teraboxapp.com/s/1GQcNgPUrGx549MAcEh25eQ
111.108.51.117 0 B URL teraboxapp.com/s/1GQcNgPUrGx549MAcEh25eQ
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/1GQcNgPUrGx549MAcEh25eQ HTTP/1.1
Host: teraboxapp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 forced.302
Date: Sat, 23 Sep 2023 21:12:40 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409719445376957869
Set-Cookie: shareRedirectDomain=1024tera.com; expires=Wed, 22-Nov-2023 21:12:40 GMT; path=/; httponly
PANWEB=1; expires=Sun, 22-Sep-2024 21:12:40 GMT; path=/; domain=teraboxapp.com
Location: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cache-Control: no-cache
Pragma: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
logid: 409719445376957869
Flow-level: 3
www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
111.108.51.117 62 kB URL www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (49748)
Hash b75b3b425a8d6820bfd7514e30836224
4e148fce393c82e8620379f75f5cc3e21430341a
bfbcb4b8dded2ad4d3d34889afcfbfc13e688015dc8251eabd142bb57588461f
GET /sharing/link?surl=GQcNgPUrGx549MAcEh25eQ HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:41 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409719776786525571
Vary: Accept-Encoding, Accept-Encoding
set-cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; path=/
browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; path=/; max-age=5184000; expires=Wed, 22 Nov 2023 21:12:41 GMT; domain=.1024tera.com
lang=en; path=/; max-age=2592000; expires=Mon, 23 Oct 2023 21:12:41 GMT
TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; path=/; max-age=31536000; expires=Sun, 22 Sep 2024 21:12:41 GMT; domain=.1024tera.com
Strict-Transport-Security: max-age=172800
x-flow-level: 3
x-request-id: 409719776786525571
x-conteneur-nom: wrNOGgAfwpIFFhXCusOVwp7Dtw4qwo5abnPDo8O+w63DkQ1hw7PCsMO7w67DoALCmHDDi0cnXMKmd0bCrkIjMcKHOcOzw7kUBRPCnsOgwrHDqA==
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-readtime: 219
X-Powered-By: TeraBox
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0RYysCSHb+qnFLufkASwb2tAdMySKDm+61T599
Server: nginx
logid: 409719776786525571
Flow-level: 3
Content-Encoding: gzip
ocsp.r2m02.amazontrust.com/
143.204.48.16 471 B URL ocsp.r2m02.amazontrust.com/
IP 143.204.48.16:0
Hash 589f42a20610138ee8bb9e907abd8d08
39e42ec9391fa5e6c94947afd0e1522188144512
ae389e80ca505b979fdd2a436d22d6852adfe648cd9a6ee1976649240afc5d0f
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sat, 23 Sep 2023 21:12:43 GMT
Last-Modified: Sat, 23 Sep 2023 19:27:54 GMT
Server: ECAcc (ska/F69C)
X-Cache: Miss from cloudfront
Via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: qVE90YOywARaHt_lS-cWPmsoPk9HHEPNVYlYShSHTZ51i2XgxTk92g==
Age: 6289
www.1024tera.com/ndbs/nd_bundle_430546.js
111.108.51.117 66 kB URL www.1024tera.com/ndbs/nd_bundle_430546.js
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type Unicode text, UTF-8 text, with very long lines (36757)
Hash 2be70342e4695e6c13d04f9906e47635
6f4596c9cd37089ead6715fd3553c0845f1158d3
f731296cced4c20e1f9e24e3080faa044bd0fad2f8f64adf026a75038adecce8
GET /ndbs/nd_bundle_430546.js HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:43 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409720211857394791
Last-Modified: Mon, 10 Jul 2023 02:21:26 GMT
Vary: Accept-Encoding
Cache-Control: no-cache
X-Powered-By: DuboxServer
Content-Encoding: gzip
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0RYysCSHb+qnFLufkATQPrqAJFwSCFmA==
Server: nginx
logid: 409720211857394791
Flow-level: 3
ocsp.dcocsp.cn/
47.246.44.225 471 B IP 47.246.44.225:0
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash de2dc7af93a94cd2349b04ed301acb76
f06de78654683476dcba3bae8ac4063319d7f12a
b92d90d79aea4376892ca73efabd5641a495bfbedca12512b66a11176ec8b1d6
POST / HTTP/1.1
Host: ocsp.dcocsp.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Sat, 23 Sep 2023 20:33:33 GMT
Ali-Swift-Global-Savetime: 1695501213
Via: cache21.l2de2[0,0,200-0,H], cache4.l2de2[0,0], cache5.se1[0,0,200-0,H], cache5.se1[1,0]
Age: 2351
X-Cache: HIT TCP_MEM_HIT dirn:4:108749822
X-Swift-SaveTime: Sat, 23 Sep 2023 20:52:31 GMT
X-Swift-CacheTime: 2462
Timing-Allow-Origin: *
EagleId: 2ff62c9916955035643131953e
ocsp.dcocsp.cn/
47.246.44.225 471 B IP 47.246.44.225:0
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash de2dc7af93a94cd2349b04ed301acb76
f06de78654683476dcba3bae8ac4063319d7f12a
b92d90d79aea4376892ca73efabd5641a495bfbedca12512b66a11176ec8b1d6
POST / HTTP/1.1
Host: ocsp.dcocsp.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Sat, 23 Sep 2023 20:33:33 GMT
Ali-Swift-Global-Savetime: 1695501213
Via: cache21.l2de2[0,0,200-0,H], cache20.l2de2[1,0], cache3.se1[0,0,200-0,H], cache3.se1[1,0]
Age: 2351
X-Cache: HIT TCP_HIT dirn:11:23478023
X-Swift-SaveTime: Sat, 23 Sep 2023 20:54:06 GMT
X-Swift-CacheTime: 2367
Timing-Allow-Origin: *
EagleId: 2ff62c9716955035643097156e
ocsp.dcocsp.cn/
47.246.44.225 471 B IP 47.246.44.225:0
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash de2dc7af93a94cd2349b04ed301acb76
f06de78654683476dcba3bae8ac4063319d7f12a
b92d90d79aea4376892ca73efabd5641a495bfbedca12512b66a11176ec8b1d6
POST / HTTP/1.1
Host: ocsp.dcocsp.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Sat, 23 Sep 2023 20:33:33 GMT
Ali-Swift-Global-Savetime: 1695501213
Via: cache21.l2de2[0,0,200-0,H], cache14.l2de2[1,0], cache1.se1[0,0,200-0,H], cache1.se1[0,0]
Age: 2351
X-Cache: HIT TCP_MEM_HIT dirn:2:319943278
X-Swift-SaveTime: Sat, 23 Sep 2023 20:38:25 GMT
X-Swift-CacheTime: 3308
Timing-Allow-Origin: *
EagleId: 2ff62c9516955035643067495e
ocsp.dcocsp.cn/
47.246.44.225 471 B IP 47.246.44.225:0
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash de2dc7af93a94cd2349b04ed301acb76
f06de78654683476dcba3bae8ac4063319d7f12a
b92d90d79aea4376892ca73efabd5641a495bfbedca12512b66a11176ec8b1d6
POST / HTTP/1.1
Host: ocsp.dcocsp.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Sat, 23 Sep 2023 20:33:33 GMT
Ali-Swift-Global-Savetime: 1695501213
Via: cache21.l2de2[0,0,200-0,H], cache20.l2de2[1,0], cache3.se1[0,0,200-0,H], cache3.se1[2,0]
Age: 2351
X-Cache: HIT TCP_MEM_HIT dirn:11:23478023
X-Swift-SaveTime: Sat, 23 Sep 2023 20:54:06 GMT
X-Swift-CacheTime: 2367
Timing-Allow-Origin: *
EagleId: 2ff62c9716955035643097157e
ocsp.dcocsp.cn/
47.246.44.225 471 B IP 47.246.44.225:0
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash de2dc7af93a94cd2349b04ed301acb76
f06de78654683476dcba3bae8ac4063319d7f12a
b92d90d79aea4376892ca73efabd5641a495bfbedca12512b66a11176ec8b1d6
POST / HTTP/1.1
Host: ocsp.dcocsp.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Sat, 23 Sep 2023 20:33:33 GMT
Ali-Swift-Global-Savetime: 1695501213
Via: cache21.l2de2[0,0,200-0,H], cache2.l2de2[2,0], cache2.se1[26,26,200-0,M], cache2.se1[28,0]
Age: 2351
X-Cache: MISS TCP_REFRESH_MISS dirn:6:353646141
X-Swift-SaveTime: Sat, 23 Sep 2023 21:12:44 GMT
X-Swift-CacheTime: 1249
Timing-Allow-Origin: *
EagleId: 2ff62c9616955035643097361e
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/fonts/iconfont.4f9f785d.woff
90.84.161.19 26 kB URL s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/fonts/iconfont.4f9f785d.woff
IP 90.84.161.19:0
File type Web Open Font Format, TrueType, length 25804, version 1.0\012- data
Hash 4f9f785d98a8fa208e7f64023e124572
3e8714f56d480cfd66721447975613a1e56ca9e4
27f0ac9cff76f3925b4389a404d01e2fb525bae7b17cafb0c04e5e6bb20ca83b
GET /fe-opera-static/node-static-v4/fe-webv4-main/fonts/iconfont.4f9f785d.woff HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 21:12:44 GMT
content-type: application/x-font-woff
content-length: 25804
server: openresty
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Length, x-bce-next-append-offset, x-bce-object-type, x-bce-request-id
access-control-max-age: 1800
age: 18553421
content-md5: T594XZio+iCOf2QCPhJFcg==
etag: "4f9f785d98a8fa208e7f64023e124572"
expires: Thu, 09 Feb 2023 02:34:52 GMT
last-modified: Thu, 02 Feb 2023 12:40:59 GMT
x-ccdn-cachettl: 2592000
x-ccdn-expires: 2182685
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE3[2],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,2],EU-GER-frankfurt-GLOBAL1-CACHE11[3],EU-GER-frankfurt-GLOBAL1-CACHE3[0,TCP_HIT,1]
x-bce-content-crc32: 4229721389
x-bce-debug-id: 7WiMWIwBpNvCI1l2DEy41X6CYQbfBDD/53hHCbNUgg3chFP5F6R09q6Ha3n+sFI1w5hrFozk3M8ehG3s5jYsKw==
x-bce-request-id: 8ed250a7-98cd-4add-b067-4212e4c8ecd6
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
accept-ranges: bytes
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/loading-grey.0e512ce9.gif
90.84.161.19 13 kB URL s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/loading-grey.0e512ce9.gif
IP 90.84.161.19:0
File type GIF image data, version 89a, 70 x 54\012- data
Hash 0e512ce91474d2c98f524fc9d479bca1
3e95fc024add69d9f13393a9dacbf625d2cf218c
48ed2dfe595001d90ea0bf9c572b15f446fcf49ae4bfa2cac84acc02aef04e17
GET /fe-opera-static/node-static-v4/fe-webv4-main/img/loading-grey.0e512ce9.gif HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 21:12:44 GMT
content-type: image/gif
content-length: 12746
server: openresty
age: 18553302
content-md5: DlEs6RR00smPUk/J1Hm8oQ==
etag: "0e512ce91474d2c98f524fc9d479bca1"
expires: Sat, 24 Sep 2022 06:46:06 GMT
last-modified: Wed, 21 Sep 2022 05:03:27 GMT
x-ccdn-cachettl: 2592000
x-ccdn-expires: 2183449
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE3[21],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE8[3],EU-GER-frankfurt-GLOBAL1-CACHE4[0,TCP_HIT,2],EA-SGP-GLOBAL1-CACHE24[4],EA-SGP-GLOBAL1-CACHE25[0,TCP_HIT,2]
x-bce-content-crc32: 1545165226
x-bce-debug-id: SVLAO6wp1e4OUGFHIRy8Y1IEAIpwP8YBdrzlRjHOGWEqe7/5zemw7PiCsrLuiBtk8Hkvkt7auD0iX4QbNYOajA==
x-bce-request-id: 911c9037-40e0-4339-a273-266bf634f105
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
accept-ranges: bytes
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?type=web_firebase_init_success_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503565296
111.108.51.117 43 B URL www.1024tera.com/api/analytics?type=web_firebase_init_success_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503565296
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash 26f9756da273ca8812ebbc00df3c18ce
52d0ab7c26c256a8c9516cbfbb70fb5874e51b2d
6b807c0730d2e3809a72a41077a02ac57ce92cf5c3a324b6e12e659ec6273d84
GET /api/analytics?type=web_firebase_init_success_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503565296 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:45 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409720744054151042
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0RYysCSHb+qnFLufkASwb2tAFPwCqBmOuw
Server: nginx
logid: 409720744054151042
Flow-level: 3
s2.teraboxcdn.com/general-conf/fk/dfxaf3-598bbed9.js
90.84.161.19 41 kB URL s2.teraboxcdn.com/general-conf/fk/dfxaf3-598bbed9.js
IP 90.84.161.19:0
File type gzip compressed data, from Unix\012- data
Hash f43211d9ffc1afb19d42df3f8b499866
10f32779eff8957607581a02a733016e6bab803b
f389c10368debf7b5a8c6c46b17c2c1aea2c1fb588ae1b228bb0a9bbc2ed7266
GET /general-conf/fk/dfxaf3-598bbed9.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 21:12:44 GMT
content-type: text/javascript
server: openresty
age: 2841075
content-md5: XFh9oBy2kDVBL1HFwsGouw==
etag: W/"5c587da01cb69035412f51c5c2c1a8bb"
expires: Fri, 25 Aug 2023 00:01:29 GMT
last-modified: Fri, 04 Aug 2023 06:31:29 GMT
x-ccdn-cachettl: 2592000
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE3[1],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE8[1236],EU-GER-frankfurt-GLOBAL1-CACHE2[883,TCP_MISS,1234]
x-bce-content-crc32: 1530496940
x-bce-debug-id: LqEG3CwucDJNDf/Csji9d11otXQ2jNTMipbhl7gh+mpri+BSDDNL5dw+66J/y/FmM17YrPpsDBs2uz6fG6v8rQ==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: b3f7fc51-3c98-43d0-8e46-17c782430fc8
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
x-ccdn-expires: 2592000
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?time=undefined&type=web_share_page_show_FP_FIRST&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503565511
111.108.51.117 43 B URL www.1024tera.com/api/analytics?time=undefined&type=web_share_page_show_FP_FIRST&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503565511
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash b7c8d35da575c9dd1cf3020313baaaaf
91ee9ca063b4b4c8bc91fe976c56f8a053675fb6
a491508fee455e8c229674e350414a728745656176ea33f3e8b379feb4e6acb6
GET /api/analytics?time=undefined&type=web_share_page_show_FP_FIRST&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503565511 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:45 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409720800995791673
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QEsSdTcNUmr/tG1MvuUZShz0qwpNwyCEybPlDQVrZacV
Server: nginx
logid: 409720800995791673
Flow-level: 3
www.1024tera.com/share/webmaster/check?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710004&bdstoken=
111.108.51.117 85 B URL www.1024tera.com/share/webmaster/check?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710004&bdstoken=
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text
Hash 573026622d5c77fc67f8171281f5eb54
e4f0269332c8906f708199952c2934d1834a870b
16803fc093efa3254ddbf28db6e78b2fee3af938d3af7afd6da381f430bdaedc
GET /share/webmaster/check?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710004&bdstoken= HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:45 GMT
Content-Type: application/json; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 409720873831332492
Http-X-Isis-Logid: 409720873831332492
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QEsSdTcNUmr/tG1MvuUZSBzxqwpNwyOEwj+haxU=
Server: nginx
logid: 409720873831332492
Flow-level: 3
Content-Encoding: gzip
ymg-api.terabox.com/abdr?_o=https%3A%2F%2Fwww.1024tera.com
210.154.124.151 179 B URL ymg-api.terabox.com/abdr?_o=https%3A%2F%2Fwww.1024tera.com
IP 210.154.124.151:0
ASN #4713 NTT Communications Corporation
File type JSON data\012- , ASCII text, with no line terminators
Hash d9a1934f337104ff1d8091fac19fe337
4263565ebb0d33b122fa8f0f9f7a5156efcb1310
a2a4df1387fe238c8ba14671d7bba095efb298f9b467af64a80d58ff27347dab
POST /abdr?_o=https%3A%2F%2Fwww.1024tera.com HTTP/1.1
Host: ymg-api.terabox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 3508
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:45 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 409720900043308782
Ab-Sr: 1.0.1_ZWI2YzEwN2Q4OTYzZDU0OWVlYjBhYmQ1NDRkMjA3MGZjYTg3ZWM1ZjI1NzBkYmYxMDQ4YTY2YTZjNGVlNTVlZWVlNmZmODdkODE2N2JiZGE2YWU0OGQ0MjFlYTM1ZGJmZWQ0OTdkYzlhMzgwNjlhZjIzZDJjNDVlM2ZjMWRiNjFhZjQyYWFmOGFhY2MwYTEyZjRjNjJjMDAwNjkyYTUwMA==
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, Host, Content-Type, x-requested-with, X-Custom-Header
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Expose-Headers: Ab-sr, Authentication
Access-Control-Max-Age: 3600
Authentication: a3bc697b0691efdc02e9350b0dff1bbe0000000000000000
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaCsHT2ziq29Xvv4cVAP2ox5NxyqLn+uw
Set-Cookie: ab_jid=53438d46add2dcad4c6c420dd35afdd3c7e9; Path=/; Domain=ymg-api.terabox.com; Max-Age=2147483647; HttpOnly; Secure; SameSite=None
ab_bid=53438d46add2dcad4c6c420dd35afdd3c7e9; Path=/; Domain=ymg-api.terabox.com; Max-Age=2147483647; HttpOnly; Secure; SameSite=None
ab_sr=1.0.1_ZWI2YzEwN2Q4OTYzZDU0OWVlYjBhYmQ1NDRkMjA3MGZjYTg3ZWM1ZjI1NzBkYmYxMDQ4YTY2YTZjNGVlNTVlZWVlNmZmODdkODE2N2JiZGE2YWU0OGQ0MjFlYTM1ZGJmZWQ0OTdkYzlhMzgwNjlhZjIzZDJjNDVlM2ZjMWRiNjFhZjQyYWFmOGFhY2MwYTEyZjRjNjJjMDAwNjkyYTUwMA==; Path=/; Domain=terabox.com; Max-Age=7200; HttpOnly; Secure; SameSite=None
Server: nginx
logid: 409720900043308782
Flow-level: 3
Content-Encoding: gzip
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710001&language_type=en&cfg_category_keys=%5B%5D&version=0
111.108.51.117200 OK 14 kB URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710001&language_type=en&cfg_category_keys=%5B%5D&version=0
IP 111.108.51.117:443
ASN #2516 KDDI CORPORATION
Requested by https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (64450), with no line terminators
Hash e3c89c5815084ca35b9b79723fee2719
73d128fd18645ee52ad839a92f662e7f7c89a214
819fbf700421775e1021bd8015c01353a1a9393c630c40913fd328a1c6f07e8f
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710001&language_type=en&cfg_category_keys=%5B%5D&version=0 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:45 GMT
Content-Type: application/json; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 409720823762601930
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0RYysCSHb+qnFLufkASwb3tAFJyiqBmO+1
Server: nginx
logid: 409720823762601930
Flow-level: 3
Content-Encoding: gzip
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-1dcd7f8a.2b42216f.js
90.84.161.19 5.8 kB URL s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-1dcd7f8a.2b42216f.js
IP 90.84.161.19:0
File type gzip compressed data, from Unix\012- data
Hash 021365975415708efda2f46d3b0270b9
12ef0c50a9032191cb3ed164424818f50520c79a
07eacbf04fac7d182727da98cb0eb9154ac3fcbea1bf56b86b384572659d43f6
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-1dcd7f8a.2b42216f.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 21:12:45 GMT
content-type: application/javascript
server: openresty
age: 11881439
content-md5: gzS2U+Mf/YcINpBPpUD5zg==
etag: W/"8334b653e31ffd870836904fa540f9ce"
expires: Fri, 12 May 2023 08:43:54 GMT
