teraboxapp.com/s/1eP-9fiJcvKvVL-zEijMCWA
302 Found 0 B URL User Request GET HTTP/1.1 teraboxapp.com/s/1eP-9fiJcvKvVL-zEijMCWA
IP
ASN #2497 Internet Initiative Japan Inc.
Certificate IssuerDigiCert, Inc.
Subject*.teraboxapp.com
FingerprintD7:46:7C:B3:43:3C:83:85:02:0F:C7:6C:30:CE:7B:C5:F4:8A:64:84
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/1eP-9fiJcvKvVL-zEijMCWA HTTP/1.1
Host: teraboxapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Cache-Control: no-cache
Connection: keep-alive
Content-Type: text/html
Date: Mon, 04 Dec 2023 14:57:50 GMT
Flow-Level: 3
Location: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Logid: 8991094741977325602
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Pragma: no-cache
Server: nginx
Set-Cookie: PANWEB=1; expires=Tue, 03-Dec-2024 14:57:50 GMT; path=/; domain=teraboxapp.com
shareRedirectDomain=1024tera.com; expires=Fri, 02-Feb-2024 14:57:50 GMT; path=/; httponly
X-Powered-By: DuboxServer
Yld: 8991094741977325602
Content-Length: 0
teraboxapp.com/
4.2 kB IP
ASN #2497 Internet Initiative Japan Inc.
Certificate IssuerDigiCert, Inc.
Subject*.teraboxapp.com
FingerprintD7:46:7C:B3:43:3C:83:85:02:0F:C7:6C:30:CE:7B:C5:F4:8A:64:84
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4523)
Hash 20361d85a9b43c773e5e66911fd05284
840952a2907b1f59b3dbed6c726e69cc2922320f
099bbef3d925d0dbd16b0306cb61d1ef691ce35bf3f243913420bc826210d133
GET / HTTP/1.1
Host: teraboxapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Connection: keep-alive
Content-Encoding: gzip
Content-Type: text/html
Date: Mon, 04 Dec 2023 14:57:53 GMT
Logid: 8991095370119553756
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8991095370119553756
Yme: ZIGW+Ss3QE0WbysES2g=
Transfer-Encoding: chunked
www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
200 OK 62 kB URL User Request GET HTTP/1.1 www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
IP
ASN #2497 Internet Initiative Japan Inc.
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (49537)
Hash 3efdc48f0972d90fd341502accb527f7
ef112f5f2b5fd95d6cb2a9fbab8265ac48f20d4c
d70a977719d33a55faad61ad30bb5b6df09d1eb46b9223d8f28990b744ccfacb
GET /sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: text/html; charset=utf-8
Date: Mon, 04 Dec 2023 14:57:52 GMT
Flow-Level: 3
Logid: 8991095101469576097
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Set-Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; path=/
browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; path=/; max-age=5184000; expires=Fri, 02 Feb 2024 14:57:52 GMT; domain=.1024tera.com
lang=en; path=/; max-age=2592000; expires=Wed, 03 Jan 2024 14:57:52 GMT
TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; path=/; max-age=31536000; expires=Tue, 03 Dec 2024 14:57:52 GMT; domain=.1024tera.com
Strict-Transport-Security: max-age=172800
Vary: Accept-Encoding, Accept-Encoding
X-Conteneur-Nom: wrVLGgAfwpIFFhXCusOVwp7Dtw4qwo5abnPDo8O+w63DkQ1hw7PCsMO7w67DoALCmHDDi0cnXMKmd1jCtRV6J8KIMMOkw6gbRVfChMKgwrA=
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Flow-Level: 3
X-Frame-Options: SAMEORIGIN
X-Powered-By: TeraBox
X-Readtime: 602
X-Request-Id: 8991095101469576097
X-Xss-Protection: 1; mode=block
Yld: 8991095101469576097
Yme: ZIGW+Ss3QEsQdTEEUmr/tG1MvuUZTxz0owpHyyCL
Transfer-Encoding: chunked
www.1024tera.com/ndbs/nd_bundle_430546.js
200 OK 66 kB URL GET HTTP/1.1 www.1024tera.com/ndbs/nd_bundle_430546.js
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (36757)
Hash 2be70342e4695e6c13d04f9906e47635
6f4596c9cd37089ead6715fd3553c0845f1158d3
f731296cced4c20e1f9e24e3080faa044bd0fad2f8f64adf026a75038adecce8
GET /ndbs/nd_bundle_430546.js HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/x-javascript
Date: Mon, 04 Dec 2023 14:57:53 GMT
Flow-Level: 3
Last-Modified: Mon, 10 Jul 2023 02:21:26 GMT
Logid: 8991095492320823034
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 8991095492320823034
Yme: ZIGW+Ss3QEsWdTEBUmr/tG1MvuUZSxzxrApNwyKL
Transfer-Encoding: chunked
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/fonts/iconfont.4f9f785d.woff
200 OK 26 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/fonts/iconfont.4f9f785d.woff
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type Web Open Font Format, TrueType, length 25804, version 1.0\012- data
Hash 4f9f785d98a8fa208e7f64023e124572
3e8714f56d480cfd66721447975613a1e56ca9e4
27f0ac9cff76f3925b4389a404d01e2fb525bae7b17cafb0c04e5e6bb20ca83b
GET /fe-opera-static/node-static-v4/fe-webv4-main/fonts/iconfont.4f9f785d.woff HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:57:54 GMT
content-type: application/x-font-woff
content-length: 25804
server: openresty
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Length, x-bce-next-append-offset, x-bce-object-type, x-bce-request-id
access-control-max-age: 1800
content-md5: T594XZio+iCOf2QCPhJFcg==
etag: "4f9f785d98a8fa208e7f64023e124572"
expires: Thu, 09 Feb 2023 02:34:52 GMT
last-modified: Thu, 02 Feb 2023 12:40:59 GMT
x-bce-content-crc32: 4229721389
x-bce-debug-id: 7WiMWIwBpNvCI1l2DEy41X6CYQbfBDD/53hHCbNUgg3chFP5F6R09q6Ha3n+sFI1w5hrFozk3M8ehG3s5jYsKw==
x-bce-request-id: 8ed250a7-98cd-4add-b067-4212e4c8ecd6
x-bce-storage-class: STANDARD
x-ccdn-expires: 1168385
via: EU-GER-frankfurt-EDGE5-CACHE6[4],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,2],EU-GER-frankfurt-GLOBAL1-CACHE11[3],EU-GER-frankfurt-GLOBAL1-CACHE3[0,TCP_HIT,1]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24751731
accept-ranges: bytes
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/loading-grey.0e512ce9.gif
200 OK 13 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/loading-grey.0e512ce9.gif
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type GIF image data, version 89a, 70 x 54\012- data
Hash 0e512ce91474d2c98f524fc9d479bca1
3e95fc024add69d9f13393a9dacbf625d2cf218c
48ed2dfe595001d90ea0bf9c572b15f446fcf49ae4bfa2cac84acc02aef04e17
GET /fe-opera-static/node-static-v4/fe-webv4-main/img/loading-grey.0e512ce9.gif HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:57:54 GMT
content-type: image/gif
content-length: 12746
server: openresty
content-md5: DlEs6RR00smPUk/J1Hm8oQ==
etag: "0e512ce91474d2c98f524fc9d479bca1"
expires: Sat, 24 Sep 2022 06:46:06 GMT
last-modified: Wed, 21 Sep 2022 05:03:27 GMT
x-bce-content-crc32: 1545165226
x-bce-debug-id: SVLAO6wp1e4OUGFHIRy8Y1IEAIpwP8YBdrzlRjHOGWEqe7/5zemw7PiCsrLuiBtk8Hkvkt7auD0iX4QbNYOajA==
x-bce-request-id: 911c9037-40e0-4339-a273-266bf634f105
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 1169745
via: EU-GER-frankfurt-EDGE5-CACHE4[5],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE8[3],EU-GER-frankfurt-GLOBAL1-CACHE4[0,TCP_HIT,2],EA-SGP-GLOBAL1-CACHE24[4],EA-SGP-GLOBAL1-CACHE25[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24751612
accept-ranges: bytes
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?type=web_firebase_init_success_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701880925
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_firebase_init_success_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701880925
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 50cdac32307df67ff7a76c1e08968632
4185ae8859d15180b65b72456e15c87cd9e8181a
0dd4d5e9919d17f2355630b7e486e20baaf90deb5ab234de6565062703669d79
GET /api/analytics?type=web_firebase_init_success_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701880925 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:55 GMT
Flow-Level: 3
Logid: 8991096010266274316
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991096010266274316
Yme: ZIGW+Ss3QE0WaisESWziq29Xvv4cVAP2oh5NwCGJmu2yTGaBg9Y=
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/ud-i18n-en.e44e7bde.js
200 OK 993 B URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/ud-i18n-en.e44e7bde.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 1269b8eecec90f4e872d383cdeb852b8
3d85a8312a3bd331124c64100008b6d15d5e2a42
5c59cf4da63631af40f286ea448e88a89382a5d80bef7d215d7821775b61f5c8
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/ud-i18n-en.e44e7bde.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:57:55 GMT
content-type: application/javascript
server: openresty
content-md5: DyUZIaD1cN4PN459aJhnNg==
etag: W/"0f251921a0f570de0f378e7d68986736"
expires: Fri, 12 May 2023 08:43:54 GMT
last-modified: Mon, 08 May 2023 12:32:48 GMT
x-bce-content-crc32: 2133490345
x-bce-debug-id: NSexvRTV0lZWQYtbdWLSgX+v6Hr/56aCZJ1ADylLSrA41ImIsmNUOALc2+imcrFlB95XXzUoxQ6mngOJKiIOKA==
x-bce-request-id: ebaa8284-e667-42db-a2f8-0aab2662e8dc
x-bce-storage-class: STANDARD
x-ccdn-expires: 454122
via: EU-GER-frankfurt-EDGE5-CACHE4[2],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE5[36],EU-GER-frankfurt-GLOBAL1-CACHE2[0,TCP_HIT,32]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 18079850
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370001&language_type=en&cfg_category_keys=%5B%5D&version=0
200 OK 15 kB URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370001&language_type=en&cfg_category_keys=%5B%5D&version=0
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 03dafccd66d07d380b2f25493222fe59
7f10f74b75c225410ff2a6c165496ffe73821314
1a25a502fb10965251b03905a56f3e48cb8618ee33a1ef55ff5f5b4cd49fc712
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370001&language_type=en&cfg_category_keys=%5B%5D&version=0 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:55 GMT
Flow-Level: 3
Logid: 8991096104943387193
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 8991096104943387193
Yme: ZIGW+Ss3QE0WaisHT2Liq29Xvv4cVAP2oh5IxiqBmOqwK2vHfg==
Transfer-Encoding: chunked
www.1024tera.com/rest/1.0/operation/pull?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370006&position=7&lang=en
200 OK 83 B URL GET HTTP/1.1 www.1024tera.com/rest/1.0/operation/pull?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370006&position=7&lang=en
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 51a8426eeaf2951fa29114e161a8051b
0f720e8c39f7054da0a2a934a2bda5ad5e937c5d
5bb53b626c13436f8ac99fe79cdcd5e2de75d6aad1bcbca25aedf2303531b5d2
GET /rest/1.0/operation/pull?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370006&position=7&lang=en HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: text/plain; charset=utf-8
Date: Mon, 04 Dec 2023 14:57:56 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8991096180462723995
Logid: 8991096180462723995
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8991096180462723995
Yme: ZIGW+Ss3QE0WaCsET2niq29Xvv4cVAPxqB5OwiqBmOy2XVAgI3sBuwzC3LIZ
Content-Length: 83
www.1024tera.com/rest/2.0/membership/proxy/user?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370007&client=web&pass_version=2.8&lang=en&clientfrom=h5&pcftoken=920c09cf97d1a87b303a188f6f39290b&method=query&membership_version=1.0
200 OK 96 B URL GET HTTP/1.1 www.1024tera.com/rest/2.0/membership/proxy/user?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370007&client=web&pass_version=2.8&lang=en&clientfrom=h5&pcftoken=920c09cf97d1a87b303a188f6f39290b&method=query&membership_version=1.0
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 58ec1540cb7bbd9011894032e91241eb
ff9e1a0364b804bceae86708ae0d254b7cc2cdd2
b4835fccf2187f2418a9f72061a78cfab029707ce48862914cf1879ff946772b
GET /rest/2.0/membership/proxy/user?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370007&client=web&pass_version=2.8&lang=en&clientfrom=h5&pcftoken=920c09cf97d1a87b303a188f6f39290b&method=query&membership_version=1.0 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:56 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8991096192328017893
Logid: 8991096192328017893
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8991096192328017893
Yme: ZIGW+Ss3QE0WaSsCSHb+qnFLufkASwbxtAdMySKDmez3GhhrZy4reAOaAzY=
Content-Length: 96
ymg-api.terabox.com/abdr?_o=https%3A%2F%2Fwww.1024tera.com
200 OK 180 B URL POST HTTP/1.1 ymg-api.terabox.com/abdr?_o=https%3A%2F%2Fwww.1024tera.com
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.terabox.com
Fingerprint4F:30:79:83:60:E0:58:E8:DA:05:09:38:E1:6D:CD:F9:46:33:D6:5F
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash c1f2882439a50fa53ff4d435187abc5f
b2328c5df01886fbc405f54f77cb18e1586cc637
8389694b9716c2e2024da50a9568bac10545f002aabe0ed77a9738fa70a3e2e5
POST /abdr?_o=https%3A%2F%2Fwww.1024tera.com HTTP/1.1
Host: ymg-api.terabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 3552
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 14:57:56 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 8991096189941083955
Ab-Sr: 1.0.1_NDU0NmJjMzRmYTY4NzNiODc0ZDE0MGI0OTcxMmIyMWIzZDkyM2RmNjA3MGY1YTE4ZWU5MDQ2YmFlMzI0NGQ3YjIzMGUwYmVlMjc5Y2JiM2E3MTNmYTAwZjM2MDdjZmVlMTk1OWUxY2ZkNzhjNzZiZTFmN2QxOTgzYTg0NzE4ZWMwMWQxOWRmZDNlZjI0ZGY1MzI2ZWU5MzI0YTM2NDAwYg==
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, Host, Content-Type, x-requested-with, X-Custom-Header
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Expose-Headers: Ab-sr, Authentication
Access-Control-Max-Age: 3600
Authentication: d9eb83eea07f833922820a8e09a4daf7bac42eb18f4a5226
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QEsUdTEFUmr/tG1MvuUfSQvrqARFyyeFme24Tl80OWeDng8F3A==
Set-Cookie: ab_jid=a30d6568d98919070d5d933e7e814d13f440; Path=/; Domain=ymg-api.terabox.com; Max-Age=2147483647; HttpOnly; Secure; SameSite=None
ab_bid=a30d6568d98919070d5d933e7e814d13f440; Path=/; Domain=ymg-api.terabox.com; Max-Age=2147483647; HttpOnly; Secure; SameSite=None
ab_sr=1.0.1_NDU0NmJjMzRmYTY4NzNiODc0ZDE0MGI0OTcxMmIyMWIzZDkyM2RmNjA3MGY1YTE4ZWU5MDQ2YmFlMzI0NGQ3YjIzMGUwYmVlMjc5Y2JiM2E3MTNmYTAwZjM2MDdjZmVlMTk1OWUxY2ZkNzhjNzZiZTFmN2QxOTgzYTg0NzE4ZWMwMWQxOWRmZDNlZjI0ZGY1MzI2ZWU5MzI0YTM2NDAwYg==; Path=/; Domain=terabox.com; Max-Age=7200; HttpOnly; Secure; SameSite=None
Server: nginx
logid: 8991096189941083955
Flow-level: 3
Content-Encoding: gzip
www.1024tera.com/api/analytics?type=terabox_sharing_link_js_error&sessionId=872291&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&msg=%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&stack=%5B%7B%22columnNumber%22%3A2705%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22h%22%2C%22source%22%3A%22h%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A2705%22%7D%2C%7B%22columnNumber%22%3A3160%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%22%2C%22source%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A3160%22%7D%2C%7B%22columnNumber%22%3A30208%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22Kt%22%2C%22source%22%3A%22Kt%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A30208%22%7D%5D
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=terabox_sharing_link_js_error&sessionId=872291&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&msg=%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&stack=%5B%7B%22columnNumber%22%3A2705%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22h%22%2C%22source%22%3A%22h%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A2705%22%7D%2C%7B%22columnNumber%22%3A3160%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%22%2C%22source%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A3160%22%7D%2C%7B%22columnNumber%22%3A30208%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22Kt%22%2C%22source%22%3A%22Kt%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A30208%22%7D%5D
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash eac8d57203d7ef1c8e66d2f468650eea
3da3012e02967803fb7595bd5a5e06d10566cd46
ccbada31ac32ecad0970360051ef517c76ebdaa2069df0546ce4877857c5b3b7
GET /api/analytics?type=terabox_sharing_link_js_error&sessionId=872291&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&msg=%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&stack=%5B%7B%22columnNumber%22%3A2705%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22h%22%2C%22source%22%3A%22h%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A2705%22%7D%2C%7B%22columnNumber%22%3A3160%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%22%2C%22source%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A3160%22%7D%2C%7B%22columnNumber%22%3A30208%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22Kt%22%2C%22source%22%3A%22Kt%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A30208%22%7D%5D HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:56 GMT
Flow-Level: 3
Logid: 8991096286829986759
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991096286829986759
Yme: ZIGW+Ss3QEsXdTQCUmr/tG1MvuUZSxz3rwpNxSGB
Content-Length: 44
www.1024tera.com/api/analytics?type=terabox_sharing_link_js_error_p2&sessionId=872291&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&msg=%7B%7D&stack=%5B%7B%22columnNumber%22%3A18998%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22webGlInfo%22%2C%22source%22%3A%22webGlInfo%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A18998%22%7D%2C%7B%22columnNumber%22%3A21970%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22source%22%3A%22%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A21970%22%7D%2C%7B%22columnNumber%22%3A20619%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22promise%20callback*%22%2C%22source%22%3A%22promise%20callback*%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A20619%22%7D%5D
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=terabox_sharing_link_js_error_p2&sessionId=872291&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&msg=%7B%7D&stack=%5B%7B%22columnNumber%22%3A18998%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22webGlInfo%22%2C%22source%22%3A%22webGlInfo%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A18998%22%7D%2C%7B%22columnNumber%22%3A21970%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22source%22%3A%22%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A21970%22%7D%2C%7B%22columnNumber%22%3A20619%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22promise%20callback*%22%2C%22source%22%3A%22promise%20callback*%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A20619%22%7D%5D
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5cf8074ac1a2c331fe8215555c407be5
85ac389b388e4f92dd7f507d6167a891f6bb6150
935fa536c55ef1c7e29015e923fcc078e9a5f0dfdba4eeed94ab01aaf0c5c75d
GET /api/analytics?type=terabox_sharing_link_js_error_p2&sessionId=872291&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&msg=%7B%7D&stack=%5B%7B%22columnNumber%22%3A18998%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22webGlInfo%22%2C%22source%22%3A%22webGlInfo%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A18998%22%7D%2C%7B%22columnNumber%22%3A21970%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22source%22%3A%22%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A21970%22%7D%2C%7B%22columnNumber%22%3A20619%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22promise%20callback*%22%2C%22source%22%3A%22promise%20callback*%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A20619%22%7D%5D HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:56 GMT
Flow-Level: 3
Logid: 8991096289921718908
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991096289921718908
Yme: ZIGW+Ss3QEsUdTcCUmr/tG1MvuUYQxz0rQpNwyCLZg8UohU=
Content-Length: 44
www.1024tera.com/share/webmaster/check?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370004&bdstoken=
200 OK 86 B URL GET HTTP/1.1 www.1024tera.com/share/webmaster/check?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370004&bdstoken=
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash de275d74779f71fe83271f3e3460c0a3
ee0d4185c2229c46481151d87b76eca75527de18
0d9d8adcb161ec214bdb191e16804d8e272c85bf09725358d0e9222819fee0be
GET /share/webmaster/check?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370004&bdstoken= HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:56 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8991096342527441955
Logid: 8991096342527441955
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8991096342527441955
Yme: ZIGW+Ss3QE0WbSsERnb+qnFLufkASwb8tAFOySKDmO3GTA9mYg87BisQWjY=
Content-Length: 86
www.1024tera.com/share/linkpaylistpurchaseorder?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370005&page=1&cnt=20
