /wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/download/?filename=WinMedkit.rar
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:56 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:56 GMT
last-modified: Wed, 21 Dec 2022 14:42:32 GMT
etag: W/"5b89-63a31b58-7509825bbff8ade;br"
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=stCQpFd5mvkhIZkMzRqdJ%2FT3G1Ep9cDNWkMQfX7FwHx1EnGFBw7xIlb0rqy1nAcJTtF8Xo56By3mHNCz718S2CmgZrEIjM2IWpqEOAVfHbsYW%2Fiao%2FWQBjav1Uy7gZCx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204847eb8be8f55-CPH
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=73194&min_rtt=70976&rtt_var=4472&sent=45&recv=30&lost=0&retrans=0&sent_bytes=24629&recv_bytes=3491&delivery_rate=256941&cwnd=137&unsent_bytes=0&cid=6e218ebbd9481924&ts=3251&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/themes/zeroideas/page-templates/down.php?path=WinMedkit.rar

104.21.21.133

200 OK

110 kB

URL User Request GET
zeroideas.net/wp-content/themes/zeroideas/page-templates/down.php?path=WinMedkit.rar
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
RAR archive data, v4, os: Win32, flags: Locked Solid
Size
110 kB (109629 bytes)
Hash
79b0ae89d5f73c588d4a701562224199
6cced2d559d1946cf3a225b93479eb854cd68970
7bfcc3e316835bb9ddcc846a5dc9b9035f985ae4ba54f8666f2b0e5a599a678c

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/60

HTTP Headers

GET /wp-content/themes/zeroideas/page-templates/down.php?path=WinMedkit.rar HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:39:03 GMT
content-type: application/octet-stream
content-length: 109629
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
cache-control: private
content-disposition: attachment; filename=WinMedkit.rar
vary: User-Agent, Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EZIvjAGmWLK%2FPpHpWrzvebySPPO6FBK415gXds236%2BfCcUgIpvtWigHHxPyWc2Kgcz0Y1y5uQWTPvxrgj4aKzUIQAM0moVRdpVwIktqWZmzbS3MfvyoEMmkXfRWdDxk8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204849388bd8f55-CPH
server-timing: cfL4;desc="?proto=TCP&rtt=72044&min_rtt=70740&rtt_var=1561&sent=343&recv=187&lost=0&retrans=0&sent_bytes=328260&recv_bytes=4657&delivery_rate=1182938&cwnd=210&unsent_bytes=0&cid=6e218ebbd9481924&ts=10369&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/plugins/pootle-page-builder/css/front.css

104.21.21.133

200 OK

7.2 kB

URL GET
zeroideas.net/wp-content/plugins/pootle-page-builder/css/front.css
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
ASCII text, with very long lines (7253), with no line terminators
Size
7.2 kB (7236 bytes)
Hash
099816347a89acf238fbd5bf7cca6379
bfbec0fd96930d71570cb1db348e1e38d05f528c
cce408e9afc180eaada0e52c467d18ec0f73a2ce11aa5daa9f75bfd3c7ab8c74

HTTP Headers

GET /wp-content/plugins/pootle-page-builder/css/front.css HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/download/?filename=WinMedkit.rar
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:57 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:57 GMT
last-modified: Fri, 01 Jul 2022 06:25:20 GMT
etag: W/"1c44-62be9350-d6c36df948e88ee3;br"
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C6amdjiaKL%2BWKxi5rSNk9fGxL0WlK3q5PT6Ey6dpLL4wKDV8dA7LH%2BoBG7mEAtLOLZnyUgz%2FHhdW0oYCBwwXWeHfDO4LR3PgwGXPUwHuCrDNBZxkOYBOQCvXPEexg08V"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204847e4fcf8f55-CPH
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=71500&min_rtt=70740&rtt_var=587&sent=180&recv=106&lost=0&retrans=0&sent_bytes=156591&recv_bytes=3831&delivery_rate=1182938&cwnd=194&unsent_bytes=0&cid=6e218ebbd9481924&ts=4290&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/themes/zeroideas/style.css