last-modified: Mon, 08 May 2023 12:32:40 GMT
x-ccdn-cachettl: 2592000
x-ccdn-expires: 1078925
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE3[1],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE2[17],EU-GER-frankfurt-GLOBAL1-CACHE8[0,TCP_HIT,15]
x-bce-content-crc32: 4120287129
x-bce-debug-id: Teo3loV3wqW/js/c3F+flnexjxNYfbmQInRoUF9QRAMJ7CFnw1D4NuX6sDdmfzinUfOqZghCnAt7txHYBz0myw==
x-bce-request-id: afcc4a4d-fd1a-4520-9662-3523bce519be
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-94864b88.e650f8c9.js
90.84.161.19 12 kB URL s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-94864b88.e650f8c9.js
IP 90.84.161.19:0
File type ASCII text, with very long lines (42826), with no line terminators
Hash 76ab837c1d3afca9e6b1cdbc6e9156c4
7a28bb38bfac3672f6a5ae7006a928ff1358f8b1
7b4d5874fa44fdd28c4d1c87b6b8d4aae57931754f70d331b7348735318c0443
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-94864b88.e650f8c9.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 21:12:45 GMT
content-type: application/javascript
server: openresty
age: 11019995
content-md5: sB8ZXpSwhIEirDMU9TlXIQ==
etag: W/"b01f195e94b0848122ac3314f5395721"
expires: Mon, 22 May 2023 08:06:09 GMT
last-modified: Fri, 19 May 2023 06:11:01 GMT
x-ccdn-cachettl: 2592000
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE3[1],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[1059],EU-GER-frankfurt-GLOBAL1-CACHE12[774,TCP_MISS,1057]
x-bce-content-crc32: 1763380652
x-bce-debug-id: 6/t1aZ0T4wIW5Mpdrs6rwONcVe50LnzXyMl/KxoZOSjgTHz/QchFlwkYo5YFdGxYjuFFLRMdxpL02NaFeSWQqg==
x-bce-request-id: 3b4dea47-19f8-48e2-a389-1652fd45a67a
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
x-ccdn-expires: 1940385
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/share/linkpaylistpurchaseorder?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710005&page=1&cnt=20
111.108.51.117 85 B URL www.1024tera.com/share/linkpaylistpurchaseorder?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710005&page=1&cnt=20
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text
Hash d7a3e6d2f8d400d631b6e4284c6dba59
6a4feecc3be291d1e646c58750d4f98c8466586a
d817d9fd122891020ca02660e9c63405601780fffa179bc7c2823639291604e9
GET /share/linkpaylistpurchaseorder?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710005&page=1&cnt=20 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:46 GMT
Content-Type: application/json; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 409721024573547509
Http-X-Isis-Logid: 409721024573547509
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaysNTnb+qnFLufkASwbxtANKySKDm++hIDVHTAfzVHRsmDY=
Server: nginx
logid: 409721024573547509
Flow-level: 3
Content-Encoding: gzip
www.1024tera.com/api/shorturlinfo?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710008&shorturl=1GQcNgPUrGx549MAcEh25eQ&root=1&scene=purchased_list
111.108.51.117 833 B URL www.1024tera.com/api/shorturlinfo?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710008&shorturl=1GQcNgPUrGx549MAcEh25eQ&root=1&scene=purchased_list
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with very long lines (2306), with no line terminators
Hash b79c90fa6eeb5c43ffd059b3b276bf21
c2f3cd6416e37d132b9d5d90508f0af1d3231345
4801126fae3afd63ce7a6348e6ed35340deeaae4ad144f580b21ae6137920923
GET /api/shorturlinfo?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710008&shorturl=1GQcNgPUrGx549MAcEh25eQ&root=1&scene=purchased_list HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:46 GMT
Content-Type: application/json; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409720988738622473
Content-Encoding: gzip
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0RYysCSHb+qnFLufkASwb2tAJOwSqBmOmx
Server: nginx
logid: 409720988738622473
Flow-level: 3
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-2d225855.7faaefb6.js
90.84.161.19 12 kB URL s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-2d225855.7faaefb6.js
IP 90.84.161.19:0
File type ASCII text, with very long lines (37020), with no line terminators
Hash 3933353afeba18f46e065415fb7379c6
bae7ec3b86be9b6ff23bc59986079eb2f0ae0462
3d7e4b233c0bf25b03f5a000ec16cf67ca005d697bb011c40b8e3d34a370623e
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-2d225855.7faaefb6.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 21:12:45 GMT
content-type: application/javascript
server: openresty
age: 11881504
content-md5: iw9/Cx04dehLVypLjaFNWg==
etag: W/"8b0f7f0b1d3875e84b572a4b8da14d5a"
expires: Fri, 12 May 2023 08:44:00 GMT
last-modified: Mon, 08 May 2023 12:32:41 GMT
x-ccdn-cachettl: 2592000
x-ccdn-expires: 1078864
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE3[1],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE3[22],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,20]
x-bce-content-crc32: 2125762108
x-bce-debug-id: iB6onZAdB5cwEu/eon/SnJwxjW+yEqUyso3lZkAtI8tqGqTqF5hKti5HQUqq4Il08RRUnC4QmZj/Wzs2YTkdMg==
x-bce-request-id: 6c4f78e6-e6e6-495c-8abe-dec67424c79d
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/manifest.0fcfaf49.js
90.84.161.19 12 kB URL s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/manifest.0fcfaf49.js
IP 90.84.161.19:0
File type ASCII text, with very long lines (40271), with no line terminators
Hash da78d6cc8d71f25d072c3d6c444f41ec
4936daeb51ed6bc93f625d9a199621ba949101c9
10374401ba93b255012b35192ce57d7167274165a0b8a790ed367981c03ee93a
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/manifest.0fcfaf49.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 21:12:44 GMT
content-type: application/javascript
server: openresty
age: 219627
content-md5: 81EmqTkzcOkzybmS9/DTuQ==
etag: W/"f35126a9393370e933c9b992f7f0d3b9"
expires: Sun, 24 Sep 2023 07:55:18 GMT
last-modified: Wed, 20 Sep 2023 12:31:55 GMT
x-ccdn-cachettl: 2592000
x-ccdn-expires: 2372552
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE3[2],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE2[4],EU-GER-frankfurt-GLOBAL1-CACHE5[0,TCP_HIT,2]
x-bce-content-crc32: 1349585688
x-bce-debug-id: /CSujevo4k31X6Wj5fZwSvSLblA4NHmQpu/pUhxO0f4KIpls8QEMgql0os1xlSU7K3mgj/QHUbXD3HViZq7Vxw==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 88ca5755-bb9f-490f-a695-df636c6a06f5
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/ad/getconfig?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710007
111.108.51.117 83 B URL www.1024tera.com/api/ad/getconfig?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710007
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash 6bd8d77b350e1ca4ca0f143ce9e1df51
d6a5e95d71eda6d4df2ec0a9b0f5d5ae1d86740c
2fb4597a82bb9d3d92f8afc1f5af5882aad20d5460a3ed687dfb4ea62e1a9cd4
GET /api/ad/getconfig?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710007 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:46 GMT
Content-Type: application/json; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 409721094093501569
Http-X-Isis-Logid: 409721094093501569
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QEsSdTcNUmr/tG1MvuUZSxz3rgpNwySDiv+tXR16Xm/815pf3A==
Server: nginx
logid: 409721094093501569
Flow-level: 3
Content-Encoding: gzip
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/ud-i18n-en.e44e7bde.js
90.84.161.19 16 kB URL s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/ud-i18n-en.e44e7bde.js
IP 90.84.161.19:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash cf491ea4ddd3c5967be4e5687654dd0d
0728a426fcff1da1bb7550e8f1fae27e90cabe07
f49d8773a37982eed04cb7e33dcff73677df6e5031f9ab6aa82bc9bece1adbc0
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/ud-i18n-en.e44e7bde.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 21:12:45 GMT
content-type: application/javascript
server: openresty
age: 11881540
content-md5: DyUZIaD1cN4PN459aJhnNg==
etag: W/"0f251921a0f570de0f378e7d68986736"
expires: Fri, 12 May 2023 08:43:54 GMT
last-modified: Mon, 08 May 2023 12:32:48 GMT
x-ccdn-cachettl: 2592000
x-ccdn-expires: 1081212
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE3[2],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE5[36],EU-GER-frankfurt-GLOBAL1-CACHE2[0,TCP_HIT,32]
x-bce-content-crc32: 2133490345
x-bce-debug-id: NSexvRTV0lZWQYtbdWLSgX+v6Hr/56aCZJ1ADylLSrA41ImIsmNUOALc2+imcrFlB95XXzUoxQ6mngOJKiIOKA==
x-bce-request-id: ebaa8284-e667-42db-a2f8-0aab2662e8dc
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?time=3755&type=web_share_page_show_FP_SECOND&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503565512
111.108.51.117 43 B URL www.1024tera.com/api/analytics?time=3755&type=web_share_page_show_FP_SECOND&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503565512
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash beecdf7e6ac904895bfaaa4d09a50eaa
4901459f5508d45a8426d237218510d8ea367963
637d19a2b3999d6d53329a620327595ebf54b3c75b06fa006136b2f2d279feb8
GET /api/analytics?time=3755&type=web_share_page_show_FP_SECOND&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503565512 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:46 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721102320218457
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaisHTW7iq29Xvv4cVAPxrh5OxSWJmu2xTBNSNgUbmx8Kh5sY
Server: nginx
logid: 409721102320218457
Flow-level: 3
www.1024tera.com/api/analytics?time=5906&type=web_share_page_show_FCP&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503565512
111.108.51.117 43 B URL www.1024tera.com/api/analytics?time=5906&type=web_share_page_show_FCP&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503565512
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash 6f9606c875ef26779c51c4188fd74d64
56a6cec3d7d799b6375c4dd842c3f1eb8fbfca05
170d94318a4c82393e79bea02c27e3a34b01ec7a0827b377cc361e1224611cbc
GET /api/analytics?time=5906&type=web_share_page_show_FCP&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503565512 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:46 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721102326002806
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaysNTnb+qnFLufkASwb2tAFIxyqBmOm4GgR2LDuLgtFsmDY=
Server: nginx
logid: 409721102326002806
Flow-level: 3
www.1024tera.com/api/analytics?errno=-6&newno=&request_id=409721024573547500&show_msg=&hasError=true¶ms=%7B%22page%22%3A1%2C%22cnt%22%3A20%7D&uk=0&type=%2Fshare%2Flinkpaylistpurchaseorder_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503566642
111.108.51.117 43 B URL www.1024tera.com/api/analytics?errno=-6&newno=&request_id=409721024573547500&show_msg=&hasError=true¶ms=%7B%22page%22%3A1%2C%22cnt%22%3A20%7D&uk=0&type=%2Fshare%2Flinkpaylistpurchaseorder_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503566642
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash 95d5623567b7b27c5b116dee3b203809
3aa260dd7dfb26ec84b44707aa0431bc6ae1579b
ddb2744063875fb5ef82117830f184767c9dc0986c94033812ca0fbbaa5a3e04
GET /api/analytics?errno=-6&newno=&request_id=409721024573547500&show_msg=&hasError=true¶ms=%7B%22page%22%3A1%2C%22cnt%22%3A20%7D&uk=0&type=%2Fshare%2Flinkpaylistpurchaseorder_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503566642 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:46 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721102982847336
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QEoadTYGUmr/tG1MvuUZTRz0rwpNwyCAhuy0RVgyMFY=
Server: nginx
logid: 409721102982847336
Flow-level: 3
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/recyclebin~share~webmasterShare.8f060bbd.js
90.84.161.19 46 kB URL s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/recyclebin~share~webmasterShare.8f060bbd.js
IP 90.84.161.19:0
File type gzip compressed data, from Unix\012- data
Hash 4a833a13bcb5a439961263acb68135b7
96ddbdc9e12ab1f6c85fa95f258bd5a6f6d65e1e
1d686522bd886154d2f9b1d28d1967d0b7d0455905de54cd4c6ecf3e45e2e35f
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/recyclebin~share~webmasterShare.8f060bbd.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 21:12:45 GMT
content-type: application/javascript
server: openresty
age: 899938
content-md5: Po6UPHkGYXSQqkNeDHn47A==
etag: W/"3e8e943c7906617490aa435e0c79f8ec"
expires: Sat, 16 Sep 2023 11:13:46 GMT
last-modified: Tue, 12 Sep 2023 06:57:22 GMT
x-ccdn-cachettl: 2592000
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE3[2],EU-GER-frankfurt-EDGE5-CACHE1[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE7[964],EU-GER-frankfurt-GLOBAL1-CACHE1[770,TCP_MISS,963]
x-bce-content-crc32: 1536784715
x-bce-debug-id: b6qYJX27GRItfciIPsiMTI49SuFxGosI5XMpHBjjrvL4Vzd1wegrVFmdRK5CnlrW6ppeqg2GlsxK7mh7BoRC2g==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 16b4cfda-6b46-4f04-9c1a-5ca284483b38
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
x-ccdn-expires: 1696241
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?isLogin=false&surl=GQcNgPUrGx549MAcEh25eQ&downloadPullNewFlag=b&videoTrialPullNewFlag=a&isUserSelfLink=false&referrer=&channelSrc=&type=share_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503566645
111.108.51.117 43 B URL www.1024tera.com/api/analytics?isLogin=false&surl=GQcNgPUrGx549MAcEh25eQ&downloadPullNewFlag=b&videoTrialPullNewFlag=a&isUserSelfLink=false&referrer=&channelSrc=&type=share_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503566645
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash f716608758629d95cd7b915452ce7c82
184d8eb13bf702cf10a35f19e5b49150c873e740
ca15ca29989b773aaf34d2a1896d6e4545ae464bbc9a362c4ebd6ece714641b0
GET /api/analytics?isLogin=false&surl=GQcNgPUrGx549MAcEh25eQ&downloadPullNewFlag=b&videoTrialPullNewFlag=a&isUserSelfLink=false&referrer=&channelSrc=&type=share_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503566645 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:46 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721105618676727
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaCsESm7iq29Xvv4cVAPxqR5OxSeJmu2xTUo2MW4Uwyhq4OcY
Server: nginx
logid: 409721105618676727
Flow-level: 3
www.1024tera.com/api/analytics?errno=100003&error_code=100003&error_msg=Invalid%20Bduss&request_id=409721026323015093&hasError=true¶ms=%7B%22client%22%3A%22web%22%2C%22pass_version%22%3A%222.8%22%2C%22lang%22%3A%22en%22%2C%22clientfrom%22%3A%22h5%22%2C%22pcftoken%22%3A%22ae038ebc4fa2f6304a4db080e6d5a868%22%2C%22method%22%3A%22query%22%2C%22membership_version%22%3A%221.0%22%7D&uk=0&type=%2Frest%2F2.0%2Fmembership%2Fproxy%2Fuser_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503566649
111.108.51.117 43 B URL www.1024tera.com/api/analytics?errno=100003&error_code=100003&error_msg=Invalid%20Bduss&request_id=409721026323015093&hasError=true¶ms=%7B%22client%22%3A%22web%22%2C%22pass_version%22%3A%222.8%22%2C%22lang%22%3A%22en%22%2C%22clientfrom%22%3A%22h5%22%2C%22pcftoken%22%3A%22ae038ebc4fa2f6304a4db080e6d5a868%22%2C%22method%22%3A%22query%22%2C%22membership_version%22%3A%221.0%22%7D&uk=0&type=%2Frest%2F2.0%2Fmembership%2Fproxy%2Fuser_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503566649
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash f5e733e2a668bec9186f5fba916a0ae2
d26c40a72f37134ef8f24b4390acc5189faf7d90
54d50be63020e8c443fd60c5bdf57ab9aed719fb604f358cda5f39b4b1d2d51d
GET /api/analytics?errno=100003&error_code=100003&error_msg=Invalid%20Bduss&request_id=409721026323015093&hasError=true¶ms=%7B%22client%22%3A%22web%22%2C%22pass_version%22%3A%222.8%22%2C%22lang%22%3A%22en%22%2C%22clientfrom%22%3A%22h5%22%2C%22pcftoken%22%3A%22ae038ebc4fa2f6304a4db080e6d5a868%22%2C%22method%22%3A%22query%22%2C%22membership_version%22%3A%221.0%22%7D&uk=0&type=%2Frest%2F2.0%2Fmembership%2Fproxy%2Fuser_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503566649 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:46 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721107154230362
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaisHT2Liq29Xvv4cVAP2ox5MwCqBmO61N/7GiZ4=
Server: nginx
logid: 409721107154230362
Flow-level: 3
www.1024tera.com/share/list?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710009&page=1&num=20&by=name&order=asc&site_referer=&scene=purchased_list&shorturl=GQcNgPUrGx549MAcEh25eQ&root=1
111.108.51.117 606 B URL www.1024tera.com/share/list?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710009&page=1&num=20&by=name&order=asc&site_referer=&scene=purchased_list&shorturl=GQcNgPUrGx549MAcEh25eQ&root=1
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with very long lines (1939), with no line terminators
Hash dca35c9f78255c555279b1fa8fe57716
85dcdd3f5c52a70250b70579dc0d865aaf743127
badea55ac370643850b52b8c421c62c40fbffe6b002da40d370cdbc2a3141be9
GET /share/list?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710009&page=1&num=20&by=name&order=asc&site_referer=&scene=purchased_list&shorturl=GQcNgPUrGx549MAcEh25eQ&root=1 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:46 GMT
Content-Type: application/json; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721105902742071
Content-Encoding: gzip
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaisHTGriq29Xvv4cVAP2ox5OwCqBmO+5
Server: nginx
logid: 409721105902742071
Flow-level: 3
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/main.f20cb58c.js
90.84.161.19 219 kB URL s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/main.f20cb58c.js
IP 90.84.161.19:0
File type Unicode text, UTF-8 text, with very long lines (65441), with no line terminators
Size 219 kB (218599 bytes)