200 OK 85 B URL GET HTTP/1.1 www.1024tera.com/share/linkpaylistpurchaseorder?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370005&page=1&cnt=20
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 8130d0bc2250129d57b95e9678fd34af
48162d8cec79d74cc7cafedbafbf8e321e6143f6
e871c158b79d1eecbc2e97efc91eac44715d4dfe526918edfb00c8e37603715f
GET /share/linkpaylistpurchaseorder?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370005&page=1&cnt=20 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:56 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8991096345840286846
Logid: 8991096345840286846
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8991096345840286846
Yme: ZIGW+Ss3QE0WaCsESWziq29Xvv4cVAP2ox5OxSGJmu2xTy0Dfg==
Content-Length: 85
www.1024tera.com/passport/getpubkey?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370003
200 OK 404 B URL POST HTTP/1.1 www.1024tera.com/passport/getpubkey?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370003
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (466), with no line terminators
Hash 8d0a8853f1a43533d05fac13f5cabc67
e21743ef97b60b5aa49c4e952fde9b422e57f854
ed10563d7540ae07286b56c7393a1aa64e5a992155ba5b192213bb10bf4bdd22
POST /passport/getpubkey?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370003 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 91
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/Json; charset=utf-8
Date: Mon, 04 Dec 2023 14:57:56 GMT
Flow-Level: 3
Logid: 8991096337397248982
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8991096337397248982
Yme: ZIGW+Ss3QE0WaCsNTXb+qnFLufkASwb1tAFPwCqBmO+0kj99
Content-Length: 404
sofire.1024tera.com/h5/t
200 OK 584 B IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (697), with no line terminators
Hash 231265c85f4a5c2bdcb0e21458880ba4
09f4d48b470c6427475ea7eb73c57a0ef7ed46ec
4bd4dab071b663d82a04d45859eda4c8c25a0b4721cb6c2b53d0797c531dbc05
POST /h5/t HTTP/1.1
Host: sofire.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 3802
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Mon, 04 Dec 2023 14:57:56 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 8991096385750913949
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type,AccessToken,X-CSRF-Token,X-Bdh5-Pf,X-XSRF-TOKEN, Authorization
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Expose-Headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Content-Type
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaisHTnb+qnFLufkASwH9tAJMxyqLmOWx
logid: 8991096385750913949
Flow-level: 3
Content-Encoding: gzip
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370002&language_type=en&cfg_category_keys=%5B%5D&version=0
200 OK 15 kB URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370002&language_type=en&cfg_category_keys=%5B%5D&version=0
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash da7a4175148a3f20d79477057e28d5a1
2ebce9a10339fe84fa0ace1f80f548281a1f4799
dd289fab03848bcc8ef6319e3256024754970f34680276a8ed0bbeadbaa0406c
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370002&language_type=en&cfg_category_keys=%5B%5D&version=0 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:56 GMT
Flow-Level: 3
Logid: 8991096329615426636
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 8991096329615426636
Yme: ZIGW+Ss3QE0WaisES2jiq29Xvv4cVAPxrh5OyiqBmOiwTVNAfg==
Transfer-Encoding: chunked
s2.teraboxcdn.com/general-conf/ymg/2068/abclite-2068-s.js?v=0.6690027712173213
200 OK 33 kB URL GET HTTP/2 s2.teraboxcdn.com/general-conf/ymg/2068/abclite-2068-s.js?v=0.6690027712173213
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash aef80666a8cb779115c3ecd315cc1abc
1b8fd6c5f04b451efb55fe83950aef885a4acc9d
425dd5421e81be8d124f07a4549cfe6de7074d2a3db2da93a0a13772ed029a33
GET /general-conf/ymg/2068/abclite-2068-s.js?v=0.6690027712173213 HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:57:54 GMT
content-type: application/javascript
server: openresty
content-md5: Ruoa4j+vWuccAEWEPrQz6Q==
etag: W/"46ea1ae23faf5ae71c0045843eb433e9"
expires: Fri, 07 Apr 2023 22:40:39 GMT
last-modified: Tue, 14 Mar 2023 06:06:12 GMT
x-bce-content-crc32: 1662135932
x-bce-debug-id: Jz1KOcGPkhU4n3Zck8uoB7CbklPytTa0SgCVaS0EGpxL61wnts4jWik6aFmIBGaCydmzElR8tezYRsKZD0KeZg==
x-bce-request-id: 7297b527-d932-4266-b90c-9962c07f4e61
x-bce-storage-class: STANDARD
x-ccdn-expires: 2592000
via: EU-GER-frankfurt-EDGE5-CACHE4[1],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[2],EU-GER-frankfurt-GLOBAL1-CACHE4[0,TCP_HIT,1]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 19567724
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-5e25226a.a51d4586.js
200 OK 7.6 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-5e25226a.a51d4586.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 65808a41963a98cb6298fad6ae66c96f
d17c7a9e610648696b797e5afdf3da389e4420c4
868c55beec5a4f30fd5e287da2193ebd843f5caee7ebb3f0efe3d5de3ebf556c
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-5e25226a.a51d4586.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:57:55 GMT
content-type: application/javascript
server: openresty
content-md5: ofegPgybCMrJWb5Yq2LFXw==
etag: W/"a1f7a03e0c9b08cac959be58ab62c55f"
expires: Thu, 07 Dec 2023 10:54:10 GMT
last-modified: Mon, 04 Dec 2023 08:11:33 GMT
x-bce-content-crc32: 98754670
x-bce-debug-id: Ev8l1GA83xhCDv4uh+405oq+C1nftzErTedfmI4L3NyT8GqIxbRU7XJQ/6VPp9Ooie21YFTN02oETa8BSy9Nuw==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: c417d43a-58cc-4c9b-890a-54cc45408f55
x-bce-storage-class: STANDARD
x-ccdn-expires: 2578447
via: EU-GER-frankfurt-EDGE5-CACHE4[1],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE2[11],EU-GER-frankfurt-GLOBAL1-CACHE7[0,TCP_HIT,10]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 14451
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?errno=-6&newno=&request_id=8991096342527442000&show_msg=&hasError=true¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fwebmaster%2Fcheck_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701882453
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&newno=&request_id=8991096342527442000&show_msg=&hasError=true¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fwebmaster%2Fcheck_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701882453
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash a4f1cb1fcee994b6f7d15b260b2ed7d0
964829e0088da02f0362eb28bae15f5878ff5649
b5a04f2756b84e04689a0749a7c8dd658850cf77d8cccdb6544954e7c0d902b2
GET /api/analytics?errno=-6&newno=&request_id=8991096342527442000&show_msg=&hasError=true¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fwebmaster%2Fcheck_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701882453 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:57 GMT
Flow-Level: 3
Logid: 8991096423792445291
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991096423792445291
Yme: ZIGW+Ss3QE0WaCsNS3b+qnFLufkASwb2tAJPxCqBmOmwgJX9/qgTMDWv1TY=
Content-Length: 44
www.1024tera.com/api/analytics?errno=-6&newno=&request_id=8991096345840287000&show_msg=&hasError=true¶ms=%7B%22page%22%3A1%2C%22cnt%22%3A20%7D&uk=0&type=%2Fshare%2Flinkpaylistpurchaseorder_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701882484
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&newno=&request_id=8991096345840287000&show_msg=&hasError=true¶ms=%7B%22page%22%3A1%2C%22cnt%22%3A20%7D&uk=0&type=%2Fshare%2Flinkpaylistpurchaseorder_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701882484
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5baeaaf59db435318feb27bac6a6c830
d4eef03164ce85751955c5f58e65053ee91f7f60
39839e98aa14876321c6e4942ae853db3e94e833aad3a764fb238865acf7e405
GET /api/analytics?errno=-6&newno=&request_id=8991096345840287000&show_msg=&hasError=true¶ms=%7B%22page%22%3A1%2C%22cnt%22%3A20%7D&uk=0&type=%2Fshare%2Flinkpaylistpurchaseorder_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701882484 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:57 GMT
Flow-Level: 3
Logid: 8991096431669396244
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991096431669396244
Yme: ZIGW+Ss3QEobdTEAUmr/tG1MvuUYQxz0rwpNwyCC
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~copyright-feedback~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recycleb~fcf1883d.07f0a14d.js
200 OK 9.2 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~copyright-feedback~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recycleb~fcf1883d.07f0a14d.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 1f4324c4c9c615927898a55f7a732501
9c1a6639c1078e71931501d0d7f3f529d3c0015c
e4a15d17fe1e3b2eec0d42b6f5258f478dc669efed78186ffb81931c73cd609e
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~copyright-feedback~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recycleb~fcf1883d.07f0a14d.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:57:55 GMT
content-type: application/javascript
server: openresty
content-md5: AS08YcEVOlzEUsP9xXahBw==
etag: W/"012d3c61c1153a5cc452c3fdc576a107"
expires: Thu, 07 Dec 2023 10:54:11 GMT
last-modified: Mon, 04 Dec 2023 08:11:32 GMT
x-bce-content-crc32: 2179848265
x-bce-debug-id: YACd2vQQbQy06Ts5BQ8upyuI4L5wa6pbjcJmXASfKZkAVf9NnWGCkIJlUJIkolf65QSWNIeUFJ0Q7SLQmyMXbA==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 7e9ee1dd-5dd6-40f5-b235-c5d05ba5ce56
x-bce-storage-class: STANDARD
x-ccdn-expires: 2584669
via: EU-GER-frankfurt-EDGE5-CACHE4[3],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE11[18],EU-GER-frankfurt-GLOBAL1-CACHE5[0,TCP_HIT,16]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 14452
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/general-conf/fk/dfxaf3-598bbed9.js
200 OK 41 kB URL GET HTTP/2 s2.teraboxcdn.com/general-conf/fk/dfxaf3-598bbed9.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type C source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash dbceb62f8eda74e846d25a6feac4a08e
16a4d442e4b55011f823c23dca884708e95c0ead
6968a7f1c77a3ff0cc5ac2093907b135e0388efad30fd2cd3b3a636e9f0d476c
GET /general-conf/fk/dfxaf3-598bbed9.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:57:54 GMT
content-type: text/javascript
server: openresty
content-md5: +fZxgdCHtOLq9IVUxQHgZQ==
etag: W/"f9f67181d087b4e2eaf48554c501e065"
expires: Fri, 03 Nov 2023 12:27:55 GMT
last-modified: Tue, 31 Oct 2023 12:25:48 GMT
x-bce-content-crc32: 3748294646
x-bce-debug-id: aGEi7xHbLdU53XfCnCB+gn9IMUFfdLw+Ug2cTW1Uu0gn8LTbfsIrGzew5yl6vbcMd2PUBbSod+OrM3Z56BBUNg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 8d78a03a-02bd-49e4-ba41-e617432a8b15
x-bce-storage-class: STANDARD
via: EU-GER-frankfurt-EDGE5-CACHE4[2],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[2],EU-GER-frankfurt-GLOBAL1-CACHE2[0,TCP_HIT,1]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 2946598
x-ccdn-expires: 2592000
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?errno=-6&newno=&request_id=8991096406793721000&show_msg=&hasError=true¶ms=undefined&uk=0&type=%2Fapi%2Fad%2Fgetconfig_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701882732
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&newno=&request_id=8991096406793721000&show_msg=&hasError=true¶ms=undefined&uk=0&type=%2Fapi%2Fad%2Fgetconfig_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701882732
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash d6de7b32ecd658672095b8de5af36b28
19f982c88613ceabdf966c91503456c1404ba8b7
793efc24e73269db4a8bd06b0c7d8c44778732c4ae65728a082ecd9cc44c696d
GET /api/analytics?errno=-6&newno=&request_id=8991096406793721000&show_msg=&hasError=true¶ms=undefined&uk=0&type=%2Fapi%2Fad%2Fgetconfig_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701882732 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:57 GMT
Flow-Level: 3
Logid: 8991096499098811203
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991096499098811203
Yme: ZIGW+Ss3QEsTdTQCUmr/tG1MvuUZShz3rgpNwyCGhZvOLT1DU284sZju3A==
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-1dcd7f8a.2b42216f.js
200 OK 5.8 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-1dcd7f8a.2b42216f.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 26362749094188bedbd150521186ef26
e7e48bb1744c42bbf7a71af01bfdc862a6ef9d1e
357c9924e051547fd09b98dbea5c5a3ae5705cb10f9a88b82dad8d1f65858817
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-1dcd7f8a.2b42216f.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:57:55 GMT
content-type: application/javascript
server: openresty
content-md5: gzS2U+Mf/YcINpBPpUD5zg==
etag: W/"8334b653e31ffd870836904fa540f9ce"
expires: Fri, 12 May 2023 08:43:54 GMT
last-modified: Mon, 08 May 2023 12:32:40 GMT
x-bce-content-crc32: 4120287129
x-bce-debug-id: Teo3loV3wqW/js/c3F+flnexjxNYfbmQInRoUF9QRAMJ7CFnw1D4NuX6sDdmfzinUfOqZghCnAt7txHYBz0myw==
x-bce-request-id: afcc4a4d-fd1a-4520-9662-3523bce519be
x-bce-storage-class: STANDARD
x-ccdn-expires: 97043
via: EU-GER-frankfurt-EDGE5-CACHE4[3],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE2[17],EU-GER-frankfurt-GLOBAL1-CACHE8[0,TCP_HIT,15]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 18079749
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?time=5975&type=web_share_page_show_TTI&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701881233
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?time=5975&type=web_share_page_show_TTI&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701881233
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 59f85399765672185aafae0f8fdab78b
136a8fe89ffb127fe738cc6bea663599f0d9cfab
0e9bc66bb756de3d04114422c143f317e67912d726e0440758c834b6505962d8
GET /api/analytics?time=5975&type=web_share_page_show_TTI&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701881233 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:57 GMT
Flow-Level: 3
Logid: 8991096508971946169
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991096508971946169
Yme: ZIGW+Ss3QEsWdTcGUmr/tG1MvuUZShz3ogpNwyOL
Content-Length: 44
www.1024tera.com/api/analytics?errno=-6&errmsg=&data=null&logid=15676349355327128886&hasError=true¶ms=%7B%22position%22%3A7%2C%22lang%22%3A%22en%22%7D&uk=0&type=%2Frest%2F1.0%2Foperation%2Fpull_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701882011
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&errmsg=&data=null&logid=15676349355327128886&hasError=true¶ms=%7B%22position%22%3A7%2C%22lang%22%3A%22en%22%7D&uk=0&type=%2Frest%2F1.0%2Foperation%2Fpull_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701882011
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash c8f42da807ccc0cd769effa3dd31e37f
2c5ade1040710173792916624a074b2d57b9403c
ac6dc9f1883e1ed3316ae5ba3b7264ac1517e1f82c00b1a2c0a366707f2ea916
GET /api/analytics?errno=-6&errmsg=&data=null&logid=15676349355327128886&hasError=true¶ms=%7B%22position%22%3A7%2C%22lang%22%3A%22en%22%7D&uk=0&type=%2Frest%2F1.0%2Foperation%2Fpull_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701882011 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:57 GMT
Flow-Level: 3
Logid: 8991096523484546819
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991096523484546819
Yme: ZIGW+Ss3QEoadTcNUmr/tG1MvuUZShz3qQpNwySFkOS0RmcIR6dSyp/03A==
Content-Length: 44
www.1024tera.com/api/analytics?errno=100003&error_code=100003&error_msg=Invalid%20Bduss&request_id=8991096192328017893&hasError=true¶ms=%7B%22client%22%3A%22web%22%2C%22pass_version%22%3A%222.8%22%2C%22lang%22%3A%22en%22%2C%22clientfrom%22%3A%22h5%22%2C%22pcftoken%22%3A%22920c09cf97d1a87b303a188f6f39290b%22%2C%22method%22%3A%22query%22%2C%22membership_version%22%3A%221.0%22%7D&uk=0&type=%2Frest%2F2.0%2Fmembership%2Fproxy%2Fuser_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701882020
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=100003&error_code=100003&error_msg=Invalid%20Bduss&request_id=8991096192328017893&hasError=true¶ms=%7B%22client%22%3A%22web%22%2C%22pass_version%22%3A%222.8%22%2C%22lang%22%3A%22en%22%2C%22clientfrom%22%3A%22h5%22%2C%22pcftoken%22%3A%22920c09cf97d1a87b303a188f6f39290b%22%2C%22method%22%3A%22query%22%2C%22membership_version%22%3A%221.0%22%7D&uk=0&type=%2Frest%2F2.0%2Fmembership%2Fproxy%2Fuser_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701882020
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash c31ea6bb3343a57aef0b6f506bf0680c
70c1fabffe99ef23f46d359b379ad091283b0e20
a62d0c3c0cf0b23cb3f6b3def5920e55533b87abfff52a87c5ee7c5a7fd67964
GET /api/analytics?errno=100003&error_code=100003&error_msg=Invalid%20Bduss&request_id=8991096192328017893&hasError=true¶ms=%7B%22client%22%3A%22web%22%2C%22pass_version%22%3A%222.8%22%2C%22lang%22%3A%22en%22%2C%22clientfrom%22%3A%22h5%22%2C%22pcftoken%22%3A%22920c09cf97d1a87b303a188f6f39290b%22%2C%22method%22%3A%22query%22%2C%22membership_version%22%3A%221.0%22%7D&uk=0&type=%2Frest%2F2.0%2Fmembership%2Fproxy%2Fuser_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701882020 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:57 GMT
Flow-Level: 3
Logid: 8991096577254262420
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991096577254262420
Yme: ZIGW+Ss3QEobdTcHUmr/tG1MvuUZTxzxrApNwiKA
Content-Length: 44
www.1024tera.com/api/shorturlinfo?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370009&shorturl=1eP-9fiJcvKvVL-zEijMCWA&root=1&scene=
200 OK 864 B URL GET HTTP/1.1 www.1024tera.com/api/shorturlinfo?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370009&shorturl=1eP-9fiJcvKvVL-zEijMCWA&root=1&scene=
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (2355), with no line terminators
Hash 6f5e59fc1bf8f1130cbb3611afc17c03
d7482ed25c97a843601e9879a91df2eebbb724e8
1ca8fe6ab070e67058d3e78c95edecd35631ef4ddb81d284085c4b6e8a65fe6a
GET /api/shorturlinfo?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370009&shorturl=1eP-9fiJcvKvVL-zEijMCWA&root=1&scene= HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:57 GMT
Flow-Level: 3
Logid: 8991096411919952217
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991096411919952217
Yme: ZIGW+Ss3QEsVdTcAUmr/tG1MvuUfTgDrqwdNySKDmuo=
Transfer-Encoding: chunked
firebase.googleapis.com/v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig
200 OK 0 B URL GET HTTP/2 firebase.googleapis.com/v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig HTTP/1.1
Host: firebase.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-goog-api-key
Referer: https://www.1024tera.com/
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.1024tera.com
vary: origin, referer, x-origin
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: x-goog-api-key
access-control-max-age: 3600
date: Mon, 04 Dec 2023 14:57:57 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
firebase.googleapis.com/v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig
200 OK 223 B URL GET HTTP/2 firebase.googleapis.com/v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text
Hash 54c11162d6ef3c32b787d4d8a6a292f8
f1e88b95b9addbd7a1e170daf6da450ab93bdecb
263070732f0c9d00ac3e625982ff38a8d08bc25a2ac03c3e3d524557b09f616f
GET /v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig HTTP/1.1
Host: firebase.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.1024tera.com/
x-goog-api-key: AIzaSyCAt5j0_j4UDEm5Nb4bNvQknuGZoMK_XK8
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Mon, 04 Dec 2023 14:57:57 GMT
server: ESF
cache-control: private
content-length: 223
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.1024tera.com
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?l=dataLayer&id=G-06ZNKL8C2E
200 OK 86 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?l=dataLayer&id=G-06ZNKL8C2E
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type Unicode text, UTF-8 text, with very long lines (3034)
Hash c604b71600a3f7548756868e1c492e4c
b1bc117a063b40563fcc325a5ad98a8e6eb89298
5c70f3b13938dadb1794ae3d8c40832e96698f7709fa9b361a2ecc3844110f87
GET /gtag/js?l=dataLayer&id=G-06ZNKL8C2E HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 04 Dec 2023 14:57:58 GMT
expires: Mon, 04 Dec 2023 14:57:58 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 85526