104.21.21.133

200 OK

13 kB

URL GET
zeroideas.net/wp-content/themes/zeroideas/style.css
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
ASCII text, with very long lines (740)
Size
13 kB (12843 bytes)
Hash
e0d355ce79e8a075eb2e0b2102b01217
f79b0ac270802aaccfb079a9733dc28ac75a30f3
018ea27182dabf77420296e6960fa5c1ef9cf6174a1cc895fcdcdb3c8637161c

HTTP Headers

GET /wp-content/themes/zeroideas/style.css HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/download/?filename=WinMedkit.rar
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:56 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:56 GMT
last-modified: Sun, 06 Feb 2022 16:40:42 GMT
etag: W/"322b-61fffa0a-b5932382587545a1;br"
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mj2HSr%2BhTzRqoZWtLfIvizr2DlHf7A8wMiH5y2mM6mSWwMknAzWDL7dPc6mpYRIDDGxadhwpRju1QzUFri%2BlKENI%2FWRhQuGRVzSw9w6ClRIrSa7s3AhGlOLB%2BAdnyxCu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204847e4fed8f55-CPH
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=73194&min_rtt=70976&rtt_var=4472&sent=36&recv=30&lost=0&retrans=0&sent_bytes=19018&recv_bytes=3491&delivery_rate=256941&cwnd=137&unsent_bytes=0&cid=6e218ebbd9481924&ts=3247&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/plugins/zeroideas-mailling-list/js/ajax.js

104.21.21.133

200 OK

4.6 kB

URL GET
zeroideas.net/wp-content/plugins/zeroideas-mailling-list/js/ajax.js
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
JavaScript source, ASCII text, with very long lines (4870), with no line terminators
Size
4.6 kB (4613 bytes)
Hash
441f1ba337eed27dc493481a5a09f33c
7927496f24b794204c7480286d4f5cd84a036237
73181490f27d89bb374e0e35a95455ef02ec7bc453db5527a31ff635365350f8

HTTP Headers

GET /wp-content/plugins/zeroideas-mailling-list/js/ajax.js HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/download/?filename=WinMedkit.rar
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:57 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:57 GMT
last-modified: Mon, 14 Jun 2021 14:01:32 GMT
etag: W/"1205-60c7613c-991381db543e43d2;br"
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mIQlHGZ1TEMcALEdHbvMMRd6bwoZPYfJD4aPzBz%2BLfST9biAqcYenDdRhmhIrazyjkmChsXTNux0qFJoSnuLRz1%2FmMyUC22w11JjoMdFySrrcooidcKLxGly6npAykEs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204847eb89d8f55-CPH
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=71500&min_rtt=70740&rtt_var=587&sent=184&recv=106&lost=0&retrans=0&sent_bytes=158880&recv_bytes=3831&delivery_rate=1182938&cwnd=194&unsent_bytes=0&cid=6e218ebbd9481924&ts=4292&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-includes/css/dashicons.min.css

104.21.21.133

200 OK

59 kB

URL GET
zeroideas.net/wp-includes/css/dashicons.min.css
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
ASCII text, with very long lines (58981)
Size
59 kB (59016 bytes)
Hash
d68d6bf519169d86e155bad0bed833f8
27ba9c67d0e775fc4e6dd62011daf4c3902698fc
c21e5a2b32c47bc5f9d9efc97bc0e29fd081946d1d3ebffc5621cfafb1d3960e

HTTP Headers

GET /wp-includes/css/dashicons.min.css HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/download/?filename=WinMedkit.rar
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:56 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:56 GMT
last-modified: Thu, 04 Mar 2021 07:46:22 GMT
etag: W/"e688-6040904e-25a4bf3d58cc0720;br"
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KwG8xWp0XNPPOG0l9ZTVXh4lPnQbJQQchh9HOer1Kukcv1FXWOUelB4renYCu8Z0Cu0BP9Q0LTwrE14QPoaDVwZ0VTjfDOqSUZk94cCsOHiDf79KykGz6CmTfDQq%2BXRi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204847eb8b68f55-CPH
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=73798&min_rtt=70976&rtt_var=978&sent=78&recv=50&lost=0&retrans=0&sent_bytes=44933&recv_bytes=3831&delivery_rate=465709&cwnd=137&unsent_bytes=0&cid=6e218ebbd9481924&ts=3442&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/themes/twentyfourteen/css/blocks.css