Hash 285f30867af147a76ade5a883b630314
7987fd5d2c83e735b15a8ebd1a9a0656af281cb5
7b364de661f102d577b4ff3271f110dc8c50324cda6c78066f1b9fe560eed8f3
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/main.f20cb58c.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 21:12:44 GMT
content-type: application/javascript
server: openresty
age: 219627
content-md5: W0NXu+67t6r4PzrfxQvgpQ==
etag: W/"5b4357bbeebbb7aaf83f3adfc50be0a5"
expires: Sun, 24 Sep 2023 07:55:19 GMT
last-modified: Wed, 20 Sep 2023 12:31:55 GMT
x-ccdn-cachettl: 2592000
x-ccdn-expires: 2372552
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE3[23],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE1[18],EU-GER-frankfurt-GLOBAL1-CACHE4[0,TCP_HIT,17]
x-bce-content-crc32: 3560529042
x-bce-debug-id: sYH954HA5HIx7Z8voFulVavpGD2w54mk56Xc9918GGsc+8iTTRCW5UD/UtihOVSCz8M7eyI8ZJGx29JBNmiQLA==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 6d97a60e-08b2-4578-8e43-cd3f54a37608
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?errno=-6&newno=&request_id=409721094093501600&show_msg=&hasError=true¶ms=undefined&uk=0&type=%2Fapi%2Fad%2Fgetconfig_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503566895
111.108.51.117 43 B URL www.1024tera.com/api/analytics?errno=-6&newno=&request_id=409721094093501600&show_msg=&hasError=true¶ms=undefined&uk=0&type=%2Fapi%2Fad%2Fgetconfig_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503566895
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f76dd7e6208c9ff8a997e41d4ccd168
c94651c1739e368d17909b6658b3bd47f003c3ac
4706cbf3e3b7c614ce6f72bfedae74edac3907798845af2c8b720c77d279b134
GET /api/analytics?errno=-6&newno=&request_id=409721094093501600&show_msg=&hasError=true¶ms=undefined&uk=0&type=%2Fapi%2Fad%2Fgetconfig_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503566895 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:46 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721173957628536
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaSsGSnb+qnFLufkASwb8tAFGySKDmOy3S1kyMXHjylyyVDY=
Server: nginx
logid: 409721173957628536
Flow-level: 3
www.1024tera.com/api/analytics?type=terabox_sharing_link_js_error&sessionId=655202&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&title=unhandledrejection%3A%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&msg=%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&stack=%5B%7B%22columnNumber%22%3A2705%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22h%22%2C%22source%22%3A%22h%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A2705%22%7D%2C%7B%22columnNumber%22%3A3160%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%22%2C%22source%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A3160%22%7D%2C%7B%22columnNumber%22%3A30208%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22Kt%22%2C%22source%22%3A%22Kt%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A30208%22%7D%5D
111.108.51.117200 OK 43 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=terabox_sharing_link_js_error&sessionId=655202&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&title=unhandledrejection%3A%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&msg=%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&stack=%5B%7B%22columnNumber%22%3A2705%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22h%22%2C%22source%22%3A%22h%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A2705%22%7D%2C%7B%22columnNumber%22%3A3160%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%22%2C%22source%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A3160%22%7D%2C%7B%22columnNumber%22%3A30208%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22Kt%22%2C%22source%22%3A%22Kt%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A30208%22%7D%5D
IP 111.108.51.117:443
ASN #2516 KDDI CORPORATION
Requested by https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 643dba51994abf9bc2982aa152074edb
a1ed764d7ab49a7f7e5a28e6f5838415f4f68177
f75b55703019fe26cc0b6facb57ef448250bbc55cf6e6f6a96d34613cce374fa
GET /api/analytics?type=terabox_sharing_link_js_error&sessionId=655202&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&title=unhandledrejection%3A%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&msg=%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&stack=%5B%7B%22columnNumber%22%3A2705%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22h%22%2C%22source%22%3A%22h%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A2705%22%7D%2C%7B%22columnNumber%22%3A3160%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%22%2C%22source%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A3160%22%7D%2C%7B%22columnNumber%22%3A30208%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22Kt%22%2C%22source%22%3A%22Kt%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A30208%22%7D%5D HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:46 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721182567135085
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaisHTW7iq29Xvv4cVAPwqh5IxiqBmOyxDB44IWYT228eNZgY
Server: nginx
logid: 409721182567135085
Flow-level: 3
www.1024tera.com/api/analytics?errno=-6&newno=&request_id=409720873831332500&show_msg=&hasError=true¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fwebmaster%2Fcheck_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503566110
111.108.51.117 43 B URL www.1024tera.com/api/analytics?errno=-6&newno=&request_id=409720873831332500&show_msg=&hasError=true¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fwebmaster%2Fcheck_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503566110
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash 5f9d615dcc0a921c8a0f02fe8ae81c67
2ec736b3694cdb3934cc23ce36489ce897675dfe
12f5cbcd4e2d9b53807ad685f415c2ef8019de9b87f1398770be2e3cfa3c3e69
GET /api/analytics?errno=-6&newno=&request_id=409720873831332500&show_msg=&hasError=true¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fwebmaster%2Fcheck_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503566110 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:46 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721186196766907
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0RYysCSHb+qnFLufkASwH9tAFLwCqBmO+1
Server: nginx
logid: 409721186196766907
Flow-level: 3
ocsp.pki.goog/gts1c3
142.250.74.99 471 B IP 142.250.74.99:0
Hash 99734170fcdad2d52884412f61321bf8
25163901dbdc047070a12d8afadcaa7009d8b595
f2a2590ac5fa2bcc9db8c46b3b4ad45f0a03b03193f601a2636e900fe851cf59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 21:12:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.99 471 B IP 142.250.74.99:0
Hash a919451a4b737e61a8d4798732bd25ca
81887ca8ba5721aae92b25155ee72fb2950bc328
85f10626a1276cce94e6e3fd439fb0d982645177ba3ed0cb9d554ce6432bd16f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 21:12:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.99 471 B IP 142.250.74.99:0
Hash 99734170fcdad2d52884412f61321bf8
25163901dbdc047070a12d8afadcaa7009d8b595
f2a2590ac5fa2bcc9db8c46b3b4ad45f0a03b03193f601a2636e900fe851cf59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 21:12:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firebase.googleapis.com/v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig
142.250.74.170 0 B URL firebase.googleapis.com/v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig
IP 142.250.74.170:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig HTTP/1.1
Host: firebase.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-goog-api-key
Referer: https://www.1024tera.com/
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.1024tera.com
vary: origin, referer, x-origin
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: x-goog-api-key
access-control-max-age: 3600
date: Sat, 23 Sep 2023 21:12:47 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.1024tera.com/share/querysurltransfer?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710010&bdstoken=
111.108.51.117 85 B URL www.1024tera.com/share/querysurltransfer?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710010&bdstoken=
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text
Hash b2a836e38bfc0d8efbe01c0e1c71ab5b
a236c3802d9650c353003c3b2bcf7a186a7780a5
b80d3710a4b7b0b9f9c981c890a6e481e94e5e126d929a4266a1d4a393f55e4e
POST /share/querysurltransfer?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710010&bdstoken= HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 32
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:47 GMT
Content-Type: application/json; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 409721235128787248
Http-X-Isis-Logid: 409721235128787248
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaisHTGriq29Xvv4cVAP2ox5OxymJmu2wTA==
Server: nginx
logid: 409721235128787248
Flow-level: 3
Content-Encoding: gzip
firebase.googleapis.com/v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig
142.250.74.170 223 B URL firebase.googleapis.com/v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig
IP 142.250.74.170:0
File type JSON data\012- , ASCII text
Hash 54c11162d6ef3c32b787d4d8a6a292f8
f1e88b95b9addbd7a1e170daf6da450ab93bdecb
263070732f0c9d00ac3e625982ff38a8d08bc25a2ac03c3e3d524557b09f616f
GET /v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig HTTP/1.1
Host: firebase.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.1024tera.com/
x-goog-api-key: AIzaSyCAt5j0_j4UDEm5Nb4bNvQknuGZoMK_XK8
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 23 Sep 2023 21:12:47 GMT
server: ESF
cache-control: private
content-length: 223
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.1024tera.com
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/gsi/client
142.250.74.109200 OK 79 kB URL GET HTTP/2 accounts.google.com/gsi/client
IP 142.250.74.109:443
Requested by https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint2F:C1:71:0A:05:D9:0F:38:EF:D1:16:F7:50:AF:41:48:6B:F9:BA:B5
ValidityMon, 04 Sep 2023 08:23:30 GMT - Mon, 27 Nov 2023 08:23:29 GMT
File type gzip compressed data, max compression\012- data
Hash 226dde8164b68d60be62e59071f9f4a0
9b2c95c7ebd71bc9fd0075dab7e3e69ebccf5511
99d15f28218db5e406206db974ab31a3c4838d16e217b9d6e0477cd4b6db4818
GET /gsi/client HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
expires: Sat, 23 Sep 2023 21:12:47 GMT
date: Sat, 23 Sep 2023 21:12:47 GMT
cache-control: private, max-age=1800
cross-origin-resource-policy: cross-origin
content-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-hK04a6zdIE1LNXPQc0ZI2Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.99 472 B IP 142.250.74.99:0
Hash f5e8c4f8f278f9efbee06f1da6ca6afa
07cea281d3989868b6a516d85d886f223231c690
207b4b722f6e6827f867905eb8f9d07bb251106fd318bba1b063d0127920444a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 21:12:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
sofire.bdstatic.com/js/fsec-hd.js
60.190.116.48 103 kB URL sofire.bdstatic.com/js/fsec-hd.js
IP 60.190.116.48:0
File type Unicode text, UTF-8 text, with very long lines (49888), with NEL line terminators
Size 103 kB (103415 bytes)
Hash 834113d1867d8ec45fc41e3c692fdead
d292eeadefb195296a6daf8cb607a74753ed8864
a97cd69480a0a2aec421ab52af71fe820b469aa382412c99948766333b2c534d
GET /js/fsec-hd.js HTTP/1.1
Host: sofire.bdstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: JSP3/2.0.14
date: Sat, 23 Sep 2023 21:12:44 GMT
content-type: text/javascript
expires: Mon, 25 Sep 2023 04:37:02 GMT
last-modified: Fri, 30 Jun 2023 07:31:01 GMT
etag: "834113d1867d8ec45fc41e3c692fdead"
content-encoding: br
age: 139836
accept-ranges: bytes
content-md5: g0ET0YZ9jsRfxB48aS/erQ==
x-bce-content-crc32: 1744549445
x-bce-debug-id: B0YP6snf7gfy3TBmSqWPYDjno6/fL/WBzhgJjJOVy0sGzu98cHsnMH9Nsd8MwMeQHchkAUB4P5cT+FDNI0Wiog==
x-bce-request-id: 0a8cafd2-51d6-4787-ab1d-4a9da11fdac2
x-bce-storage-class: STANDARD
ohc-global-saved-time: Fri, 22 Sep 2023 04:37:02 GMT
ohc-cache-hit: wz2ct51 [2], nb2ctcache78 [2]
ohc-response-time: 1 0 0 0 0 0
X-Firefox-Spdy: h2
www.1024tera.com/fe-opera-static/box-static/disk-system/images/favicon.ico
111.108.51.117 1.7 kB URL www.1024tera.com/fe-opera-static/box-static/disk-system/images/favicon.ico
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash 85c3fafc35604bddb3171dee4c0aa6dc
4cb347df6fbedcf8b7e77c9b0673ff3667ed0266
fd68b8c59d5d564cb46519aaaf236ef2ffab9c79c4b1e3ea67a1a57a0120731e
GET /fe-opera-static/box-static/disk-system/images/favicon.ico HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:47 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721292897556397
Last-Modified: Tue, 11 Apr 2023 09:35:48 GMT
ETag: "643529f4-693"
X-Powered-By: TeraBox
Cache-Control: max-age=2592000
Expires: Mon, 23 Oct 2023 21:12:47 GMT
Accept-Ranges: bytes
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0RYysCSHb+qnFLufkASwb1tAFPwCqBmO+1
Server: nginx
logid: 409721292897556397
Flow-level: 3
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/fonts/yunfont.44acf892.ttf
90.84.161.19200 OK 23 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/fonts/yunfont.44acf892.ttf
IP 90.84.161.19:443
Requested by https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, yunfont \012- data
Hash 44acf8923466a31680d910d7cc4f0903
351d9f0d3e293ae4c4e4c28e67b09f5ab2a39983
cdec6bbf708df8fbb45cb6c8477254406972c90e28bf1bc7d265b9bd0a403cd9
GET /fe-opera-static/node-static-v4/fe-webv4-main/fonts/yunfont.44acf892.ttf HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 21:12:47 GMT
content-type: application/x-font-ttf
content-length: 23268
server: openresty
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Length, x-bce-next-append-offset, x-bce-object-type, x-bce-request-id
access-control-max-age: 1800
age: 18553399
content-md5: RKz4kjRmoxaA2RDXzE8JAw==
etag: "44acf8923466a31680d910d7cc4f0903"
expires: Sat, 24 Sep 2022 06:46:06 GMT
last-modified: Wed, 21 Sep 2022 05:03:25 GMT
x-ccdn-cachettl: 2592000
x-ccdn-expires: 2183400
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE3[3],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE5[3],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,2],EA-SGP-GLOBAL1-CACHE11[3],EA-SGP-GLOBAL1-CACHE24[0,TCP_HIT,2]
x-bce-content-crc32: 848321786
x-bce-debug-id: NAe6EO3wT96ak0qPNr/yE8+RuLbHz64z8I5FDCDIACz1r140/OGU/0+MbMDWT1zTJqrTz/6OyWkOTO54TO+RgQ==
x-bce-request-id: bdfcbbdf-effe-4bb4-b741-0cdb160927f7
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.99 471 B IP 142.250.74.99:0
Hash 41d47531a53830929519cbac6bcf752a
c39e4c34f34823397d064f1dd018625b2321f892
77798848ecc76001633e9d6571748a6c58fc655abb7509c4deb52932479e93ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 21:12:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.1024tera.com/api/analytics?type=web_share_filelist_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567462
111.108.51.117 43 B URL www.1024tera.com/api/analytics?type=web_share_filelist_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567462
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash 818c331b365c4d84568a42cbf9c98d6c
91c666c6f864747fa20575f2ca5f970edff2ecb8
7ab502a97bd6709eaf61a10f68c029ce6dc6caf21c24f70ff9eb80c0c65a57a8
GET /api/analytics?type=web_share_filelist_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567462 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:47 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721343765965492
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaisHTGriq29Xvv4cVAPxrh5OxymJmu2xSEJJSQNu6whObY0Y
Server: nginx
logid: 409721343765965492
Flow-level: 3
www.1024tera.com/api/analytics?value=7858&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567463
111.108.51.117 43 B URL www.1024tera.com/api/analytics?value=7858&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567463
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash 092c14a1424d33e6ab54387ecdac1f06
73711b6e98a0d8a86a87bcfba5ca5b0ac62d95a8
252cee0a9667f1a5a6ffdcb3a7ee9dab99821e1c43a4da9d6bc7e2d8f5067632
GET /api/analytics?value=7858&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567463 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:47 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721345504811236
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaisHTW7iq29Xvv4cVAPxqB5OxCqBmO60VUnQfg==
Server: nginx
logid: 409721345504811236
Flow-level: 3
www.1024tera.com/api/analytics?errno=-6&newno=&request_id=409721235128787260&show_msg=&hasError=true&data=%7B%22sid%22%3A2148240544%2C%22suk%22%3A4401850068249%7D¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fquerysurltransfer_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567460
111.108.51.117 43 B URL www.1024tera.com/api/analytics?errno=-6&newno=&request_id=409721235128787260&show_msg=&hasError=true&data=%7B%22sid%22%3A2148240544%2C%22suk%22%3A4401850068249%7D¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fquerysurltransfer_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567460
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash 8caf65d9af6ab99eac71b1bdeb8d9006
41249fc912fa811a2c0741152c74b505ba55539b
9736c79a4b0fa1bceae6191be4eadedf5e3ac83a12d9fda73e69779da78117a7
GET /api/analytics?errno=-6&newno=&request_id=409721235128787260&show_msg=&hasError=true&data=%7B%22sid%22%3A2148240544%2C%22suk%22%3A4401850068249%7D¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fquerysurltransfer_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567460 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:47 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721343677134344