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.1024tera.com/fe-opera-static/box-static/disk-system/images/favicon.ico
200 OK 1.7 kB URL GET HTTP/1.1 www.1024tera.com/fe-opera-static/box-static/disk-system/images/favicon.ico
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash 85c3fafc35604bddb3171dee4c0aa6dc
4cb347df6fbedcf8b7e77c9b0673ff3667ed0266
fd68b8c59d5d564cb46519aaaf236ef2ffab9c79c4b1e3ea67a1a57a0120731e
GET /fe-opera-static/box-static/disk-system/images/favicon.ico HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Connection: keep-alive
Content-Type: image/x-icon
Date: Mon, 04 Dec 2023 14:57:57 GMT
Etag: "643529f4-693"
Expires: Wed, 03 Jan 2024 14:57:57 GMT
Flow-Level: 3
Last-Modified: Tue, 11 Apr 2023 09:35:48 GMT
Logid: 8991096675062168811
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: TeraBox
Yld: 8991096675062168811
Yme: ZIGW+Ss3QE0WaCsESGniq29Xvv4cVAPxqR5IwCqBmO6y
Transfer-Encoding: chunked
www.1024tera.com/api/analytics?isLogin=false&surl=eP-9fiJcvKvVL-zEijMCWA&downloadPullNewFlag=b&videoTrialPullNewFlag=a&isUserSelfLink=false&referrer=&channelSrc=&type=share_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701883401
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?isLogin=false&surl=eP-9fiJcvKvVL-zEijMCWA&downloadPullNewFlag=b&videoTrialPullNewFlag=a&isUserSelfLink=false&referrer=&channelSrc=&type=share_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701883401
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 89933d2a12c12109ab78855ed365be87
03437985ffbfddd8bf7e4ab2929e4364891ce95e
167fda2f0312178df78754a45c3ab82416ebda98cadfb8b4c245cecb8c5f345a
GET /api/analytics?isLogin=false&surl=eP-9fiJcvKvVL-zEijMCWA&downloadPullNewFlag=b&videoTrialPullNewFlag=a&isUserSelfLink=false&referrer=&channelSrc=&type=share_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701883401 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:57 GMT
Flow-Level: 3
Logid: 8991096676681522929
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991096676681522929
Yme: ZIGW+Ss3QEsXdTcCUmr/tG1MvuUYQhz3qwpNwyKKnu2zSlowNwcv8thl3A==
Content-Length: 44
www.1024tera.com/share/list?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370010&page=1&num=20&by=name&order=asc&site_referer=&shorturl=eP-9fiJcvKvVL-zEijMCWA&root=1
200 OK 614 B URL GET HTTP/1.1 www.1024tera.com/share/list?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370010&page=1&num=20&by=name&order=asc&site_referer=&shorturl=eP-9fiJcvKvVL-zEijMCWA&root=1
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (1998), with no line terminators
Hash 4ea438777846482166648344eb99a478
575a8bd8fde15ec9407698f61607da5dd79e36d6
2f8904f779f7deb0efe23a344d5b6babbc8ecdf4f29d72117abcfbbfaea1517f
GET /share/list?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370010&page=1&num=20&by=name&order=asc&site_referer=&shorturl=eP-9fiJcvKvVL-zEijMCWA&root=1 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:58 GMT
Flow-Level: 3
Logid: 8991096678507376685
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 8991096678507376685
Yme: ZIGW+Ss3QE0WaCsET27iq29Xvv4cVAPxqR5NwiKJmuyyTw==
Transfer-Encoding: chunked
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-06ZNKL8C2E&cid=381948010.1701701884>m=45je3bt0v875375078&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1645241358
200 OK 42 B URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-06ZNKL8C2E&cid=381948010.1701701884>m=45je3bt0v875375078&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1645241358
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint6E:E4:BC:4A:67:5E:46:6A:B3:E4:CA:61:A7:C0:97:AB:14:F0:34:32
ValidityMon, 23 Oct 2023 11:27:27 GMT - Mon, 15 Jan 2024 11:27:26 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-06ZNKL8C2E&cid=381948010.1701701884>m=45je3bt0v875375078&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1645241358 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 04 Dec 2023 14:57:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.1024tera.com/share/querysurltransfer?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370011&bdstoken=
200 OK 86 B URL POST HTTP/1.1 www.1024tera.com/share/querysurltransfer?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370011&bdstoken=
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 8760684a07342bf07d871d1a94573d24
0c31a7f7ea6548349275a35709ca531983b22375
c7324c54125733ee5dfad2d5873260a66aaafb9595d2d1bca7878812f59eec13
POST /share/querysurltransfer?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370011&bdstoken= HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 32
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701883.60.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:58 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8991096832938277764
Logid: 8991096832938277764
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8991096832938277764
Yme: ZIGW+Ss3QE0WaisESmjiq29Xvv4cVAPxrh5GxiqBmO61Cy5ndwNKK8WEfucY
Content-Length: 86
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/logo.2a229dfa.svg
200 OK 1.7 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/logo.2a229dfa.svg
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1713), with no line terminators
Hash 2a229dfa55348fc84be678f926330616
96ad6e5765a9847fd3f202aad6a88bf95dd9caf1
78055ff5570a46c5904129bfdd26d9cc327feded52e4feca75feaa8e2f180d5b
GET /fe-opera-static/node-static-v4/fe-webv4-main/img/logo.2a229dfa.svg HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:57:58 GMT
content-type: image/svg+xml
content-length: 1713
server: openresty
content-md5: KiKd+lU0j8hL5nj5JjMGFg==
etag: "2a229dfa55348fc84be678f926330616"
expires: Sat, 24 Sep 2022 06:46:17 GMT
last-modified: Wed, 21 Sep 2022 05:03:27 GMT
x-bce-content-crc32: 1353669740
x-bce-debug-id: NAe6EO3wT96ak0qPNr/yE8+RuLbHz64z8I5FDCDIACxRHRvP8Rcs1CH0CzIO18cwCQo293KSx7/0Hh+Zyx0VZQ==
x-bce-request-id: 3ccd90bb-d04d-43f8-a561-47d04dd6edbb
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 1169805
via: EU-GER-frankfurt-EDGE5-CACHE4[1],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE4[19],EU-GER-frankfurt-GLOBAL1-CACHE14[0,TCP_HIT,17],EA-SGP-GLOBAL1-CACHE17[2],EA-SGP-GLOBAL1-CACHE26[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24751610
accept-ranges: bytes
access-control-allow-origin: *
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701701883532&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=381948010.1701701884&ul=en-us&sr=1280x1024&_s=1&sid=1701701883&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&dt=Telegram%20%40Backupcity%20search%20join(1)(1)(1)(1).mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.origin=firebase&tfd=8652
204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701701883532&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=381948010.1701701884&ul=en-us&sr=1280x1024&_s=1&sid=1701701883&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&dt=Telegram%20%40Backupcity%20search%20join(1)(1)(1)(1).mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.origin=firebase&tfd=8652
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701701883532&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=381948010.1701701884&ul=en-us&sr=1280x1024&_s=1&sid=1701701883&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&dt=Telegram%20%40Backupcity%20search%20join(1)(1)(1)(1).mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.origin=firebase&tfd=8652 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.1024tera.com
date: Mon, 04 Dec 2023 14:57:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/fonts/yunfont.44acf892.ttf
200 OK 23 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/fonts/yunfont.44acf892.ttf
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, yunfont \012- data
Hash 44acf8923466a31680d910d7cc4f0903
351d9f0d3e293ae4c4e4c28e67b09f5ab2a39983
cdec6bbf708df8fbb45cb6c8477254406972c90e28bf1bc7d265b9bd0a403cd9
GET /fe-opera-static/node-static-v4/fe-webv4-main/fonts/yunfont.44acf892.ttf HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:57:58 GMT
content-type: application/x-font-ttf
content-length: 23268
server: openresty
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Length, x-bce-next-append-offset, x-bce-object-type, x-bce-request-id
access-control-max-age: 1800
content-md5: RKz4kjRmoxaA2RDXzE8JAw==
etag: "44acf8923466a31680d910d7cc4f0903"
expires: Sat, 24 Sep 2022 06:46:06 GMT
last-modified: Wed, 21 Sep 2022 05:03:25 GMT
x-bce-content-crc32: 848321786
x-bce-debug-id: NAe6EO3wT96ak0qPNr/yE8+RuLbHz64z8I5FDCDIACz1r140/OGU/0+MbMDWT1zTJqrTz/6OyWkOTO54TO+RgQ==
x-bce-request-id: bdfcbbdf-effe-4bb4-b741-0cdb160927f7
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 433960
via: EU-GER-frankfurt-EDGE5-CACHE6[2],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[6],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,3],EA-SGP-GLOBAL1-CACHE11[3],EA-SGP-GLOBAL1-CACHE24[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 4750755
accept-ranges: bytes
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701701883532&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=381948010.1701701884&ul=en-us&sr=1280x1024&sid=1701701883&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&dt=Telegram%20%40Backupcity%20search%20join(1)(1)(1)(1).mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=2&tfd=8714
204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701701883532&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=381948010.1701701884&ul=en-us&sr=1280x1024&sid=1701701883&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&dt=Telegram%20%40Backupcity%20search%20join(1)(1)(1)(1).mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=2&tfd=8714
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701701883532&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=381948010.1701701884&ul=en-us&sr=1280x1024&sid=1701701883&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&dt=Telegram%20%40Backupcity%20search%20join(1)(1)(1)(1).mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=2&tfd=8714 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1733
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://www.1024tera.com
date: Mon, 04 Dec 2023 14:57:58 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?errno=-6&newno=&request_id=8991096832938278000&show_msg=&hasError=true&data=%7B%22sid%22%3A3266078237%2C%22suk%22%3A4399735848109%7D¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fquerysurltransfer_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884307
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&newno=&request_id=8991096832938278000&show_msg=&hasError=true&data=%7B%22sid%22%3A3266078237%2C%22suk%22%3A4399735848109%7D¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fquerysurltransfer_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884307
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 353585fb65f7a57f1d9f4dd029644ca8
ad72fb2379a2f3ec4f6c516226a0fe69320aabd9
9c6b45c925912043984993ad6d0ce1c365d1d156b65663430d69905aa9a5838f
GET /api/analytics?errno=-6&newno=&request_id=8991096832938278000&show_msg=&hasError=true&data=%7B%22sid%22%3A3266078237%2C%22suk%22%3A4399735848109%7D¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fquerysurltransfer_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884307 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701883.60.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:58 GMT
Flow-Level: 3
Logid: 8991096918768187383
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991096918768187383
Yme: ZIGW+Ss3QE0WaSsHTGjiq29Xvv4cVAPxrh5OxyOJmuywSlgxMG0RE0lQOZwY
Content-Length: 44
www.1024tera.com/api/analytics?type=web_share_filelist_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884318
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_share_filelist_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884318
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash bf582aa2c093047f652b99e060485c51
efa9eef7dcc1a1d541ae6c9d147a79b498e9f946
67690743e92b8e20cc7d95c4a76f6d613f1a6afbdc5da177d6c9f4c12c73b9ab
GET /api/analytics?type=web_share_filelist_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884318 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701883.60.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:58 GMT
Flow-Level: 3
Logid: 8991096927022615027
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991096927022615027
Yme: ZIGW+Ss3QE0RYysMTnb+qnFLufkASwH9tAlMySKDke74CgQvbTgzcaT86TY=
Content-Length: 44
www.1024tera.com/api/analytics?value=9062&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884320
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?value=9062&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884320
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 10d73e8a5169f52c362ca07e375c6730
92aaa226dcc9082c1ae239debd9c818ed8100845
109bef80afb86c68e270c8cf98c80cd2301ecf3b148b82a67c3e1ffcec398620
GET /api/analytics?value=9062&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884320 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701883.60.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:58 GMT
Flow-Level: 3
Logid: 8991096927896952728
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991096927896952728
Yme: ZIGW+Ss3QE0WbysESWLiq29Xvv4cVAPxrB5OwiqBmuu2
Content-Length: 44
www.1024tera.com/api/analytics?type=web_pause_close_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884393
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_pause_close_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884393
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 4c237dc3939575f50feedde3dadf1770
cb1d9f9418ea1515d6358ef9e0853caeaa108ac2
34eebd69dec17bf17bc45b4e8da341aa73e7b91c4f0824b5210ee32e6e5912ce
GET /api/analytics?type=web_pause_close_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884393 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701883.60.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:58 GMT
Flow-Level: 3
Logid: 8991096949925883332
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991096949925883332
Yme: ZIGW+Ss3QE0WbysBTnb+qnFLufkASwb2tAFJyyqBmOmzEAReLi9D3tzEgTY=
Content-Length: 44
www.1024tera.com/api/analytics?type=play_video_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884394
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=play_video_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884394
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash ca04346dbfbc70007e6edc004d7a77cc
d5368c7f893fd4d643d9cce7f58042c9eced8577
c2c20aed1b13363d173b5817c750185f59fc1bb552ff259bbc310b8a71bdf231
GET /api/analytics?type=play_video_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884394 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701883.60.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:58 GMT
Flow-Level: 3
Logid: 8991096949966109401
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991096949966109401
Yme: ZIGW+Ss3QE0XaysET2riq29Xvv4cVAPxqB5NwCOJmu2yTRGpfg==
Content-Length: 44
www.1024tera.com/api/analytics?type=web_share_video_init_rate_1&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884394
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_share_video_init_rate_1&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884394
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash eaf8edb0a773954c5f3c933ac05ccc14
b29a474fa50663ceb50ee768fb4121162e29803f
6a1c2f5a79711a6e2f7b47eda40ec51ab780d39e528ec2ca19798c29b7cf62b5
GET /api/analytics?type=web_share_video_init_rate_1&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884394 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701883.60.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:58 GMT
Flow-Level: 3
Logid: 8991096950694821421
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991096950694821421
Yme: ZIGW+Ss3QE0WaCsHTmjiq29Xvv4cVAPxrh5HwiqBmO+4DRNjb3dMI0QxYGkY
Content-Length: 44
www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884393
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884393
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 727a3454ac496c479209273a09496fe3
a1899709f2320a92f885bdc437dd1fb532a62370
7b3ff6f8052687fa14fd39a326cee68184b83b196f732001c05f53919a2880af
GET /api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884393 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701883.60.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:58 GMT
Flow-Level: 3
Logid: 8991096949470821924
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991096949470821924
Yme: ZIGW+Ss3QE0RYisCTHb+qnFLufkASwH9tAFJxCqBmO6wT19EOjaT3IBxnTY=
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/main.20d560f7.js
200 OK 231 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/main.20d560f7.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Size 231 kB (230551 bytes)
Hash 17aa3f3e7922b7b7cee178759b284b1d
f701a8c88566add6036d3b9a9d711325da567ce2
0cc17c391e2b67477f71c31b1c36f62cdc3a1b7773b91f319f7872bc0eaa29e0
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/main.20d560f7.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:57:54 GMT
content-type: application/javascript
server: openresty
content-md5: XBYxVdFeVZk0SBxr/7jqEg==
etag: W/"5c163155d15e559934481c6bffb8ea12"
expires: Thu, 07 Dec 2023 10:54:09 GMT
last-modified: Mon, 04 Dec 2023 08:11:44 GMT
x-bce-content-crc32: 2039423128
x-bce-debug-id: 5BTNP9EYz7/KBpfzx7FmcxPdLip0yxn6BfC+BkZW2Qt3oVBXRPoFAB5lM18t3FjJqV5cg821qGp5BgRGq2euDw==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 777ccde8-390f-4baf-911a-e695c4f497e0
x-bce-storage-class: STANDARD
x-ccdn-expires: 2584453
via: EU-GER-frankfurt-EDGE5-CACHE4[2],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE1[26],EU-GER-frankfurt-GLOBAL1-CACHE2[0,TCP_HIT,25]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 14458
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370013&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en
200 OK 968 B URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370013&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (3720), with no line terminators
Hash c63ade0734458aedd83620425fe979a1
a8a06e7792b648478e10471de53ff7d2db138490
472a97fc667465f451d99f5838c86dddc68730087832f488590713061698191a
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370013&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701884.59.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:59 GMT
Flow-Level: 3
Logid: 8991096969363163758
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 8991096969363163758
Yme: ZIGW+Ss3QE0RYisES2ziq29Xvv4cVAP2oh5IyiqBmOWx
Transfer-Encoding: chunked
www.1024tera.com/share/webmaster/getplan?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370015&suk=4399735848109
200 OK 103 B URL GET HTTP/1.1 www.1024tera.com/share/webmaster/getplan?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370015&suk=4399735848109
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 9005910a9f8d23177617093d329bf768
4423f46ba87617cbb71540aa62cc5864c3a361b5
dc34a1a60303e76cdd58368e50b4efd6b4bd95496d5286ee69c658e20392ec49
GET /share/webmaster/getplan?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370015&suk=4399735848109 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701884.59.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:59 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8991097028216589471
Logid: 8991097028216589471
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8991097028216589471
Yme: ZIGW+Ss3QEsSdTcDUmr/tG1MvuUZThzxrwpNwyKDzav0Fg4/RTePa5E93A==
Content-Length: 103
www.1024tera.com/api/analytics?isHitCTR=false&type=web_share_CTR_config&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884532
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?isHitCTR=false&type=web_share_CTR_config&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884532
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 0de8f106ef3b16e38d6e44088a22450a
83d1a0499ce36636f7fb07bba4dd6391a8aea3a0
cf480a393f690dc12974e7134ce7eb3b464d63e21dd756e9fa0cc25106c48246
