GET /images/masterhead_home.jpg HTTP/1.1
Host: www.zerodayinitiative.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zerodayinitiative.com/css/main.css
Cookie: crumb=BUG3viPUjPBJYjZlZTI0OWE3ZTdmZDMyZjFmOGZlYzQxYTYzNDAy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 03 Jul 2025 08:57:07 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000; includeSubDomains
Last-Modified: Fri, 05 Jan 2024 18:38:08 GMT
ETag: "19276-60e3726404400"
Accept-Ranges: bytes
Content-Length: 103030
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/jpeg

GET /universal/styles-compressed/5fc7a936d9b12c49-min.en-US.css HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zerodayinitiative.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
cache-control: public, max-age=31536000
expires: Mon, 29 Jun 2026 19:04:37 GMT
last-modified: Thu, 06 Feb 2025 14:24:27 GMT
etag: "dc2c7ced3f47a6282d63a75478de2e78"
content-encoding: gzip
server: UploadServer
fastly-restarts: 1
accept-ranges: bytes
date: Thu, 03 Jul 2025 08:57:07 GMT
via: 1.1 varnish
age: 199018
x-served-by: cache-hel1410024-HEL
x-cache: HIT
x-cache-hits: 10846
x-timer: S1751533028.889504,VS0,VE0
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 1905
X-Firefox-Spdy: h2

GET /blog/2024/4/17/cve-2024-20697-windows-libarchive-remote-code-execution-vulnerability HTTP/1.1
Host: www.thezdi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
age: 0
content-encoding: gzip
content-type: text/html;charset=utf-8
date: Thu, 03 Jul 2025 08:56:49 GMT
etag: W/"4369142a72b5d4ea4545c2b8e35806b9"
expires: Thu, 01 Jan 1970 00:00:00 GMT
server: Squarespace
set-cookie: crumb=BU2lo0nu+TVgNDc5MzJlMjBjOWU0ZmM1MWFiOTc2ZjU0YmU1MWMw;Secure;Path=/
strict-transport-security: max-age=15552000
vary: Accept-Encoding
x-content-type-options: nosniff
x-contextid: Xuc1T2bI/hYQvNCeM
content-length: 14239
X-Firefox-Spdy: h2

GET /images/logo-trend.svg HTTP/1.1
Host: www.thezdi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.thezdi.com/blog/2024/4/17/cve-2024-20697-windows-libarchive-remote-code-execution-vulnerability
Cookie: crumb=BU2lo0nu+TVgNDc5MzJlMjBjOWU0ZmM1MWFiOTc2ZjU0YmU1MWMw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
age: 0
content-encoding: gzip
content-type: text/html;charset=utf-8
date: Thu, 03 Jul 2025 08:56:49 GMT
etag: W/"ff5c10996795cc5784cc551eaa6ecb1d"
expires: Thu, 01 Jan 1970 00:00:00 GMT
server: Squarespace
strict-transport-security: max-age=15552000
vary: Accept-Encoding
x-content-type-options: nosniff
x-contextid: Xuc1T2bI/XUbmCwWN
content-length: 7759
X-Firefox-Spdy: h2

GET /universal/scripts-compressed/common-cc69da0a4570b097-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.zerodayinitiative.com
DNT: 1
Connection: keep-alive
Referer: https://www.zerodayinitiative.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript
cache-control: public, max-age=31536000
expires: Thu, 02 Jul 2026 19:25:51 GMT
last-modified: Wed, 02 Jul 2025 18:40:58 GMT
etag: "d4d1a304a2a9fc94851d628db10234ad"
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 03 Jul 2025 08:57:06 GMT
age: 48674
x-served-by: cache-iad-kiad7000097-IAD, cache-hel1410031-HEL
x-cache: HIT, HIT
x-cache-hits: 86, 1133
x-timer: S1751533026.148456,VS0,VE0
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 279168
X-Firefox-Spdy: h2

GET /universal/scripts-compressed/common-vendors-stable-54bab8bb8a15366b-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.zerodayinitiative.com
DNT: 1
Connection: keep-alive
Referer: https://www.zerodayinitiative.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript
cache-control: public, max-age=31536000
expires: Wed, 20 May 2026 17:13:20 GMT
last-modified: Mon, 03 Mar 2025 17:42:11 GMT
etag: "b5e8bb8840351ba3e9c298877099090e"
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 03 Jul 2025 08:57:06 GMT
age: 1385439
x-served-by: cache-iad-kcgs7200034-IAD, cache-hel1410031-HEL
x-cache: HIT, HIT
x-cache-hits: 25883, 41405
x-timer: S1751533026.152254,VS0,VE0
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 70731
X-Firefox-Spdy: h2