104.21.21.133

200 OK

8.4 kB

URL GET
zeroideas.net/wp-content/themes/twentyfourteen/css/blocks.css
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
ASCII text, with very long lines (9019), with no line terminators
Size
8.4 kB (8435 bytes)
Hash
6326392dd077ac2aa5c45f74a106c813
a45c337c1a02aa5659b6422b0decd97f3b2ae910
f0153b248df1b722cc4ab8baf39ace6657a5da15da81f02de355c712242620ac

HTTP Headers

GET /wp-content/themes/twentyfourteen/css/blocks.css HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/download/?filename=WinMedkit.rar
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:56 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:56 GMT
last-modified: Sun, 21 Apr 2024 18:26:14 GMT
etag: W/"20f3-66255a46-ac9073b45e98c447;br"
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=quMCiqcut5E7RQa5h3x1q%2BI5bIDIIeCcJBTYGBX2kzDFjtVDrf3JmcN9JeqYKraqF%2B0pzsoHjtUeVFIqAmcBSK7Ic0qBNavRpUvuadHpaPaOSTe%2FOjoE%2Bsb9oDkvaRkh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204847e5ff08f55-CPH
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=71772&min_rtt=70845&rtt_var=275&sent=166&recv=86&lost=0&retrans=0&sent_bytes=148706&recv_bytes=3831&delivery_rate=1182938&cwnd=166&unsent_bytes=0&cid=6e218ebbd9481924&ts=3617&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/uploads/2015/10/zeroideas-icon.png

104.21.21.133

200 OK

3.6 kB

URL GET
zeroideas.net/wp-content/uploads/2015/10/zeroideas-icon.png
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
PNG image data, 100 x 100, 8-bit colormap, non-interlaced
Size
3.6 kB (3580 bytes)
Hash
4c026ab12a60cd78ff532acd73df6788
2a12e15418011230c1ed246e51af1da10a7c6426
4218d986232db15d1b64d3c167b243815de9cc81753eb83fcafb1003aa83e6a2

HTTP Headers

GET /wp-content/uploads/2015/10/zeroideas-icon.png HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/download/?filename=WinMedkit.rar
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:58 GMT
content-type: image/png
content-length: 3580
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:58 GMT
last-modified: Thu, 04 Feb 2021 20:56:09 GMT
etag: "dfc-601c5f69-1bd42c036a5bb5fb;;;"
accept-ranges: bytes
vary: User-Agent, Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
age: 0
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PN4hy%2BMgIXtIw%2F187n5wOGB5n7MkCsQeNf%2F3ogpUh8dU%2BftvjGjLkk1tzuVZJC4WusP94EQ%2B2eDS16psGlh%2B641dRWJTnABz93tIJF1%2B9Pwl9tso6IUDTkMTqXdUrw8w"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204848ddd408f55-CPH
server-timing: cfL4;desc="?proto=TCP&rtt=71757&min_rtt=70740&rtt_var=605&sent=293&recv=166&lost=0&retrans=0&sent_bytes=273208&recv_bytes=4536&delivery_rate=1182938&cwnd=210&unsent_bytes=0&cid=6e218ebbd9481924&ts=5538&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/uploads/2015/10/zeroideas-icon.png

104.21.21.133

200 OK

3.6 kB

URL GET
zeroideas.net/wp-content/uploads/2015/10/zeroideas-icon.png
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
PNG image data, 100 x 100, 8-bit colormap, non-interlaced
Size
3.6 kB (3580 bytes)
Hash
4c026ab12a60cd78ff532acd73df6788
2a12e15418011230c1ed246e51af1da10a7c6426
4218d986232db15d1b64d3c167b243815de9cc81753eb83fcafb1003aa83e6a2