GET /api/analytics?isHitCTR=false&type=web_share_CTR_config&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884532 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701884.59.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:59 GMT
Flow-Level: 3
Logid: 8991097032380393071
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991097032380393071
Yme: ZIGW+Ss3QE0WaSsHTHb+qnFLufkASwbztANKySKDne8=
Content-Length: 44
www.1024tera.com/share/mediameta?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370016&uk=4399735848109&shareid=3266078237&fid=314766955138018×tamp=1701701884
200 OK 121 B URL GET HTTP/1.1 www.1024tera.com/share/mediameta?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370016&uk=4399735848109&shareid=3266078237&fid=314766955138018×tamp=1701701884
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash abfac68445b6ec60e0e4b4d7363bd973
6a3d3614ee2c3390f77a579a8096c978fac50835
3197df93eb4dd1e9c744862138345cdf78cbd25555819d458183c8fe87709a16
GET /share/mediameta?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370016&uk=4399735848109&shareid=3266078237&fid=314766955138018×tamp=1701701884 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701884.59.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:59 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8991097029773288993
Logid: 8991097029773288993
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8991097029773288993
Yme: ZIGW+Ss3QE0RYysHT2jiq29Xvv4cVAPxoh5NwSGJmu2xT3o=
Content-Length: 121
region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701701883532&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=381948010.1701701884&ul=en-us&sr=1280x1024&_eu=AEA&_s=3&sid=1701701883&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&dt=Telegram%20%40Backupcity%20search%20join(1)(1)(1)(1).mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=scroll&ep.origin=firebase&epn.percent_scrolled=90&tfd=9224
204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701701883532&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=381948010.1701701884&ul=en-us&sr=1280x1024&_eu=AEA&_s=3&sid=1701701883&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&dt=Telegram%20%40Backupcity%20search%20join(1)(1)(1)(1).mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=scroll&ep.origin=firebase&epn.percent_scrolled=90&tfd=9224
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701701883532&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=381948010.1701701884&ul=en-us&sr=1280x1024&_eu=AEA&_s=3&sid=1701701883&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&dt=Telegram%20%40Backupcity%20search%20join(1)(1)(1)(1).mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=scroll&ep.origin=firebase&epn.percent_scrolled=90&tfd=9224 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://www.1024tera.com
date: Mon, 04 Dec 2023 14:57:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=pause&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884856
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=pause&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884856
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 95a73387976a79fc26b84b0b68c635fb
31bec2139e0775c0c1881017dd3f686dcba9b139
e0171251c59989cbfd90b0a210f04da9977ecfa951617a49e0e7ce53fcf848a2
GET /api/analytics?domId=adsterra&showType=1x2&country=NO&where=pause&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884856 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701884.59.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:59 GMT
Flow-Level: 3
Logid: 8991097069914796140
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991097069914796140
Yme: ZIGW+Ss3QEsRdTEHUmr/tG1MvuUZShz3rgpNwyCG3bTlQitDMV9kQqY53A==
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/share.f672a6ad.js
200 OK 371 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/share.f672a6ad.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 371 kB (371298 bytes)
Hash b816361a724240e24e1caa70c1645306
860b34d74070eebe1a2a54f7c3fd21c631db0fdc
1b1c229b77b2a8e4973bce4941b1787975353cbb2ab875ae540b4af2dfd41ac3
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/share.f672a6ad.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:57:54 GMT
content-type: application/javascript
server: openresty
content-md5: KwOqTU5tJIFZrjBKTB/n0g==
etag: W/"2b03aa4d4e6d248159ae304a4c1fe7d2"
expires: Thu, 07 Dec 2023 10:54:10 GMT
last-modified: Mon, 04 Dec 2023 08:11:44 GMT
x-bce-content-crc32: 3779137827
x-bce-debug-id: mgI7aOYZZEK+qu0uBsZYQTn3mO2YPN1m1yWMIslXVcQbelEgmnNGL6hhPRgbBC66RNL/zurLp2jRSx2Cx0gAcQ==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 44d14b44-921c-4303-a4ba-222d444c5b56
x-bce-storage-class: STANDARD
x-ccdn-expires: 2578630
via: EU-GER-frankfurt-EDGE5-CACHE4[2],EU-GER-frankfurt-EDGE5-CACHE1[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE10[28],EU-GER-frankfurt-GLOBAL1-CACHE1[0,TCP_HIT,27]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 14268
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
pl18043214.highperformancecpmgate.com/5c8996e8e3cb5e10b7fd36115b800ac7/invoke.js
200 OK 9.3 kB URL GET HTTP/1.1 pl18043214.highperformancecpmgate.com/5c8996e8e3cb5e10b7fd36115b800ac7/invoke.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerLet's Encrypt
Subjecthighperformancecpmgate.com
FingerprintEC:5C:1C:3A:AB:08:18:CE:84:A7:E0:33:D8:44:0B:AF:12:12:CE:C4
ValiditySat, 28 Oct 2023 06:31:01 GMT - Fri, 26 Jan 2024 06:31:00 GMT
File type Unicode text, UTF-8 text, with very long lines (25162), with no line terminators
Hash 6b22b25ea657647e530bd7ae1890f2c2
4d2cdc6548fc71225a1688ef5293a8ccaf7375cd
9f46c5db9390790b0c36c0b912964ab651b56c756bbb6e259319b05407456cb0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /5c8996e8e3cb5e10b7fd36115b800ac7/invoke.js HTTP/1.1
Host: pl18043214.highperformancecpmgate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 04 Dec 2023 14:57:59 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7087775b7e37d5bdf935809ea2df1634
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ymg-api.terabox.com/abdr?data=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%3D&_=0.5838891594958774
22 B URL GET ymg-api.terabox.com/abdr?data=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%3D&_=0.5838891594958774
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.terabox.com
Fingerprint4F:30:79:83:60:E0:58:E8:DA:05:09:38:E1:6D:CD:F9:46:33:D6:5F
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 9d4568c009d203ab10e33ea9953a0264
dd29ecf524b030a65261e3059c48ab9e1ecb2585
12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126
GET /abdr?data=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%3D&_=0.5838891594958774 HTTP/1.1
Host: ymg-api.terabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: ab_jid=a30d6568d98919070d5d933e7e814d13f440; ab_bid=a30d6568d98919070d5d933e7e814d13f440; ab_sr=1.0.1_NDU0NmJjMzRmYTY4NzNiODc0ZDE0MGI0OTcxMmIyMWIzZDkyM2RmNjA3MGY1YTE4ZWU5MDQ2YmFlMzI0NGQ3YjIzMGUwYmVlMjc5Y2JiM2E3MTNmYTAwZjM2MDdjZmVlMTk1OWUxY2ZkNzhjNzZiZTFmN2QxOTgzYTg0NzE4ZWMwMWQxOWRmZDNlZjI0ZGY1MzI2ZWU5MzI0YTM2NDAwYg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 14:57:59 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 8991097106066290112
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, Host, Content-Type, x-requested-with, X-Custom-Header
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Max-Age: 3600
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QEsUdTEFUmr/tG1MvuUZThz3rQpHxCaC
Server: nginx
logid: 8991097106066290112
Flow-level: 3
Content-Encoding: gzip
www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885024
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885024
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash cf98a6df7240e0ccf7a9c19fc4daebc8
4ae3bdc6195176636c98728b7cb5841a53f68eb6
81f1060158adf11b1d898df8aa2bb7c462a0d843fbcdb751d6b5aab887632ebf
GET /api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885024 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701884.59.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:59 GMT
Flow-Level: 3
Logid: 8991097111290887664
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991097111290887664
Yme: ZIGW+Ss3QE0WYisESWriq29Xvv4cVAPxrh5OxyOJmuywSg==
Content-Length: 44
www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885025
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885025
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5ea0924897a132ecb72f1d80b13e814a
e122cad5f3db8062b70eeb69d2fa537c51a4be53
8f4f1e8b7e1c604b886466a301aac39a3e94949f1fd2bc69d152b70be8cbeec3
GET /api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885025 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701884.59.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:59 GMT
Flow-Level: 3
Logid: 8991097116410332334
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991097116410332334
Yme: ZIGW+Ss3QE0WaSsHTHb+qnFLufkASwb8tAlIySKDnuU=
Content-Length: 44
www.1024tera.com/api/analytics?type=web_skip_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885025
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_skip_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885025
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 89e66cf1e98665cf8a6f7e5e23523d4e
d4e920c3d55103d6e2be24797f31770ed4180b5c
c45b71d6f99c2c9e190ab76d84edbb37ddb5523d605d25f04a0f5b10011f487a
GET /api/analytics?type=web_skip_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885025 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701884.59.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:59 GMT
Flow-Level: 3
Logid: 8991097114415141794
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991097114415141794
Yme: ZIGW+Ss3QE0WaSsHTHb+qnFLufkASwbxtAdIySKDm+31GgR2LDsLeGQE7jY=
Content-Length: 44
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370017&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en
200 OK 967 B URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370017&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (3720), with no line terminators
Hash 42787977fb408567848bf05ff6dd13f7
2c9d88ab71c987c6df8635827f8cf303d1b89788
0a6ac45bcabb8245bb43d3804f188b7c72a90ca0b7bd776f06152b7fc6553dd0
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370017&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701885.58.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:59 GMT
Flow-Level: 3
Logid: 8991097119717050954
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 8991097119717050954
Yme: ZIGW+Ss3QEsTdTcMUmr/tG1MvuUZSxz3rgpNwyOElZ85uqT/wCg=
Transfer-Encoding: chunked
www.1024tera.com/api/analytics?from=shareLink&type=videoplayer_open_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885071
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?from=shareLink&type=videoplayer_open_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885071
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 8a203e53fe1f20e1e5f9e831005eeab4
907b6e58d6a79d564fb9b691ab65b05c557864c1
c017aedad5368b1665b65067c1967db26a07da07e0d1de55a080e725a51ed5df
GET /api/analytics?from=shareLink&type=videoplayer_open_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885071 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701885.58.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:59 GMT
Flow-Level: 3
Logid: 8991097128133671531
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991097128133671531
Yme: ZIGW+Ss3QEoadTcAUmr/tG1MvuUYQxzxqApNwyKKx7nkG0ZjcS8K+Pal3A==
Content-Length: 44
www.1024tera.com/api/analytics?type=videoplayer_open&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885070
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=videoplayer_open&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885070
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 13f95f437fb20bbee783de371598e92b
4fc5f1782e0f22498ccfee2b468462e54dc7b526
9f57295a844e6562efebcd05435d79faf6a257879777fc16e691212c4f29f4ea
GET /api/analytics?type=videoplayer_open&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885070 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701885.58.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:59 GMT
Flow-Level: 3
Logid: 8991097123908172048
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991097123908172048
Yme: ZIGW+Ss3QEsRdTcCUmr/tG1MvuUYQhz3rQpNwSSLtGGhfScEgOcnS3Oi3A==
Content-Length: 44
www.1024tera.com/api/analytics?type=web_share_video_carousel_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885386
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_share_video_carousel_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885386
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 58e91d5fa323ab7bd397f53f01ed342f
8dca066488bdd120a9a8d680d30cd46d86fa616f
b6db47d30d8c634859c20e5c8e72a85b473e784144ce5593d720aa24b0352f68
GET /api/analytics?type=web_share_video_carousel_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885386 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701885.58.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:59 GMT
Flow-Level: 3
Logid: 8991097209398522399
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991097209398522399
Yme: ZIGW+Ss3QE0RYysMTnb+qnFLufkASwH9tAdOySKCmOU=
Content-Length: 44
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 2ff4567bd7494aa1583302f886501e6e
b52b85b8cd1b595e9a1df3fb7e59dd620ea0d970
5946abaaba7675fca57942e3bf477eedb81afe60a64c900dc359fdfad0233217
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:58:00 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.1024tera.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=169cb841-3388-4d22-aeab-0b48cb304b27:1:1; expires=Thu, 01 Dec 2033 14:58:00 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?value=10129&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885388
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?value=10129&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885388
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 02be307602bb630379621468c906f3d2
211fba44dbd3b3a650a26cdff9b3c61e4de685b7
a580611d0dd360a45ae83cf1eaa3a126001941d09c6b7cb24ab9cb4ce3dda1c5
GET /api/analytics?value=10129&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885388 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701885.58.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:59 GMT
Flow-Level: 3
Logid: 8991097212537167168
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991097212537167168
Yme: ZIGW+Ss3QE0RYysCSHb+qnFLufkASwbxtAFJxiqBmO2yGgR2Mhwzaw==
Content-Length: 44
www.1024tera.com/share/streaming?uk=4399735848109&shareid=3266078237&type=M3U8_FLV_264_480&fid=314766955138018&sign=65e2bfb8431f058d0b2bd46a6e654606e330dc8d×tamp=1701701884&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&esl=1&isplayer=1&ehps=1&clienttype=0&app_id=250528&web=1&channel=dubox
200 OK 3.8 kB URL GET HTTP/1.1 www.1024tera.com/share/streaming?uk=4399735848109&shareid=3266078237&type=M3U8_FLV_264_480&fid=314766955138018&sign=65e2bfb8431f058d0b2bd46a6e654606e330dc8d×tamp=1701701884&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&esl=1&isplayer=1&ehps=1&clienttype=0&app_id=250528&web=1&channel=dubox
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (919)
Hash 894fc21b506aba580a5fb3fb658a9170
7089c1ce6bc0e607bcfee40098b496397e198e9e
4c3b1886a4209e6d419bbe376a10d741427ff77470c7b65fa6f6f95b631d2b16
GET /share/streaming?uk=4399735848109&shareid=3266078237&type=M3U8_FLV_264_480&fid=314766955138018&sign=65e2bfb8431f058d0b2bd46a6e654606e330dc8d×tamp=1701701884&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&esl=1&isplayer=1&ehps=1&clienttype=0&app_id=250528&web=1&channel=dubox HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701885.58.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Type: application/x-mpegURL;charset=utf-8
Date: Mon, 04 Dec 2023 14:58:00 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8991097229720651699
Logid: 8991097229720651699
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Yld: 8991097229720651699
Yme: ZIGW+Ss3QEsTdTEAUmr/tG1MvuUZTxz3rQpNwyKBmvO5TlAwMccFtUAw3A==
Transfer-Encoding: chunked
www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885500
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885500
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 655744bf7ef3e61f8b62dee4a3329c8d
5aff0e9ed015fd6fae104093eb87e6ba389e8d08
2d8fd6f013fb31542d75cf034776fc87f2eef4b6decd3aa9fe1779eeafa572be
GET /api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885500 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701885.58.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:58:00 GMT
Flow-Level: 3
Logid: 8991097243244163628
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991097243244163628
Yme: ZIGW+Ss3QE0WaSsGTnb+qnFLufkASwb3tAFIwSqBmOi3
Content-Length: 44
www.1024tera.com/api/analytics?type=videoplayer_play_btn_click&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885545
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=videoplayer_play_btn_click&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885545
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 2f4933f1cfc8dca7af2dbc22466c9a9d
6fc995d9085ca15a0c7568232c28e29866ef87e2
cd190eb42a574a06d38740e1c57d0055a55cf07644244d5060aabd6a3867df76
GET /api/analytics?type=videoplayer_play_btn_click&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701885545 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701885.58.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:58:00 GMT
Flow-Level: 3
Logid: 8991097256434246296
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991097256434246296
Yme: ZIGW+Ss3QEsSdTcAUmr/tG1MvuUZSRz3qwpNwyGDzbPmCwI=
Content-Length: 44
manuretravelingaroma.com/ntv.json?key=5c8996e8e3cb5e10b7fd36115b800ac7&vstc=1
200 OK 4.3 kB URL GET HTTP/1.1 manuretravelingaroma.com/ntv.json?key=5c8996e8e3cb5e10b7fd36115b800ac7&vstc=1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerLet's Encrypt
Subjectmanuretravelingaroma.com
Fingerprint3E:46:A1:6F:6F:F1:94:7C:0B:02:4E:11:3E:04:BB:16:E6:90:75:00
ValidityTue, 28 Nov 2023 07:54:59 GMT - Mon, 26 Feb 2024 07:54:58 GMT
File type JSON data\012- , ASCII text, with very long lines (4292), with no line terminators
Hash ef087b45100761ee22197695c6c569e7
4ff0ae99ce5f79356f4061f6b2157e36c0719f59
6d4ea3e2183541a7679873adc39e5e85b48839c5b3fcef740384b75a17a89a22
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ntv.json?key=5c8996e8e3cb5e10b7fd36115b800ac7&vstc=1 HTTP/1.1
Host: manuretravelingaroma.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 04 Dec 2023 14:58:00 GMT
Content-Type: application/json
Content-Length: 4292
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.1024tera.com
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17942715; expires=Tue, 05 Dec 2023 14:58:00 GMT; secure; SameSite=None
pdhtkv=true; expires=Tue, 05 Dec 2023 14:58:00 GMT; secure; SameSite=None
uncs=1; expires=Tue, 05 Dec 2023 14:58:00 GMT; secure; SameSite=None
pdhtkv49=true; expires=Tue, 05 Dec 2023 14:58:00 GMT; secure; SameSite=None
uncs49=1; expires=Tue, 05 Dec 2023 14:58:00 GMT; secure; SameSite=None
nlec5c8996e8e3cb5e10b7fd36115b800ac7=[2229337]; expires=Mon, 04 Dec 2023 14:58:05 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9617c14d4b3833d1b86aa649a85840f1
Strict-Transport-Security: max-age=0; includeSubdomains
manuretravelingaroma.com/1e/1b/bd/1e1bbdc937ccd35cd1897b4e58c7407b.js
200 OK 23 kB URL GET HTTP/1.1 manuretravelingaroma.com/1e/1b/bd/1e1bbdc937ccd35cd1897b4e58c7407b.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerLet's Encrypt
Subjectmanuretravelingaroma.com
Fingerprint3E:46:A1:6F:6F:F1:94:7C:0B:02:4E:11:3E:04:BB:16:E6:90:75:00
ValidityTue, 28 Nov 2023 07:54:59 GMT - Mon, 26 Feb 2024 07:54:58 GMT
File type ASCII text, with very long lines (59520)
Hash 4b8a4db33985e80671438d58d94eeb82
26b6d687778948ca32bf67e669f47cb35a1a13c2
8692abd801cc3108678ed1bef27c69f67109c525ceaaf235fa223edd546a677e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /1e/1b/bd/1e1bbdc937ccd35cd1897b4e58c7407b.js HTTP/1.1