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaSsGSnb+qnFLufkASwbxtAFHySKDnOmvHAVvOndT4X3DWzY=
Server: nginx
logid: 409721343677134344
Flow-level: 3
www.googletagmanager.com/gtag/js?l=dataLayer&id=G-06ZNKL8C2E
142.250.74.104 85 kB URL www.googletagmanager.com/gtag/js?l=dataLayer&id=G-06ZNKL8C2E
IP 142.250.74.104:0
File type Unicode text, UTF-8 text, with very long lines (3034)
Hash 22d74d183625f0738bac9ba397fa953a
1dc9d9d46a8832d889cf4b3571514590ac7999e4
7b75d809263314fe1b3b0cb5c648e54ffbac0872b025d59ac22994fb05cd6dfc
GET /gtag/js?l=dataLayer&id=G-06ZNKL8C2E HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 23 Sep 2023 21:12:47 GMT
expires: Sat, 23 Sep 2023 21:12:47 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 85137
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567562
111.108.51.117 43 B URL www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567562
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash 9d4bc323dbfd42c59bd117524758c526
b8c00e8aa5f4706b7c896dfd4d4fe6a63bd526fb
f1391776217a9c5a05b1c58c95665fd0529babfdb169b3a526770d1c4fcbee49
GET /api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567562 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:47 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721353153340516
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QEsSdTcNUmr/tG1MvuUZThzxqApNwyOCbjcijNy4Q29DeZtf3A==
Server: nginx
logid: 409721353153340516
Flow-level: 3
www.1024tera.com/api/analytics?type=play_video_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567563
111.108.51.117 43 B URL www.1024tera.com/api/analytics?type=play_video_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567563
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash f0bec9e4ac312bd1f0dd9ff58acf612b
a68cf868d771e0d33c121701fd8b16f61a76e5d1
63d6e5c79e500a2a1b7153497569efacc002fbb4b29fbe4aade000314c09f30a
GET /api/analytics?type=play_video_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567563 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:47 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721353155187227
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QEoadTYGUmr/tG1MvuUZSBz3qwpNwiSL/InRICJHQE+7SR/O3A==
Server: nginx
logid: 409721353155187227
Flow-level: 3
www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567561
111.108.51.117 43 B URL www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567561
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash a342da5c4ed7e23201cb2f9555c976ea
9ffedabd18b45fee47ec033dd36f9bd811304d4a
4539e8e8237ecf2b98b18729a982845cc231f43debdcbcfec74c31dc5338887b
GET /api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567561 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:47 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721351685138743
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaCsESm7iq29Xvv4cVAPxqR5HwCqBmOiyPDqd
Server: nginx
logid: 409721351685138743
Flow-level: 3
www.1024tera.com/api/analytics?type=web_pause_close_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567562
111.108.51.117 43 B URL www.1024tera.com/api/analytics?type=web_pause_close_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567562
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash cd1ef5cfb2a88bafdeba5f86ab948a5a
74121b72e21e00ca1e19c4e3654b6366096453ee
9427230f4913a6fe2e2385a61abea4f73a1e0395320602a90e860240a9a9e158
GET /api/analytics?type=web_pause_close_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567562 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:47 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721355217803107
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaysNTnb+qnFLufkASwb2tAJMwiqBmOizPw==
Server: nginx
logid: 409721355217803107
Flow-level: 3
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/kakao.min.js
90.84.161.19 41 kB URL s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/kakao.min.js
IP 90.84.161.19:0
File type gzip compressed data, from Unix\012- data
Hash 454cbef4ae7e30612a02d8debe443753
2c5e61d8eb56bc5cb49fbe716b67d82382bebfe0
9966da25de7da6257930e9498bb95b57725e56196b1b58057624035c6c3f2fc3
GET /fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/kakao.min.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 21:12:44 GMT
content-type: application/javascript
server: openresty
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT
access-control-expose-headers: ETag, Content-Length, x-bce-next-append-offset, x-bce-object-type, x-bce-request-id
access-control-max-age: 1800
age: 18553421
content-md5: Ng3YsEXIR8ylP6d+vhUKPw==
etag: W/"360dd8b045c847cca53fa77ebe150a3f"
expires: Sat, 24 Sep 2022 06:46:06 GMT
last-modified: Wed, 21 Sep 2022 05:03:33 GMT
x-ccdn-cachettl: 2592000
x-ccdn-expires: 2182825
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE3[20],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE4[3],EU-GER-frankfurt-GLOBAL1-CACHE9[0,TCP_HIT,2],EA-SGP-GLOBAL1-CACHE5[4],EA-SGP-GLOBAL1-CACHE7[0,TCP_HIT,3]
x-bce-content-crc32: 3787281588
x-bce-debug-id: NdXOHvJhWdykwQRMkfwzkNsOZ5AZbm+dI56Adia+fvxzTQbCnAlm9HuK5oYXV0mvHXmPazsRbY1yj9LO6Ud5AQ==
x-bce-request-id: 95d5b42d-7d75-47b4-acd7-57e276abb336
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.99 471 B IP 142.250.74.99:0
Hash 41d47531a53830929519cbac6bcf752a
c39e4c34f34823397d064f1dd018625b2321f892
77798848ecc76001633e9d6571748a6c58fc655abb7509c4deb52932479e93ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 21:12:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710012&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en
111.108.51.117 969 B URL www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710012&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with very long lines (3719), with no line terminators
Hash 7ba63e9e282b6f0a1687adcb4ca3831e
4fa8179d18ac9b24f75a0fdffbbb7e1a1a7a68ca
6512063b9ae7f58863499d76015faca7b5ecbb50506424d3cff533c4ca48a0b2
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710012&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:47 GMT
Content-Type: application/json; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 409721367413100241
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QEsTdTcDUmr/tG1MvuUYQhz0rQpNwyGA
Server: nginx
logid: 409721367413100241
Flow-level: 3
Content-Encoding: gzip
static.line-scdn.net/liff/edge/2/sdk.js
65.9.55.39 30 kB URL static.line-scdn.net/liff/edge/2/sdk.js
IP 65.9.55.39:0
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 8f08e02a158e189a52055796f1bd3c46
c581aa0f188512f04780dcd8772d4d5c9ad72ad8
81f738934e2205c380eb14682036a4e3ef40651d71f997ff2524c83398575bdf
GET /liff/edge/2/sdk.js HTTP/1.1
Host: static.line-scdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
server: VOS
last-modified: Thu, 24 Aug 2023 02:32:42 GMT
x-amz-version-id: gOOaMVyzXGPecy5o.z9KEo-7JvxFgBS
x-amz-expiration: expiry-date="Tue, 24 Oct 2023 00:00:00 GMT", rule-id="bucket_lifecycle"
x-rgw-object-type: Normal
strict-transport-security: max-age=15768000
content-encoding: gzip
date: Sat, 23 Sep 2023 17:28:06 GMT
cache-control: max-age=86400
etag: W/"5a49d499cc69070fef998f6508a8b1fb"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 d661c8f821b4dd0011bb1bb50baf07c2.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN54-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: CZeRVa-4M_iLD69R7vQlbJZw3g7_W3Luza8-JQv-rFI8xTbWEe283A==
age: 13498
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?isHitCTR=false&type=web_share_CTR_config&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567622
111.108.51.117 43 B URL www.1024tera.com/api/analytics?isHitCTR=false&type=web_share_CTR_config&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567622
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash 4db1973697be668a4ea514ceb1c0d495
5a7d2da4eeb01f032d650c8929c471db0f18d011
64b49a14f4fb9a5239f0cfb90cadc484db0573b103674fa177381e60d7bda504
GET /api/analytics?isHitCTR=false&type=web_share_CTR_config&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567622 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:47 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721431260143753
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaisHTW7iq29Xvv4cVAPxqB5NwiqBmO+4xE26Yix9A9CBMJgY
Server: nginx
logid: 409721431260143753
Flow-level: 3
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710015&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en
111.108.51.117 967 B URL www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710015&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with very long lines (3719), with no line terminators
Hash e6e99710c0dfe0a39be48158da320643
679c5c348a5c7131c94cbbebe5a2122df0f4560f
e898038b25c1587a1654062e121be45651a6b8c0b474374f145a010e7dfe10c8
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710015&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:47 GMT
Content-Type: application/json; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 409721427684508356
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaisHTGriq29Xvv4cVAPxqx5NwiOJmu2yRw53Yzhby45HnY0Y
Server: nginx
logid: 409721427684508356
Flow-level: 3
Content-Encoding: gzip
www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567626
111.108.51.117 43 B URL www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567626
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash cadf3048651630987391ab35c4ecd33e
4069e7e5a20ed2a3523d0360dc6776f76fb00dbd
436146c44fbb5280a236fa6227bd7183969031c7ee992c66c7bc2a5505087c84
GET /api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567626 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:47 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721429817965290
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaCsESm7iq29Xvv4cVAP2oh5OxCqBmO+w
Server: nginx
logid: 409721429817965290
Flow-level: 3
www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567627
111.108.51.117 43 B URL www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567627
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash 93bb261df7ee09d0f8cdc1707bfdeac8
1cac9f7c26d9a7b2674ed96d9f20e350ffc60912
90e570608b36bf04af7567f76f915f2b29c1a07684db885562334f70c059b387
GET /api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567627 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:47 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721450870935621
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QEsTdTcDUmr/tG1MvuUZShz3qQpNwiCC
Server: nginx
logid: 409721450870935621
Flow-level: 3
www.1024tera.com/api/analytics?type=web_skip_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567628
111.108.51.117 43 B URL www.1024tera.com/api/analytics?type=web_skip_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567628
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash b3475f7b2b500778c704c2eddc0ec840
05a1283cccace5b6d5c40cfb6a72e33097ef2eec
ccd42faf4566e28a404771eeea6d7115edfcc50dd11dd0676e9fc538c0d6a61b
GET /api/analytics?type=web_skip_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503567628 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:47 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721452171162099
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0RYysCSHb+qnFLufkASwH8tANIySKDm+8=
Server: nginx
logid: 409721452171162099
Flow-level: 3
www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=pause&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503568079
111.108.51.117 43 B URL www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=pause&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503568079
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash 363db2aa50f709bf608dbd495d5fa32a
41d3872aae51c1cc30fb76efc3a7db48a5a0c714
051730b4c0ef28e77db263b801480810863e915e78f843291051f5c9f98e6c68
GET /api/analytics?domId=adsterra&showType=1x2&country=NO&where=pause&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503568079 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207; _ga_06ZNKL8C2E=GS1.1.1695503567.1.0.1695503568.59.0.0; _ga=GA1.1.60023536.1695503568
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:47 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721491416368257
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QEsSdTcNUmr/tG1MvuUYQxz0rQpNwyCL
Server: nginx
logid: 409721491416368257
Flow-level: 3
www.1024tera.com/api/analytics?from=shareLink&type=videoplayer_open_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503568099
111.108.51.117 43 B URL www.1024tera.com/api/analytics?from=shareLink&type=videoplayer_open_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503568099
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash 662c4479b4dd7922d58e102d80964d94
41b4d66891ae5919a12e1f58e672f0544dc79297
64471458decebaa2e162b969553dea775331116442e077eb648226767c82c399
GET /api/analytics?from=shareLink&type=videoplayer_open_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503568099 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207; _ga_06ZNKL8C2E=GS1.1.1695503567.1.0.1695503568.59.0.0; _ga=GA1.1.60023536.1695503568
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:48 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721497172017785
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QEoadTYGUmr/tG1MvuUZSRz3qwpNwyGDzbPiEA5rbzcCKxfO3A==
Server: nginx
logid: 409721497172017785
Flow-level: 3
www.1024tera.com/api/analytics?type=videoplayer_open&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503568098
111.108.51.117200 OK 43 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=videoplayer_open&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503568098
IP 111.108.51.117:443
ASN #2516 KDDI CORPORATION
Requested by https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash e7e1f9a931f56122317f16c55f897820
bebd02ca93e266e9efeb1210cf44c38f3557a83f
6b7374f67cdb6c9d8ccdeb36becc88464a25d2c374bb2730184239e60d19b39f
GET /api/analytics?type=videoplayer_open&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503568098 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207; _ga_06ZNKL8C2E=GS1.1.1695503567.1.0.1695503568.59.0.0; _ga=GA1.1.60023536.1695503568
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:48 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721499252300519
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaysNTnb+qnFLufkASwb2tAJMwyqBmO2w
Server: nginx
logid: 409721499252300519
Flow-level: 3
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710013&language_type=en&cfg_category_keys=%5B%5D&version=0
111.108.51.117 14 kB URL www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710013&language_type=en&cfg_category_keys=%5B%5D&version=0
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with very long lines (64450), with no line terminators
Hash 03dfadd5255399248c376ed112ca1880
3c282d78fe0a642d773d739fca5128902baff271
a7e3dacd2552dbaf853ab02d60a99d8b07e55a4f01702875ce2611e545f1ca7c
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710013&language_type=en&cfg_category_keys=%5B%5D&version=0 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:47 GMT
Content-Type: application/json; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 409721428049587316
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaSsGSnb+qnFLufkASwH9tAFLwCqBmO+y
Server: nginx
logid: 409721428049587316
Flow-level: 3
Content-Encoding: gzip
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-63dc2d72.ca031bd5.js
90.84.161.19 182 kB URL s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-63dc2d72.ca031bd5.js
IP 90.84.161.19:0
File type gzip compressed data, from Unix\012- data
Size 182 kB (181612 bytes)
Hash 46303aea0165199d859489ed28fbd2c7
2b00a1430007138ebb484f7e7f735659a5e19c2f
12fd2d1ce22bf25e85d810a6657c45e5b2152806e0edd97c1453b880fc18d4a0
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-63dc2d72.ca031bd5.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 21:12:47 GMT
content-type: application/javascript
server: openresty
age: 3492666
content-md5: evFaDZPX1yV7GMXMyVbDQA==
etag: W/"7af15a0d93d7d7257b18c5ccc956c340"
expires: Thu, 17 Aug 2023 11:01:40 GMT
last-modified: Mon, 14 Aug 2023 05:25:48 GMT
x-ccdn-cachettl: 2592000
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE3[1],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE12[1918],EU-GER-frankfurt-GLOBAL1-CACHE6[990,TCP_MISS,1917]
x-bce-content-crc32: 3906262872
x-bce-debug-id: fhAlKKVDFGbWEgEesKtc4pMXBYrc8Q6hMJSevhFIj7vg5hvFFn9QZn8UnGrsf88vpCWYXc5cMVPu+7qHqfpmJw==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: ee9989ce-7ac1-4d9f-9999-356160e77677
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
x-ccdn-expires: 1691455
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?value=8741&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503568348
111.108.51.117 43 B URL www.1024tera.com/api/analytics?value=8741&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503568348
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash 9c302cb7ac321401354c9eff2683d050
3414f5f6a5e84f43d206251e2561daf868e18f55
ef3cc6996fce9b191364a84bbf91d262b06e8584647418a1e3ade4e719c1795f
GET /api/analytics?value=8741&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503568348 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207; _ga_06ZNKL8C2E=GS1.1.1695503567.1.0.1695503568.59.0.0; _ga=GA1.1.60023536.1695503568