GET /universal/scripts-compressed/4611-ff8218ae9d5ad9b5-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zerodayinitiative.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript
cache-control: public, max-age=31536000
expires: Thu, 02 Jul 2026 13:59:14 GMT
last-modified: Tue, 01 Jul 2025 19:47:18 GMT
etag: "8160d8f59755177982acdcb4cfd5683a"
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 03 Jul 2025 08:57:07 GMT
age: 68273
x-served-by: cache-iad-kcgs7200170-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 36, 1833
x-timer: S1751533028.877624,VS0,VE0
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 3570
X-Firefox-Spdy: h2

POST /api/census/RecordHit HTTP/1.1
Host: www.zerodayinitiative.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=utf-8
X-CSRF-Token: BUG3viPUjPBJYjZlZTI0OWE3ZTdmZDMyZjFmOGZlYzQxYTYzNDAy
Content-Length: 1005
Origin: https://www.zerodayinitiative.com
DNT: 1
Connection: keep-alive
Referer: https://www.zerodayinitiative.com/blog/2024/4/17/cve-2024-20697-windows-libarchive-remote-code-execution-vulnerability
Cookie: crumb=BUG3viPUjPBJYjZlZTI0OWE3ZTdmZDMyZjFmOGZlYzQxYTYzNDAy; _ga_DBFMYZ5KK8=GS2.1.s1751533027$o1$g0$t1751533027$j60$l0$h0; _ga=GA1.1.1623553884.1751533028; ss_cvr=7880bf19-799e-4e3f-aec0-b1e30d5b1143|1751533027822|1751533027822|1751533027822|1; ss_cvt=1751533027822
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 03 Jul 2025 08:57:08 GMT
Server: Squarespace
Strict-Transport-Security: max-age=31536000; includeSubDomains
Accept-Ranges: bytes
Age: 0
Content-Type: application/json;charset=utf-8
X-Content-Type-Options: nosniff
X-Contextid: hn9ntXhi/RpmXMFCm
Content-Length: 17
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive

GET /zdi-team/21e87d7e6457dce089c08b08f7ecbe5b.js HTTP/1.1
Host: gist.github.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zerodayinitiative.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 03 Jul 2025 08:57:04 GMT
content-type: text/javascript; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, X-Requested-With,Accept-Encoding, Accept, X-Requested-With
etag: W/"b5a79ddd9f4a28bc37b16ffde906671a"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com release-assets.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/
server: github.com
content-encoding: gzip
accept-ranges: bytes
set-cookie: _gh_sess=Cd26v6swnOk9NU1GeFmUZ9NztHhpsUX8%2FWNqeCSFLcBcE%2BOtYlHfdUTICihXHR4xZc938xw%2By8iAIQT%2BHIfahpG9Q7ZwJI0RYXRYF8HZLON96mlFP3QXwpY%2Fm32x9WYb5cJF5DgfHlrxc1Pf%2FLHO7fW3%2F5YUd5zGjFtRuhTORSqdB2cNdOXrmjTmjg6GSmfEhdlVbRWZ%2BeqdtONYGRAMXQSKygZcjadnGlk21StRv1snSN75nR3hcLjXduC0JLBB34u144kV6aU00hZTEVb3hg%3D%3D--64gMBeFR%2F8PhelpW--vYpg8tlOk8syV184A%2Bg4YA%3D%3D; Path=/; HttpOnly; Secure; SameSite=Lax
_octo=GH1.1.1136571659.1751533026; Path=/; Domain=github.com; Expires=Fri, 03 Jul 2026 08:57:06 GMT; Secure; SameSite=Lax
logged_in=no; Path=/; Domain=github.com; Expires=Fri, 03 Jul 2026 08:57:06 GMT; HttpOnly; Secure; SameSite=Lax
content-length: 2818
x-github-request-id: 9328:7EC2C:4624597:483F3E1:686645E2
X-Firefox-Spdy: h2

GET /images/logo-scarab.svg HTTP/1.1
Host: www.zerodayinitiative.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zerodayinitiative.com/blog/2024/4/17/cve-2024-20697-windows-libarchive-remote-code-execution-vulnerability
Cookie: crumb=BUG3viPUjPBJYjZlZTI0OWE3ZTdmZDMyZjFmOGZlYzQxYTYzNDAy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 03 Jul 2025 08:57:06 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000; includeSubDomains
Last-Modified: Mon, 10 Feb 2025 14:50:02 GMT
ETag: "d6f-62dcad2b53a80"
Accept-Ranges: bytes
Content-Length: 3439
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/svg+xml

GET /universal/scripts-compressed/83028-55fff1ade4c91616-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zerodayinitiative.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript
cache-control: public, max-age=31536000
expires: Thu, 02 Jul 2026 16:00:52 GMT
last-modified: Wed, 02 Jul 2025 15:57:02 GMT
etag: "a789cb6576e4896fa1edeb42b0823f11"
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 03 Jul 2025 08:57:07 GMT
age: 60976
x-served-by: cache-iad-kjyo7100050-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 296, 1542
x-timer: S1751533028.884171,VS0,VE0
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 4271
X-Firefox-Spdy: h2