Host: manuretravelingaroma.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 04 Dec 2023 14:58:00 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_AN-1159_new=0; expires=Fri, 08 Dec 2023 18:58:00 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1323b9ccca7cc7aa4735b9601cefbc66
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-3c39bfc4.baa0ab5e.js
200 OK 191 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-3c39bfc4.baa0ab5e.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (33950)
Size 191 kB (190891 bytes)
Hash 669fac11e2d305813c3369ee202abb31
551712266e5f221eca9eb15db154b746f52ce3ad
869733240ab1fd17a4cac5638437c5e859be9561fde335d35edb10939dc1fa9a
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-3c39bfc4.baa0ab5e.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:57:59 GMT
content-type: application/javascript
server: openresty
content-md5: J2TcvyWm6gv2Eaqsv2udoA==
etag: W/"2764dcbf25a6ea0bf611aaacbf6b9da0"
expires: Sat, 04 Nov 2023 08:02:39 GMT
last-modified: Wed, 01 Nov 2023 07:11:44 GMT
x-bce-content-crc32: 568789530
x-bce-debug-id: xbaDKK50jlBZJ18L45fu3bSp+fDzE/r7QhsyaypWutuc/ChXmeJlm9RANAVDEiI6LAFEIbdQCthtn8HiVncnMQ==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 45ec87e7-f8da-4b01-bf46-6d2b8c70cc37
x-bce-storage-class: STANDARD
x-ccdn-expires: 2341028
via: EU-GER-frankfurt-EDGE5-CACHE4[1],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE6[31],EU-GER-frankfurt-GLOBAL1-CACHE14[0,TCP_HIT,29]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 2875741
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
manuretravelingaroma.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3sSD8eKuXjw5CIKCTLpnpjMzLrIY10gwJnF3JXisv56Uqe5qqrqnJzkFF2SPszf11Pkm2aAbxD2LIBNBl6CQuSw5mLM3D8KyR5lkYNwHVe999b3D971XX%2B3l5yRATs%2FWPzE7Sms6H1b9ylsbKhGmcJXVO5XAr%2FrXKxsqWWhcr%2FTGl%2B2%2BG%2Fhh1X%2B78pHkW2a%2B5ge%2BH%2FhBZUlZGZne%2FAULlR61g2rbrzZq1SBsoGefxy734KgH0T0n16DE6IXNx4%2Bg%2BBBJ%2FONN6bYyk77zYZxrmhmLrjj8LNlKTJEgnpaR9RAlh5NuGDci5OsrMMnhxAFMd3%2FsAEyNiPckAEsOJzLBugeXSpmGTMDESyi6Q0g9hKJDcHMXSpwSgAusriGJH6waW9DtS5aO2RGZffovVDEis3%2B9iiT%2BYVGrXuW20XmmTOLQi0qo3hCqM0SaHyPb8aCKY%2FDsSyjxJ5l%2FuoIk3l9z2kCJ8sK9UkOoaAgt%2B6DOQz4%2BykMeechTD7E4q9CwHfl%2BM2JRvd5qcM7rdc7D1oIIRb3RinzkfCyvjyztg%2Bs%2BuN1Fanexpe6fhtdg81%2FgNks44cFlI%2BJ9uouuKFFIgsIRFJSgUARFRlB0ywOhXc2VD4R2OQsmuTbJ9XJgss4ePTBZRyYE1Pb30nNydTwe7%2BrvP2FLnlVC3mq3F2RL1jkLZeCzZiTqC0EQspbvU96EUyWUu3LheEeNyOu9GaRqRF5sHoHRYzh9DK5mQPMAtBg0az7o5qDR8rGTPMykpcz0qtzEEKZEms0i2%2Fb29Dl57WJLb8x%2BDslPbvw29146eDIHbkuktsQX6leCjr43uGUKsn%2FLFI48WkszFasdOt7g7Yxmcub7j%2BV2YaxYvun6373Px8S4PLojXbZCE6GSjiMPF5UQ0i4ZyyX5edltSLaeu83F3CZ5urL%2BwdJynFrpnDLJEFSdrj0DVyMy%2B%2BYrF3%2Fz5T%2F%2BgbJD2LxEnJ%2BQSUCZY%2FB0Fy6dqneGwOppD0s9FHk5sDU2fdSKQMsppqyE%2Bx9m03rP3UPHeqDZXSRxia4t0dUlqO7D5XODLLUnNx5%2FM45vwbQ3YNp6%2B0xbff9ytE6dVWQY%2BZH0a5JFbRY1qS%2FaUaPNaDuQTRbSAJkbyfjvZ%2F8BAAD%2F%2FwEAAP%2F%2Fb1Ys1XMEAAA%3D
200 OK 7 B URL GET HTTP/1.1 manuretravelingaroma.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3sSD8eKuXjw5CIKCTLpnpjMzLrIY10gwJnF3JXisv56Uqe5qqrqnJzkFF2SPszf11Pkm2aAbxD2LIBNBl6CQuSw5mLM3D8KyR5lkYNwHVe999b3D971XX%2B3l5yRATs%2FWPzE7Sms6H1b9ylsbKhGmcJXVO5XAr%2FrXKxsqWWhcr%2FTGl%2B2%2BG%2Fhh1X%2B78pHkW2a%2B5ge%2BH%2FhBZUlZGZne%2FAULlR61g2rbrzZq1SBsoGefxy734KgH0T0n16DE6IXNx4%2Bg%2BBBJ%2FONN6bYyk77zYZxrmhmLrjj8LNlKTJEgnpaR9RAlh5NuGDci5OsrMMnhxAFMd3%2FsAEyNiPckAEsOJzLBugeXSpmGTMDESyi6Q0g9hKJDcHMXSpwSgAusriGJH6waW9DtS5aO2RGZffovVDEis3%2B9iiT%2BYVGrXuW20XmmTOLQi0qo3hCqM0SaHyPb8aCKY%2FDsSyjxJ5l%2FuoIk3l9z2kCJ8sK9UkOoaAgt%2B6DOQz4%2BykMeechTD7E4q9CwHfl%2BM2JRvd5qcM7rdc7D1oIIRb3RinzkfCyvjyztg%2Bs%2BuN1Fanexpe6fhtdg81%2FgNks44cFlI%2BJ9uouuKFFIgsIRFJSgUARFRlB0ywOhXc2VD4R2OQsmuTbJ9XJgss4ePTBZRyYE1Pb30nNydTwe7%2BrvP2FLnlVC3mq3F2RL1jkLZeCzZiTqC0EQspbvU96EUyWUu3LheEeNyOu9GaRqRF5sHoHRYzh9DK5mQPMAtBg0az7o5qDR8rGTPMykpcz0qtzEEKZEms0i2%2Fb29Dl57WJLb8x%2BDslPbvw29146eDIHbkuktsQX6leCjr43uGUKsn%2FLFI48WkszFasdOt7g7Yxmcub7j%2BV2YaxYvun6373Px8S4PLojXbZCE6GSjiMPF5UQ0i4ZyyX5edltSLaeu83F3CZ5urL%2BwdJynFrpnDLJEFSdrj0DVyMy%2B%2BYrF3%2Fz5T%2F%2BgbJD2LxEnJ%2BQSUCZY%2FB0Fy6dqneGwOppD0s9FHk5sDU2fdSKQMsppqyE%2Bx9m03rP3UPHeqDZXSRxia4t0dUlqO7D5XODLLUnNx5%2FM45vwbQ3YNp6%2B0xbff9ytE6dVWQY%2BZH0a5JFbRY1qS%2FaUaPNaDuQTRbSAJkbyfjvZ%2F8BAAD%2F%2FwEAAP%2F%2Fb1Ys1XMEAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerLet's Encrypt
Subjectmanuretravelingaroma.com
Fingerprint3E:46:A1:6F:6F:F1:94:7C:0B:02:4E:11:3E:04:BB:16:E6:90:75:00
ValidityTue, 28 Nov 2023 07:54:59 GMT - Mon, 26 Feb 2024 07:54:58 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRSu3sSD8eKuXjw5CIKCTLpnpjMzLrIY10gwJnF3JXisv56Uqe5qqrqnJzkFF2SPszf11Pkm2aAbxD2LIBNBl6CQuSw5mLM3D8KyR5lkYNwHVe999b3D971XX%2B3l5yRATs%2FWPzE7Sms6H1b9ylsbKhGmcJXVO5XAr%2FrXKxsqWWhcr%2FTGl%2B2%2BG%2Fhh1X%2B78pHkW2a%2B5ge%2BH%2FhBZUlZGZne%2FAULlR61g2rbrzZq1SBsoGefxy734KgH0T0n16DE6IXNx4%2Bg%2BBBJ%2FONN6bYyk77zYZxrmhmLrjj8LNlKTJEgnpaR9RAlh5NuGDci5OsrMMnhxAFMd3%2FsAEyNiPckAEsOJzLBugeXSpmGTMDESyi6Q0g9hKJDcHMXSpwSgAusriGJH6waW9DtS5aO2RGZffovVDEis3%2B9iiT%2BYVGrXuW20XmmTOLQi0qo3hCqM0SaHyPb8aCKY%2FDsSyjxJ5l%2FuoIk3l9z2kCJ8sK9UkOoaAgt%2B6DOQz4%2BykMeechTD7E4q9CwHfl%2BM2JRvd5qcM7rdc7D1oIIRb3RinzkfCyvjyztg%2Bs%2BuN1Fanexpe6fhtdg81%2FgNks44cFlI%2BJ9uouuKFFIgsIRFJSgUARFRlB0ywOhXc2VD4R2OQsmuTbJ9XJgss4ePTBZRyYE1Pb30nNydTwe7%2BrvP2FLnlVC3mq3F2RL1jkLZeCzZiTqC0EQspbvU96EUyWUu3LheEeNyOu9GaRqRF5sHoHRYzh9DK5mQPMAtBg0az7o5qDR8rGTPMykpcz0qtzEEKZEms0i2%2Fb29Dl57WJLb8x%2BDslPbvw29146eDIHbkuktsQX6leCjr43uGUKsn%2FLFI48WkszFasdOt7g7Yxmcub7j%2BV2YaxYvun6373Px8S4PLojXbZCE6GSjiMPF5UQ0i4ZyyX5edltSLaeu83F3CZ5urL%2BwdJynFrpnDLJEFSdrj0DVyMy%2B%2BYrF3%2Fz5T%2F%2BgbJD2LxEnJ%2BQSUCZY%2FB0Fy6dqneGwOppD0s9FHk5sDU2fdSKQMsppqyE%2Bx9m03rP3UPHeqDZXSRxia4t0dUlqO7D5XODLLUnNx5%2FM45vwbQ3YNp6%2B0xbff9ytE6dVWQY%2BZH0a5JFbRY1qS%2FaUaPNaDuQTRbSAJkbyfjvZ%2F8BAAD%2F%2FwEAAP%2F%2Fb1Ys1XMEAAA%3D HTTP/1.1
Host: manuretravelingaroma.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=17942715; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 04 Dec 2023 14:58:00 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 168c02965660798611db12814fc92735
Strict-Transport-Security: max-age=0; includeSubdomains
v1.1024tera.com/video/netdisk-videotran-tky/c52143df40e604ea574d1ecf57aff0f8_1138_1_ts/5f6b5149c2748a5b4e0e9d9d55b8d6bd?ts_size=8532192&app_id=250528&ccn=NO&csl=0&dp-logid=8991097229720651699&fn=Telegram+%40Backupcity+search+join%281%29%281%29%281%29%281%29.mp4&from_type=3&fsid=314766955138018&idc_c=1&isplayer=1&iv=2&logid=8991097229720651699&ouk=4399735848109&r=319417217&size=56465836&sta_cs=0&sta_dt=video&sta_dx=53&time=1701730680&to=any&tot=ctkoS&uo=any&uva=1499419338&vuk=&dtime=5&etag=5f6b5149c2748a5b4e0e9d9d55b8d6bd&fid=06ec9825a767d3615c2625c2dcf58963-&len=208304&range=205108-413411®ion=tky&resv4=&sign=BOUTHNFI-F3530edecde9cd71b79378b290804a96-FDtezAI0sW6aGD19J9hQ%252FWn30Wk%253D&xcode=8f35291bc079f457e8fac283daecbdf5ef0c3bac3ea6a0b01b659e6801a3f1c44207b0d28482f1852f34d31b3fd7c148316128a2cdfcce4d&xv=6&need_suf=&pmk=14005f6b5149c2748a5b4e0e9d9d55b8d6bddc34a2560000008230e0&by=my-streaming
200 OK 208 kB URL GET HTTP/2 v1.1024tera.com/video/netdisk-videotran-tky/c52143df40e604ea574d1ecf57aff0f8_1138_1_ts/5f6b5149c2748a5b4e0e9d9d55b8d6bd?ts_size=8532192&app_id=250528&ccn=NO&csl=0&dp-logid=8991097229720651699&fn=Telegram+%40Backupcity+search+join%281%29%281%29%281%29%281%29.mp4&from_type=3&fsid=314766955138018&idc_c=1&isplayer=1&iv=2&logid=8991097229720651699&ouk=4399735848109&r=319417217&size=56465836&sta_cs=0&sta_dt=video&sta_dx=53&time=1701730680&to=any&tot=ctkoS&uo=any&uva=1499419338&vuk=&dtime=5&etag=5f6b5149c2748a5b4e0e9d9d55b8d6bd&fid=06ec9825a767d3615c2625c2dcf58963-&len=208304&range=205108-413411®ion=tky&resv4=&sign=BOUTHNFI-F3530edecde9cd71b79378b290804a96-FDtezAI0sW6aGD19J9hQ%252FWn30Wk%253D&xcode=8f35291bc079f457e8fac283daecbdf5ef0c3bac3ea6a0b01b659e6801a3f1c44207b0d28482f1852f34d31b3fd7c148316128a2cdfcce4d&xv=6&need_suf=&pmk=14005f6b5149c2748a5b4e0e9d9d55b8d6bddc34a2560000008230e0&by=my-streaming
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
Size 208 kB (208304 bytes)
Hash e1223359baa7d7ddb50c66e031bbb343
0addaec8731f642a07062d3b3e3160e381694a9a
d692e15458cbbee65b55bc3e0bfcae8e17f71fd5d4a8cc4e520da4bb6250514b
GET /video/netdisk-videotran-tky/c52143df40e604ea574d1ecf57aff0f8_1138_1_ts/5f6b5149c2748a5b4e0e9d9d55b8d6bd?ts_size=8532192&app_id=250528&ccn=NO&csl=0&dp-logid=8991097229720651699&fn=Telegram+%40Backupcity+search+join%281%29%281%29%281%29%281%29.mp4&from_type=3&fsid=314766955138018&idc_c=1&isplayer=1&iv=2&logid=8991097229720651699&ouk=4399735848109&r=319417217&size=56465836&sta_cs=0&sta_dt=video&sta_dx=53&time=1701730680&to=any&tot=ctkoS&uo=any&uva=1499419338&vuk=&dtime=5&etag=5f6b5149c2748a5b4e0e9d9d55b8d6bd&fid=06ec9825a767d3615c2625c2dcf58963-&len=208304&range=205108-413411®ion=tky&resv4=&sign=BOUTHNFI-F3530edecde9cd71b79378b290804a96-FDtezAI0sW6aGD19J9hQ%252FWn30Wk%253D&xcode=8f35291bc079f457e8fac283daecbdf5ef0c3bac3ea6a0b01b659e6801a3f1c44207b0d28482f1852f34d31b3fd7c148316128a2cdfcce4d&xv=6&need_suf=&pmk=14005f6b5149c2748a5b4e0e9d9d55b8d6bddc34a2560000008230e0&by=my-streaming HTTP/1.1
Host: v1.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Zen/2.7
date: Mon, 04 Dec 2023 14:58:00 GMT
content-type: application/octet-stream
content-length: 208304
strict-transport-security: max-age=31536000; preload
cache-control: max-age=259200
etag: 5f6b5149c2748a5b4e0e9d9d55b8d6bd
x-bs-client-ip: MTAzLjIxOS40NS4yMTY=
x-bs-request-id: MTAuMjUyLjE0MC4yMjc6MjAyMzo3Nzg5MTQ4NjIyMzc5NjQzNDY5OjIwMjMtMTItMDIgMjA6MTM6NTk=
x-bs-file-size: 8532192
x-bs-meta-crc32: 3694436950
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length, ETag, x-bs-request-id
access-control-allow-origin: https://www.1024tera.com
last-modified: Sat, 22 Apr 2023 08:33:28 GMT
access-control-allow-credentials: true
access-control-allow-methods: HEAD, GET, OPTIONS, PUT, POST, DELETE
access-control-allow-headers: Range, Origin, Content-Type, Accept, Content-Length
content-md5: 5f6b5149c2748a5b4e0e9d9d55b8d6bd
superfile: 0
accept-ranges: bytes
age: 172595
via: https/1.1 JP.TYO.837.P.230.83 (Cache-6.1.14), http/1.1 DE.FRA5.837.E.113.199 (Cache-6.1.15)
hittype: TCP_F_HIT
cache-server: ZenCache
X-Firefox-Spdy: h2
manuretravelingaroma.com/ntv.json?key=627e2f8a423975bc4bd7a76128c2d552&vstc=2&uuid=169cb841-3388-4d22-aeab-0b48cb304b27%3A1%3A1&custom=%7B%22d37e3bc4%22%3A%22b%22%7D
200 OK 8.9 kB URL GET HTTP/1.1 manuretravelingaroma.com/ntv.json?key=627e2f8a423975bc4bd7a76128c2d552&vstc=2&uuid=169cb841-3388-4d22-aeab-0b48cb304b27%3A1%3A1&custom=%7B%22d37e3bc4%22%3A%22b%22%7D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerLet's Encrypt
Subjectmanuretravelingaroma.com
Fingerprint3E:46:A1:6F:6F:F1:94:7C:0B:02:4E:11:3E:04:BB:16:E6:90:75:00
ValidityTue, 28 Nov 2023 07:54:59 GMT - Mon, 26 Feb 2024 07:54:58 GMT
File type JSON data\012- , ASCII text, with very long lines (8900), with no line terminators
Hash 302344a6f01952fe42f6a3b8172ca9db
d044174c106cf6f963de9a4ba506ff233784354f
726c47a494bc6194887e9aea9769887f0605d9a438d15ade433a1d42d79fee37
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ntv.json?key=627e2f8a423975bc4bd7a76128c2d552&vstc=2&uuid=169cb841-3388-4d22-aeab-0b48cb304b27%3A1%3A1&custom=%7B%22d37e3bc4%22%3A%22b%22%7D HTTP/1.1
Host: manuretravelingaroma.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=17942715; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 04 Dec 2023 14:58:00 GMT
Content-Type: application/json
Content-Length: 8900
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.1024tera.com
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17942715,18326536; expires=Tue, 05 Dec 2023 14:58:00 GMT; secure; SameSite=None
uid_id2=169cb841-3388-4d22-aeab-0b48cb304b27:1:1; expires=Mon, 11 Dec 2023 14:58:00 GMT; secure; SameSite=None
uncs=2; expires=Tue, 05 Dec 2023 14:58:00 GMT; secure; SameSite=None
uncs49=2; expires=Tue, 05 Dec 2023 14:58:00 GMT; secure; SameSite=None
nlec627e2f8a423975bc4bd7a76128c2d552=[2229214,2106764]; expires=Mon, 04 Dec 2023 14:58:05 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b3254e526385c2ad853f565e3b7eccbc
Strict-Transport-Security: max-age=0; includeSubdomains
banquetunarmedgrater.com/advertisers.js
200 OK 0 B URL GET HTTP/2 banquetunarmedgrater.com/advertisers.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerGoogle Trust Services LLC
Subjectbanquetunarmedgrater.com
Fingerprint92:8E:AD:72:AC:AD:3B:21:99:CD:21:A0:9F:BD:F2:AF:0D:98:D8:57
ValidityThu, 09 Nov 2023 11:40:15 GMT - Wed, 07 Feb 2024 11:40:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:58:00 GMT
content-type: application/javascript
content-length: 0
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=172800
x-request-id: 6f20f54dcabc7045e476a536f2e106ad
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Mon, 04 Dec 2023 14:58:00 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G%2FTQZfrXXNMo%2BspUlPrbkFjbFY%2BZrw9cEsqBtZdgLwguvpMqPOhM1GZO3nSJ1ahNdmYPp3hz74vw%2BjRr9%2B1C7Vb3fIIXVyt6B74K5eng7CtHvilJgCIsHDAN%2Fi%2FvopnvKdtaCFpN3PaTqLk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8304e7b32fbc56cc-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/video-fail-bg.b77a1e8a.png
200 OK 105 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/video-fail-bg.b77a1e8a.png
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type PNG image data, 980 x 438, 4-bit colormap, non-interlaced\012- data
Size 105 kB (104817 bytes)
Hash b77a1e8a238d4e4191ff9e8a80d6d86d
30d6d726f8f3bfac5770d3ba9ac464f36b4c51b3
73af449450a319a9c3b28782e4bfa3ed17e6b5f7c04a834dba21f96dd0f28949
GET /fe-opera-static/node-static-v4/fe-webv4-main/img/video-fail-bg.b77a1e8a.png HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:58:01 GMT
content-type: image/png
content-length: 104817
server: openresty
content-md5: t3oeiiONTkGR/56KgNbYbQ==
etag: "b77a1e8a238d4e4191ff9e8a80d6d86d"
expires: Wed, 15 Feb 2023 22:47:56 GMT
last-modified: Fri, 10 Feb 2023 07:43:39 GMT
x-bce-content-crc32: 4025551842
x-bce-debug-id: GU0GXuuVmHD1E2Z4twTBIaO14v2edTIrZIjjemDK7yWOsY+HCIeciS9bgQOAOSIWMUxPucybY5m7VzvcBt1c3A==
x-bce-request-id: 47c77fdc-17bf-44d4-8c6d-c40c7548a183
x-bce-storage-class: STANDARD
x-ccdn-expires: 1180740
via: EU-GER-frankfurt-EDGE5-CACHE4[3],EU-GER-frankfurt-EDGE5-CACHE1[0,TCP_HIT,1],EU-GER-frankfurt-GLOBAL1-CACHE2[3],EU-GER-frankfurt-GLOBAL1-CACHE8[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24748576
accept-ranges: bytes
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/5d/60/ed/5d60edea793259cd719bfa3d19bcae3e/1628587069.jpg
200 OK 28 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/5d/60/ed/5d60edea793259cd719bfa3d19bcae3e/1628587069.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 321x240, components 3\012- data
Hash f4fabf64be47ce667e0cfc150667b36c
234d722efa06cbedfdad9c1bb497a942997741dd
272b7875492a55c6f53a4e4704e715cc5b3cc4e5093758cbfedd95441bfe98d8
GET /cti/5d/60/ed/5d60edea793259cd719bfa3d19bcae3e/1628587069.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:58:01 GMT
content-type: image/jpeg
content-length: 27606
server: nginx/1.21.6
last-modified: Tue, 10 Aug 2021 09:17:59 GMT
etag: "61124447-6bd6"
expires: Wed, 06 Dec 2023 14:58:01 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/28/5d/66/285d66474f8eb1391e6c869128c7a3ea/1628587131.jpg
200 OK 29 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/28/5d/66/285d66474f8eb1391e6c869128c7a3ea/1628587131.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash 76f54f42b70d14a6d6bfe2f8b1945265
197daa3737be8968bf39ff28000663c1c17deeb2
c864fde3026e05a2cc34b4348fa4888d3ae44202179277877d082cadd9971abc
GET /cti/28/5d/66/285d66474f8eb1391e6c869128c7a3ea/1628587131.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:58:01 GMT
content-type: image/jpeg
content-length: 28852
server: nginx/1.21.6
last-modified: Tue, 10 Aug 2021 09:18:59 GMT
etag: "61124483-70b4"
expires: Wed, 06 Dec 2023 14:58:01 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
petideadeference.com/f1/95/e5/f195e5fa577c23352666448243864c68.js
200 OK 15 kB URL GET HTTP/1.1 petideadeference.com/f1/95/e5/f195e5fa577c23352666448243864c68.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerLet's Encrypt
Subjectpetideadeference.com
Fingerprint0A:DC:88:39:2C:53:13:CB:4D:70:A4:F2:8C:77:74:6F:03:CA:00:58
ValidityTue, 28 Nov 2023 07:56:10 GMT - Mon, 26 Feb 2024 07:56:09 GMT
File type ASCII text, with very long lines (42777), with no line terminators
Hash a2c2f23e70ba76bad2ae5a8bf93454c2
be7d04ce19e323b615ec850273203cbe88f9236d
328b51ad0b553714faeb2d29bd150fadf52edeb7409db559a17c4d1c4718e974
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /f1/95/e5/f195e5fa577c23352666448243864c68.js HTTP/1.1
Host: petideadeference.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 04 Dec 2023 14:58:01 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9f9d63010124034c136bf3c5805c5993
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
forklacy.com/pixel/purst?dl=0&th=0&sc=0&rs=10904&rd=10904&fd=619&bv=23.12.v.1&tmpl=136
200 OK 0 B URL GET HTTP/1.1 forklacy.com/pixel/purst?dl=0&th=0&sc=0&rs=10904&rd=10904&fd=619&bv=23.12.v.1&tmpl=136
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerLet's Encrypt
Subjectforklacy.com
FingerprintEC:85:C1:DF:A4:84:6D:18:50:A5:AE:F6:0A:77:C6:D4:F8:27:67:1F
ValidityTue, 28 Nov 2023 10:42:01 GMT - Mon, 26 Feb 2024 10:42:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=10904&rd=10904&fd=619&bv=23.12.v.1&tmpl=136 HTTP/1.1
Host: forklacy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 04 Dec 2023 14:58:01 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701886563
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701886563
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 2656bddc7a66669fadf445db823e7c30
71f6737d88c1865972fab01ea2a29ffce36cebd7
4fb7ece6243bb896ec363728f946e46bacc6b828f2f8971bfcac36e6054b1997
GET /api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701886563 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701886.57.0.0; _ga=GA1.1.381948010.1701701884; dom3ic8zudi28v8lr6fgphwffqoz0j6c=169cb841-3388-4d22-aeab-0b48cb304b27%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=manuretravelingaroma.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:58:01 GMT
Flow-Level: 3
Logid: 8991097566284968235
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991097566284968235
Yme: ZIGW+Ss3QE0WaisHTmjiq29Xvv4cVAPxox5OwiqBmOWy
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/kakao.min.js
200 OK 41 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/kakao.min.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 81a06ef8005c4ffbbb343817151aea91
d808ea1caeb2afd7006f58bc166f0addb2dbbc61
9cbeb4b4da5a4619cadbce058b99c0fa3165b17557fc60766412cec651349a5b
GET /fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/kakao.min.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:57:54 GMT
content-type: application/javascript
server: openresty
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT
access-control-expose-headers: ETag, Content-Length, x-bce-next-append-offset, x-bce-object-type, x-bce-request-id
access-control-max-age: 1800
content-md5: Ng3YsEXIR8ylP6d+vhUKPw==
etag: W/"360dd8b045c847cca53fa77ebe150a3f"
expires: Sat, 24 Sep 2022 06:46:06 GMT
last-modified: Wed, 21 Sep 2022 05:03:33 GMT
x-bce-content-crc32: 3787281588
x-bce-debug-id: NdXOHvJhWdykwQRMkfwzkNsOZ5AZbm+dI56Adia+fvxzTQbCnAlm9HuK5oYXV0mvHXmPazsRbY1yj9LO6Ud5AQ==
x-bce-request-id: 95d5b42d-7d75-47b4-acd7-57e276abb336
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 1202930
via: EU-GER-frankfurt-EDGE5-CACHE4[17],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE4[3],EU-GER-frankfurt-GLOBAL1-CACHE9[0,TCP_HIT,2],EA-SGP-GLOBAL1-CACHE5[4],EA-SGP-GLOBAL1-CACHE7[0,TCP_HIT,3]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24751731
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-b20230be.0a893307.js
200 OK 41 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-b20230be.0a893307.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 130bb1ca28f002173ba37a9cccbedeea
c0b75dc6d7a95c7f52a8b61145abc2af0eb927ee
c431f5506b4b8e661b16cc49232827efd15d8e78071d0484746f15df17bec195