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:48 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721563665112931
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QEsTdTcDUmr/tG1MvuUZSRz3qwpNwyCG
Server: nginx
logid: 409721563665112931
Flow-level: 3
www.1024tera.com/api/analytics?type=web_share_video_carousel_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503568346
111.108.51.117 43 B URL www.1024tera.com/api/analytics?type=web_share_video_carousel_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503568346
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash 7de53207bce0cdd69039feed947ba415
51c915e90f29bfea8ecee006ba09055a634f6e9a
c6b99f89ed82c068ded0448430fcda8699024f4360011300b1aedbc885441d47
GET /api/analytics?type=web_share_video_carousel_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503568346 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207; _ga_06ZNKL8C2E=GS1.1.1695503567.1.0.1695503568.59.0.0; _ga=GA1.1.60023536.1695503568
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:48 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721562987882316
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0RYysCSHb+qnFLufkASwb0tANGySKDmOuySUguIyJTSj3VVzY=
Server: nginx
logid: 409721562987882316
Flow-level: 3
region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je39k2&_p=320497904&_gaz=1&cid=60023536.1695503568&ul=en-us&sr=1280x1024&_s=1&sid=1695503567&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&dt=Full%20video%20of%20kulhad%20Pizza.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.origin=firebase
216.239.34.36 0 B URL region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je39k2&_p=320497904&_gaz=1&cid=60023536.1695503568&ul=en-us&sr=1280x1024&_s=1&sid=1695503567&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&dt=Full%20video%20of%20kulhad%20Pizza.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.origin=firebase
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-06ZNKL8C2E>m=45je39k2&_p=320497904&_gaz=1&cid=60023536.1695503568&ul=en-us&sr=1280x1024&_s=1&sid=1695503567&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&dt=Full%20video%20of%20kulhad%20Pizza.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.origin=firebase HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.1024tera.com
date: Sat, 23 Sep 2023 21:12:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-fdedac32.68a159c0.js
90.84.161.19 18 kB URL s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-fdedac32.68a159c0.js
IP 90.84.161.19:0
File type ASCII text, with very long lines (65473), with no line terminators
Hash 7ef31ee9994bb8ea5f0546db9d84f5a2
96677ba8663e1a15b90a28b317a621c44288d4b4
a127c7a05c4834b7ccccedbb750031e366b1494bbb719a2f082c92eac19a9d50
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-fdedac32.68a159c0.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 21:12:47 GMT
content-type: application/javascript
server: openresty
age: 3492666
content-md5: fvMe6ZlLuOpfBUbbnYT1og==
etag: W/"7ef31ee9994bb8ea5f0546db9d84f5a2"
expires: Thu, 17 Aug 2023 11:01:40 GMT
last-modified: Mon, 14 Aug 2023 05:25:49 GMT
x-ccdn-cachettl: 2592000
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE3[4],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE6[1934],EU-GER-frankfurt-GLOBAL1-CACHE14[953,TCP_MISS,1933]
x-bce-content-crc32: 3183863461
x-bce-debug-id: AQBq72xN1KX+ruW3aqp1xkmekXXaYh0i39b8sd2sQtmjC5dG590ZtpaEFSUwE16V73TOukcLyO6ly/sQLIZ4bg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: b4d412dc-3e8c-456b-bf34-9d06ca0b4fd9
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
x-ccdn-expires: 1691457
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-b20230be.0a893307.js
90.84.161.19 41 kB URL s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-b20230be.0a893307.js
IP 90.84.161.19:0
File type gzip compressed data, from Unix\012- data
Hash a7113f7cd17bcb44d843615f78f8db1a
20d9e92dec37b2707c1ef7bfe683afd80de530c9
06c1e1d7d82c9dee9bbc22b901ede7c4ce0e7f1f69e2bc6e708dc592f2b6cf5e
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-b20230be.0a893307.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 21:12:47 GMT
content-type: application/javascript
server: openresty
age: 1690254
content-md5: lkWxCU7mztbQBa5ORv1xRQ==
etag: W/"9645b1094ee6ced6d005ae4e46fd7145"
expires: Thu, 07 Sep 2023 07:34:05 GMT
last-modified: Mon, 04 Sep 2023 04:39:49 GMT
x-ccdn-cachettl: 2592000
x-ccdn-expires: 901849
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE3[11],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE5[14],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,13]
x-bce-content-crc32: 860175862
x-bce-debug-id: YxKaPLFml5ovwtS++EvPw1ID/HiMt+Zhii4NCGGd5BA+u+1ccgAwlYXqpryUmBj7YqU863R0gVkKEFuqafmKAg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: aeea44c1-7e31-4002-a3ac-fcdfed6855de
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
pl18427035.highcpmrevenuenetwork.com/627e2f8a423975bc4bd7a76128c2d552/invoke.js
173.233.139.164 9.3 kB URL pl18427035.highcpmrevenuenetwork.com/627e2f8a423975bc4bd7a76128c2d552/invoke.js
IP 173.233.139.164:0
File type Unicode text, UTF-8 text, with very long lines (25121), with no line terminators
Hash 3b79b6dd8b91d531791c63e0d95f9df4
257a22b0065a171f2248c36ebe7010e021be80be
648df3cd3641581572ce0a60baa63d8d55464b99f7777cc2aabdbec5dec2db62
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /627e2f8a423975bc4bd7a76128c2d552/invoke.js HTTP/1.1
Host: pl18427035.highcpmrevenuenetwork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 21:12:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7506c5d31ccfff522eb2635fa1e06e26
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.1024tera.com/share/streaming?uk=4401850068249&shareid=2148240544&type=M3U8_FLV_264_480&fid=723832290885977&sign=4c59736d2c236039c589cebc67c7f215a06cc59f×tamp=1695503567&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&esl=1&isplayer=1&ehps=1&clienttype=0&app_id=250528&web=1&channel=dubox
111.108.51.117200 OK 1.6 kB URL GET HTTP/1.1 www.1024tera.com/share/streaming?uk=4401850068249&shareid=2148240544&type=M3U8_FLV_264_480&fid=723832290885977&sign=4c59736d2c236039c589cebc67c7f215a06cc59f×tamp=1695503567&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&esl=1&isplayer=1&ehps=1&clienttype=0&app_id=250528&web=1&channel=dubox
IP 111.108.51.117:443
ASN #2516 KDDI CORPORATION
Requested by https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (746)
Hash 52cff0231e5a154dad6e456abd745181
f7f1d8392b5245b3969b5ad8b7cde98dd75b0336
ac6b4c5d552d194c6d60739029b03868b28ff0a418219b4db80272f785075f08
GET /share/streaming?uk=4401850068249&shareid=2148240544&type=M3U8_FLV_264_480&fid=723832290885977&sign=4c59736d2c236039c589cebc67c7f215a06cc59f×tamp=1695503567&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&esl=1&isplayer=1&ehps=1&clienttype=0&app_id=250528&web=1&channel=dubox HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207; _ga_06ZNKL8C2E=GS1.1.1695503567.1.0.1695503568.59.0.0; _ga=GA1.1.60023536.1695503568
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:48 GMT
Content-Type: application/x-mpegURL;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721588353662377
Http-X-Isis-Logid: 409721588353662377
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaSsGSnb+qnFLufkASwb2tAFOySKDme8=
Server: nginx
logid: 409721588353662377
Flow-level: 3
pl18043214.highperformancecpmgate.com/5c8996e8e3cb5e10b7fd36115b800ac7/invoke.js
173.233.137.60 9.3 kB URL pl18043214.highperformancecpmgate.com/5c8996e8e3cb5e10b7fd36115b800ac7/invoke.js
IP 173.233.137.60:0
File type Unicode text, UTF-8 text, with very long lines (25125), with no line terminators
Hash 896740b8163dbca6ca913083e4ac7895
7dcf16bb5e95cf217b9416e67cd5f2afcdbd0bb6
15d0dddff9f7e09636eab042bb579b444fa3e7879f62f2612794e0c8f9b85d58
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /5c8996e8e3cb5e10b7fd36115b800ac7/invoke.js HTTP/1.1
Host: pl18043214.highperformancecpmgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 21:12:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2669f1d4cf2ba0e6b8ce94e34eb1ff81
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je39k2&_p=320497904&cid=60023536.1695503568&ul=en-us&sr=1280x1024&_eu=AEA&_s=3&sid=1695503567&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&dt=Full%20video%20of%20kulhad%20Pizza.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=scroll&ep.origin=firebase&epn.percent_scrolled=90
216.239.34.36204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je39k2&_p=320497904&cid=60023536.1695503568&ul=en-us&sr=1280x1024&_eu=AEA&_s=3&sid=1695503567&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&dt=Full%20video%20of%20kulhad%20Pizza.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=scroll&ep.origin=firebase&epn.percent_scrolled=90
IP 216.239.34.36:443
Requested by https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint00:ED:16:68:8D:DB:14:8B:43:01:81:CA:83:9A:AE:5B:24:AB:11:18
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-06ZNKL8C2E>m=45je39k2&_p=320497904&cid=60023536.1695503568&ul=en-us&sr=1280x1024&_eu=AEA&_s=3&sid=1695503567&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&dt=Full%20video%20of%20kulhad%20Pizza.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=scroll&ep.origin=firebase&epn.percent_scrolled=90 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://www.1024tera.com
date: Sat, 23 Sep 2023 21:12:48 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.r2m03.amazontrust.com/
143.204.48.16 471 B URL ocsp.r2m03.amazontrust.com/
IP 143.204.48.16:0
Hash 6c9e8534605c94d44deb96ea6eec0d5f
4fe4efa9b812f4c6aaf42589ce475ab379db6f39
da753b7746d232637f22c241c8a32db3b35c68ce66bdece0b651f66b8671e1ad
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sat, 23 Sep 2023 21:12:48 GMT
Last-Modified: Sat, 23 Sep 2023 20:29:35 GMT
Server: ECAcc (ska/F7AF)
X-Cache: Miss from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6KKOB2IATQsEUgLtqYBiNKOGrPgLdXQnLAYVUKVwwneQnTWxhtgrNg==
Age: 2594
ocsp.r2m03.amazontrust.com/
143.204.48.16 471 B URL ocsp.r2m03.amazontrust.com/
IP 143.204.48.16:0
Hash 6c9e8534605c94d44deb96ea6eec0d5f
4fe4efa9b812f4c6aaf42589ce475ab379db6f39
da753b7746d232637f22c241c8a32db3b35c68ce66bdece0b651f66b8671e1ad
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sat, 23 Sep 2023 21:12:48 GMT
Last-Modified: Sat, 23 Sep 2023 20:30:09 GMT
Server: ECAcc (ska/F756)
X-Cache: Miss from cloudfront
Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: WQopKfM_lO-PwlOeKvhoWPeQ68xLDuUMgkBzAFqQH2o6TijHTYtpyg==
Age: 2559
professionalswebcheck.com/stats
35.157.129.203 40 B URL professionalswebcheck.com/stats
IP 35.157.129.203:0
File type ASCII text, with no line terminators
Hash c94b15e48957eb365139c0a6fe302aa7
85b1f584e622c781a258666b238e924ddb8456c2
13551339aca013ae32faa1a99699125fc7ec4d89abcab1c6f73c644c02c013e0
GET /stats HTTP/1.1
Host: professionalswebcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 21:12:48 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.1024tera.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=5dee74f4-407e-4034-902f-2d9490f920ae:1:1; expires=Tue, 20 Sep 2033 21:12:48 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
professionalswebcheck.com/stats
35.157.129.203 40 B URL professionalswebcheck.com/stats
IP 35.157.129.203:0
File type ASCII text, with no line terminators
Hash e4bd4e473460be1fee7773076395b4a9
d2081327fa2e39bea6e5c2f6c21d5f29ab066068
aa3717e39d224a7b7ca0912816b867177baf12c1a246e0f4d876d5e4f148556b
GET /stats HTTP/1.1
Host: professionalswebcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 21:12:48 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.1024tera.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=ab03d147-5402-4ac0-b993-a21999c8b0df:2:1; expires=Tue, 20 Sep 2033 21:12:48 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
handymanprivately.com/cf/91/85/cf9185adb78d21d37ecd6e5db43ab3c4.js
192.243.61.227 29 kB URL handymanprivately.com/cf/91/85/cf9185adb78d21d37ecd6e5db43ab3c4.js
IP 192.243.61.227:0
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65536), with no line terminators
Hash 6870f807bde0ce2d65f87ede03533f1b
bac24146ad3d6608d3558b1dbd238b23f90813d0
6c65ad2ceb8c806d9244bbe41fafdb558dd3405757e989287f4b95e71e6c4d23
GET /cf/91/85/cf9185adb78d21d37ecd6e5db43ab3c4.js HTTP/1.1
Host: handymanprivately.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 21:12:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c6ab614434e873e1604e730cda9a82dd
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
handymanprivately.com/ntv.json?key=627e2f8a423975bc4bd7a76128c2d552&vstc=2
192.243.61.227 8.3 kB URL handymanprivately.com/ntv.json?key=627e2f8a423975bc4bd7a76128c2d552&vstc=2
IP 192.243.61.227:0
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (8284), with no line terminators
Hash 5447320d1627d06b4f0daed3f2c2b814
c6157cb31f7eb54b74a61d611a7d9b75fa16dd79
a880cc040b4e2c49865c1be8bf4d2beb760b335e9f8437ba1af2d25ba31403bc
GET /ntv.json?key=627e2f8a423975bc4bd7a76128c2d552&vstc=2 HTTP/1.1
Host: handymanprivately.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 21:12:49 GMT
Content-Type: application/json
Content-Length: 8284
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.1024tera.com
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=18326536; expires=Sun, 24 Sep 2023 21:12:49 GMT; secure; SameSite=None
pdhtkv=true; expires=Sun, 24 Sep 2023 21:12:49 GMT; secure; SameSite=None
uncs=1; expires=Sun, 24 Sep 2023 21:12:49 GMT; secure; SameSite=None
pdhtkv49=true; expires=Sun, 24 Sep 2023 21:12:49 GMT; secure; SameSite=None
uncs49=1; expires=Sun, 24 Sep 2023 21:12:49 GMT; secure; SameSite=None
nlec627e2f8a423975bc4bd7a76128c2d552=[2229213,2229212]; expires=Sat, 23 Sep 2023 21:12:54 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 82e5519e9da5eceb16993c8acf840a90
Strict-Transport-Security: max-age=0; includeSubdomains
ymg-api.terabox.com/abdr?data=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&_=0.5630718777706739
210.154.124.151 22 B URL ymg-api.terabox.com/abdr?data=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&_=0.5630718777706739
IP 210.154.124.151:0
ASN #4713 NTT Communications Corporation
File type ASCII text, with no line terminators
Hash 9d4568c009d203ab10e33ea9953a0264
dd29ecf524b030a65261e3059c48ab9e1ecb2585
12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126
GET /abdr?data=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&_=0.5630718777706739 HTTP/1.1
Host: ymg-api.terabox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: ab_jid=53438d46add2dcad4c6c420dd35afdd3c7e9; ab_bid=53438d46add2dcad4c6c420dd35afdd3c7e9; ab_sr=1.0.1_ZWI2YzEwN2Q4OTYzZDU0OWVlYjBhYmQ1NDRkMjA3MGZjYTg3ZWM1ZjI1NzBkYmYxMDQ4YTY2YTZjNGVlNTVlZWVlNmZmODdkODE2N2JiZGE2YWU0OGQ0MjFlYTM1ZGJmZWQ0OTdkYzlhMzgwNjlhZjIzZDJjNDVlM2ZjMWRiNjFhZjQyYWFmOGFhY2MwYTEyZjRjNjJjMDAwNjkyYTUwMA==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:49 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 409721796922357849
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, Host, Content-Type, x-requested-with, X-Custom-Header
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Max-Age: 3600
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaCsHT2ziq29Xvv4cVAXxtAJIySiEnuw=
Server: nginx
logid: 409721796922357849
Flow-level: 3
Content-Encoding: gzip
pretencepeppermint.com/1e/1b/bd/1e1bbdc937ccd35cd1897b4e58c7407b.js
192.243.61.227 29 kB URL pretencepeppermint.com/1e/1b/bd/1e1bbdc937ccd35cd1897b4e58c7407b.js
IP 192.243.61.227:0
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65536), with no line terminators
Hash 87b5ef401a2e665b05b1dc944c6ac1dc
38604916d050fb242e1e32de92e69b15b1e5d2b8
709d10b43929ac2ec1f4fd77d52dd2efb0a9c06ba02ac5c961c3f648b80f8ddf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /1e/1b/bd/1e1bbdc937ccd35cd1897b4e58c7407b.js HTTP/1.1
Host: pretencepeppermint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 21:12:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c2d4c0d8799394a5408bd10fc0bd39cf
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
pretencepeppermint.com/ntv.json?key=5c8996e8e3cb5e10b7fd36115b800ac7&vstc=1
192.243.61.227 4.3 kB URL pretencepeppermint.com/ntv.json?key=5c8996e8e3cb5e10b7fd36115b800ac7&vstc=1
IP 192.243.61.227:0
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (4272), with no line terminators
Hash 127918970ed665f6b0b565b1e5ea3f28
411f02ebaf6d2f29c08ce9793537cb2ea2b1fc28
1ae1e8225004c6451580ae1d89a04d5eb769426c8a55d1c7de3a0d407d08877a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ntv.json?key=5c8996e8e3cb5e10b7fd36115b800ac7&vstc=1 HTTP/1.1
Host: pretencepeppermint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 21:12:49 GMT
Content-Type: application/json
Content-Length: 4272
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.1024tera.com
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17942715; expires=Sun, 24 Sep 2023 21:12:49 GMT; secure; SameSite=None
pdhtkv=true; expires=Sun, 24 Sep 2023 21:12:49 GMT; secure; SameSite=None
uncs=1; expires=Sun, 24 Sep 2023 21:12:49 GMT; secure; SameSite=None
pdhtkv49=true; expires=Sun, 24 Sep 2023 21:12:49 GMT; secure; SameSite=None
uncs49=1; expires=Sun, 24 Sep 2023 21:12:49 GMT; secure; SameSite=None