GET /images/logo-zdi.svg HTTP/1.1
Host: www.zerodayinitiative.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zerodayinitiative.com/blog/2024/4/17/cve-2024-20697-windows-libarchive-remote-code-execution-vulnerability
Cookie: crumb=BUG3viPUjPBJYjZlZTI0OWE3ZTdmZDMyZjFmOGZlYzQxYTYzNDAy
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 03 Jul 2025 08:57:07 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000; includeSubDomains
Last-Modified: Mon, 10 Feb 2025 14:50:02 GMT
ETag: "ae6-62dcad2b53a80"
Accept-Ranges: bytes
Content-Length: 2790
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/svg+xml

GET /zdi-team/bed8f3c842e2bdc4f5795a33d468f479.js HTTP/1.1
Host: gist.github.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zerodayinitiative.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 03 Jul 2025 08:57:04 GMT
content-type: text/javascript; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, X-Requested-With,Accept-Encoding, Accept, X-Requested-With
etag: W/"f0828520ade112abcc64b9cce1dda9b3"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com release-assets.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/
server: github.com
content-encoding: gzip
accept-ranges: bytes
set-cookie: _gh_sess=JyosmRfTqXvvQYqAduEY4sbh3k7pITEm%2F3r6i8UHNX4Gb%2BsVziYIFvBlrvXjmpd%2Bk65MUoAuUz7HrAZyC8fuTP8zEwv%2B9mbGA3KKSAvaAJBzZLCOIvtK1eM11yEPF%2Biwm93%2B1%2FDmY9dt3FYLymcm3R7Z03pP5XWd%2FOzLmndC%2FYg63Ut4jG7hfEZvfcphka9u4so33DHOPvjQcUc3G95V3N4PmK8xJo2c%2BMJ9ayFPQyGi%2BvMYPw2tyWWTuU0Mu%2Fu8qAFhnKpdw79HAPq%2Ba1rIvA%3D%3D--buS6B%2FTovsMyRPh%2B--vup98Z6NYiDiX6z%2BrEXizw%3D%3D; Path=/; HttpOnly; Secure; SameSite=Lax
_octo=GH1.1.445385959.1751533026; Path=/; Domain=github.com; Expires=Fri, 03 Jul 2026 08:57:06 GMT; Secure; SameSite=Lax
logged_in=no; Path=/; Domain=github.com; Expires=Fri, 03 Jul 2026 08:57:06 GMT; HttpOnly; Secure; SameSite=Lax
content-length: 1580
x-github-request-id: 9328:7EC2C:4624597:483F3E0:686645E2
X-Firefox-Spdy: h2

GET /zdi-team/da6aed7381b7a65422bc2a2e21ec7879.js HTTP/1.1
Host: gist.github.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zerodayinitiative.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 03 Jul 2025 08:57:04 GMT
content-type: text/javascript; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, X-Requested-With,Accept-Encoding, Accept, X-Requested-With
etag: W/"e6d5c489a707ef27d517b66d625d684a"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com release-assets.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/
server: github.com
content-encoding: gzip
accept-ranges: bytes
set-cookie: _gh_sess=OFd877xEKyPjg8MwsXp0OL2ld3OWH6v1GOMEquurv4yqVrLn0msTnn8s47SxBnrPWGxIrZM0d7tcgtFAzcKLWLByelRIdMY1gLwVrsK3S6M4D3oPD0WBdJuYLDQ%2F5nzoXMKz6ImYZJFe1IYVXU%2BINXBXm2IkC7%2B8MANUepcoXTnw1ruQSL4Mt1fLFO0Oy3P11KEhMm72GdjNUJanzqNythVgXvQE4uFTvvfBMwknW%2Be5Al2oK5k8mTTWXqRNPMo0E2THiFNWbV54ld8n5thpJw%3D%3D--N7YulsN1mqAVKXyU--EUudQ%2FJRMUH4GlNYGAeKBg%3D%3D; Path=/; HttpOnly; Secure; SameSite=Lax
_octo=GH1.1.1778879626.1751533026; Path=/; Domain=github.com; Expires=Fri, 03 Jul 2026 08:57:06 GMT; Secure; SameSite=Lax
logged_in=no; Path=/; Domain=github.com; Expires=Fri, 03 Jul 2026 08:57:06 GMT; HttpOnly; Secure; SameSite=Lax
content-length: 1812
x-github-request-id: 9328:7EC2C:462455E:483F396:686645E2
X-Firefox-Spdy: h2

GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zerodayinitiative.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 03 Jul 2025 08:57:06 GMT
date: Thu, 03 Jul 2025 08:57:06 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /gtag/js?id=UA-93169700-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.zerodayinitiative.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 03 Jul 2025 08:57:06 GMT
expires: Thu, 03 Jul 2025 08:57:06 GMT
cache-control: private, max-age=900
last-modified: Thu, 03 Jul 2025 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 100390
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2