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-b20230be.0a893307.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:57:59 GMT
content-type: application/javascript
server: openresty
content-md5: lkWxCU7mztbQBa5ORv1xRQ==
etag: W/"9645b1094ee6ced6d005ae4e46fd7145"
expires: Thu, 07 Sep 2023 07:34:05 GMT
last-modified: Mon, 04 Sep 2023 04:39:49 GMT
x-bce-content-crc32: 860175862
x-bce-debug-id: YxKaPLFml5ovwtS++EvPw1ID/HiMt+Zhii4NCGGd5BA+u+1ccgAwlYXqpryUmBj7YqU863R0gVkKEFuqafmKAg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: aeea44c1-7e31-4002-a3ac-fcdfed6855de
x-bce-storage-class: STANDARD
x-ccdn-expires: 2512206
via: EU-GER-frankfurt-EDGE5-CACHE4[2],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE5[14],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,13]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 7888566
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?errno=undefined&errormsg=Unable%20to%20connect%20to%20the%20Internet%2C%20please%20connect%20and%20try%20again&type=videoplayer_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701886611
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=undefined&errormsg=Unable%20to%20connect%20to%20the%20Internet%2C%20please%20connect%20and%20try%20again&type=videoplayer_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701886611
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7d581da9dd38267142731c19786d8f71
6d9281085f400fe12725fe1b35556064bd9b8292
820e3f0479f16a84e54747e0736b5d075c172f5fbd98a2e05e4da663cec7b1b4
GET /api/analytics?errno=undefined&errormsg=Unable%20to%20connect%20to%20the%20Internet%2C%20please%20connect%20and%20try%20again&type=videoplayer_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701886611 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701886.57.0.0; _ga=GA1.1.381948010.1701701884; dom3ic8zudi28v8lr6fgphwffqoz0j6c=169cb841-3388-4d22-aeab-0b48cb304b27%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=manuretravelingaroma.com; pp_main_1e1bbdc937ccd35cd1897b4e58c7407b=1; pp_idelay_1e1bbdc937ccd35cd1897b4e58c7407b=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:58:01 GMT
Flow-Level: 3
Logid: 8991097575378210691
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991097575378210691
Yme: ZIGW+Ss3QE0WaisCRnb+qnFLufkASwbxtAFIySKDmuw=
Content-Length: 44
www.1024tera.com/api/analytics?type=videoplayer_pause&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701886624
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=videoplayer_pause&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701886624
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 44e36a39aebff0abb83fcde23e1f6b12
8bff490480a645264fdfc110fb2b8cffc4542ab8
5350ab69c5662c1c5d24e6d7c580832fba0d31826136e7769e3f9e684b4e85ad
GET /api/analytics?type=videoplayer_pause&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701886624 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701886.57.0.0; _ga=GA1.1.381948010.1701701884; dom3ic8zudi28v8lr6fgphwffqoz0j6c=169cb841-3388-4d22-aeab-0b48cb304b27%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=manuretravelingaroma.com; pp_main_1e1bbdc937ccd35cd1897b4e58c7407b=1; pp_idelay_1e1bbdc937ccd35cd1897b4e58c7407b=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:58:01 GMT
Flow-Level: 3
Logid: 8991097578621082095
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991097578621082095
Yme: ZIGW+Ss3QE0WaysHT2jiq29Xvv4cVAPxqB5NwiGJmu20S3vBD+9Hu2BneKAY
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-fdedac32.68a159c0.js
200 OK 18 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-fdedac32.68a159c0.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 4ec6b95ff3a764222733851f02b4f49f
74e47fdd8c33c8477ef97859274873e5a311e993
0de76f0411331ce0c8af119cd2d9daf3b0b7d08c3d4a1aa4df0e04aef047e856
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-fdedac32.68a159c0.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:57:59 GMT
content-type: application/javascript
server: openresty
content-md5: fvMe6ZlLuOpfBUbbnYT1og==
etag: W/"7ef31ee9994bb8ea5f0546db9d84f5a2"
expires: Thu, 17 Aug 2023 11:01:40 GMT
last-modified: Mon, 14 Aug 2023 05:25:49 GMT
x-bce-content-crc32: 3183863461
x-bce-debug-id: AQBq72xN1KX+ruW3aqp1xkmekXXaYh0i39b8sd2sQtmjC5dG590ZtpaEFSUwE16V73TOukcLyO6ly/sQLIZ4bg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: b4d412dc-3e8c-456b-bf34-9d06ca0b4fd9
x-bce-storage-class: STANDARD
via: EU-GER-frankfurt-EDGE5-CACHE4[3],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE6[1934],EU-GER-frankfurt-GLOBAL1-CACHE14[953,TCP_MISS,1933]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 9690978
x-ccdn-expires: 709823
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
200 OK 27 kB URL GET HTTP/3 friendshipmale.com/sfp.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 924e967bca1d599992556a8d139b1c5a
222b09dbf164ddc03d39100fd0524a22018d28b2
ac84c2f8288b59f8e04ba77287ce696052bfeee0d462a566d94dc305df646c95
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:58:00 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 05321e3426e1042270813d8e03f6b282
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Mon, 04 Dec 2023 14:58:00 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ipI9p5cx66BmCp81EAlqthkgMtzTT0zHH97oJaMkstsCruWHf7E%2BU3gVxnqh0msYLsqDuTt1CBBbBkablSWgnFvx%2B%2FA8Dg%2F5RO0hLcy5eaNReEodzU%2FXz5KcAqRBXnZHIeCPF5g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8304e7b28c527309-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
petideadeference.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzYsc1Rd93Zkf5KcbEwQRXbSiouD01FdPVZtFMMZIMGZCEsn6ffXMc17VK96r6prMyhgJWWTRulJX1ac7MzEOYv4ARXrchKCQ3sgsnLWuhZCldM%2FA6IWqe%2B85d3HPeffWsNwnPkq6d%2Bkjs6m0pkudttd685rKhKlc6%2BLVlu%2B1vVOtaypbjk61NmY%2F23%2FH9zpt763WB5Kvm6XA8z3P9%2FzWOWVlz2wszVmofKfrt7teOwrafifChv1v78omHG1C9PfJSSgx%2Fd%2FawwdQfIIs%2FeGsdOuFyd9%2BPy01LYxFX2x%2FnK1npsqQHpU920Av2z6chnFTQr5qwmTbhwpg%2BuOZAjA1JY3ffbBs%2B3BNsP7dg02ZhszAxLOo%2BhNIPYGiE3BzE0o8JgAXuLiCLN26aGxFrx%2BwdMZOycKTv6GqKVn443lk6fdntNpoXTG6LJTJHDZ6NdTGBGp1grzcRbHZgKp2wYvPoMRvZOnJBWTpeMVpAyX2XvOXu5wlkb8YhkmyGIkgWKSSskWPRQlnoRexIJ5bpNQEqjeBlgNQ10A5%2B1QDZa%2BBMm8gFXst2un2PC%2FusV4YJhHnPAw57yTLoiPCKOl5KPlMwwBFPgDXA3D7%2BVYu1or1%2FriwpRyXGXdD%2F94BFHXn4NYMjLpDH7m9cU%2BEsQwZj4YM6%2BqLx52TsOXPcGs1nGjAFQR9UaOSBJUjqChBpQiqgqDq13eFdoGrt4R2JfMPc3CYw3pkitUhvWuKVZkRUDsY5vvkxMz0xgvj41iXe63lIJZBL6FREHbjDuMREzGNl%2F0g4YHodAI4VUO55tyiTTUlr7x0B7makv%2FHO2B0F07vgqsToKUPWo3iwANdG0WJh81sx%2FeCqJCWtrlJIUyNvFhAcb0x1Pvkxfnjv3psH5I%2FOn3%2F5Z3j%2Fht%2Fgdsaua3xifqFYFXfHl02FRlfNpUjD1byQqVqk84O40pBC3ns%2FofyemWsOH%2FWDb59l8%2BIWblzVbriAs2EylYd%2Be6MEkLac8ZySX48765Jdql0a2dKm5X5hUvvnTuf5lY6p0w2AVWPV56CqylZuPHT%2FOSf%2B%2FUWlJ3AljXS8hE5DCizC55%2FCpcfbe8MgdVHMyxvoCrrkQ3YEagVgZZHPWU13L96dlQP3W2s2iZocRNZWqNva%2FR1DaoHcOUzoyK3j04%2F%2FHoW34Dp5ohp2xwzbfWXc2unpPX6HTi11%2Br4kUxYEnMhmOTCj4MwCT0vECKKu9LvonBTmf759B8AAAD%2F%2FwEAAP%2F%2F9MFt888EAAA%3D
200 OK 7 B URL GET HTTP/1.1 petideadeference.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzYsc1Rd93Zkf5KcbEwQRXbSiouD01FdPVZtFMMZIMGZCEsn6ffXMc17VK96r6prMyhgJWWTRulJX1ac7MzEOYv4ARXrchKCQ3sgsnLWuhZCldM%2FA6IWqe%2B85d3HPeffWsNwnPkq6d%2Bkjs6m0pkudttd685rKhKlc6%2BLVlu%2B1vVOtaypbjk61NmY%2F23%2FH9zpt763WB5Kvm6XA8z3P9%2FzWOWVlz2wszVmofKfrt7teOwrafifChv1v78omHG1C9PfJSSgx%2Fd%2FawwdQfIIs%2FeGsdOuFyd9%2BPy01LYxFX2x%2FnK1npsqQHpU920Av2z6chnFTQr5qwmTbhwpg%2BuOZAjA1JY3ffbBs%2B3BNsP7dg02ZhszAxLOo%2BhNIPYGiE3BzE0o8JgAXuLiCLN26aGxFrx%2BwdMZOycKTv6GqKVn443lk6fdntNpoXTG6LJTJHDZ6NdTGBGp1grzcRbHZgKp2wYvPoMRvZOnJBWTpeMVpAyX2XvOXu5wlkb8YhkmyGIkgWKSSskWPRQlnoRexIJ5bpNQEqjeBlgNQ10A5%2B1QDZa%2BBMm8gFXst2un2PC%2FusV4YJhHnPAw57yTLoiPCKOl5KPlMwwBFPgDXA3D7%2BVYu1or1%2FriwpRyXGXdD%2F94BFHXn4NYMjLpDH7m9cU%2BEsQwZj4YM6%2BqLx52TsOXPcGs1nGjAFQR9UaOSBJUjqChBpQiqgqDq13eFdoGrt4R2JfMPc3CYw3pkitUhvWuKVZkRUDsY5vvkxMz0xgvj41iXe63lIJZBL6FREHbjDuMREzGNl%2F0g4YHodAI4VUO55tyiTTUlr7x0B7makv%2FHO2B0F07vgqsToKUPWo3iwANdG0WJh81sx%2FeCqJCWtrlJIUyNvFhAcb0x1Pvkxfnjv3psH5I%2FOn3%2F5Z3j%2Fht%2Fgdsaua3xifqFYFXfHl02FRlfNpUjD1byQqVqk84O40pBC3ns%2FofyemWsOH%2FWDb59l8%2BIWblzVbriAs2EylYd%2Be6MEkLac8ZySX48765Jdql0a2dKm5X5hUvvnTuf5lY6p0w2AVWPV56CqylZuPHT%2FOSf%2B%2FUWlJ3AljXS8hE5DCizC55%2FCpcfbe8MgdVHMyxvoCrrkQ3YEagVgZZHPWU13L96dlQP3W2s2iZocRNZWqNva%2FR1DaoHcOUzoyK3j04%2F%2FHoW34Dp5ohp2xwzbfWXc2unpPX6HTi11%2Br4kUxYEnMhmOTCj4MwCT0vECKKu9LvonBTmf759B8AAAD%2F%2FwEAAP%2F%2F9MFt888EAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerLet's Encrypt
Subjectpetideadeference.com
Fingerprint0A:DC:88:39:2C:53:13:CB:4D:70:A4:F2:8C:77:74:6F:03:CA:00:58
ValidityTue, 28 Nov 2023 07:56:10 GMT - Mon, 26 Feb 2024 07:56:09 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSzYsc1Rd93Zkf5KcbEwQRXbSiouD01FdPVZtFMMZIMGZCEsn6ffXMc17VK96r6prMyhgJWWTRulJX1ac7MzEOYv4ARXrchKCQ3sgsnLWuhZCldM%2FA6IWqe%2B85d3HPeffWsNwnPkq6d%2Bkjs6m0pkudttd685rKhKlc6%2BLVlu%2B1vVOtaypbjk61NmY%2F23%2FH9zpt763WB5Kvm6XA8z3P9%2FzWOWVlz2wszVmofKfrt7teOwrafifChv1v78omHG1C9PfJSSgx%2Fd%2FawwdQfIIs%2FeGsdOuFyd9%2BPy01LYxFX2x%2FnK1npsqQHpU920Av2z6chnFTQr5qwmTbhwpg%2BuOZAjA1JY3ffbBs%2B3BNsP7dg02ZhszAxLOo%2BhNIPYGiE3BzE0o8JgAXuLiCLN26aGxFrx%2BwdMZOycKTv6GqKVn443lk6fdntNpoXTG6LJTJHDZ6NdTGBGp1grzcRbHZgKp2wYvPoMRvZOnJBWTpeMVpAyX2XvOXu5wlkb8YhkmyGIkgWKSSskWPRQlnoRexIJ5bpNQEqjeBlgNQ10A5%2B1QDZa%2BBMm8gFXst2un2PC%2FusV4YJhHnPAw57yTLoiPCKOl5KPlMwwBFPgDXA3D7%2BVYu1or1%2FriwpRyXGXdD%2F94BFHXn4NYMjLpDH7m9cU%2BEsQwZj4YM6%2BqLx52TsOXPcGs1nGjAFQR9UaOSBJUjqChBpQiqgqDq13eFdoGrt4R2JfMPc3CYw3pkitUhvWuKVZkRUDsY5vvkxMz0xgvj41iXe63lIJZBL6FREHbjDuMREzGNl%2F0g4YHodAI4VUO55tyiTTUlr7x0B7makv%2FHO2B0F07vgqsToKUPWo3iwANdG0WJh81sx%2FeCqJCWtrlJIUyNvFhAcb0x1Pvkxfnjv3psH5I%2FOn3%2F5Z3j%2Fht%2Fgdsaua3xifqFYFXfHl02FRlfNpUjD1byQqVqk84O40pBC3ns%2FofyemWsOH%2FWDb59l8%2BIWblzVbriAs2EylYd%2Be6MEkLac8ZySX48765Jdql0a2dKm5X5hUvvnTuf5lY6p0w2AVWPV56CqylZuPHT%2FOSf%2B%2FUWlJ3AljXS8hE5DCizC55%2FCpcfbe8MgdVHMyxvoCrrkQ3YEagVgZZHPWU13L96dlQP3W2s2iZocRNZWqNva%2FR1DaoHcOUzoyK3j04%2F%2FHoW34Dp5ohp2xwzbfWXc2unpPX6HTi11%2Br4kUxYEnMhmOTCj4MwCT0vECKKu9LvonBTmf759B8AAAD%2F%2FwEAAP%2F%2F9MFt888EAAA%3D HTTP/1.1
Host: petideadeference.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 04 Dec 2023 14:58:01 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 148574807e10801a32c4fe2fe2eaddd5
Strict-Transport-Security: max-age=0; includeSubdomains
friendshipmale.com/sfp.js
200 OK 27 kB URL GET HTTP/3 friendshipmale.com/sfp.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 924e967bca1d599992556a8d139b1c5a
222b09dbf164ddc03d39100fd0524a22018d28b2
ac84c2f8288b59f8e04ba77287ce696052bfeee0d462a566d94dc305df646c95
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 14:58:01 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: a5b4505e3c8d083010ce429fa62cedd7
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Mon, 04 Dec 2023 14:58:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UdWZ46lAbK452oPj92sCqLoqY5Zg8axassD9MEFPQ4AgpRgEeuZQCNEHVtTy67z1H7LJYVplDaDuOFcbgBtx3t7uoV5y93X%2Fmpfw5J5I4Kd98dHAK%2FqaQ08FKIHbX4n9KzvHE2Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8304e7b6bc0188a3-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
data.1024tera.com/thumbnail/c52143df40e604ea574d1ecf57aff0f8?fid=4399735848109-250528-314766955138018&time=1701698400&rt=sh&sign=FDTAER-DCb740ccc5511e5e8fedcff06b081203-fGxFEfT4pgkHcGaATV3RWfL2YEg%3D&expires=8h&chkv=0&chkbd=0&chkpc=&dp-logid=8991096678507376685&dp-callid=0&size=c850_u580&quality=100&vuk=-&ft=video
200 OK 49 kB URL GET HTTP/1.1 data.1024tera.com/thumbnail/c52143df40e604ea574d1ecf57aff0f8?fid=4399735848109-250528-314766955138018&time=1701698400&rt=sh&sign=FDTAER-DCb740ccc5511e5e8fedcff06b081203-fGxFEfT4pgkHcGaATV3RWfL2YEg%3D&expires=8h&chkv=0&chkbd=0&chkpc=&dp-logid=8991096678507376685&dp-callid=0&size=c850_u580&quality=100&vuk=-&ft=video
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 70x70, segment length 16, baseline, precision 8, 850x478, components 3\012- data
Hash b57aba534c664968004b1a6c0c11e487
e90ff6e124fd660ff3c1016b402e0796635c020e
9f41f163e7fca188095103a7a6c0fc84b9928d55661e2678b7474635ef7767f9
GET /thumbnail/c52143df40e604ea574d1ecf57aff0f8?fid=4399735848109-250528-314766955138018&time=1701698400&rt=sh&sign=FDTAER-DCb740ccc5511e5e8fedcff06b081203-fGxFEfT4pgkHcGaATV3RWfL2YEg%3D&expires=8h&chkv=0&chkbd=0&chkpc=&dp-logid=8991096678507376685&dp-callid=0&size=c850_u580&quality=100&vuk=-&ft=video HTTP/1.1
Host: data.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701885.58.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 04 Dec 2023 14:58:00 GMT
Content-Type: image/jpeg
Connection: keep-alive
x-bs-client-ip: OTEuOTAuNDIuMTU0
x-bs-request-id: MTAuMjUyLjE0My4xNjQ6MjA0Mzo4OTkxMDk2Njc4NTA3Mzc2Njg1OjIwMjMtMTItMDQgMjI6NTg6MDA=
Content-Length: 49095
Server: TERABOX UI
region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701701883532&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=381948010.1701701884&ul=en-us&sr=1280x1024&sid=1701701883&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&dt=Telegram%20%40Backupcity%20search%20join(1)(1)(1)(1).mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=5&tfd=16328
0 B URL region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701701883532&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=381948010.1701701884&ul=en-us&sr=1280x1024&sid=1701701883&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&dt=Telegram%20%40Backupcity%20search%20join(1)(1)(1)(1).mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=5&tfd=16328
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701701883532&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=381948010.1701701884&ul=en-us&sr=1280x1024&sid=1701701883&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&dt=Telegram%20%40Backupcity%20search%20join(1)(1)(1)(1).mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=5&tfd=16328 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 391
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://www.1024tera.com
date: Mon, 04 Dec 2023 14:58:06 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
prematuresam.com/sbar.json?key=f195e5fa577c23352666448243864c68&uuid=169cb841-3388-4d22-aeab-0b48cb304b27%3A1%3A1
3.4 kB URL prematuresam.com/sbar.json?key=f195e5fa577c23352666448243864c68&uuid=169cb841-3388-4d22-aeab-0b48cb304b27%3A1%3A1
IP
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (6052), with no line terminators
Hash b9d68baa56ede73e3add2bf1365a76fe
d70330a582bb8e82483350469b49a76197272cdc
22b0910b8e2e2ec7d529947994e117d98d4332223f395aae77bc0a7edc4e4b39
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sbar.json?key=f195e5fa577c23352666448243864c68&uuid=169cb841-3388-4d22-aeab-0b48cb304b27%3A1%3A1 HTTP/1.1
Host: prematuresam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 04 Dec 2023 14:58:07 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.1024tera.com
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=20651427; expires=Tue, 05 Dec 2023 14:58:07 GMT; secure; SameSite=None
uid_id2=169cb841-3388-4d22-aeab-0b48cb304b27:1:1; expires=Mon, 11 Dec 2023 14:58:07 GMT; secure; SameSite=None
pdhtkv=true; expires=Tue, 05 Dec 2023 14:58:07 GMT; secure; SameSite=None
uncs=1; expires=Tue, 05 Dec 2023 14:58:07 GMT; secure; SameSite=None
pdhtkv29=true; expires=Tue, 05 Dec 2023 14:58:07 GMT; secure; SameSite=None
uncs29=1; expires=Tue, 05 Dec 2023 14:58:07 GMT; secure; SameSite=None
slecf195e5fa577c23352666448243864c68=[4766299]; expires=Mon, 04 Dec 2023 14:58:12 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 504a0cef1f2445f6f9482098679dc3c0
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
prematuresam.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRSuTuJBxENCLiKBETxEcGf7d37MIRhjYjAmMT%2Fk4Kmqunq23Oqupqp7ejJeFgOSg4cJePDY%2B81uFnUJxqMgyKwXWRAyHmQPLogXT7kIuSozOzD6oOq97311eN%2F36rPN8pB4KOnBjQ%2F0UCpFV6Om2zh7V2axrmzj2u2G5zbdc427MmuF5xqD2WX6b3lu1HTfaFwWfF2v%2Bq7nup7rNS5JIxI9WJ2zkPlu12t23WboN70oxMD8H9vSgaUO4v4hOQUZT19Y%2B%2FkJJJ8gS7%2B9KOx6ofM3301LRQtt0I937mTrma4ypMsyMQ6SbGfxGtpOCfnyGHS2s1AA3d%2BaKQCTU%2BL85oFlO4sxwfrbR5MyBZGBxS%2Bh6k8g1ASSTsD1fcj4KQF4jGvXkaWPrmlT0XtHLJ2xU3Li%2Bd%2BQ1ZSc%2BP00svTxBSUHjVtalYXUmcUgqSEHE8jeBHm5h2LoQFZ74MWnkPEvZPX5VWTp1nWrNGR88LrX6nLWCb2VIOh0VsLY91eooGzFZWGHs8ANmd%2BeWyTlBDKZQIkRqHVQzo50UCYOytxBGh80aNRNXLedsCQIOiHnPAg4jzqtOIqDsJO4KPlMwwhFPgJXI3CzgdxsYF0%2BfBqdgil%2FhF2rYeNjsMWUOB8O0Y9rVIKgsgQVJagkQVUQVP16O1bWt%2FWjWNmSeYvsL3JQj3XR26TbuuiJjICa0WZ%2BSE7OPHTOnRljXRw0Eq8biSihUbvN%2FSCI%2FFarFYYdPww6rZC3OrCyhrTH5oqHckpee%2FVz5HJKXmzvgtE9WLUHLk%2BClmdAq3Hbd0HXxmHHxTDb9Vw%2FLIShTa5TxLpGXpxAcc%2FZVIfklfku3%2Fv%2BIwi%2Bf%2F6L4R%2BXH5%2F%2BBNzUyE2Nj%2BVPBD31YHxTV2Trpq4seXI9L2Qqh3S251sFLcTxr98X9ypt4isX7eirt%2FmMmJW7t4UtrtIsllnPkm8uyDgW5pI2XJAfrti7gt0o7dqF0mRlfvXGO5eupLkR1kqdTUDllJBn34HLKXn5mZ3%2F4bN3%2FoQ0E5iyRlruk0VA6j3wfAM2X%2FasJjBqiVnuoCrrsfHZsqkkgRJLTFkN%2Bx%2FMlvWmfYCecUCL%2B8jSGn1To69qUDWCLY%2BPi9zsn%2F81mAeYcsZMGWeLKaMeHplr5UFDRImbCNcXLOmypE3duJuEXUa7nmiziHoo7FSkf%2F3zLwAAAP%2F%2FAQAA%2F%2F%2FeICFvmwQAAA%3D%3D
7 B URL prematuresam.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRSuTuJBxENCLiKBETxEcGf7d37MIRhjYjAmMT%2Fk4Kmqunq23Oqupqp7ejJeFgOSg4cJePDY%2B81uFnUJxqMgyKwXWRAyHmQPLogXT7kIuSozOzD6oOq97311eN%2F36rPN8pB4KOnBjQ%2F0UCpFV6Om2zh7V2axrmzj2u2G5zbdc427MmuF5xqD2WX6b3lu1HTfaFwWfF2v%2Bq7nup7rNS5JIxI9WJ2zkPlu12t23WboN70oxMD8H9vSgaUO4v4hOQUZT19Y%2B%2FkJJJ8gS7%2B9KOx6ofM3301LRQtt0I937mTrma4ypMsyMQ6SbGfxGtpOCfnyGHS2s1AA3d%2BaKQCTU%2BL85oFlO4sxwfrbR5MyBZGBxS%2Bh6k8g1ASSTsD1fcj4KQF4jGvXkaWPrmlT0XtHLJ2xU3Li%2Bd%2BQ1ZSc%2BP00svTxBSUHjVtalYXUmcUgqSEHE8jeBHm5h2LoQFZ74MWnkPEvZPX5VWTp1nWrNGR88LrX6nLWCb2VIOh0VsLY91eooGzFZWGHs8ANmd%2BeWyTlBDKZQIkRqHVQzo50UCYOytxBGh80aNRNXLedsCQIOiHnPAg4jzqtOIqDsJO4KPlMwwhFPgJXI3CzgdxsYF0%2BfBqdgil%2FhF2rYeNjsMWUOB8O0Y9rVIKgsgQVJagkQVUQVP16O1bWt%2FWjWNmSeYvsL3JQj3XR26TbuuiJjICa0WZ%2BSE7OPHTOnRljXRw0Eq8biSihUbvN%2FSCI%2FFarFYYdPww6rZC3OrCyhrTH5oqHckpee%2FVz5HJKXmzvgtE9WLUHLk%2BClmdAq3Hbd0HXxmHHxTDb9Vw%2FLIShTa5TxLpGXpxAcc%2FZVIfklfku3%2Fv%2BIwi%2Bf%2F6L4R%2BXH5%2F%2BBNzUyE2Nj%2BVPBD31YHxTV2Trpq4seXI9L2Qqh3S251sFLcTxr98X9ypt4isX7eirt%2FmMmJW7t4UtrtIsllnPkm8uyDgW5pI2XJAfrti7gt0o7dqF0mRlfvXGO5eupLkR1kqdTUDllJBn34HLKXn5mZ3%2F4bN3%2FoQ0E5iyRlruk0VA6j3wfAM2X%2FasJjBqiVnuoCrrsfHZsqkkgRJLTFkN%2Bx%2FMlvWmfYCecUCL%2B8jSGn1To69qUDWCLY%2BPi9zsn%2F81mAeYcsZMGWeLKaMeHplr5UFDRImbCNcXLOmypE3duJuEXUa7nmiziHoo7FSkf%2F3zLwAAAP%2F%2FAQAA%2F%2F%2FeICFvmwQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRSuTuJBxENCLiKBETxEcGf7d37MIRhjYjAmMT%2Fk4Kmqunq23Oqupqp7ejJeFgOSg4cJePDY%2B81uFnUJxqMgyKwXWRAyHmQPLogXT7kIuSozOzD6oOq97311eN%2F36rPN8pB4KOnBjQ%2F0UCpFV6Om2zh7V2axrmzj2u2G5zbdc427MmuF5xqD2WX6b3lu1HTfaFwWfF2v%2Bq7nup7rNS5JIxI9WJ2zkPlu12t23WboN70oxMD8H9vSgaUO4v4hOQUZT19Y%2B%2FkJJJ8gS7%2B9KOx6ofM3301LRQtt0I937mTrma4ypMsyMQ6SbGfxGtpOCfnyGHS2s1AA3d%2BaKQCTU%2BL85oFlO4sxwfrbR5MyBZGBxS%2Bh6k8g1ASSTsD1fcj4KQF4jGvXkaWPrmlT0XtHLJ2xU3Li%2Bd%2BQ1ZSc%2BP00svTxBSUHjVtalYXUmcUgqSEHE8jeBHm5h2LoQFZ74MWnkPEvZPX5VWTp1nWrNGR88LrX6nLWCb2VIOh0VsLY91eooGzFZWGHs8ANmd%2BeWyTlBDKZQIkRqHVQzo50UCYOytxBGh80aNRNXLedsCQIOiHnPAg4jzqtOIqDsJO4KPlMwwhFPgJXI3CzgdxsYF0%2BfBqdgil%2FhF2rYeNjsMWUOB8O0Y9rVIKgsgQVJagkQVUQVP16O1bWt%2FWjWNmSeYvsL3JQj3XR26TbuuiJjICa0WZ%2BSE7OPHTOnRljXRw0Eq8biSihUbvN%2FSCI%2FFarFYYdPww6rZC3OrCyhrTH5oqHckpee%2FVz5HJKXmzvgtE9WLUHLk%2BClmdAq3Hbd0HXxmHHxTDb9Vw%2FLIShTa5TxLpGXpxAcc%2FZVIfklfku3%2Fv%2BIwi%2Bf%2F6L4R%2BXH5%2F%2BBNzUyE2Nj%2BVPBD31YHxTV2Trpq4seXI9L2Qqh3S251sFLcTxr98X9ypt4isX7eirt%2FmMmJW7t4UtrtIsllnPkm8uyDgW5pI2XJAfrti7gt0o7dqF0mRlfvXGO5eupLkR1kqdTUDllJBn34HLKXn5mZ3%2F4bN3%2FoQ0E5iyRlruk0VA6j3wfAM2X%2FasJjBqiVnuoCrrsfHZsqkkgRJLTFkN%2Bx%2FMlvWmfYCecUCL%2B8jSGn1To69qUDWCLY%2BPi9zsn%2F81mAeYcsZMGWeLKaMeHplr5UFDRImbCNcXLOmypE3duJuEXUa7nmiziHoo7FSkf%2F3zLwAAAP%2F%2FAQAA%2F%2F%2FeICFvmwQAAA%3D%3D HTTP/1.1
Host: prematuresam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=20651427; uid_id2=169cb841-3388-4d22-aeab-0b48cb304b27:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 04 Dec 2023 14:58:07 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b56dbdb23c434cc02d213ea437a3a881