nlec5c8996e8e3cb5e10b7fd36115b800ac7=[2229337]; expires=Sat, 23 Sep 2023 21:12:54 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2424ccbdaca43e0689fc8234df717979
Strict-Transport-Security: max-age=0; includeSubdomains
pretencepeppermint.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSsW8cxReedVzkl18BiZAQguKgQCCh8%2B56z3dHiggTjCxMHJIg6NDszOx58OzOambn9uzKEIFSUBx0UK2%2Fs2MRThH8AUToTIMskHydJeICiYIaKaJEd7E4eNLMe998X%2FG99%2BbTXXdKfDh6svK23pZK0YVG3a%2B99H4QXK6tycz1ar3W0gdL0eWa6b4a%2BO26%2F3LtTcE29ULoB74f%2BEFtRRqR6N5CEAR1HzIftoN6269HYT1oROiZ%2F2LrPFjqgXdPySVIPr4wvB9BshGy9Nurwm4WOn%2FljdQpWmiDLj94N9vMdJkhnZWJ8ZBkB2dqaHu88gA6258ahu7%2BI4zlmHi%2F%2F4Y4Ozhzibi7%2F9horCAyxPz%2FKLsjCDWCpCMwfRuSHxOAcVxbR5bevaZNSbces3TCjsn8oz8hyzGZf%2FgUsvT%2BspK92k2tXCF1ZtFLKsjeCLIzQu4OUWzPQZaHYMXHkPwXsvBoDVm6t26VhuTVtHkpR5DJCEr0Qa0HNznSg0s8uNxDyk9qTRa1WrzV4FQwFsZJ0EqiJGpT5ifMX2yHcGxir48i74OpPpjZQW52sCk%2FP25cgnE%2FwG5UsNyDLcbEe2cHXV6hFASlJSgpQSkJyoKg7Fb7XNnQVne5si4OznJ4lhergS46u3RfFx2Rkd38lFycjMZ7eu88NsVJbSlsijBp0ShcbDcbMYti3qTNpSBssZA3GiGsrCDt3LTbbTkmzz%2F7GXI5Jv9rDhHTQ1h1CCYvgroAtBw0Qx90YxC1fGxnw8APo0IYWmc6BdcV8mIexZa3q07JM9MVvXDuIQQ7unLvueH54MU%2FwEyF3FT4UP5I0FF3Bjd0SfZu6NKS79bzQqZym07Wd7OghTh37y2xVWrDV6%2Fa%2FtevsQkxKYe3hC3WaMZl1rHkm2XJuTAr2jBBvl%2B174n4urMby85kLl%2B7%2FvrKapobYa3U2QhUHq%2F%2FBSbHZP6jB9OP%2BeTPn0CaEYyrkLojchaQ%2BhAs34HNZ%2B6tJjBqpolzD6WrBiaMZ49KEigxwzSuYP%2BF41m9a%2B%2BgY%2BZAi9vI0gpdU6GrKlDVh3UXBkVujq789OUkvkKs5gaxMnN7sTLqi%2BloJ9evsPKkJppiqd2O%2FKjJfT%2BOeBgGDcHoYkTbNAyTJgo7Fk%2FcOv4bAAD%2F%2FwEAAP%2F%2FNZ2oQmoEAAA%3D
192.243.61.227 7 B URL pretencepeppermint.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSsW8cxReedVzkl18BiZAQguKgQCCh8%2B56z3dHiggTjCxMHJIg6NDszOx58OzOambn9uzKEIFSUBx0UK2%2Fs2MRThH8AUToTIMskHydJeICiYIaKaJEd7E4eNLMe998X%2FG99%2BbTXXdKfDh6svK23pZK0YVG3a%2B99H4QXK6tycz1ar3W0gdL0eWa6b4a%2BO26%2F3LtTcE29ULoB74f%2BEFtRRqR6N5CEAR1HzIftoN6269HYT1oROiZ%2F2LrPFjqgXdPySVIPr4wvB9BshGy9Nurwm4WOn%2FljdQpWmiDLj94N9vMdJkhnZWJ8ZBkB2dqaHu88gA6258ahu7%2BI4zlmHi%2F%2F4Y4Ozhzibi7%2F9horCAyxPz%2FKLsjCDWCpCMwfRuSHxOAcVxbR5bevaZNSbces3TCjsn8oz8hyzGZf%2FgUsvT%2BspK92k2tXCF1ZtFLKsjeCLIzQu4OUWzPQZaHYMXHkPwXsvBoDVm6t26VhuTVtHkpR5DJCEr0Qa0HNznSg0s8uNxDyk9qTRa1WrzV4FQwFsZJ0EqiJGpT5ifMX2yHcGxir48i74OpPpjZQW52sCk%2FP25cgnE%2FwG5UsNyDLcbEe2cHXV6hFASlJSgpQSkJyoKg7Fb7XNnQVne5si4OznJ4lhergS46u3RfFx2Rkd38lFycjMZ7eu88NsVJbSlsijBp0ShcbDcbMYti3qTNpSBssZA3GiGsrCDt3LTbbTkmzz%2F7GXI5Jv9rDhHTQ1h1CCYvgroAtBw0Qx90YxC1fGxnw8APo0IYWmc6BdcV8mIexZa3q07JM9MVvXDuIQQ7unLvueH54MU%2FwEyF3FT4UP5I0FF3Bjd0SfZu6NKS79bzQqZym07Wd7OghTh37y2xVWrDV6%2Fa%2FtevsQkxKYe3hC3WaMZl1rHkm2XJuTAr2jBBvl%2B174n4urMby85kLl%2B7%2FvrKapobYa3U2QhUHq%2F%2FBSbHZP6jB9OP%2BeTPn0CaEYyrkLojchaQ%2BhAs34HNZ%2B6tJjBqpolzD6WrBiaMZ49KEigxwzSuYP%2BF41m9a%2B%2BgY%2BZAi9vI0gpdU6GrKlDVh3UXBkVujq789OUkvkKs5gaxMnN7sTLqi%2BloJ9evsPKkJppiqd2O%2FKjJfT%2BOeBgGDcHoYkTbNAyTJgo7Fk%2FcOv4bAAD%2F%2FwEAAP%2F%2FNZ2oQmoEAAA%3D
IP 192.243.61.227:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSsW8cxReedVzkl18BiZAQguKgQCCh8%2B56z3dHiggTjCxMHJIg6NDszOx58OzOambn9uzKEIFSUBx0UK2%2Fs2MRThH8AUToTIMskHydJeICiYIaKaJEd7E4eNLMe998X%2FG99%2BbTXXdKfDh6svK23pZK0YVG3a%2B99H4QXK6tycz1ar3W0gdL0eWa6b4a%2BO26%2F3LtTcE29ULoB74f%2BEFtRRqR6N5CEAR1HzIftoN6269HYT1oROiZ%2F2LrPFjqgXdPySVIPr4wvB9BshGy9Nurwm4WOn%2FljdQpWmiDLj94N9vMdJkhnZWJ8ZBkB2dqaHu88gA6258ahu7%2BI4zlmHi%2F%2F4Y4Ozhzibi7%2F9horCAyxPz%2FKLsjCDWCpCMwfRuSHxOAcVxbR5bevaZNSbces3TCjsn8oz8hyzGZf%2FgUsvT%2BspK92k2tXCF1ZtFLKsjeCLIzQu4OUWzPQZaHYMXHkPwXsvBoDVm6t26VhuTVtHkpR5DJCEr0Qa0HNznSg0s8uNxDyk9qTRa1WrzV4FQwFsZJ0EqiJGpT5ifMX2yHcGxir48i74OpPpjZQW52sCk%2FP25cgnE%2FwG5UsNyDLcbEe2cHXV6hFASlJSgpQSkJyoKg7Fb7XNnQVne5si4OznJ4lhergS46u3RfFx2Rkd38lFycjMZ7eu88NsVJbSlsijBp0ShcbDcbMYti3qTNpSBssZA3GiGsrCDt3LTbbTkmzz%2F7GXI5Jv9rDhHTQ1h1CCYvgroAtBw0Qx90YxC1fGxnw8APo0IYWmc6BdcV8mIexZa3q07JM9MVvXDuIQQ7unLvueH54MU%2FwEyF3FT4UP5I0FF3Bjd0SfZu6NKS79bzQqZym07Wd7OghTh37y2xVWrDV6%2Fa%2FtevsQkxKYe3hC3WaMZl1rHkm2XJuTAr2jBBvl%2B174n4urMby85kLl%2B7%2FvrKapobYa3U2QhUHq%2F%2FBSbHZP6jB9OP%2BeTPn0CaEYyrkLojchaQ%2BhAs34HNZ%2B6tJjBqpolzD6WrBiaMZ49KEigxwzSuYP%2BF41m9a%2B%2BgY%2BZAi9vI0gpdU6GrKlDVh3UXBkVujq789OUkvkKs5gaxMnN7sTLqi%2BloJ9evsPKkJppiqd2O%2FKjJfT%2BOeBgGDcHoYkTbNAyTJgo7Fk%2FcOv4bAAD%2F%2FwEAAP%2F%2FNZ2oQmoEAAA%3D HTTP/1.1
Host: pretencepeppermint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=17942715; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec5c8996e8e3cb5e10b7fd36115b800ac7=[2229337]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 21:12:49 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: be20a384a3bc29a158e3ffe10edc31ed
Strict-Transport-Security: max-age=0; includeSubdomains
pretencepeppermint.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSsW8cxRudvbjIL78CEiEhBMVBgUBC5931nu%2BOFBEhGFmYOCRB0KHZmdnz4Nmd1czO7dmVIQiloDjooFq%2Fs2MRThH8AUToTIMskHydJeICiYIaKaJEZ1scfNLq%2B96%2BV7zvffPptjsmPhw9Wnpbb0ql6Hyz4ddfej8ILtdXZOb69X578YPF6HLd9F4N%2FE7Df7n%2BpmDrej70A98P%2FKC%2BJI1IdH8%2BCIKGD5mPOkGj4zeisBE0I%2FTNf7F1Hiz1wHvH5BIkn1wYPYgg2RhZ%2Bu01YdcLnb%2FyRuoULbRBj%2B%2B9m61nusyQzsbEeEiyvTM1tD1cegid7Z4Yhu79I4zlhHi%2F%2F4Y42ztzibi3e2o0VhAZYv5%2FlL0xhBpD0jGYvgPJDwnAOK6vIkvvXdempBunLJ2yEzL3%2BE%2FIckLmHj2FLH1wVcl%2B%2FZZWrpA6s%2BgnFWR%2FDNkdI3f7KDZrkOU%2BWPExJP%2BFzD9eQZburFqlIXl1sryUY8hkDCUGoNaDm37Sg0s8uNxDyo%2FqLRa127zd5FQwFsZJ0E6iJOpQ5ifMX%2BiEcGxqb4AiH4CpAZjZQm62sC4%2FP2xegnE%2FwK5VsNyDLSbEe2cLPV6hFASlJSgpQSkJyoKg7FW7XNnQVve4si4Oznp41heqoS6623RXF12Rke38mFycRuM9vXMe6%2BKovhi2RJi0aRQudFrNmEUxb9HWYhC2WcibzRBWVpC2drLtppyQ55%2F9DLmckP%2B1RojpPqzaB5MXQV0AWg5boQ%2B6NozaPjazUeCHUSEMbTCdgusKeTGHYsPbVsfkmZMTvXDuVwh2cOX%2Bc6PzwYt%2FgJkKuanwofyRoKvuDm%2Fqkuzc1KUl363mhUzlJp2e71ZBC3Hu%2Fltio9SGL1%2Bzg69fY1NiOo5uC1us0IzLrGvJN1cl58IsacME%2BX7ZvifiG86uXXUmc%2FnKjdeXltPcCGulzsag8nD1LzA5IXMfPTx5mE%2F%2B%2FAmkGcO4Cqk7IGcFqffB8i3YfObeagKjZpo4r6F01dCE8eynkgRKzDCNK9h%2F4Xg2b9u76JoaaHEHWVqhZyr0VAWqBrDuwrDIzcGVn76c1leIVW0YK1PbiZVRX0yjfXSar5VHddESi51O5Ect7vtxxMMwaApGFyLaoWGYtFDYiXji9uHfAAAA%2F%2F8BAAD%2F%2F4Zu4lVqBAAA
192.243.61.227 7 B URL pretencepeppermint.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSsW8cxRudvbjIL78CEiEhBMVBgUBC5931nu%2BOFBEhGFmYOCRB0KHZmdnz4Nmd1czO7dmVIQiloDjooFq%2Fs2MRThH8AUToTIMskHydJeICiYIaKaJEZ1scfNLq%2B96%2BV7zvffPptjsmPhw9Wnpbb0ql6Hyz4ddfej8ILtdXZOb69X578YPF6HLd9F4N%2FE7Df7n%2BpmDrej70A98P%2FKC%2BJI1IdH8%2BCIKGD5mPOkGj4zeisBE0I%2FTNf7F1Hiz1wHvH5BIkn1wYPYgg2RhZ%2Bu01YdcLnb%2FyRuoULbRBj%2B%2B9m61nusyQzsbEeEiyvTM1tD1cegid7Z4Yhu79I4zlhHi%2F%2F4Y42ztzibi3e2o0VhAZYv5%2FlL0xhBpD0jGYvgPJDwnAOK6vIkvvXdempBunLJ2yEzL3%2BE%2FIckLmHj2FLH1wVcl%2B%2FZZWrpA6s%2BgnFWR%2FDNkdI3f7KDZrkOU%2BWPExJP%2BFzD9eQZburFqlIXl1sryUY8hkDCUGoNaDm37Sg0s8uNxDyo%2FqLRa127zd5FQwFsZJ0E6iJOpQ5ifMX%2BiEcGxqb4AiH4CpAZjZQm62sC4%2FP2xegnE%2FwK5VsNyDLSbEe2cLPV6hFASlJSgpQSkJyoKg7FW7XNnQVve4si4Oznp41heqoS6623RXF12Rke38mFycRuM9vXMe6%2BKovhi2RJi0aRQudFrNmEUxb9HWYhC2WcibzRBWVpC2drLtppyQ55%2F9DLmckP%2B1RojpPqzaB5MXQV0AWg5boQ%2B6NozaPjazUeCHUSEMbTCdgusKeTGHYsPbVsfkmZMTvXDuVwh2cOX%2Bc6PzwYt%2FgJkKuanwofyRoKvuDm%2Fqkuzc1KUl363mhUzlJp2e71ZBC3Hu%2Fltio9SGL1%2Bzg69fY1NiOo5uC1us0IzLrGvJN1cl58IsacME%2BX7ZvifiG86uXXUmc%2FnKjdeXltPcCGulzsag8nD1LzA5IXMfPTx5mE%2F%2B%2FAmkGcO4Cqk7IGcFqffB8i3YfObeagKjZpo4r6F01dCE8eynkgRKzDCNK9h%2F4Xg2b9u76JoaaHEHWVqhZyr0VAWqBrDuwrDIzcGVn76c1leIVW0YK1PbiZVRX0yjfXSar5VHddESi51O5Ect7vtxxMMwaApGFyLaoWGYtFDYiXji9uHfAAAA%2F%2F8BAAD%2F%2F4Zu4lVqBAAA
IP 192.243.61.227:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSsW8cxRudvbjIL78CEiEhBMVBgUBC5931nu%2BOFBEhGFmYOCRB0KHZmdnz4Nmd1czO7dmVIQiloDjooFq%2Fs2MRThH8AUToTIMskHydJeICiYIaKaJEZ1scfNLq%2B96%2BV7zvffPptjsmPhw9Wnpbb0ql6Hyz4ddfej8ILtdXZOb69X578YPF6HLd9F4N%2FE7Df7n%2BpmDrej70A98P%2FKC%2BJI1IdH8%2BCIKGD5mPOkGj4zeisBE0I%2FTNf7F1Hiz1wHvH5BIkn1wYPYgg2RhZ%2Bu01YdcLnb%2FyRuoULbRBj%2B%2B9m61nusyQzsbEeEiyvTM1tD1cegid7Z4Yhu79I4zlhHi%2F%2F4Y42ztzibi3e2o0VhAZYv5%2FlL0xhBpD0jGYvgPJDwnAOK6vIkvvXdempBunLJ2yEzL3%2BE%2FIckLmHj2FLH1wVcl%2B%2FZZWrpA6s%2BgnFWR%2FDNkdI3f7KDZrkOU%2BWPExJP%2BFzD9eQZburFqlIXl1sryUY8hkDCUGoNaDm37Sg0s8uNxDyo%2FqLRa127zd5FQwFsZJ0E6iJOpQ5ifMX%2BiEcGxqb4AiH4CpAZjZQm62sC4%2FP2xegnE%2FwK5VsNyDLSbEe2cLPV6hFASlJSgpQSkJyoKg7FW7XNnQVve4si4Oznp41heqoS6623RXF12Rke38mFycRuM9vXMe6%2BKovhi2RJi0aRQudFrNmEUxb9HWYhC2WcibzRBWVpC2drLtppyQ55%2F9DLmckP%2B1RojpPqzaB5MXQV0AWg5boQ%2B6NozaPjazUeCHUSEMbTCdgusKeTGHYsPbVsfkmZMTvXDuVwh2cOX%2Bc6PzwYt%2FgJkKuanwofyRoKvuDm%2Fqkuzc1KUl363mhUzlJp2e71ZBC3Hu%2Fltio9SGL1%2Bzg69fY1NiOo5uC1us0IzLrGvJN1cl58IsacME%2BX7ZvifiG86uXXUmc%2FnKjdeXltPcCGulzsag8nD1LzA5IXMfPTx5mE%2F%2B%2FAmkGcO4Cqk7IGcFqffB8i3YfObeagKjZpo4r6F01dCE8eynkgRKzDCNK9h%2F4Xg2b9u76JoaaHEHWVqhZyr0VAWqBrDuwrDIzcGVn76c1leIVW0YK1PbiZVRX0yjfXSar5VHddESi51O5Ect7vtxxMMwaApGFyLaoWGYtFDYiXji9uHfAAAA%2F%2F8BAAD%2F%2F4Zu4lVqBAAA HTTP/1.1
Host: pretencepeppermint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=17942715; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec5c8996e8e3cb5e10b7fd36115b800ac7=[2229337]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 21:12:49 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 81f2954385328b0f13f96603ce614688
Strict-Transport-Security: max-age=0; includeSubdomains
pretencepeppermint.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRuedVzky1dAIiSEoDgoEEjovLve%2B0WKiBCMIkwckiDo0OzM7Hnw7M5qZuf27MoQgVJQHHRQrZ%2BzYxFOEfwBROhMgyyQfJ0l4gKJghopokR3sTh4pZn3feZ5iud93%2Fl0x50QH44er7ytt6RSdKlR92svvR8EF2urMnP9Wr%2Fd%2FKAZXayZ3quB36n7L9feFGxDL4V%2B4PuBH9RWpBGJ7i8FQVD3IfNRJ6h3%2FHoU1oNGhL75L7bOg6UeeO%2BEXIDkk3Oj%2BxEkGyNLv70i7Eah81feSJ2ihTbo8f13s41MlxnSeZkYD0m2f6qGtkcrD6CzvZlh6N4%2FwlhOiPf7b4iz%2FVOXiHt7j43GCiJDzP%2BPsjeGUGNIOgbTtyH5EQEYx7U1ZOnda9qUdPMxS6fshCw%2B%2BhOynJDFh08hS%2B9fVrJfu6mVK6TOLPpJBdkfQ3bHyN0Biq0FyPIArPgYkv9Clh6tIkt316zSkLyaNS%2FlGDIZQ4kBqPXgpkd6cIkHl3tI%2BXGtxaJ2m7cbnArGwjgJ2kmURB3K%2FIT5y50Qjk3tDVDkAzA1ADPbyM02NuTnR40LMO4H2PUKlnuwxYR472yjxyuUgqC0BCUlKCVBWRCUvWqPKxva6i5X1sXBaQ5P83I11EV3h%2B7poisyspOfkPPT0XhP757FhjiuNcOWCJM2jcLlTqsRsyjmLdpqBmGbhbzRCGFlBWkXZt1uyQl5%2FtnPkMsJ%2BV9rhJgewKoDMHke1AWg5bAV%2BqDrw6jtYysbBX4YFcLQOtMpuK6QF4soNr0ddUKema3ohTMPIdjhpXvPjc4GL%2F4BZirkpsKH8keCrrozvKFLsntDl5Z8t5YXMpVbdLq%2BmwUtxJl7b4nNUht%2B9YodfP0amxLTcnRL2GKVZlxmXUu%2BuSw5F2ZFGybI91fteyK%2B7uz6ZWcyl69ef33lapobYa3U2RhUHq39BSYnZPGjB7OP%2BeTPn0CaMYyrkLpDchqQ%2BgAs34bN5%2B6tJjBqrolzD6WrhiaM549KEigxxzSuYP%2BF43m9Y%2B%2BgaxZAi9vI0go9U6GnKlA1gHXnhkVuDi%2F99OU0vkKsFoaxMgu7sTLqi9lop9evsPK4xpgvaBC3AiG4aCwzFjVZO24my1FLtBu8gcJOxBO3jv4GAAD%2F%2FwEAAP%2F%2FyroAUmoEAAA%3D
192.243.61.227 7 B URL pretencepeppermint.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRuedVzky1dAIiSEoDgoEEjovLve%2B0WKiBCMIkwckiDo0OzM7Hnw7M5qZuf27MoQgVJQHHRQrZ%2BzYxFOEfwBROhMgyyQfJ0l4gKJghopokR3sTh4pZn3feZ5iud93%2Fl0x50QH44er7ytt6RSdKlR92svvR8EF2urMnP9Wr%2Fd%2FKAZXayZ3quB36n7L9feFGxDL4V%2B4PuBH9RWpBGJ7i8FQVD3IfNRJ6h3%2FHoU1oNGhL75L7bOg6UeeO%2BEXIDkk3Oj%2BxEkGyNLv70i7Eah81feSJ2ihTbo8f13s41MlxnSeZkYD0m2f6qGtkcrD6CzvZlh6N4%2FwlhOiPf7b4iz%2FVOXiHt7j43GCiJDzP%2BPsjeGUGNIOgbTtyH5EQEYx7U1ZOnda9qUdPMxS6fshCw%2B%2BhOynJDFh08hS%2B9fVrJfu6mVK6TOLPpJBdkfQ3bHyN0Biq0FyPIArPgYkv9Clh6tIkt316zSkLyaNS%2FlGDIZQ4kBqPXgpkd6cIkHl3tI%2BXGtxaJ2m7cbnArGwjgJ2kmURB3K%2FIT5y50Qjk3tDVDkAzA1ADPbyM02NuTnR40LMO4H2PUKlnuwxYR472yjxyuUgqC0BCUlKCVBWRCUvWqPKxva6i5X1sXBaQ5P83I11EV3h%2B7poisyspOfkPPT0XhP757FhjiuNcOWCJM2jcLlTqsRsyjmLdpqBmGbhbzRCGFlBWkXZt1uyQl5%2FtnPkMsJ%2BV9rhJgewKoDMHke1AWg5bAV%2BqDrw6jtYysbBX4YFcLQOtMpuK6QF4soNr0ddUKema3ohTMPIdjhpXvPjc4GL%2F4BZirkpsKH8keCrrozvKFLsntDl5Z8t5YXMpVbdLq%2BmwUtxJl7b4nNUht%2B9YodfP0amxLTcnRL2GKVZlxmXUu%2BuSw5F2ZFGybI91fteyK%2B7uz6ZWcyl69ef33lapobYa3U2RhUHq39BSYnZPGjB7OP%2BeTPn0CaMYyrkLpDchqQ%2BgAs34bN5%2B6tJjBqrolzD6WrhiaM549KEigxxzSuYP%2BF43m9Y%2B%2BgaxZAi9vI0go9U6GnKlA1gHXnhkVuDi%2F99OU0vkKsFoaxMgu7sTLqi9lop9evsPK4xpgvaBC3AiG4aCwzFjVZO24my1FLtBu8gcJOxBO3jv4GAAD%2F%2FwEAAP%2F%2FyroAUmoEAAA%3D
IP 192.243.61.227:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRuedVzky1dAIiSEoDgoEEjovLve%2B0WKiBCMIkwckiDo0OzM7Hnw7M5qZuf27MoQgVJQHHRQrZ%2BzYxFOEfwBROhMgyyQfJ0l4gKJghopokR3sTh4pZn3feZ5iud93%2Fl0x50QH44er7ytt6RSdKlR92svvR8EF2urMnP9Wr%2Fd%2FKAZXayZ3quB36n7L9feFGxDL4V%2B4PuBH9RWpBGJ7i8FQVD3IfNRJ6h3%2FHoU1oNGhL75L7bOg6UeeO%2BEXIDkk3Oj%2BxEkGyNLv70i7Eah81feSJ2ihTbo8f13s41MlxnSeZkYD0m2f6qGtkcrD6CzvZlh6N4%2FwlhOiPf7b4iz%2FVOXiHt7j43GCiJDzP%2BPsjeGUGNIOgbTtyH5EQEYx7U1ZOnda9qUdPMxS6fshCw%2B%2BhOynJDFh08hS%2B9fVrJfu6mVK6TOLPpJBdkfQ3bHyN0Biq0FyPIArPgYkv9Clh6tIkt316zSkLyaNS%2FlGDIZQ4kBqPXgpkd6cIkHl3tI%2BXGtxaJ2m7cbnArGwjgJ2kmURB3K%2FIT5y50Qjk3tDVDkAzA1ADPbyM02NuTnR40LMO4H2PUKlnuwxYR472yjxyuUgqC0BCUlKCVBWRCUvWqPKxva6i5X1sXBaQ5P83I11EV3h%2B7poisyspOfkPPT0XhP757FhjiuNcOWCJM2jcLlTqsRsyjmLdpqBmGbhbzRCGFlBWkXZt1uyQl5%2FtnPkMsJ%2BV9rhJgewKoDMHke1AWg5bAV%2BqDrw6jtYysbBX4YFcLQOtMpuK6QF4soNr0ddUKema3ohTMPIdjhpXvPjc4GL%2F4BZirkpsKH8keCrrozvKFLsntDl5Z8t5YXMpVbdLq%2BmwUtxJl7b4nNUht%2B9YodfP0amxLTcnRL2GKVZlxmXUu%2BuSw5F2ZFGybI91fteyK%2B7uz6ZWcyl69ef33lapobYa3U2RhUHq39BSYnZPGjB7OP%2BeTPn0CaMYyrkLpDchqQ%2BgAs34bN5%2B6tJjBqrolzD6WrhiaM549KEigxxzSuYP%2BF43m9Y%2B%2BgaxZAi9vI0go9U6GnKlA1gHXnhkVuDi%2F99OU0vkKsFoaxMgu7sTLqi9lop9evsPK4xpgvaBC3AiG4aCwzFjVZO24my1FLtBu8gcJOxBO3jv4GAAD%2F%2FwEAAP%2F%2FyroAUmoEAAA%3D HTTP/1.1
Host: pretencepeppermint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=17942715; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec5c8996e8e3cb5e10b7fd36115b800ac7=[2229337]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 21:12:49 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 909f1f09b38d8c61f40bd8cb172422aa
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.cloudimagesb.com/cti/51/bb/80/51bb807c8b914e3cc08eace2b0587473/1628586935.jpg
45.133.44.10 30 kB URL cdn.cloudimagesb.com/cti/51/bb/80/51bb807c8b914e3cc08eace2b0587473/1628586935.jpg
IP 45.133.44.10:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash a87779ccaaa4021b0b4f33812742679a
87322480f885dc0b6463c182b7bdb3eb60ab2592
a8f8dbc930527f94496d5a9883b6034e27a673090a89b518596d6e2b656df96f
GET /cti/51/bb/80/51bb807c8b914e3cc08eace2b0587473/1628586935.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 21:12:49 GMT
content-type: image/jpeg
content-length: 30127
server: nginx/1.21.6
last-modified: Tue, 10 Aug 2021 09:15:44 GMT
etag: "611243c0-75af"
expires: Mon, 25 Sep 2023 21:12:49 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/29/eb/08/29eb08c32bad57ff8c8e14af3a16e9c1/1628586955.jpg
45.133.44.10 23 kB URL cdn.cloudimagesb.com/cti/29/eb/08/29eb08c32bad57ff8c8e14af3a16e9c1/1628586955.jpg
IP 45.133.44.10:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash 4452445afb73fab8af9ff308eb667024
130401c47d822426e1cce9981c30d775cba1b576
923b0ac505decd181f473f1fa460f21590777993c3581723f127b032d8c45bdd
GET /cti/29/eb/08/29eb08c32bad57ff8c8e14af3a16e9c1/1628586955.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 21:12:49 GMT
content-type: image/jpeg
content-length: 22987
server: nginx/1.21.6
last-modified: Tue, 10 Aug 2021 09:16:05 GMT
etag: "611243d5-59cb"
expires: Mon, 25 Sep 2023 21:12:49 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503569534
111.108.51.117 43 B URL www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503569534
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash dfed96fa61b0d731e773d8f3ebf36be1
e8a9d44685aee7c9f1caf6041a943b64f5ded561
e60d8bf8071414fd488728674234e94451b8a49c374424504db1f5c26748381b
GET /api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503569534 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207; _ga_06ZNKL8C2E=GS1.1.1695503567.1.0.1695503569.58.0.0; _ga=GA1.1.60023536.1695503568; dom3ic8zudi28v8lr6fgphwffqoz0j6c=ab03d147-5402-4ac0-b993-a21999c8b0df%3A2%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=pretencepeppermint.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:49 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721916393158218
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0RYysCSHb+qnFLufkASwbxtAFLyiqBmO22XwdtYz5T7UnWVzY=
Server: nginx
logid: 409721916393158218
Flow-level: 3
www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503569535
111.108.51.117 43 B URL www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503569535
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash 337a9444f525ecea2338f4e18de0940a
d3c7be3500d81c854f5931c33bbd9fbaa5fedf47
0aeb230985cc5dee4a10e590bd4c9544a9a57e99f3dd939043a24e00eceb0190
GET /api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503569535 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207; _ga_06ZNKL8C2E=GS1.1.1695503567.1.0.1695503569.58.0.0; _ga=GA1.1.60023536.1695503568; dom3ic8zudi28v8lr6fgphwffqoz0j6c=ab03d147-5402-4ac0-b993-a21999c8b0df%3A2%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=pretencepeppermint.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:49 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721915360211645
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaSsGSnb+qnFLufkASwb3tAJMwiqBmO+5EQUgO2eTw1yyVDY=
Server: nginx
logid: 409721915360211645
Flow-level: 3
trinitydiverge.com/pixel/purst?dl=0&th=0&sc=0&rs=9854&rd=9854&fd=646&bv=22.10.v.10&tmpl=136
173.233.139.164 0 B URL trinitydiverge.com/pixel/purst?dl=0&th=0&sc=0&rs=9854&rd=9854&fd=646&bv=22.10.v.10&tmpl=136
IP 173.233.139.164:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/purst?dl=0&th=0&sc=0&rs=9854&rd=9854&fd=646&bv=22.10.v.10&tmpl=136 HTTP/1.1
Host: trinitydiverge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 21:12:49 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