HTTP Headers

GET /wp-content/uploads/2015/10/zeroideas-icon.png HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/download/?filename=WinMedkit.rar
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:58 GMT
content-type: image/png
content-length: 3580
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:58 GMT
last-modified: Thu, 04 Feb 2021 20:56:09 GMT
etag: "dfc-601c5f69-1bd42c036a5bb5fb;;;"
accept-ranges: bytes
vary: User-Agent, Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sa8YxRSfQnlbODH99RNTXMsPrm%2F5mYwjmyX4jokmJECdCNR7oIMqJPqcvS1BxVZQ7n4a3O7P%2B8dMZRELnDw8tp%2FW%2FWJ0CPCC%2Be1PTLytpXjQyklMSjQ8ipKtPYhN274d"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204848ddd3a8f55-CPH
server-timing: cfL4;desc="?proto=TCP&rtt=71757&min_rtt=70740&rtt_var=605&sent=298&recv=166&lost=0&retrans=0&sent_bytes=277349&recv_bytes=4536&delivery_rate=1182938&cwnd=210&unsent_bytes=0&cid=6e218ebbd9481924&ts=5539&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/themes/twentyfourteen/genericons/genericons.css

104.21.21.133

200 OK

31 kB

URL GET
zeroideas.net/wp-content/themes/twentyfourteen/genericons/genericons.css
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
ASCII text, with very long lines (23046)
Size
31 kB (31045 bytes)
Hash
8604c201ca1b346289d82daf2b6c91f6
a2f313157b00dc601ce25da4fe43f14b9e7e5974
4d5679eb4ffe764c49e2fb1386bf3ef04139e7a5a9e867da46aa1045374d6925

HTTP Headers

GET /wp-content/themes/twentyfourteen/genericons/genericons.css HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/download/?filename=WinMedkit.rar
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:56 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:56 GMT
last-modified: Sun, 21 Apr 2024 18:26:14 GMT
etag: W/"7945-66255a46-7eed0af34235dbef;br"
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kQtacGrbQpyr3g7MQvroxKEaCanHbpEuKNZVzSCdkhNYKvlRLNVfxjZ%2F0J0cvKc68Ni0I39Tq0G4yIECs%2F6xHOb1CDPzaOOZLmXdPtWqYV%2BG3Ajvmuikx6oBqkKji4hx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204847e4fe98f55-CPH
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=73798&min_rtt=70976&rtt_var=978&sent=128&recv=50&lost=0&retrans=0&sent_bytes=105949&recv_bytes=3831&delivery_rate=465709&cwnd=137&unsent_bytes=7293&cid=6e218ebbd9481924&ts=3451&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/uploads/2015/10/zeroideas-title.png

104.21.21.133

200 OK

24 kB

URL GET
zeroideas.net/wp-content/uploads/2015/10/zeroideas-title.png
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
PNG image data, 1260 x 145, 8-bit colormap, non-interlaced
Size
24 kB (23650 bytes)
Hash
87c6bc7811cf0a1e90f18cb67469aaff
e3c38067897c8ccdb25e093a0ac301e446cee47e
58acf73855426401a4d488b47d15ba8b777be812d568d7d65d7430c200c3146b

HTTP Headers

GET /wp-content/uploads/2015/10/zeroideas-title.png HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/download/?filename=WinMedkit.rar
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:57 GMT
content-type: image/png
content-length: 23650
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:57 GMT
last-modified: Thu, 04 Feb 2021 20:56:09 GMT
etag: "5c62-601c5f69-908a5e573b57706b;;;"
vary: User-Agent, Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PvSV%2BGsaGFGOcYFAlHkANoszxNOjyO86MWdoi5%2BS%2FmEJEob4IoVEYLoa2Oeu09eHwBvNG0S7Qhz4crTFwy%2BWjOujwvDKgwGJS%2BHuiXQDoz2VUORlgYAgGaGM09o%2F1Qbf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204847eb8b58f55-CPH
server-timing: cfL4;desc="?proto=TCP&rtt=71377&min_rtt=70740&rtt_var=215&sent=210&recv=115&lost=0&retrans=0&sent_bytes=182388&recv_bytes=3831&delivery_rate=1182938&cwnd=209&unsent_bytes=0&cid=6e218ebbd9481924&ts=4411&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/plugins/sassy-social-share/public/js/sassy-social-share-public.js