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.cloudimagesb.com/si/98/58/2f/98582fa31e3a411721a1f890fd22419a/1700491903.png
9.0 kB URL cdn.cloudimagesb.com/si/98/58/2f/98582fa31e3a411721a1f890fd22419a/1700491903.png
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash a56f06ca83ee06488a213b352e00bd90
aec437b74eb6f1143683872fb2d664286da4a664
7144c526762a9d91bdde1939194c2835f2cb1afe0ebac298bbdf1e9239b539ec
GET /si/98/58/2f/98582fa31e3a411721a1f890fd22419a/1700491903.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:58:07 GMT
content-type: image/png
content-length: 9016
server: nginx/1.21.6
last-modified: Mon, 20 Nov 2023 14:51:52 GMT
etag: "655b7288-2338"
expires: Wed, 06 Dec 2023 14:58:07 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/3c/d5/62/3cd562dd264800ee586ac2da770e9a65/1700491951.png
20 kB URL cdn.cloudimagesb.com/si/3c/d5/62/3cd562dd264800ee586ac2da770e9a65/1700491951.png
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type PNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash ea31001ce8fa95eb2ac1617515105332
d505ca04808c25cfa33a555c96886f421ddbbde7
0267f5cd21fe5609405724c20d6f021b8932a696ada766b8e86e42c670000ab3
GET /si/3c/d5/62/3cd562dd264800ee586ac2da770e9a65/1700491951.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:58:07 GMT
content-type: image/png
content-length: 20001
server: nginx/1.21.6
last-modified: Mon, 20 Nov 2023 14:52:40 GMT
etag: "655b72b8-4e21"
expires: Wed, 06 Dec 2023 14:58:07 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/img/close.png
591 B URL cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/img/close.png
IP
File type PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 9fd5bcb6103d86e317bd1eb019bcbe71
6b5a52ea669dcb74946f2bed4bdd7ec985026113
0ddd3be104ac7945fb062096df62034a6a24ecc76ba92493c35c62c3c25982ae
GET /sb/ssp/vpn/classic-push/big1/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:58:08 GMT
content-type: image/png
content-length: 591
last-modified: Mon, 21 Feb 2022 10:06:44 GMT
etag: "62136434-24f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1752200
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jgsOHCz%2FDDotUa8GF7JRNnLx4nW13TtguBw%2BP3I5ewf1dPAjt0rFegBecgbJvnPDISmgkn3IPxEedLBioQSGV3PVCAfTvxVQxs%2FDTYqqVDNq3OvZ5Ny3ntx7QrpkOpO1SdCTvwaIEZGf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8304e7e06881416b-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
16 kB URL fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:13:56 GMT
expires: Thu, 28 Nov 2024 21:13:56 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 409452
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
16 kB URL fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:57:34 GMT
expires: Fri, 29 Nov 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 381634
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/css/style.css
1.1 kB URL cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/css/style.css
IP
Hash aae84ccade4cab86c1afdf4c4532762a
b08de856858a730e980fb2a0ca2f0e1442c03d46
6e45c9c8dba52c75144c153e63a04d055f15e5f39897ab3f2413154c9cf2e91f
GET /sb/ssp/vpn/classic-push/big1/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:58:07 GMT
content-type: text/css
last-modified: Mon, 21 Feb 2022 10:59:09 GMT
etag: W/"6213707d-1048"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 72857
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5QQkbBfSo3zQVvApUKjpPTBT5fkarK3OxYgzPyiQgxnL8x%2FO93wC%2FsNHyyBD5RqMpAO%2F%2BpsgOJKevdJOoKxD4nDTWRVkBvA0CY81hlXhwCXa5LzfwNpnYXTFtWOjZQMN%2BFYxC0bbJTNr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8304e7dfde2b52ea-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
prematuresam.com/pixel/sbs?c=1
0 B URL prematuresam.com/pixel/sbs?c=1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: prematuresam.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=20651427; uid_id2=169cb841-3388-4d22-aeab-0b48cb304b27:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 04 Dec 2023 14:58:08 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recyclebin~share~shortLink~~a6807c0b.04a18b24.js
200 OK 496 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recyclebin~share~shortLink~~a6807c0b.04a18b24.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Size 496 kB (495840 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recyclebin~share~shortLink~~a6807c0b.04a18b24.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:57:54 GMT
content-type: application/javascript
server: openresty
content-md5: mBU1wxf0TvKK5InNQvBhrw==
etag: W/"981535c317f44ef28ae489cd42f061af"
expires: Thu, 07 Dec 2023 10:54:10 GMT
last-modified: Mon, 04 Dec 2023 08:11:32 GMT
x-bce-content-crc32: 3667673518
x-bce-debug-id: K2X9lIphgkqRGFiI7g2dxhr6NF6kPtBdPJj/pJH7fc7eM68F1ajxDcVpE/6LCEQyX9va0YxP2/uXuEw3xqDG6Q==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 9bb99d02-2ae1-414e-9ed0-05fb30929781
x-bce-storage-class: STANDARD
x-ccdn-expires: 2584669
via: EU-GER-frankfurt-EDGE5-CACHE4[4],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE3[17],EU-GER-frankfurt-GLOBAL1-CACHE10[0,TCP_HIT,16]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 14451
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
petideadeference.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzYsc1Rd93Zkf5KcbEwQRXbSiouD01Od0t1kEY4wEYyYkkazfV80851W94r2qrsmsjJGQRRatK3VVfbozE%2BMg5g9QpMdNCArpjczCWetaCFlK9wyMXqi6955zF%2Fecd28Ny33io6R7lz4ym0pruhS3vdab11QmTOVaF6%2B2fK%2FtnWpdU9lydKq1MfvZ%2Fju%2BF7e9t1ofSL5ulgLP9zzf81vnlJWJ2Vias1D5Ts9v97x2FLT9OMKG%2FW%2FvyiYcbUL098lJKDH939rDB1B8giz94ax064XJ334%2FLTUtjEVfbH%2BcrWemypAelYltIMm2D6dh3JSQr5ow2fahApj%2BeKYATE1J43cfLNs%2BXBOsf%2FdgU6YhMzDxLKr%2BBFJPoOgE3NyEEo8JwAUuriBLty4aW9HrByydsVOy8ORvqGpKFv54Hln6%2FRmtNlpXjC4LZTKHjaSG2phArU6Ql7soNhtQ1S548RmU%2BI0sPbmALB2vOG2gxN5r%2FnKPs27kL4Zht7sYiSBYpJKyRY9FXc5CL2JBZ26RUhOoZAItB6CugXL2qQbKpIEybyAVey0a9xLP6yQsCcNuxDkPQ87j7rKIRRh1Ew8ln2kYoMgH4HoAbj%2FfKjPuot7Q38rFWrHeHxe2lOMZOPTvHUBRbw4itzfuibAjQ8ajIcO6%2BuJxfBK2%2FBlurYYTDbiCoC9qVJKgcgQVJagUQVUQVP36rtAucPWW0K5k%2FmEODnNYj0yxOqR3TbEqMwJqB8N8n5yYmd54YXwc63KvtRx0ZJB0aRSEvU7MeMREh3aW%2FaDLAxHHAZyqoVxzbtGmmpJXXrqDXE3J%2Fzs7YHQXTu%2BCqxOgpQ9ajTqBB7o2iroeNrMd3wuiQlra5iaFMDXyYgHF9cZQ75MX54%2F%2F6rF9SP7o9P2Xd477b%2FwFbmvktsYn6heCVX17dNlUZHzZVI48WMkLlapNOjuMKwUt5LH7H8rrlbHi%2FFk3%2BPZdPiNm5c5V6YoLNBMqW3XkuzNKCGnPGcsl%2BfG8uybZpdKtnSltVuYXLr137nyaW%2BmcMtkEVD1eeQqupmThxk%2Fzk3%2Fu11tQdgJb1kjLR%2BQwoMwueP4pXH60vTMEVh%2FNsLyBqqxHNmBHoFYEWh71lNVw%2F%2BrZUT10t7Fqm6DFTWRpjb6t0dc1qB7Alc%2BMitw%2BOv3w61l8A6abI6Ztc8y01V%2FOrZ2S1ut34NReS8aJl0gvkCzpsaRDPdFLoh6jPV92WEx9FG4q0z%2Bf%2FgMAAP%2F%2FAQAA%2F%2F8dTYKEzwQAAA%3D%3D
200 OK 0 B URL GET HTTP/1.1 petideadeference.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzYsc1Rd93Zkf5KcbEwQRXbSiouD01Od0t1kEY4wEYyYkkazfV80851W94r2qrsmsjJGQRRatK3VVfbozE%2BMg5g9QpMdNCArpjczCWetaCFlK9wyMXqi6955zF%2Fecd28Ny33io6R7lz4ym0pruhS3vdab11QmTOVaF6%2B2fK%2FtnWpdU9lydKq1MfvZ%2Fju%2BF7e9t1ofSL5ulgLP9zzf81vnlJWJ2Vias1D5Ts9v97x2FLT9OMKG%2FW%2FvyiYcbUL098lJKDH939rDB1B8giz94ax064XJ334%2FLTUtjEVfbH%2BcrWemypAelYltIMm2D6dh3JSQr5ow2fahApj%2BeKYATE1J43cfLNs%2BXBOsf%2FdgU6YhMzDxLKr%2BBFJPoOgE3NyEEo8JwAUuriBLty4aW9HrByydsVOy8ORvqGpKFv54Hln6%2FRmtNlpXjC4LZTKHjaSG2phArU6Ql7soNhtQ1S548RmU%2BI0sPbmALB2vOG2gxN5r%2FnKPs27kL4Zht7sYiSBYpJKyRY9FXc5CL2JBZ26RUhOoZAItB6CugXL2qQbKpIEybyAVey0a9xLP6yQsCcNuxDkPQ87j7rKIRRh1Ew8ln2kYoMgH4HoAbj%2FfKjPuot7Q38rFWrHeHxe2lOMZOPTvHUBRbw4itzfuibAjQ8ajIcO6%2BuJxfBK2%2FBlurYYTDbiCoC9qVJKgcgQVJagUQVUQVP36rtAucPWW0K5k%2FmEODnNYj0yxOqR3TbEqMwJqB8N8n5yYmd54YXwc63KvtRx0ZJB0aRSEvU7MeMREh3aW%2FaDLAxHHAZyqoVxzbtGmmpJXXrqDXE3J%2Fzs7YHQXTu%2BCqxOgpQ9ajTqBB7o2iroeNrMd3wuiQlra5iaFMDXyYgHF9cZQ75MX54%2F%2F6rF9SP7o9P2Xd477b%2FwFbmvktsYn6heCVX17dNlUZHzZVI48WMkLlapNOjuMKwUt5LH7H8rrlbHi%2FFk3%2BPZdPiNm5c5V6YoLNBMqW3XkuzNKCGnPGcsl%2BfG8uybZpdKtnSltVuYXLr137nyaW%2BmcMtkEVD1eeQqupmThxk%2Fzk3%2Fu11tQdgJb1kjLR%2BQwoMwueP4pXH60vTMEVh%2FNsLyBqqxHNmBHoFYEWh71lNVw%2F%2BrZUT10t7Fqm6DFTWRpjb6t0dc1qB7Alc%2BMitw%2BOv3w61l8A6abI6Ztc8y01V%2FOrZ2S1ut34NReS8aJl0gvkCzpsaRDPdFLoh6jPV92WEx9FG4q0z%2Bf%2FgMAAP%2F%2FAQAA%2F%2F8dTYKEzwQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerLet's Encrypt
Subjectpetideadeference.com
Fingerprint0A:DC:88:39:2C:53:13:CB:4D:70:A4:F2:8C:77:74:6F:03:CA:00:58
ValidityTue, 28 Nov 2023 07:56:10 GMT - Mon, 26 Feb 2024 07:56:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSzYsc1Rd93Zkf5KcbEwQRXbSiouD01Od0t1kEY4wEYyYkkazfV80851W94r2qrsmsjJGQRRatK3VVfbozE%2BMg5g9QpMdNCArpjczCWetaCFlK9wyMXqi6955zF%2Fecd28Ny33io6R7lz4ym0pruhS3vdab11QmTOVaF6%2B2fK%2FtnWpdU9lydKq1MfvZ%2Fju%2BF7e9t1ofSL5ulgLP9zzf81vnlJWJ2Vias1D5Ts9v97x2FLT9OMKG%2FW%2FvyiYcbUL098lJKDH939rDB1B8giz94ax064XJ334%2FLTUtjEVfbH%2BcrWemypAelYltIMm2D6dh3JSQr5ow2fahApj%2BeKYATE1J43cfLNs%2BXBOsf%2FdgU6YhMzDxLKr%2BBFJPoOgE3NyEEo8JwAUuriBLty4aW9HrByydsVOy8ORvqGpKFv54Hln6%2FRmtNlpXjC4LZTKHjaSG2phArU6Ql7soNhtQ1S548RmU%2BI0sPbmALB2vOG2gxN5r%2FnKPs27kL4Zht7sYiSBYpJKyRY9FXc5CL2JBZ26RUhOoZAItB6CugXL2qQbKpIEybyAVey0a9xLP6yQsCcNuxDkPQ87j7rKIRRh1Ew8ln2kYoMgH4HoAbj%2FfKjPuot7Q38rFWrHeHxe2lOMZOPTvHUBRbw4itzfuibAjQ8ajIcO6%2BuJxfBK2%2FBlurYYTDbiCoC9qVJKgcgQVJagUQVUQVP36rtAucPWW0K5k%2FmEODnNYj0yxOqR3TbEqMwJqB8N8n5yYmd54YXwc63KvtRx0ZJB0aRSEvU7MeMREh3aW%2FaDLAxHHAZyqoVxzbtGmmpJXXrqDXE3J%2Fzs7YHQXTu%2BCqxOgpQ9ajTqBB7o2iroeNrMd3wuiQlra5iaFMDXyYgHF9cZQ75MX54%2F%2F6rF9SP7o9P2Xd477b%2FwFbmvktsYn6heCVX17dNlUZHzZVI48WMkLlapNOjuMKwUt5LH7H8rrlbHi%2FFk3%2BPZdPiNm5c5V6YoLNBMqW3XkuzNKCGnPGcsl%2BfG8uybZpdKtnSltVuYXLr137nyaW%2BmcMtkEVD1eeQqupmThxk%2Fzk3%2Fu11tQdgJb1kjLR%2BQwoMwueP4pXH60vTMEVh%2FNsLyBqqxHNmBHoFYEWh71lNVw%2F%2BrZUT10t7Fqm6DFTWRpjb6t0dc1qB7Alc%2BMitw%2BOv3w61l8A6abI6Ztc8y01V%2FOrZ2S1ut34NReS8aJl0gvkCzpsaRDPdFLoh6jPV92WEx9FG4q0z%2Bf%2FgMAAP%2F%2FAQAA%2F%2F8dTYKEzwQAAA%3D%3D HTTP/1.1
Host: petideadeference.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 04 Dec 2023 14:58:01 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5773d3212aefed8b58447b6dec7f2306
Strict-Transport-Security: max-age=0; includeSubdomains
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/facebook.min.js
200 OK 4.1 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/facebook.min.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (4246), with no line terminators
Hash a80e27408d2ae3596aadac56d9c72ed0
37348a3ed8934ee41f99a05149abce511cc9ba67
bd7f1f57a1a99c9473f1c10db30eee2abfdcbffda0c1992ece9948db001502eb
GET /fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/facebook.min.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:57:54 GMT
content-type: application/javascript
server: openresty
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT
access-control-expose-headers: ETag, Content-Length, x-bce-next-append-offset, x-bce-object-type, x-bce-request-id
access-control-max-age: 1800
content-md5: Aowl118tEMuXoOFINDERYw==
etag: W/"028c25d75f2d10cb97a0e14834311163"
expires: Sat, 24 Sep 2022 06:46:06 GMT
last-modified: Wed, 21 Sep 2022 05:03:33 GMT
x-bce-content-crc32: 3600293201
x-bce-debug-id: drF3pXV387iC2EyFCn4G8jIjxuuDcbNW6JT4jDmhDeNosKMTV4jVPaeR4QxYWsldtHHLV0pqg9KhEHfx+45FOQ==
x-bce-request-id: 1e1dfa93-d4b6-4000-b380-bdf1ecb59464
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 1202930
via: EU-GER-frankfurt-EDGE5-CACHE4[15],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE3[3],EU-GER-frankfurt-GLOBAL1-CACHE10[0,TCP_HIT,2],EA-SGP-GLOBAL1-CACHE9[4],EA-SGP-GLOBAL1-CACHE30[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24751731
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701886564
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701886564
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash f50e483b14e0ec579655a05a538fdfac
b1cea237c6acd510d36beadafe19331e1ca35bea
7322e78c1c2e84ad42a418516f962dbe4c33ed11211dde7e954fe7fb1d0af7ea
GET /api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701886564 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701886.57.0.0; _ga=GA1.1.381948010.1701701884; dom3ic8zudi28v8lr6fgphwffqoz0j6c=169cb841-3388-4d22-aeab-0b48cb304b27%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=manuretravelingaroma.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:58:01 GMT
Flow-Level: 3
Logid: 8991097569702539617
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991097569702539617
Yme: ZIGW+Ss3QE0WaSsHTmjiq29Xvv4cVAP2oh5MxCqBmOq0RZzZfg==
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-94864b88.e650f8c9.js
200 OK 42 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-94864b88.e650f8c9.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (42360), with no line terminators
Hash b01f195e94b0848122ac3314f5395721
b87bc53a44a6234f7c089f3119066f9647d21903
09ae6d6c48f2c2b47426e8c362471444673201e2583c5525b442133a8b5c80cb
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-94864b88.e650f8c9.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:57:55 GMT
content-type: application/javascript
server: openresty
content-md5: sB8ZXpSwhIEirDMU9TlXIQ==
etag: W/"b01f195e94b0848122ac3314f5395721"
expires: Mon, 22 May 2023 08:06:09 GMT
last-modified: Fri, 19 May 2023 06:11:01 GMT
x-bce-content-crc32: 1763380652
x-bce-debug-id: 6/t1aZ0T4wIW5Mpdrs6rwONcVe50LnzXyMl/KxoZOSjgTHz/QchFlwkYo5YFdGxYjuFFLRMdxpL02NaFeSWQqg==
x-bce-request-id: 3b4dea47-19f8-48e2-a389-1652fd45a67a
x-bce-storage-class: STANDARD
via: EU-GER-frankfurt-EDGE5-CACHE4[2],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[1059],EU-GER-frankfurt-GLOBAL1-CACHE12[774,TCP_MISS,1057]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 17218305
x-ccdn-expires: 958499
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?time=5971&type=web_share_page_show_FCP&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701881230
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?time=5971&type=web_share_page_show_FCP&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701881230
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 54402d79e0b0afc6a9960f5a3d77e271
70397e032768494a6d95a071b21dffd8a6a01cf5
8768b4c75008ad16dd8fa87767ec97b29190179f09364300968c3e2352374b2d
GET /api/analytics?time=5971&type=web_share_page_show_FCP&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701881230 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:57 GMT
Flow-Level: 3
Logid: 8991096421741477929
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991096421741477929
Yme: ZIGW+Ss3QEsSdTcAUmr/tG1MvuUZShz3ogpNwyOFy7HoGgR2
Content-Length: 44
accounts.google.com/gsi/client
200 OK 210 kB URL GET HTTP/2 accounts.google.com/gsi/client
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B
ValidityMon, 23 Oct 2023 11:25:04 GMT - Mon, 15 Jan 2024 11:25:03 GMT
File type ASCII text, with very long lines (3006)
Size 210 kB (209549 bytes)
Hash 4c11a6fcf2d2e40ca01657d26fcca1ae
3ada5048f3334f5a8de54df00aea12b326771ce1
1178f3ee103cf6752c7b6181f0ada6944d84cf1788799e9b7130c0c2a83bba5d
GET /gsi/client HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
expires: Mon, 04 Dec 2023 14:57:57 GMT
date: Mon, 04 Dec 2023 14:57:57 GMT
cache-control: private, max-age=1800
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
content-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-RYot_owlUhrU7QovdTkFQg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
sofire.terabox.com/edkey
200 OK 361 B IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.terabox.com
Fingerprint4F:30:79:83:60:E0:58:E8:DA:05:09:38:E1:6D:CD:F9:46:33:D6:5F
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (385), with no line terminators
Hash 7a6174d4bcb802c83802a2da3296c6da
1e8a39662598f1781f7c2c145f30e674327cf599
e2ffd2df1119ccebd99e4b5aa3c9a7d11d95bb7231a02d29e111de39929ede0d
POST /edkey HTTP/1.1
Host: sofire.terabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.1024tera.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 64
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Mon, 04 Dec 2023 14:57:57 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 8991096491003531668
Access-Control-Allow-Origin: *
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaisESWriq29Xvv4cVAP2ox5OwySJkO25Ty1LT20DU8rqiUYY
logid: 8991096491003531668
Flow-level: 3
Content-Encoding: gzip
pl18427035.highcpmrevenuenetwork.com/627e2f8a423975bc4bd7a76128c2d552/invoke.js
200 OK 25 kB URL GET HTTP/1.1 pl18427035.highcpmrevenuenetwork.com/627e2f8a423975bc4bd7a76128c2d552/invoke.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerLet's Encrypt
Subjecthighcpmrevenuenetwork.com
FingerprintEE:67:85:23:95:09:5B:1B:88:45:C2:65:23:64:81:DD:65:D4:15:14
ValidityThu, 19 Oct 2023 06:40:46 GMT - Wed, 17 Jan 2024 06:40:45 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /627e2f8a423975bc4bd7a76128c2d552/invoke.js HTTP/1.1
Host: pl18427035.highcpmrevenuenetwork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 04 Dec 2023 14:58:00 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e9da06971a564bb09d264cdc644909d4
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.1024tera.com/api/analytics?time=3452&type=web_share_page_show_FP_FIRST&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701881229
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?time=3452&type=web_share_page_show_FP_FIRST&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701881229
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash b3ee26cc64776a19a37a21403b350cad
5b78e961654c73043c4e6a13ee00cf0b499a8ec4
5469e220c9785534105169a0d388b22c006e1541e5a76b2152eca64c6d7d943e
GET /api/analytics?time=3452&type=web_share_page_show_FP_FIRST&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701881229 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:55 GMT
Flow-Level: 3
Logid: 8991096093061647342
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991096093061647342
Yme: ZIGW+Ss3QE0WaisHT27iq29Xvv4cVAP2ox5MwiqBmO63
Content-Length: 44
www.1024tera.com/api/analytics?time=3785&type=web_share_page_show_FP_SECOND&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701881229
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?time=3785&type=web_share_page_show_FP_SECOND&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701881229
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash b6199133cb2a8e208e97db1f537b899c
7fb57a5cf0c7af6e286a5abf606ff8a3cb2b6206
7c1f83f9f5e8d1160f363f66864c8f0e62e0175ae8b0188a9fbda8146790f99b
GET /api/analytics?time=3785&type=web_share_page_show_FP_SECOND&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701881229 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:57 GMT
Flow-Level: 3
Logid: 8991096491826661846
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991096491826661846
Yme: ZIGW+Ss3QE0WaCsHT2niq29Xvv4cVAP2ox5OxiGJmu20TT4=
Content-Length: 44
static.line-scdn.net/liff/edge/2/sdk.js
200 OK 114 kB URL GET HTTP/2 static.line-scdn.net/liff/edge/2/sdk.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerAmazon
Subject*.line.me
Fingerprint39:A2:77:6F:2B:9D:03:28:CA:16:D8:21:EB:C7:7C:67:F8:C4:FB:AA
ValidityThu, 13 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Size 114 kB (113890 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /liff/edge/2/sdk.js HTTP/1.1
Host: static.line-scdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
server: VOS
last-modified: Thu, 30 Nov 2023 02:18:33 GMT
x-amz-version-id: v.AtHv4uFQzb33ymjCyqw4IItsATTkI
x-amz-expiration: expiry-date="Tue, 30 Jan 2024 00:00:00 GMT", rule-id="bucket_lifecycle"
x-rgw-object-type: Normal
strict-transport-security: max-age=15768000
content-encoding: gzip
date: Mon, 04 Dec 2023 05:56:19 GMT
cache-control: max-age=86400
etag: W/"9b460f98f29d177a0da3183d5cf20e5e"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: _WI3ph-Qv8EqgxIf7rGHj1cPluPXYYewHPGSt_ypHSV6VxY47l28yg==
age: 32644
X-Firefox-Spdy: h2
sofire.bdstatic.com/js/fsec-hd.js
200 OK 295 kB URL GET HTTP/2 sofire.bdstatic.com/js/fsec-hd.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
Size 295 kB (295197 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/fsec-hd.js HTTP/1.1
Host: sofire.bdstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: JSP3/2.0.14
date: Mon, 04 Dec 2023 14:57:54 GMT
content-type: text/javascript
expires: Wed, 06 Dec 2023 03:12:08 GMT
last-modified: Fri, 30 Jun 2023 07:31:01 GMT