www.1024tera.com/api/analytics?type=terabox_sharing_link_js_error_p2&sessionId=655202&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&title=Script%20error.&msg=undefined%3AScript%20error.&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&lineno=0&colno=0
111.108.51.117 43 B URL www.1024tera.com/api/analytics?type=terabox_sharing_link_js_error_p2&sessionId=655202&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&title=Script%20error.&msg=undefined%3AScript%20error.&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&lineno=0&colno=0
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash 5eee4d1c3f1249b73974859849ed3967
4ee4dfb5cb21d7ce43b72bf2cb3bca0bdaa9a6c6
7f03d408a380b7922eb8c77c2f06948e19702fd80c77c6a3107d702803af3e2f
GET /api/analytics?type=terabox_sharing_link_js_error_p2&sessionId=655202&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&title=Script%20error.&msg=undefined%3AScript%20error.&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&lineno=0&colno=0 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207; _ga_06ZNKL8C2E=GS1.1.1695503567.1.0.1695503569.58.0.0; _ga=GA1.1.60023536.1695503568; dom3ic8zudi28v8lr6fgphwffqoz0j6c=ab03d147-5402-4ac0-b993-a21999c8b0df%3A2%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=pretencepeppermint.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:49 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721918219725435
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QEsTdTcDUmr/tG1MvuUYQxz0rwpNwyKCm/OwSEQ1J5d2S78v3A==
Server: nginx
logid: 409721918219725435
Flow-level: 3
pretencepeppermint.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSQWgkRRut3uTy5z%2Forl48OQiCgky6Oz2ZGRdZjGskGDfr7op6kuqq6kmZ6q6mqmt6klNwQfY4e9RT502yQTcsehZFOoJKUMhcJAdzEDx7EBaPMklw9IPme6%2FfO7zv%2B%2BrjHXdKfDh6svyW3pJK0flW02%2B88F4QXG2syswNGoPO4geL0dWG6b8c%2BN2m%2F2LjDcE29HzoB74f%2BEFjWRqR6MF8EARNHzI%2F6AbNrt%2BMwmbQijAw%2F%2BXWebDUA%2B%2BfkiuQfDx38CiCZDWy9Ivrwm4UOn%2Fp9dQpWmiDPt9%2FJ9vIdJkhncLEeEiy%2FQs3tD1e%2FgY62zsLDN3%2FxxjLMfF%2B%2Fw1xtn%2BREnF%2F7zxorCAyxPz%2FKPs1hKohaQ2m70LyYwIwjhtryNIHN7Qp6ea5SifqmMw%2B%2FhOyHJPZX59Glj5aUnLQuK2VK6TOLAZJBTmoIXs1cneIYusSZHkIVnwEyX8m849XkaW7a1ZpSF6dDS9lDZnUUGIIaj24ySc9uMSDyz2k%2FKTRZlGnwzstTgVjYZwEnSRKoi5lfsL8hW4IxybxhijyIZgagplt5GYbG%2FL%2BcesKjPsWdr2C5R5sMSbe29vo8wqlICgtQUkJSklQFgRlv9rjyoa2esCVdXFw0cOLvlCNdNHboXu66ImM7OSn5PJkNd7lH77ChjhptFin210UHbHA4pYI%2FLid8IXFIGjFHd%2BnrA0rK0h76WzaLTkmzw5mkMsx%2BV%2F7ADE9hFWHYHIG1AWg5agd%2BqDro6jjYyt7WAhDYz1oMp2C6wp5MYti09tRp%2BSZsws9N%2Fs%2BBDu69v3cK%2FnolzkwUyE3FT6U3xH01L3RLV2S3Vu6tOTLtbyQqdyik%2BvdLmghZj5%2FU2yW2vCV63b42atsIkzgwR1hi1WacZn1LHm4JDkXZlkbJsjXK%2FZdEd90dn3JmczlqzdfW15JcyOslTqrQeXx2l9gckxmn3%2Fq7F0%2B%2BdMfkKaGcRVSd0QuClIfguXbsPk0vdUERk09ce6hdNXIhPH0p5IESkw5jSvYf%2FF4infsPfSMB1rcRZZW6JsKfVWBqiGsmxsVuTm69uMnk%2FoUsfJGsTLebqyMun%2B%2BWitPGqItFrvdyI%2Fa3PfjiIdh0BKMLkS0S8MwaaOwY%2FHEneO%2FAQAA%2F%2F8BAAD%2F%2Fx0DlWlkBAAA
173.233.137.44 7 B URL pretencepeppermint.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSQWgkRRut3uTy5z%2Forl48OQiCgky6Oz2ZGRdZjGskGDfr7op6kuqq6kmZ6q6mqmt6klNwQfY4e9RT502yQTcsehZFOoJKUMhcJAdzEDx7EBaPMklw9IPme6%2FfO7zv%2B%2BrjHXdKfDh6svyW3pJK0flW02%2B88F4QXG2syswNGoPO4geL0dWG6b8c%2BN2m%2F2LjDcE29HzoB74f%2BEFjWRqR6MF8EARNHzI%2F6AbNrt%2BMwmbQijAw%2F%2BXWebDUA%2B%2BfkiuQfDx38CiCZDWy9Ivrwm4UOn%2Fp9dQpWmiDPt9%2FJ9vIdJkhncLEeEiy%2FQs3tD1e%2FgY62zsLDN3%2FxxjLMfF%2B%2Fw1xtn%2BREnF%2F7zxorCAyxPz%2FKPs1hKohaQ2m70LyYwIwjhtryNIHN7Qp6ea5SifqmMw%2B%2FhOyHJPZX59Glj5aUnLQuK2VK6TOLAZJBTmoIXs1cneIYusSZHkIVnwEyX8m849XkaW7a1ZpSF6dDS9lDZnUUGIIaj24ySc9uMSDyz2k%2FKTRZlGnwzstTgVjYZwEnSRKoi5lfsL8hW4IxybxhijyIZgagplt5GYbG%2FL%2BcesKjPsWdr2C5R5sMSbe29vo8wqlICgtQUkJSklQFgRlv9rjyoa2esCVdXFw0cOLvlCNdNHboXu66ImM7OSn5PJkNd7lH77ChjhptFin210UHbHA4pYI%2FLid8IXFIGjFHd%2BnrA0rK0h76WzaLTkmzw5mkMsx%2BV%2F7ADE9hFWHYHIG1AWg5agd%2BqDro6jjYyt7WAhDYz1oMp2C6wp5MYti09tRp%2BSZsws9N%2Fs%2BBDu69v3cK%2FnolzkwUyE3FT6U3xH01L3RLV2S3Vu6tOTLtbyQqdyik%2BvdLmghZj5%2FU2yW2vCV63b42atsIkzgwR1hi1WacZn1LHm4JDkXZlkbJsjXK%2FZdEd90dn3JmczlqzdfW15JcyOslTqrQeXx2l9gckxmn3%2Fq7F0%2B%2BdMfkKaGcRVSd0QuClIfguXbsPk0vdUERk09ce6hdNXIhPH0p5IESkw5jSvYf%2FF4infsPfSMB1rcRZZW6JsKfVWBqiGsmxsVuTm69uMnk%2FoUsfJGsTLebqyMun%2B%2BWitPGqItFrvdyI%2Fa3PfjiIdh0BKMLkS0S8MwaaOwY%2FHEneO%2FAQAA%2F%2F8BAAD%2F%2Fx0DlWlkBAAA
IP 173.233.137.44:0
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSQWgkRRut3uTy5z%2Forl48OQiCgky6Oz2ZGRdZjGskGDfr7op6kuqq6kmZ6q6mqmt6klNwQfY4e9RT502yQTcsehZFOoJKUMhcJAdzEDx7EBaPMklw9IPme6%2FfO7zv%2B%2BrjHXdKfDh6svyW3pJK0flW02%2B88F4QXG2syswNGoPO4geL0dWG6b8c%2BN2m%2F2LjDcE29HzoB74f%2BEFjWRqR6MF8EARNHzI%2F6AbNrt%2BMwmbQijAw%2F%2BXWebDUA%2B%2BfkiuQfDx38CiCZDWy9Ivrwm4UOn%2Fp9dQpWmiDPt9%2FJ9vIdJkhncLEeEiy%2FQs3tD1e%2FgY62zsLDN3%2FxxjLMfF%2B%2Fw1xtn%2BREnF%2F7zxorCAyxPz%2FKPs1hKohaQ2m70LyYwIwjhtryNIHN7Qp6ea5SifqmMw%2B%2FhOyHJPZX59Glj5aUnLQuK2VK6TOLAZJBTmoIXs1cneIYusSZHkIVnwEyX8m849XkaW7a1ZpSF6dDS9lDZnUUGIIaj24ySc9uMSDyz2k%2FKTRZlGnwzstTgVjYZwEnSRKoi5lfsL8hW4IxybxhijyIZgagplt5GYbG%2FL%2BcesKjPsWdr2C5R5sMSbe29vo8wqlICgtQUkJSklQFgRlv9rjyoa2esCVdXFw0cOLvlCNdNHboXu66ImM7OSn5PJkNd7lH77ChjhptFin210UHbHA4pYI%2FLid8IXFIGjFHd%2BnrA0rK0h76WzaLTkmzw5mkMsx%2BV%2F7ADE9hFWHYHIG1AWg5agd%2BqDro6jjYyt7WAhDYz1oMp2C6wp5MYti09tRp%2BSZsws9N%2Fs%2BBDu69v3cK%2FnolzkwUyE3FT6U3xH01L3RLV2S3Vu6tOTLtbyQqdyik%2BvdLmghZj5%2FU2yW2vCV63b42atsIkzgwR1hi1WacZn1LHm4JDkXZlkbJsjXK%2FZdEd90dn3JmczlqzdfW15JcyOslTqrQeXx2l9gckxmn3%2Fq7F0%2B%2BdMfkKaGcRVSd0QuClIfguXbsPk0vdUERk09ce6hdNXIhPH0p5IESkw5jSvYf%2FF4infsPfSMB1rcRZZW6JsKfVWBqiGsmxsVuTm69uMnk%2FoUsfJGsTLebqyMun%2B%2BWitPGqItFrvdyI%2Fa3PfjiIdh0BKMLkS0S8MwaaOwY%2FHEneO%2FAQAA%2F%2F8BAAD%2F%2Fx0DlWlkBAAA HTTP/1.1
Host: pretencepeppermint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=17942715; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec5c8996e8e3cb5e10b7fd36115b800ac7=[2229337]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 21:12:49 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6f2b746bf983908248c46a3cabb7606e
Strict-Transport-Security: max-age=0; includeSubdomains
pretencepeppermint.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRidvbgIoYBESAhBcVAgkNB5d733ixQRJhhZmDgkQdCh2ZnZ8%2BDZndXM7u3ZlSEIpaA46KBav7NjEU4R%2FAFEaE2DLJB8nSXiAomCGimiRGdbHPmk1fe9fa943%2Fvm8%2B38mLjI6dHSu3pTKkXnmw23%2FsqHnne5viKTfFAfdFoftYLLddN%2F3XO7DffV%2BtuCret53%2FVc13O9%2BpI0ItKDec%2FzGi5kOu56ja7bCPyG1wwwMI9jmzuw1AHvH5NLkHxyYXw%2FgGQVkvj7q8KuZzp97a04VzTTBn2%2B936ynugiQTwbI%2BMgSvbO1ND2cOkBdLJ7Yhi6%2F58wlBPi%2FPkHwmTvzCXC%2Fu6p0VBBJAj5kyj6FYSqIGkFpm9D8kMCMI5rq0jiu9e0KejGKUun7ITMPfobspiQuYfPIInvLyo5qN%2FUKs%2BkTiwGUQk5qCB7FdJ8H9lmDbLYB8s%2BheS%2FkflHK0jinVWrNCQvT5aXsoKMKigxBLUO8uknHeSRgzx1EPOjepsFnQ7vNDkVjPlh5HWiIAq6lLkRcxe6PnI2tTdElg7B1BDMbCE1W1iXXx42L8HkP8GulbDcgc0mxHlvC31eohAEhSUoKEEhCYqMoOiXu1xZ35Z3ubJ56J11%2F6wvlCOd9bbprs56IiHb6TG5OI3GeXbnPNbFUb3lt4UfdWjgL3TbzZAFIW%2FTdsvzO8znzaYPK0tIWzvZdlNOyIvPf4FUTsgT7TFCug%2Br9sHkRdDcAy1Gbd8FXRsFHRebydhz%2FSAThjaYjsF1iTSbQ7bhbKtj8tzJiV469zsEO7hy74Xxee%2Flv8BMidSU%2BFj%2BTNBTd0Y3dEF2bujCkh9W00zGcpNOz3czo5k4d%2B8dsVFow5ev2uG3b7ApMR3Ht4TNVmjCZdKz5LtFybkwS9owQX5cth%2BI8Hpu1xZzk%2BTpyvU3l5bj1AhrpU4qUHm4%2Bg%2BYnJC5Tx6cPMynf%2F0M0lQweYk4PyBnBan3wdIt2HTm3moCo2aaMK2hyMuR8cPZTyUJlJhhGpaw%2F8PhbN62d9AzNdDsNpK4RN%2BU6KsSVA1h8wujLDUHV375elrfIFS1UahMbSdURn01jfbhab5WHtUZcwX1wrYnBBfNBcaCFuuErWghaItOkzeR2Yl46tbhvwAAAP%2F%2FAQAA%2F%2F95SUpFagQAAA%3D%3D
173.233.137.44 7 B URL pretencepeppermint.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRidvbgIoYBESAhBcVAgkNB5d733ixQRJhhZmDgkQdCh2ZnZ8%2BDZndXM7u3ZlSEIpaA46KBav7NjEU4R%2FAFEaE2DLJB8nSXiAomCGimiRGdbHPmk1fe9fa943%2Fvm8%2B38mLjI6dHSu3pTKkXnmw23%2FsqHnne5viKTfFAfdFoftYLLddN%2F3XO7DffV%2BtuCret53%2FVc13O9%2BpI0ItKDec%2FzGi5kOu56ja7bCPyG1wwwMI9jmzuw1AHvH5NLkHxyYXw%2FgGQVkvj7q8KuZzp97a04VzTTBn2%2B936ynugiQTwbI%2BMgSvbO1ND2cOkBdLJ7Yhi6%2F58wlBPi%2FPkHwmTvzCXC%2Fu6p0VBBJAj5kyj6FYSqIGkFpm9D8kMCMI5rq0jiu9e0KejGKUun7ITMPfobspiQuYfPIInvLyo5qN%2FUKs%2BkTiwGUQk5qCB7FdJ8H9lmDbLYB8s%2BheS%2FkflHK0jinVWrNCQvT5aXsoKMKigxBLUO8uknHeSRgzx1EPOjepsFnQ7vNDkVjPlh5HWiIAq6lLkRcxe6PnI2tTdElg7B1BDMbCE1W1iXXx42L8HkP8GulbDcgc0mxHlvC31eohAEhSUoKEEhCYqMoOiXu1xZ35Z3ubJ56J11%2F6wvlCOd9bbprs56IiHb6TG5OI3GeXbnPNbFUb3lt4UfdWjgL3TbzZAFIW%2FTdsvzO8znzaYPK0tIWzvZdlNOyIvPf4FUTsgT7TFCug%2Br9sHkRdDcAy1Gbd8FXRsFHRebydhz%2FSAThjaYjsF1iTSbQ7bhbKtj8tzJiV469zsEO7hy74Xxee%2Flv8BMidSU%2BFj%2BTNBTd0Y3dEF2bujCkh9W00zGcpNOz3czo5k4d%2B8dsVFow5ev2uG3b7ApMR3Ht4TNVmjCZdKz5LtFybkwS9owQX5cth%2BI8Hpu1xZzk%2BTpyvU3l5bj1AhrpU4qUHm4%2Bg%2BYnJC5Tx6cPMynf%2F0M0lQweYk4PyBnBan3wdIt2HTm3moCo2aaMK2hyMuR8cPZTyUJlJhhGpaw%2F8PhbN62d9AzNdDsNpK4RN%2BU6KsSVA1h8wujLDUHV375elrfIFS1UahMbSdURn01jfbhab5WHtUZcwX1wrYnBBfNBcaCFuuErWghaItOkzeR2Yl46tbhvwAAAP%2F%2FAQAA%2F%2F95SUpFagQAAA%3D%3D
IP 173.233.137.44:0
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRidvbgIoYBESAhBcVAgkNB5d733ixQRJhhZmDgkQdCh2ZnZ8%2BDZndXM7u3ZlSEIpaA46KBav7NjEU4R%2FAFEaE2DLJB8nSXiAomCGimiRGdbHPmk1fe9fa943%2Fvm8%2B38mLjI6dHSu3pTKkXnmw23%2FsqHnne5viKTfFAfdFoftYLLddN%2F3XO7DffV%2BtuCret53%2FVc13O9%2BpI0ItKDec%2FzGi5kOu56ja7bCPyG1wwwMI9jmzuw1AHvH5NLkHxyYXw%2FgGQVkvj7q8KuZzp97a04VzTTBn2%2B936ynugiQTwbI%2BMgSvbO1ND2cOkBdLJ7Yhi6%2F58wlBPi%2FPkHwmTvzCXC%2Fu6p0VBBJAj5kyj6FYSqIGkFpm9D8kMCMI5rq0jiu9e0KejGKUun7ITMPfobspiQuYfPIInvLyo5qN%2FUKs%2BkTiwGUQk5qCB7FdJ8H9lmDbLYB8s%2BheS%2FkflHK0jinVWrNCQvT5aXsoKMKigxBLUO8uknHeSRgzx1EPOjepsFnQ7vNDkVjPlh5HWiIAq6lLkRcxe6PnI2tTdElg7B1BDMbCE1W1iXXx42L8HkP8GulbDcgc0mxHlvC31eohAEhSUoKEEhCYqMoOiXu1xZ35Z3ubJ56J11%2F6wvlCOd9bbprs56IiHb6TG5OI3GeXbnPNbFUb3lt4UfdWjgL3TbzZAFIW%2FTdsvzO8znzaYPK0tIWzvZdlNOyIvPf4FUTsgT7TFCug%2Br9sHkRdDcAy1Gbd8FXRsFHRebydhz%2FSAThjaYjsF1iTSbQ7bhbKtj8tzJiV469zsEO7hy74Xxee%2Flv8BMidSU%2BFj%2BTNBTd0Y3dEF2bujCkh9W00zGcpNOz3czo5k4d%2B8dsVFow5ev2uG3b7ApMR3Ht4TNVmjCZdKz5LtFybkwS9owQX5cth%2BI8Hpu1xZzk%2BTpyvU3l5bj1AhrpU4qUHm4%2Bg%2BYnJC5Tx6cPMynf%2F0M0lQweYk4PyBnBan3wdIt2HTm3moCo2aaMK2hyMuR8cPZTyUJlJhhGpaw%2F8PhbN62d9AzNdDsNpK4RN%2BU6KsSVA1h8wujLDUHV375elrfIFS1UahMbSdURn01jfbhab5WHtUZcwX1wrYnBBfNBcaCFuuErWghaItOkzeR2Yl46tbhvwAAAP%2F%2FAQAA%2F%2F95SUpFagQAAA%3D%3D HTTP/1.1
Host: pretencepeppermint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=17942715; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec5c8996e8e3cb5e10b7fd36115b800ac7=[2229337]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 21:12:49 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 946295fb9149f25b8237167a8ac02c9a
Strict-Transport-Security: max-age=0; includeSubdomains
influencedfable.com/pixel/purst?dl=0&th=0&sc=0&rs=9912&rd=9912&fd=611&bv=22.10.v.10&tmpl=136
173.233.137.52 0 B URL influencedfable.com/pixel/purst?dl=0&th=0&sc=0&rs=9912&rd=9912&fd=611&bv=22.10.v.10&tmpl=136
IP 173.233.137.52:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/purst?dl=0&th=0&sc=0&rs=9912&rd=9912&fd=611&bv=22.10.v.10&tmpl=136 HTTP/1.1
Host: influencedfable.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 21:12:49 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
ocsp.pki.goog/gts1c3
142.250.74.99 471 B IP 142.250.74.99:0
Hash d82f304bb3184a26ae49e14ad4d87091
2caa05bdfd03064e8f336795d17b8f0070b24fe4
b51043325f565bc1b55e5c5baf171a375b07ce61dccb39b7ba273da508d0f328
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 21:12:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-06ZNKL8C2E&cid=60023536.1695503568>m=45je39k2&aip=1&z=391251863
216.58.207.195 42 B URL www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-06ZNKL8C2E&cid=60023536.1695503568>m=45je39k2&aip=1&z=391251863
IP 216.58.207.195:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-06ZNKL8C2E&cid=60023536.1695503568>m=45je39k2&aip=1&z=391251863 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 23 Sep 2023 21:12:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.99 471 B IP 142.250.74.99:0
Hash d82f304bb3184a26ae49e14ad4d87091
2caa05bdfd03064e8f336795d17b8f0070b24fe4
b51043325f565bc1b55e5c5baf171a375b07ce61dccb39b7ba273da508d0f328
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 21:12:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je39k2&_p=320497904&cid=60023536.1695503568&ul=en-us&sr=1280x1024&sid=1695503567&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&dt=Full%20video%20of%20kulhad%20Pizza.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=4
216.239.34.36 0 B URL region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je39k2&_p=320497904&cid=60023536.1695503568&ul=en-us&sr=1280x1024&sid=1695503567&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&dt=Full%20video%20of%20kulhad%20Pizza.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=4
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-06ZNKL8C2E>m=45je39k2&_p=320497904&cid=60023536.1695503568&ul=en-us&sr=1280x1024&sid=1695503567&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&dt=Full%20video%20of%20kulhad%20Pizza.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=4 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 380
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://www.1024tera.com
date: Sat, 23 Sep 2023 21:12:53 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
v-jp.1024tera.com/video/netdisk-videotran-tky/10a32936cc1699e3461fe42545a85225_1138_1_ts/84f0be92b40af14b4cf026586c47e7dc?ts_size=5461212&app_id=250528&ccn=NO&csl=0&dp-logid=409721588353662377&fn=Full+video+of+kulhad+Pizza.mp4&from_type=3&fsid=723832290885977&isplayer=1&iv=2&logid=409721588353662377&ouk=4401850068249&r=188312234&size=92588548&sta_cs=1494656&sta_dt=video&sta_dx=88&time=1695532368&to=bh03&tot=ctoTn&uo=any&uva=2477845869&vuk=&dtime=10&etag=84f0be92b40af14b4cf026586c47e7dc&fid=a372cd754092d389294d9f50e9896fea-&len=473008&range=1775284-2248291®ion=tky&sign=BOUTHNF-F3530edecde9cd71b79378b290804a96-CZBpoENpIZwuxIln25UbujszbZo%253D&need_suf=&pmk=140084f0be92b40af14b4cf026586c47e7dc9cc5f70f0000005354dc&by=my-streaming
111.108.51.87 473 kB URL v-jp.1024tera.com/video/netdisk-videotran-tky/10a32936cc1699e3461fe42545a85225_1138_1_ts/84f0be92b40af14b4cf026586c47e7dc?ts_size=5461212&app_id=250528&ccn=NO&csl=0&dp-logid=409721588353662377&fn=Full+video+of+kulhad+Pizza.mp4&from_type=3&fsid=723832290885977&isplayer=1&iv=2&logid=409721588353662377&ouk=4401850068249&r=188312234&size=92588548&sta_cs=1494656&sta_dt=video&sta_dx=88&time=1695532368&to=bh03&tot=ctoTn&uo=any&uva=2477845869&vuk=&dtime=10&etag=84f0be92b40af14b4cf026586c47e7dc&fid=a372cd754092d389294d9f50e9896fea-&len=473008&range=1775284-2248291®ion=tky&sign=BOUTHNF-F3530edecde9cd71b79378b290804a96-CZBpoENpIZwuxIln25UbujszbZo%253D&need_suf=&pmk=140084f0be92b40af14b4cf026586c47e7dc9cc5f70f0000005354dc&by=my-streaming
IP 111.108.51.87:0
ASN #2516 KDDI CORPORATION
Size 473 kB (473008 bytes)
Hash 089d3ccac3ee40173260589144b1f935
43f969741e2b7f48e0af05c47c8ffbd1418b2526
22ad75c1576ea5097033286224cbd31eaee61bc8e4aa56a8214cce66303b7575
GET /video/netdisk-videotran-tky/10a32936cc1699e3461fe42545a85225_1138_1_ts/84f0be92b40af14b4cf026586c47e7dc?ts_size=5461212&app_id=250528&ccn=NO&csl=0&dp-logid=409721588353662377&fn=Full+video+of+kulhad+Pizza.mp4&from_type=3&fsid=723832290885977&isplayer=1&iv=2&logid=409721588353662377&ouk=4401850068249&r=188312234&size=92588548&sta_cs=1494656&sta_dt=video&sta_dx=88&time=1695532368&to=bh03&tot=ctoTn&uo=any&uva=2477845869&vuk=&dtime=10&etag=84f0be92b40af14b4cf026586c47e7dc&fid=a372cd754092d389294d9f50e9896fea-&len=473008&range=1775284-2248291®ion=tky&sign=BOUTHNF-F3530edecde9cd71b79378b290804a96-CZBpoENpIZwuxIln25UbujszbZo%253D&need_suf=&pmk=140084f0be92b40af14b4cf026586c47e7dc9cc5f70f0000005354dc&by=my-streaming HTTP/1.1
Host: v-jp.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:49 GMT
Content-Type: application/octet-stream
Connection: keep-alive
Cache-Control: max-age=259200
ETag: 84f0be92b40af14b4cf026586c47e7dc
x-bs-client-ip: OTEuOTAuNDIuMTU0
x-bs-request-id: MTAuMjUyLjc2LjI0OjIwNDU6NjE3NDMyOTQ0NTkyODQ1MzE3NzoyMDIzLTA5LTI0IDA1OjEyOjQ5
x-bs-file-size: 5461212
Content-Length: 473008
x-bs-meta-crc32: 2630219535
Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length, ETag, x-bs-request-id
Access-Control-Allow-Origin: https://www.1024tera.com
Last-Modified: Fri, 22 Sep 2023 20:54:52 GMT
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: HEAD, GET, OPTIONS, PUT, POST, DELETE
Access-Control-Allow-Headers: Range, Origin, Content-Type, Accept, Content-Length
Content-MD5: 84f0be92b40af14b4cf026586c47e7dc
superfile: 2
Accept-Ranges: bytes
Server: TERABOX UI
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/video-fail-bg.b77a1e8a.png
90.84.161.19 105 kB URL s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/video-fail-bg.b77a1e8a.png
IP 90.84.161.19:0
File type PNG image data, 980 x 438, 4-bit colormap, non-interlaced\012- data
Size 105 kB (104817 bytes)
Hash b77a1e8a238d4e4191ff9e8a80d6d86d
30d6d726f8f3bfac5770d3ba9ac464f36b4c51b3
73af449450a319a9c3b28782e4bfa3ed17e6b5f7c04a834dba21f96dd0f28949
GET /fe-opera-static/node-static-v4/fe-webv4-main/img/video-fail-bg.b77a1e8a.png HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 23 Sep 2023 21:12:54 GMT
content-type: image/png
content-length: 104817
server: openresty
age: 18550269
content-md5: t3oeiiONTkGR/56KgNbYbQ==
etag: "b77a1e8a238d4e4191ff9e8a80d6d86d"
expires: Wed, 15 Feb 2023 22:47:56 GMT
last-modified: Fri, 10 Feb 2023 07:43:39 GMT
x-ccdn-cachettl: 2592000
x-ccdn-expires: 2194998
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE3[3],EU-GER-frankfurt-EDGE5-CACHE1[0,TCP_HIT,2],EU-GER-frankfurt-GLOBAL1-CACHE2[3],EU-GER-frankfurt-GLOBAL1-CACHE8[0,TCP_HIT,2]