104.21.21.133

200 OK

126 kB

URL GET
zeroideas.net/wp-content/plugins/sassy-social-share/public/js/sassy-social-share-public.js
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type

Size
126 kB (125689 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wp-content/plugins/sassy-social-share/public/js/sassy-social-share-public.js HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/download/?filename=WinMedkit.rar
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:57 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:57 GMT
last-modified: Sun, 21 Apr 2024 18:15:04 GMT
etag: W/"1eaf9-662557a8-907510aeb2bb3aee;br"
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=19%2Ftq9PDqEyjobiUxj7jpxloHWxf%2FlD2Mv5McWF2a3gR7vmwjjl7Dm%2FipdquRj4dIVlvRIGC5OBZ%2Fm668f0IJE7CGsMgWdX69eJVemGon3RM7fTLslmSlf%2FzOGKAd%2Fgr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204847eb8c08f55-CPH
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=71377&min_rtt=70740&rtt_var=215&sent=231&recv=115&lost=0&retrans=0&sent_bytes=206661&recv_bytes=3831&delivery_rate=1182938&cwnd=209&unsent_bytes=0&cid=6e218ebbd9481924&ts=4415&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/themes/twentyfourteen/fonts/lato/lato-latin-700-normal.woff2?ver=23

104.21.21.133

200 OK

23 kB

URL GET
zeroideas.net/wp-content/themes/twentyfourteen/fonts/lato/lato-latin-700-normal.woff2?ver=23
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
Web Open Font Format (Version 2), TrueType, length 23040, version 1.0
Size
23 kB (23040 bytes)
Hash
de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49

HTTP Headers

GET /wp-content/themes/twentyfourteen/fonts/lato/lato-latin-700-normal.woff2?ver=23 HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/wp-content/themes/twentyfourteen/fonts/font-lato.css
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:58 GMT
content-type: font/woff2
content-length: 23040
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:58 GMT
last-modified: Sun, 21 Apr 2024 18:26:14 GMT
etag: "5a00-66255a46-6bfc19331385116;;;"
vary: User-Agent, Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hj1CS1scYpIAu6XnTWNbWD%2Bqtk%2BvcNQxKVoXG5R%2BqL6strHYhh6d3U71Yh2evmo%2B5cd59XBFr5%2FacpOdF2zEX45ljkgbeNFATC4zlZ1tHz4JOX4MCZsW7pfmvewGVxKt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204848b68528f55-CPH
server-timing: cfL4;desc="?proto=TCP&rtt=71150&min_rtt=70740&rtt_var=183&sent=272&recv=160&lost=0&retrans=0&sent_bytes=248960&recv_bytes=4536&delivery_rate=1182938&cwnd=210&unsent_bytes=0&cid=6e218ebbd9481924&ts=5420&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/plugins/zeroideas-mailling-list/css/style.css

104.21.21.133

200 OK

1.8 kB

URL GET
zeroideas.net/wp-content/plugins/zeroideas-mailling-list/css/style.css
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
ASCII text, with very long lines (1884), with no line terminators
Size
1.8 kB (1785 bytes)
Hash
ba5fe247d57b6b7dc09a0c73e157cd25
a50ca73a00e2f3c1c6993d38f6075a3fb0a9188c
498c47a630cdade68935c7cb3305de3bce25123d4b63b85f2d291ee147c82386

HTTP Headers

GET /wp-content/plugins/zeroideas-mailling-list/css/style.css HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/download/?filename=WinMedkit.rar
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:56 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:56 GMT
last-modified: Tue, 09 Mar 2021 08:01:38 GMT
etag: W/"6f9-60472b62-3df8e9469efb3ac7;br"
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CcKy8SOPdLKMTwgYJewHmScFJmNylmb5YVtTcDTMGFudn0Z7ye2bdG%2BgLSuRfbc6A9u95SaflgDLe2UsbfU0kdpnt6bPIWz5sfvpr2M36s1xRx06EYqGaxN6dPzhxzhx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204847e4fcd8f55-CPH
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=73194&min_rtt=70976&rtt_var=4472&sent=63&recv=30&lost=0&retrans=0&sent_bytes=40956&recv_bytes=3491&delivery_rate=256941&cwnd=137&unsent_bytes=0&cid=6e218ebbd9481924&ts=3259&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/plugins/wp-show-more/wpsm-style.css