etag: "834113d1867d8ec45fc41e3c692fdead"
content-encoding: br
age: 128746
accept-ranges: bytes
content-md5: g0ET0YZ9jsRfxB48aS/erQ==
x-bce-content-crc32: 1744549445
x-bce-debug-id: pmwOPs6TwXuIuqgkHTlpEk/8vFw6h4RzBYfHbfmcyD2Cod3s4Ck2OGK0+cpSc/pvzUQd8yR5hAizocjuO8jv/w==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 2cfb6092-110f-439a-aca9-fa6132a89f36
x-bce-storage-class: STANDARD
ohc-global-saved-time: Sun, 03 Dec 2023 03:12:08 GMT
ohc-cache-hit: wz2ct53 [2], nb2ctcache78 [2]
ohc-response-time: 1 0 0 0 0 0
X-Firefox-Spdy: h2
petideadeference.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSumawQ9SAJgogeRlFRcGf712z3mEMwxkgwZkMSybl%2BzW651V1NVff0Zk%2FGiOSQw%2BhJPfV8M9mNcQnmD1Bk1ksICJmL7ME961kIOcrsLow%2B6H7vfd87vO%2Br99Ww3Cc%2BSrp36ROzqbSmS52213r7msqEqVzr4tWW77W9U61rKluOTrU2Zj%2Fbf8%2F3Om3vndZHkq%2BbpcDzPc%2F3%2FNY5ZWXPbCwdsFD5Ttdvd712FLT9ToQN%2B%2F%2FelU042oTo75OTUGL6zNrDB1B8giz96ax064XJ3%2F0wLTUtjEVfbH%2BarWemypDOy55toJdtH03DuCkh3zZhsu0jBTD98UwBmJqSxh8%2BWLZ9tCZY%2F87hpkxDZmDieVT9CaSeQNEJuLkJJR4TgAtcXEGWbl00tqLXD1k6Y6dk4ck%2FUNWULPz5IrL0%2FhmtNlpXjC4LZTKHjV4NtTGBWp0gL3dRbDagql3w4gso8TtZenIBWTpecdpAib03%2FOUuZ0nkL4ZhkixGIggWqaRs0WNRwlnoRSyIDyxSagLVm0DLAahroJx9qoGy10CZN5CKvRbtdHueF%2FdYLwyTiHMehpx3kmXREWGU9DyUfKZhgCIfgOsBuP1yXGbcDf27uVgr1vtRd1zYUm7NwKg79LcO4QMQub1xV4SxDBmPhgzr6uvHnZOw5a9wazWcaMAVBH1Ro5IElSOoKEGlCKqCoOrXd4R2gau3hHYl849ycJTDemSK1SG9Y4pVmRFQOxjm%2B%2BTEzPTGS%2BPjWJd7reUglkEvoVEQduMO4xETMY2X%2FSDhgeh0AjhVQ7nmgUWbakpee%2BU2cjUlz8Y7YHQXTu%2BCqxOgpQ9ajeLAA10bRYmHzWzH94KokJa2uUkhTI28WEBxvTHU%2B%2BTlg8dvvXkbkj86fe%2FVneP%2BW3%2BD2xq5rfGZ%2Bo1gVd8aXTYVGV82lSMPVvJCpWqTzg7jSkELeezex%2FJ6Zaw4f9YNfnifz4hZuXNVuuICzYTKVh358YwSQtpzxnJJfj7vrkl2qXRrZ0qblfmFSx%2BcO5%2FmVjqnTDYBVY9XnoKrKVm48cvByb8wvQ9lJ7BljbR8RI4CyuyC55%2FD5fPtnSGwej7D8iaqsh7ZgM1BrQi0nPeU1XD%2F6dm8HrpbWLVN0OImsrRG39bo6xpUD%2BDK50ZFbh%2BdfvjdLL4H080R07Y5Ztrqb6bk9WP7h%2F46tdfq%2BJFMWBJzIZjkwo%2BDMAk9LxAiirvS76JwU5n%2B9fRfAAAA%2F%2F8BAAD%2F%2F3qHHKnPBAAA
200 OK 0 B URL GET HTTP/1.1 petideadeference.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSumawQ9SAJgogeRlFRcGf712z3mEMwxkgwZkMSybl%2BzW651V1NVff0Zk%2FGiOSQw%2BhJPfV8M9mNcQnmD1Bk1ksICJmL7ME961kIOcrsLow%2B6H7vfd87vO%2Br99Ww3Cc%2BSrp36ROzqbSmS52213r7msqEqVzr4tWW77W9U61rKluOTrU2Zj%2Fbf8%2F3Om3vndZHkq%2BbpcDzPc%2F3%2FNY5ZWXPbCwdsFD5Ttdvd712FLT9ToQN%2B%2F%2FelU042oTo75OTUGL6zNrDB1B8giz96ax064XJ3%2F0wLTUtjEVfbH%2BarWemypDOy55toJdtH03DuCkh3zZhsu0jBTD98UwBmJqSxh8%2BWLZ9tCZY%2F87hpkxDZmDieVT9CaSeQNEJuLkJJR4TgAtcXEGWbl00tqLXD1k6Y6dk4ck%2FUNWULPz5IrL0%2FhmtNlpXjC4LZTKHjV4NtTGBWp0gL3dRbDagql3w4gso8TtZenIBWTpecdpAib03%2FOUuZ0nkL4ZhkixGIggWqaRs0WNRwlnoRSyIDyxSagLVm0DLAahroJx9qoGy10CZN5CKvRbtdHueF%2FdYLwyTiHMehpx3kmXREWGU9DyUfKZhgCIfgOsBuP1yXGbcDf27uVgr1vtRd1zYUm7NwKg79LcO4QMQub1xV4SxDBmPhgzr6uvHnZOw5a9wazWcaMAVBH1Ro5IElSOoKEGlCKqCoOrXd4R2gau3hHYl849ycJTDemSK1SG9Y4pVmRFQOxjm%2B%2BTEzPTGS%2BPjWJd7reUglkEvoVEQduMO4xETMY2X%2FSDhgeh0AjhVQ7nmgUWbakpee%2BU2cjUlz8Y7YHQXTu%2BCqxOgpQ9ajeLAA10bRYmHzWzH94KokJa2uUkhTI28WEBxvTHU%2B%2BTlg8dvvXkbkj86fe%2FVneP%2BW3%2BD2xq5rfGZ%2Bo1gVd8aXTYVGV82lSMPVvJCpWqTzg7jSkELeezex%2FJ6Zaw4f9YNfnifz4hZuXNVuuICzYTKVh358YwSQtpzxnJJfj7vrkl2qXRrZ0qblfmFSx%2BcO5%2FmVjqnTDYBVY9XnoKrKVm48cvByb8wvQ9lJ7BljbR8RI4CyuyC55%2FD5fPtnSGwej7D8iaqsh7ZgM1BrQi0nPeU1XD%2F6dm8HrpbWLVN0OImsrRG39bo6xpUD%2BDK50ZFbh%2BdfvjdLL4H080R07Y5Ztrqb6bk9WP7h%2F46tdfq%2BJFMWBJzIZjkwo%2BDMAk9LxAiirvS76JwU5n%2B9fRfAAAA%2F%2F8BAAD%2F%2F3qHHKnPBAAA
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerLet's Encrypt
Subjectpetideadeference.com
Fingerprint0A:DC:88:39:2C:53:13:CB:4D:70:A4:F2:8C:77:74:6F:03:CA:00:58
ValidityTue, 28 Nov 2023 07:56:10 GMT - Mon, 26 Feb 2024 07:56:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSumawQ9SAJgogeRlFRcGf712z3mEMwxkgwZkMSybl%2BzW651V1NVff0Zk%2FGiOSQw%2BhJPfV8M9mNcQnmD1Bk1ksICJmL7ME961kIOcrsLow%2B6H7vfd87vO%2Br99Ww3Cc%2BSrp36ROzqbSmS52213r7msqEqVzr4tWW77W9U61rKluOTrU2Zj%2Fbf8%2F3Om3vndZHkq%2BbpcDzPc%2F3%2FNY5ZWXPbCwdsFD5Ttdvd712FLT9ToQN%2B%2F%2FelU042oTo75OTUGL6zNrDB1B8giz96ax064XJ3%2F0wLTUtjEVfbH%2BarWemypDOy55toJdtH03DuCkh3zZhsu0jBTD98UwBmJqSxh8%2BWLZ9tCZY%2F87hpkxDZmDieVT9CaSeQNEJuLkJJR4TgAtcXEGWbl00tqLXD1k6Y6dk4ck%2FUNWULPz5IrL0%2FhmtNlpXjC4LZTKHjV4NtTGBWp0gL3dRbDagql3w4gso8TtZenIBWTpecdpAib03%2FOUuZ0nkL4ZhkixGIggWqaRs0WNRwlnoRSyIDyxSagLVm0DLAahroJx9qoGy10CZN5CKvRbtdHueF%2FdYLwyTiHMehpx3kmXREWGU9DyUfKZhgCIfgOsBuP1yXGbcDf27uVgr1vtRd1zYUm7NwKg79LcO4QMQub1xV4SxDBmPhgzr6uvHnZOw5a9wazWcaMAVBH1Ro5IElSOoKEGlCKqCoOrXd4R2gau3hHYl849ycJTDemSK1SG9Y4pVmRFQOxjm%2B%2BTEzPTGS%2BPjWJd7reUglkEvoVEQduMO4xETMY2X%2FSDhgeh0AjhVQ7nmgUWbakpee%2BU2cjUlz8Y7YHQXTu%2BCqxOgpQ9ajeLAA10bRYmHzWzH94KokJa2uUkhTI28WEBxvTHU%2B%2BTlg8dvvXkbkj86fe%2FVneP%2BW3%2BD2xq5rfGZ%2Bo1gVd8aXTYVGV82lSMPVvJCpWqTzg7jSkELeezex%2FJ6Zaw4f9YNfnifz4hZuXNVuuICzYTKVh358YwSQtpzxnJJfj7vrkl2qXRrZ0qblfmFSx%2BcO5%2FmVjqnTDYBVY9XnoKrKVm48cvByb8wvQ9lJ7BljbR8RI4CyuyC55%2FD5fPtnSGwej7D8iaqsh7ZgM1BrQi0nPeU1XD%2F6dm8HrpbWLVN0OImsrRG39bo6xpUD%2BDK50ZFbh%2BdfvjdLL4H080R07Y5Ztrqb6bk9WP7h%2F46tdfq%2BJFMWBJzIZjkwo%2BDMAk9LxAiirvS76JwU5n%2B9fRfAAAA%2F%2F8BAAD%2F%2F3qHHKnPBAAA HTTP/1.1
Host: petideadeference.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 04 Dec 2023 14:58:01 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a6c582ba46e106ee37290bb236c91f61
Strict-Transport-Security: max-age=0; includeSubdomains
www.1024tera.com/api/ad/getconfig?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370008
200 OK 70 B URL GET HTTP/1.1 www.1024tera.com/api/ad/getconfig?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370008
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 8328cf530f4e0655c4de9c09a2ca1428
7b6b5b2450448a6159316fa347c4e5d07b18ad18
90482d0cfa554c009ec884831448060ffc0a7cd68531560f9a169164ec9c49cd
GET /api/ad/getconfig?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370008 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:56 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8991096406793721100
Logid: 8991096406793721100
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8991096406793721100
Yme: ZIGW+Ss3QE0WbSsGSnb+qnFLufkASwb2tANOySKCme60R1M2OW+jLINwNjY=
Content-Length: 85
region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701701883532&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=381948010.1701701884&ul=en-us&sr=1280x1024&sid=1701701883&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&dt=Telegram%20%40Backupcity%20search%20join(1)(1)(1)(1).mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=4&tfd=11322
204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701701883532&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=381948010.1701701884&ul=en-us&sr=1280x1024&sid=1701701883&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&dt=Telegram%20%40Backupcity%20search%20join(1)(1)(1)(1).mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=4&tfd=11322
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701701883532&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=381948010.1701701884&ul=en-us&sr=1280x1024&sid=1701701883&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&dt=Telegram%20%40Backupcity%20search%20join(1)(1)(1)(1).mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=4&tfd=11322 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1995
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/3 204 No Content
access-control-allow-origin: https://www.1024tera.com
date: Mon, 04 Dec 2023 14:58:01 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
petideadeference.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2tcVRS%2BM41QdSEtgoguRlFRMJP3MzNjF8VaK8XalLbS9f31kmvue%2Fdx73vz0qysFemii9GVunrzzTSpNRT7BygycVMKQmcjWZi1roXSpUwSGD3w3jnn%2B87ifN89Xw3LfeKjpHuXPjGbSmu6FLe91tvXVCZM5VoXr7Z8r%2B2dal1T2XJ0qrUx%2B9n%2Be74Xt713Wh9Jvm6WAs%2F3PN%2FzW%2BeUlYnZWDpgofKdnt%2Fuee0oaPtxhA37%2F96VTTjahOjvk5NQYvrM2sMHUHyCLP3prHTrhcnf%2FTAtNS2MRV9sf5qtZ6bKkM7LxDaQZNtH0zBuSsi3TZhs%2B0gBTH88UwCmpqTxhw%2BWbR%2BtCda%2Fc7gp05AZmHgeVX8CqSdQdAJubkKJxwTgAhdXkKVbF42t6PVDls7YKVl48g9UNSULf76ILL1%2FRquN1hWjy0KZzGEjqaE2JlCrE%2BTlLorNBlS1C158ASV%2BJ0tPLiBLxytOGyix94a%2F3OOsG%2FmLYdjtLkYiCBappGzRY1GXs9CLWNA5sEipCVQygZYDUNdAOftUA2XSQJk3kIq9Fo17ied1EpaEYTfinIch53F3WcQijLqJh5LPNAxQ5ANwPQC3X27lYq1Y748LW8pxmXE39O8eQlHvANyagVFv6CO3N%2B6KsCNDxqMhw7r6%2BnF8Erb8FW6thhMNuIKgL2pUkqByBBUlqBRBVRBU%2FfqO0C5w9ZbQrmT%2BUQ6OcliPTLE6pHdMsSozAmoHw3yfnJiZ3nhpfBzrcq%2B1HHRkkHRpFIS9Tsx4xESHdpb9oMsDEccBnKqhXPPAok01Ja%2B9chu5mpJnOztgdBdO74KrE6ClD1qNOoEHujaKuh42sx3fC6JCWtrmJoUwNfJiAcX1xlDvk5cPHr%2F15m1I%2Fuj0vVd3jvtv%2FQ1ua%2BS2xmfqN4JVfWt02VRkfNlUjjxYyQuVqk06O4wrBS3ksXsfy%2BuVseL8WTf44X0%2BI2blzlXpigs0EypbdeTHM0oIac8ZyyX5%2Bby7Jtml0q2dKW1W5hcufXDufJpb6Zwy2QRUPV55Cq6mZOHGLwcn%2F8L0PpSdwJY10vIROQooswuefw6Xz7d3hsDq%2BQzLm6jKemQDNge1ItBy3lNWw%2F2nZ%2FN66G5h1TZBi5vI0hp9W6Ova1A9gCufGxW5fXT64Xez%2BB5MN0dM2%2BaYaau%2FmZLXj%2B0f%2BuvUXkvGiZdIL5As6bGkQz3RS6Ieoz1fdlhMfRRuKtO%2Fnv4LAAD%2F%2FwEAAP%2F%2FNtG6r88EAAA%3D
200 OK 0 B URL GET HTTP/1.1 petideadeference.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2tcVRS%2BM41QdSEtgoguRlFRMJP3MzNjF8VaK8XalLbS9f31kmvue%2Fdx73vz0qysFemii9GVunrzzTSpNRT7BygycVMKQmcjWZi1roXSpUwSGD3w3jnn%2B87ifN89Xw3LfeKjpHuXPjGbSmu6FLe91tvXVCZM5VoXr7Z8r%2B2dal1T2XJ0qrUx%2B9n%2Be74Xt713Wh9Jvm6WAs%2F3PN%2FzW%2BeUlYnZWDpgofKdnt%2Fuee0oaPtxhA37%2F96VTTjahOjvk5NQYvrM2sMHUHyCLP3prHTrhcnf%2FTAtNS2MRV9sf5qtZ6bKkM7LxDaQZNtH0zBuSsi3TZhs%2B0gBTH88UwCmpqTxhw%2BWbR%2BtCda%2Fc7gp05AZmHgeVX8CqSdQdAJubkKJxwTgAhdXkKVbF42t6PVDls7YKVl48g9UNSULf76ILL1%2FRquN1hWjy0KZzGEjqaE2JlCrE%2BTlLorNBlS1C158ASV%2BJ0tPLiBLxytOGyix94a%2F3OOsG%2FmLYdjtLkYiCBappGzRY1GXs9CLWNA5sEipCVQygZYDUNdAOftUA2XSQJk3kIq9Fo17ied1EpaEYTfinIch53F3WcQijLqJh5LPNAxQ5ANwPQC3X27lYq1Y748LW8pxmXE39O8eQlHvANyagVFv6CO3N%2B6KsCNDxqMhw7r6%2BnF8Erb8FW6thhMNuIKgL2pUkqByBBUlqBRBVRBU%2FfqO0C5w9ZbQrmT%2BUQ6OcliPTLE6pHdMsSozAmoHw3yfnJiZ3nhpfBzrcq%2B1HHRkkHRpFIS9Tsx4xESHdpb9oMsDEccBnKqhXPPAok01Ja%2B9chu5mpJnOztgdBdO74KrE6ClD1qNOoEHujaKuh42sx3fC6JCWtrmJoUwNfJiAcX1xlDvk5cPHr%2F15m1I%2Fuj0vVd3jvtv%2FQ1ua%2BS2xmfqN4JVfWt02VRkfNlUjjxYyQuVqk06O4wrBS3ksXsfy%2BuVseL8WTf44X0%2BI2blzlXpigs0EypbdeTHM0oIac8ZyyX5%2Bby7Jtml0q2dKW1W5hcufXDufJpb6Zwy2QRUPV55Cq6mZOHGLwcn%2F8L0PpSdwJY10vIROQooswuefw6Xz7d3hsDq%2BQzLm6jKemQDNge1ItBy3lNWw%2F2nZ%2FN66G5h1TZBi5vI0hp9W6Ova1A9gCufGxW5fXT64Xez%2BB5MN0dM2%2BaYaau%2FmZLXj%2B0f%2BuvUXkvGiZdIL5As6bGkQz3RS6Ieoz1fdlhMfRRuKtO%2Fnv4LAAD%2F%2FwEAAP%2F%2FNtG6r88EAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerLet's Encrypt
Subjectpetideadeference.com
Fingerprint0A:DC:88:39:2C:53:13:CB:4D:70:A4:F2:8C:77:74:6F:03:CA:00:58
ValidityTue, 28 Nov 2023 07:56:10 GMT - Mon, 26 Feb 2024 07:56:09 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2tcVRS%2BM41QdSEtgoguRlFRMJP3MzNjF8VaK8XalLbS9f31kmvue%2Fdx73vz0qysFemii9GVunrzzTSpNRT7BygycVMKQmcjWZi1roXSpUwSGD3w3jnn%2B87ifN89Xw3LfeKjpHuXPjGbSmu6FLe91tvXVCZM5VoXr7Z8r%2B2dal1T2XJ0qrUx%2B9n%2Be74Xt713Wh9Jvm6WAs%2F3PN%2FzW%2BeUlYnZWDpgofKdnt%2Fuee0oaPtxhA37%2F96VTTjahOjvk5NQYvrM2sMHUHyCLP3prHTrhcnf%2FTAtNS2MRV9sf5qtZ6bKkM7LxDaQZNtH0zBuSsi3TZhs%2B0gBTH88UwCmpqTxhw%2BWbR%2BtCda%2Fc7gp05AZmHgeVX8CqSdQdAJubkKJxwTgAhdXkKVbF42t6PVDls7YKVl48g9UNSULf76ILL1%2FRquN1hWjy0KZzGEjqaE2JlCrE%2BTlLorNBlS1C158ASV%2BJ0tPLiBLxytOGyix94a%2F3OOsG%2FmLYdjtLkYiCBappGzRY1GXs9CLWNA5sEipCVQygZYDUNdAOftUA2XSQJk3kIq9Fo17ied1EpaEYTfinIch53F3WcQijLqJh5LPNAxQ5ANwPQC3X27lYq1Y748LW8pxmXE39O8eQlHvANyagVFv6CO3N%2B6KsCNDxqMhw7r6%2BnF8Erb8FW6thhMNuIKgL2pUkqByBBUlqBRBVRBU%2FfqO0C5w9ZbQrmT%2BUQ6OcliPTLE6pHdMsSozAmoHw3yfnJiZ3nhpfBzrcq%2B1HHRkkHRpFIS9Tsx4xESHdpb9oMsDEccBnKqhXPPAok01Ja%2B9chu5mpJnOztgdBdO74KrE6ClD1qNOoEHujaKuh42sx3fC6JCWtrmJoUwNfJiAcX1xlDvk5cPHr%2F15m1I%2Fuj0vVd3jvtv%2FQ1ua%2BS2xmfqN4JVfWt02VRkfNlUjjxYyQuVqk06O4wrBS3ksXsfy%2BuVseL8WTf44X0%2BI2blzlXpigs0EypbdeTHM0oIac8ZyyX5%2Bby7Jtml0q2dKW1W5hcufXDufJpb6Zwy2QRUPV55Cq6mZOHGLwcn%2F8L0PpSdwJY10vIROQooswuefw6Xz7d3hsDq%2BQzLm6jKemQDNge1ItBy3lNWw%2F2nZ%2FN66G5h1TZBi5vI0hp9W6Ova1A9gCufGxW5fXT64Xez%2BB5MN0dM2%2BaYaau%2FmZLXj%2B0f%2BuvUXkvGiZdIL5As6bGkQz3RS6Ieoz1fdlhMfRRuKtO%2Fnv4LAAD%2F%2FwEAAP%2F%2FNtG6r88EAAA%3D HTTP/1.1
Host: petideadeference.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 04 Dec 2023 14:58:01 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e61cfc27d620b594370dcc11134a3bbc
Strict-Transport-Security: max-age=0; includeSubdomains
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/manifest.10b4667f.js
200 OK 42 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/manifest.10b4667f.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (42022), with no line terminators
Hash edae6f2ca85f2ed5e1f3dadc18fb235c
8019006521594801ad2c578c3f14af682e861b89
b0dee26a9e55a8480f34f220b05eb8c384823bcf75260f645801c85f9491e7b3
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/manifest.10b4667f.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:57:54 GMT
content-type: application/javascript
server: openresty
content-md5: 7a5vLKhfLtXh89rcGPsjXA==
etag: W/"edae6f2ca85f2ed5e1f3dadc18fb235c"
expires: Thu, 07 Dec 2023 10:54:10 GMT
last-modified: Mon, 04 Dec 2023 08:11:44 GMT
x-bce-content-crc32: 1613090346
x-bce-debug-id: yl7NK2eDJ/krSbQYEc0rFUkdSk+cpDVhn1sTMzSZaROM18+G+kdtLK7lbJeQnVywzaxHMdMQ5L5FF1oD7Vh/3A==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 0ccd5ba0-0fd9-4046-9701-51882477aaca
x-bce-storage-class: STANDARD
x-ccdn-expires: 2581095
via: EU-GER-frankfurt-EDGE5-CACHE4[5],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE11[23],EU-GER-frankfurt-GLOBAL1-CACHE14[0,TCP_HIT,23]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 14458
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-2d225855.7faaefb6.js
200 OK 37 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-2d225855.7faaefb6.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (36937), with no line terminators
Hash 8b0f7f0b1d3875e84b572a4b8da14d5a
78079f8d4d5512d24244b0e2a3ba6a2880af5bc1
e635ce270e45d33ae75ee0b14f4598cfcd5c20c93abfd0bf562e952b95a35198
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-2d225855.7faaefb6.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:57:55 GMT
content-type: application/javascript
server: openresty
content-md5: iw9/Cx04dehLVypLjaFNWg==
etag: W/"8b0f7f0b1d3875e84b572a4b8da14d5a"
expires: Fri, 12 May 2023 08:44:00 GMT
last-modified: Mon, 08 May 2023 12:32:41 GMT
x-bce-content-crc32: 2125762108
x-bce-debug-id: iB6onZAdB5cwEu/eon/SnJwxjW+yEqUyso3lZkAtI8tqGqTqF5hKti5HQUqq4Il08RRUnC4QmZj/Wzs2YTkdMg==
x-bce-request-id: 6c4f78e6-e6e6-495c-8abe-dec67424c79d
x-bce-storage-class: STANDARD
x-ccdn-expires: 96987
via: EU-GER-frankfurt-EDGE5-CACHE4[1],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE3[22],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,20]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 18079814
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370014&language_type=en&cfg_category_keys=%5B%5D&version=0
200 OK 68 kB URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370014&language_type=en&cfg_category_keys=%5B%5D&version=0
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 5eefe4aed00676133bc261a115c7a3d1
ec1200de53d37206aa574c68a08c7366f67916e4
aa77ac9566de6fe695dbfaaf56b6a5b21d9c010ca827c486a65db39fbbe9ed25
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=8DBD6378C5BB4751AFDB1D69F3040B681249E534554F98E4AC585FC7A6CA20B33B624B1E5CC01A45A3BA97C6AA95C924D6458BA6BD75BC00109FB35633CC4AB40F974FDB2EB1F7B2C11524E0AD683D8DCCB77F33587F026D7F37C9C132A61A7C&dp-logid=87229100858620370014&language_type=en&cfg_category_keys=%5B%5D&version=0 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701884.59.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:59 GMT
Flow-Level: 3
Logid: 8991096970791270868
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 8991096970791270868
Yme: ZIGW+Ss3QE0WaysHTGriq29Xvv4cVAP2oh5OwiqBmOWxWQlqYDlNg7dJnZAY
Transfer-Encoding: chunked
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/apple.min.js
200 OK 42 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/apple.min.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/apple.min.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:57:54 GMT
content-type: application/javascript
server: openresty
content-md5: FF9mC4xH7SHLDq/gVBei9Q==
etag: W/"145f660b8c47ed21cb0eafe05417a2f5"
expires: Sun, 05 Feb 2023 11:19:03 GMT
last-modified: Thu, 02 Feb 2023 02:44:27 GMT
x-bce-content-crc32: 3041762371
x-bce-debug-id: GooNofUHCftVSaaHEC+AzAr4FYXPEZIzOsKJwWjn94XbPwUKv4MuSNK5CZJOH/HsmlldVHL9LxC5wuj+MNetYw==
x-bce-request-id: 96560a78-91ad-47e1-a285-8df2f8efcb9d
x-bce-storage-class: STANDARD
x-ccdn-expires: 1202930
via: EU-GER-frankfurt-EDGE5-CACHE4[15],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE6[3],EU-GER-frankfurt-GLOBAL1-CACHE2[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24751731
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?domain=www.1024tera.com&type=web_domain_heart_beat&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701881231
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domain=www.1024tera.com&type=web_domain_heart_beat&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701881231
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash b43a0fd52d83b89c20ecb5d327a879cc
3f8c7deccf6c5ed60b9c18498560307892c2d4a9
236356a9fd8eb3ab6991c5cd5e7ce163bc57bb09c2cd38afe221eaf97c3bcd13
GET /api/analytics?domain=www.1024tera.com&type=web_domain_heart_beat&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701881231 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:57 GMT
Flow-Level: 3
Logid: 8991096488837356803
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991096488837356803
Yme: ZIGW+Ss3QE0WaCsNSnb+qnFLufkASwbxtAFNySKDneU=
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-vendors.0c91416b.js
200 OK 1.3 MB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-vendors.0c91416b.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Size 1.3 MB (1276997 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-vendors.0c91416b.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 04 Dec 2023 14:57:54 GMT
content-type: application/javascript
server: openresty
content-md5: a1l6Bl6z/WmUk5VRMLJRyw==
etag: W/"6b597a065eb3fd699493955130b251cb"
expires: Sat, 25 Nov 2023 10:39:04 GMT
last-modified: Wed, 22 Nov 2023 02:21:52 GMT
x-bce-content-crc32: 3304779663
x-bce-debug-id: qN0aN2KGmEnQNotbwTj5EO9MHr42l1O3a48iCP9ZQ1QdFJqG7umOmDl00uQpHIgJHgNjtdiGCMrsn+tYuWFRhg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 566c3b22-e053-4880-b154-222038dabd24
x-bce-storage-class: STANDARD
x-ccdn-expires: 1572514
via: EU-GER-frankfurt-EDGE5-CACHE4[7],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE1[22],EU-GER-frankfurt-GLOBAL1-CACHE9[0,TCP_HIT,20]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 1052250
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?type=web_share_video_premium_activity_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884472
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_share_video_premium_activity_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884472
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash d508ee14818dbccb57e55f662534fce9
9050979074fb7f6a6dbfb5ffc085d7081f14efee
fdcd3a9e5500c5c862aa3836bbaf55c4363e4bc7c2b7073fd4211b34ade6a0eb
GET /api/analytics?type=web_share_video_premium_activity_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DeP-9fiJcvKvVL-zEijMCWA&client=web&t=1701701884472 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=eP-9fiJcvKvVL-zEijMCWA
Cookie: csrfToken=tv5Ui1VbE6_1MfZJgj571FQb; browserid=43ivSrYtsRyQynyOgaCeS_aottZXOPSLlVF4g--WKWpYJpGK5LByvyoLbgo=; lang=en; TSID=VXwdSWQgXCQQ4daElySlmT56SvnRXcWJ; __bid_n=18c35560bb84fa947c4207; _ga_06ZNKL8C2E=GS1.1.1701701883.1.0.1701701883.60.0.0; _ga=GA1.1.381948010.1701701884
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Mon, 04 Dec 2023 14:57:59 GMT
Flow-Level: 3
Logid: 8991096966345631407
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8991096966345631407
Yme: ZIGW+Ss3QE0WYisGSnb+qnFLufkASwb8tAdKySKDmOXpHhhxZCPTCDkxrTY=
Content-Length: 44
210.148.85.41
60.190.116.48
142.250.74.42
185.207.113.205
104.21.86.121
18.157.203.0
90.84.161.16
0.0.0.0