104.21.21.133

200 OK

407 B

URL GET
zeroideas.net/wp-content/plugins/wp-show-more/wpsm-style.css
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
ASCII text, with very long lines (426), with no line terminators
Size
407 B (407 bytes)
Hash
9a68a58106cd634247ec55f85787fc1c
0f6b9ec1c4c387baae884e2c11d0eea8f7b5ccf9
a01f8f0f46087ad89d8ce6626514763f7176079b3c037994d79a73ee960dfa5e

HTTP Headers

GET /wp-content/plugins/wp-show-more/wpsm-style.css HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/download/?filename=WinMedkit.rar
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:56 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:56 GMT
last-modified: Mon, 04 Jul 2022 19:59:38 GMT
etag: W/"197-62c346aa-d50446fb7f743663;br"
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2HjqT%2ByxQqts3tAR0CxLew0t1zEgCekVeD8Ms6n9GmfPC46yxNmvwH%2FECEyg4dFQKsB1GxD2qTOnuZcqWx%2BYx0evh3ZLeWQ1J8wbQIhii8WENc0Dv1AwcX1KhUpaa%2Fp8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204847e4fd98f55-CPH
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=73798&min_rtt=70976&rtt_var=978&sent=75&recv=50&lost=0&retrans=0&sent_bytes=44255&recv_bytes=3831&delivery_rate=465709&cwnd=137&unsent_bytes=0&cid=6e218ebbd9481924&ts=3432&x=0"
X-Firefox-Spdy: h2

GET zeroideas.net/wp-content/themes/twentyfourteen/js/functions.js

104.21.21.133

200 OK

5.4 kB

URL GET
zeroideas.net/wp-content/themes/twentyfourteen/js/functions.js
IP
104.21.21.133:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zeroideas.net/download/?filename=WinMedkit.rar
Certificate
IssuerGoogle Trust Services
Subjectzeroideas.net
Fingerprint1C:03:F4:30:E1:66:58:E8:42:F1:01:CD:51:0E:69:29:10:9C:98:A5
ValiditySun, 16 Feb 2025 02:49:40 GMT - Sat, 17 May 2025 03:48:23 GMT

File type
JavaScript source, ASCII text, with very long lines (6059), with no line terminators
Size
5.4 kB (5409 bytes)
Hash
27b28664fbf23bd14954a413e4640a08
3e44f4fb0d8c0129237be930072fd4a8101c33c0
0dd31fabe3d3340e7e1780fcec1fa6ca854b4d6860c77455aad03778c45fbd62

HTTP Headers

GET /wp-content/themes/twentyfourteen/js/functions.js HTTP/1.1
Host: zeroideas.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeroideas.net/download/?filename=WinMedkit.rar
Cookie: vvoi7mbm=i5arww0sexh8; 58b42shk=px475hqgzex8; 5oyffvy0=laha7kt7ltw2; PHPSESSID=73ns6ug9ljq5vjlfklvl5r22f5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 14 Mar 2025 14:38:56 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Fri, 21 Mar 2025 14:38:56 GMT
last-modified: Sun, 21 Apr 2024 18:26:15 GMT
etag: W/"1521-66255a47-fdfb9c8c9702e849;br"
vary: Accept-Encoding,User-Agent
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HjAA3Ta4XYfotcg6C19s28br79XGjQNB8yOEg5ba3SpgVyi9JR%2B%2BvDZO2ivdlA4AVr3eJm1Y%2Bb9oqcD%2FjHh5SfuFmipOCsCKTIL2NArrk%2F38sLFt3WLUfvjG%2BbG4kjSZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9204847eb8b28f55-CPH
content-encoding: br
server-timing: cfL4;desc="?proto=TCP&rtt=73194&min_rtt=70976&rtt_var=4472&sent=41&recv=30&lost=0&retrans=0&sent_bytes=22226&recv_bytes=3491&delivery_rate=256941&cwnd=137&unsent_bytes=0&cid=6e218ebbd9481924&ts=3250&x=0"
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Detections

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by