x-bce-content-crc32: 4025551842
x-bce-debug-id: GU0GXuuVmHD1E2Z4twTBIaO14v2edTIrZIjjemDK7yWOsY+HCIeciS9bgQOAOSIWMUxPucybY5m7VzvcBt1c3A==
x-bce-request-id: 47c77fdc-17bf-44d4-8c6d-c40c7548a183
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
accept-ranges: bytes
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?errno=undefined&errormsg=Unable%20to%20connect%20to%20the%20Internet%2C%20please%20connect%20and%20try%20again&type=videoplayer_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503574970
111.108.51.117 43 B URL www.1024tera.com/api/analytics?errno=undefined&errormsg=Unable%20to%20connect%20to%20the%20Internet%2C%20please%20connect%20and%20try%20again&type=videoplayer_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503574970
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash 712d8746b1882f50c3ec3b7c0180b413
029de9346b445d9e599b065721cc861541fa8e9f
d690e424d63202e912e8179c7fb80e03b10eec7df7a6464d1c13b957698fc4ca
GET /api/analytics?errno=undefined&errormsg=Unable%20to%20connect%20to%20the%20Internet%2C%20please%20connect%20and%20try%20again&type=videoplayer_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503574970 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207; _ga_06ZNKL8C2E=GS1.1.1695503567.1.0.1695503569.58.0.0; _ga=GA1.1.60023536.1695503568; dom3ic8zudi28v8lr6fgphwffqoz0j6c=ab03d147-5402-4ac0-b993-a21999c8b0df%3A2%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=pretencepeppermint.com; ppu_main_cf9185adb78d21d37ecd6e5db43ab3c4=1; ppu_idelay_cf9185adb78d21d37ecd6e5db43ab3c4=1; ppu_main_1e1bbdc937ccd35cd1897b4e58c7407b=1; ppu_idelay_1e1bbdc937ccd35cd1897b4e58c7407b=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:54 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409723341226806741
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0RYysCSHb+qnFLufkASwb0tAJNxiqBmOmwSixORR4=
Server: nginx
logid: 409723341226806741
Flow-level: 3
www.1024tera.com/api/analytics?type=videoplayer_pause&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503575006
111.108.51.117 43 B URL www.1024tera.com/api/analytics?type=videoplayer_pause&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503575006
IP 111.108.51.117:0
ASN #2516 KDDI CORPORATION
File type JSON data\012- , ASCII text, with no line terminators
Hash ef2e08adb813a83cc11cffc97a2be5b9
0ba386dd0d8954babf8df9a429b690e774acc587
94ed0ca907d1595def65f97cc626b3a823c1b9061f2cea522118bbaa2c9afd85
GET /api/analytics?type=videoplayer_pause&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503575006 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207; _ga_06ZNKL8C2E=GS1.1.1695503567.1.0.1695503575.52.0.0; _ga=GA1.1.60023536.1695503568; dom3ic8zudi28v8lr6fgphwffqoz0j6c=ab03d147-5402-4ac0-b993-a21999c8b0df%3A2%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=pretencepeppermint.com; ppu_main_cf9185adb78d21d37ecd6e5db43ab3c4=1; ppu_idelay_cf9185adb78d21d37ecd6e5db43ab3c4=1; ppu_main_1e1bbdc937ccd35cd1897b4e58c7407b=1; ppu_idelay_1e1bbdc937ccd35cd1897b4e58c7407b=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:54 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409723360987762218
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaSsGSnb+qnFLufkASwb2tAJOwyqBmem0AJJ9
Server: nginx
logid: 409723360987762218
Flow-level: 3
unseenreport.com/pxf.gif?uuid=ab03d147-5402-4ac0-b993-a21999c8b0df&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=14.2079&b_frame=0&pk=1e1bbdc937ccd35cd1897b4e58c7407b&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=21
192.243.61.225 1 B URL unseenreport.com/pxf.gif?uuid=ab03d147-5402-4ac0-b993-a21999c8b0df&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=14.2079&b_frame=0&pk=1e1bbdc937ccd35cd1897b4e58c7407b&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=21
IP 192.243.61.225:0
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=ab03d147-5402-4ac0-b993-a21999c8b0df&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=14.2079&b_frame=0&pk=1e1bbdc937ccd35cd1897b4e58c7407b&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=21 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 21:12:55 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 231d6814290404acc9caf74032c70612
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=ab03d147-5402-4ac0-b993-a21999c8b0df&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=14.2079&b_frame=0&pk=cf9185adb78d21d37ecd6e5db43ab3c4&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=21
192.243.61.225 1 B URL unseenreport.com/pxf.gif?uuid=ab03d147-5402-4ac0-b993-a21999c8b0df&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=14.2079&b_frame=0&pk=cf9185adb78d21d37ecd6e5db43ab3c4&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=21
IP 192.243.61.225:0
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=ab03d147-5402-4ac0-b993-a21999c8b0df&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&dev=e&res=14.2079&b_frame=0&pk=cf9185adb78d21d37ecd6e5db43ab3c4&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=21 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 23 Sep 2023 21:12:55 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 81356b38feebfc5d1fee8798a6d15426
Strict-Transport-Security: max-age=0; includeSubdomains
www.1024tera.com/rest/2.0/membership/proxy/user?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710006&client=web&pass_version=2.8&lang=en&clientfrom=h5&pcftoken=ae038ebc4fa2f6304a4db080e6d5a868&method=query&membership_version=1.0
111.108.51.117200 OK 83 B URL GET HTTP/1.1 www.1024tera.com/rest/2.0/membership/proxy/user?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710006&client=web&pass_version=2.8&lang=en&clientfrom=h5&pcftoken=ae038ebc4fa2f6304a4db080e6d5a868&method=query&membership_version=1.0
IP 111.108.51.117:443
ASN #2516 KDDI CORPORATION
Requested by https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 0e96bef61ef8db7869f25139aca29b13
aebe7cf2126eb166e3a9b0993b4da0bc73fa18be
81633c4830d24f5fe4a59df40940772a2963c0eec8b19f547d8a9249d7748955
GET /rest/2.0/membership/proxy/user?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=2EBED66DCFD27086649E30F8B89303B87A75E27512D67BB3582BA7120769BD5B9299C3B38A9F3C2470199516E81D14A8A652B74E3E7FD3361E6F9FE4A57753BF174FBDC0D284C0A3C116797F4D2CE8F2975FD865479A3435080668BE90A583F8&dp-logid=65520200788533710006&client=web&pass_version=2.8&lang=en&clientfrom=h5&pcftoken=ae038ebc4fa2f6304a4db080e6d5a868&method=query&membership_version=1.0 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:46 GMT
Content-Type: application/json; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 409721026323015093
Http-X-Isis-Logid: 409721026323015093
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaCsESm7iq29Xvv4cVAPxrh5NwCqBmOW4zA==
Server: nginx
logid: 409721026323015093
Flow-level: 3
Content-Encoding: gzip
www.1024tera.com/api/analytics?type=terabox_sharing_link_js_error_p2&sessionId=655202&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&title=unhandledrejection%3A%7B%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&msg=%7B%7D&stack=%5B%7B%22columnNumber%22%3A18998%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22webGlInfo%22%2C%22source%22%3A%22webGlInfo%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A18998%22%7D%2C%7B%22columnNumber%22%3A21970%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22source%22%3A%22%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A21970%22%7D%2C%7B%22columnNumber%22%3A20619%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22promise%20callback*%22%2C%22source%22%3A%22promise%20callback*%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A20619%22%7D%5D
111.108.51.117200 OK 43 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=terabox_sharing_link_js_error_p2&sessionId=655202&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&title=unhandledrejection%3A%7B%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&msg=%7B%7D&stack=%5B%7B%22columnNumber%22%3A18998%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22webGlInfo%22%2C%22source%22%3A%22webGlInfo%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A18998%22%7D%2C%7B%22columnNumber%22%3A21970%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22source%22%3A%22%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A21970%22%7D%2C%7B%22columnNumber%22%3A20619%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22promise%20callback*%22%2C%22source%22%3A%22promise%20callback*%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A20619%22%7D%5D
IP 111.108.51.117:443
ASN #2516 KDDI CORPORATION
Requested by https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash f718cefcefb982088ecf1b4943e28a41
860d0b3ca3d49e9316e5e6a1cc7c4326c2fb8b16
8980eb359dedf981367eec15f9e2ff385cb8254aa15b63ecb94a587c8fc4cde0
GET /api/analytics?type=terabox_sharing_link_js_error_p2&sessionId=655202&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A109.0)%20Gecko%2F20100101%20Firefox%2F111.0&title=unhandledrejection%3A%7B%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&msg=%7B%7D&stack=%5B%7B%22columnNumber%22%3A18998%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22webGlInfo%22%2C%22source%22%3A%22webGlInfo%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A18998%22%7D%2C%7B%22columnNumber%22%3A21970%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22source%22%3A%22%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A21970%22%7D%2C%7B%22columnNumber%22%3A20619%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22promise%20callback*%22%2C%22source%22%3A%22promise%20callback*%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A20619%22%7D%5D HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:46 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409720956483060414
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QEsSdTcNUmr/tG1MvuUZTRz2ogpNwyaCivGjGw90aC/uXJ5f3A==
Server: nginx
logid: 409720956483060414
Flow-level: 3
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/apple.min.js
90.84.161.19200 OK 42 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/apple.min.js
IP 90.84.161.19:443
Requested by https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/apple.min.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 21:12:44 GMT
content-type: application/javascript
server: openresty
age: 18553421
content-md5: FF9mC4xH7SHLDq/gVBei9Q==
etag: W/"145f660b8c47ed21cb0eafe05417a2f5"
expires: Sun, 05 Feb 2023 11:19:03 GMT
last-modified: Thu, 02 Feb 2023 02:44:27 GMT
x-ccdn-cachettl: 2592000
x-ccdn-expires: 2182825
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE3[19],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE6[3],EU-GER-frankfurt-GLOBAL1-CACHE2[0,TCP_HIT,2]
x-bce-content-crc32: 3041762371
x-bce-debug-id: GooNofUHCftVSaaHEC+AzAr4FYXPEZIzOsKJwWjn94XbPwUKv4MuSNK5CZJOH/HsmlldVHL9LxC5wuj+MNetYw==
x-bce-request-id: 96560a78-91ad-47e1-a285-8df2f8efcb9d
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-85a0b4e6.baf38182.js
90.84.161.19200 OK 26 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-85a0b4e6.baf38182.js
IP 90.84.161.19:443
Requested by https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-85a0b4e6.baf38182.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 21:12:45 GMT
content-type: application/javascript
server: openresty
age: 219628
content-md5: TUrkrWTXpdF4/XEJwKi4LQ==
etag: W/"4d4ae4ad64d7a5d178fd7109c0a8b82d"
expires: Sun, 24 Sep 2023 07:55:27 GMT
last-modified: Wed, 20 Sep 2023 12:31:44 GMT
x-ccdn-cachettl: 2592000
x-ccdn-expires: 2372550
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE3[1],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE7[23],EU-GER-frankfurt-GLOBAL1-CACHE11[0,TCP_HIT,21]
x-bce-content-crc32: 3218286641
x-bce-debug-id: H/wQ3f172hbQfJCF97Wk2k95j8UqatgszaeXIrKAJkUcpy3CxdOo8XL6vWH/K/RaZJd1YVFUEmOP+t+YQqVkrg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 0f78fcb9-0fd1-4039-b15b-892684e980a7
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?domain=www.1024tera.com&type=web_domain_heart_beat&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503565537
111.108.51.117200 OK 43 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domain=www.1024tera.com&type=web_domain_heart_beat&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503565537
IP 111.108.51.117:443
ASN #2516 KDDI CORPORATION
Requested by https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 6ec707219aca7e70132a9abf7a985004
7d42544018bbb3c2bea22db4b5ad4cc8aefb04f4
d6c01bc20f6941c53ff772569d5c802a7fa4b0155d4b392bef9862cdd89c86d4
GET /api/analytics?domain=www.1024tera.com&type=web_domain_heart_beat&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DGQcNgPUrGx549MAcEh25eQ&client=web&t=1695503565537 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Cookie: csrfToken=JC1ltAW1dwCjpZDjMjght3oU; browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; lang=en; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 21:12:46 GMT
Content-Type: image/jpeg; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
yld: 409721102812575878
Cache-Control: no-cache
X-Powered-By: DuboxServer
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0RYysCSHb+qnFLufkASwb2tAJOwSqBmO6yPCVXTwOTRHFmVjY=
Server: nginx
logid: 409721102812575878
Flow-level: 3
sofire.terabox.com/edkey
210.148.85.32200 OK 361 B IP 210.148.85.32:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Certificate IssuerDigiCert Inc
Subject*.terabox.com
Fingerprint4F:30:79:83:60:E0:58:E8:DA:05:09:38:E1:6D:CD:F9:46:33:D6:5F
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (385), with no line terminators
Hash 6bd50e1fbdba5835fcdf102fe77383f2
e75d083de1efa94163cbfd66cf87086b5a4fb735
2a7b283027ff581d42e7320d778ec5d5bfd3c45e3eafd700cf7fdd2518edd118
POST /edkey HTTP/1.1
Host: sofire.terabox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.1024tera.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 64
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 23 Sep 2023 21:12:46 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 409721173520832758
Access-Control-Allow-Origin: *
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WYisBTnb+qnFLufkASwH9tAJMxyqLmOWx
logid: 409721173520832758
Flow-level: 3
Content-Encoding: gzip
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/logo.2a229dfa.svg
90.84.161.19200 OK 1.7 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/logo.2a229dfa.svg
IP 90.84.161.19:443
Requested by https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1803), with no line terminators
Hash 6feaced15ff9be12e05764b143000131
32004f97b37bc3ab736a851b9ea1417cde07bfbd
971bcedc7d5dc3db830ff3e52b3a6b98e9e38c55f6b4cb075e797c7f9a7e326b
GET /fe-opera-static/node-static-v4/fe-webv4-main/img/logo.2a229dfa.svg HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 21:12:47 GMT
content-type: image/svg+xml
content-length: 1713
server: openresty
age: 18553171
content-md5: KiKd+lU0j8hL5nj5JjMGFg==
etag: "2a229dfa55348fc84be678f926330616"
expires: Sat, 24 Sep 2022 06:46:17 GMT
last-modified: Wed, 21 Sep 2022 05:03:27 GMT
x-ccdn-cachettl: 2592000
x-ccdn-expires: 2183471
nginx-hit: 1
via: EU-GER-frankfurt-EDGE5-CACHE3[2],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE4[19],EU-GER-frankfurt-GLOBAL1-CACHE14[0,TCP_HIT,17],EA-SGP-GLOBAL1-CACHE17[2],EA-SGP-GLOBAL1-CACHE26[0,TCP_HIT,2]
x-bce-content-crc32: 1353669740
x-bce-debug-id: NAe6EO3wT96ak0qPNr/yE8+RuLbHz64z8I5FDCDIACxRHRvP8Rcs1CH0CzIO18cwCQo293KSx7/0Hh+Zyx0VZQ==
x-bce-request-id: 3ccd90bb-d04d-43f8-a561-47d04dd6edbb
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-hcs-proxy-type: 1
accept-ranges: bytes
access-control-allow-origin: *
X-Firefox-Spdy: h2
sofire.1024tera.com/h5/t
210.148.85.53200 OK 633 B IP 210.148.85.53:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (657), with no line terminators
Hash 76f64da7229805b3c251359395030ce4
04f579a8dd653b0a8b68869cbb770b84c08d0378
ea39d1e3c148f4b58f96fa0fd4ee162110a1a9b99639b9b48a84e6956e9efcee
POST /h5/t HTTP/1.1
Host: sofire.1024tera.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 3790
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: browserid=dZN3IY8LjrQOFu5qiLb6jfgvDGOqjEVBz-vOtgkfMsvUAFKKThyAGcNQYcI=; TSID=Zt5fibiqh8kkuRJ3PfWlOMSrhjPFXdoB; __bid_n=18ac3e340ae949ea894207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 23 Sep 2023 21:12:46 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 409721068733373940
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type,AccessToken,X-CSRF-Token,X-Bdh5-Pf,X-XSRF-TOKEN, Authorization
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Expose-Headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Content-Type
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaCsHT27iq29Xvv4cVAPxqR5NwCSJkO25Twmufg==
logid: 409721068733373940
Flow-level: 3
Content-Encoding: gzip
friendshipmale.com/sfp.js
172.64.135.5200 OK 86 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP 172.64.135.5:443
Requested by https://www.1024tera.com/sharing/link?surl=GQcNgPUrGx549MAcEh25eQ
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 23 Sep 2023 21:12:49 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: a2d2a29137ceb886f7ab08649688dceb
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Sat, 23 Sep 2023 21:12:49 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=35QXDCds7mhasLUc9WJOVhK9JVZDujlZW59PDuQIIwKWyYq6RqOvXWSm5hahsWr9kd8aZZU%2FfQxXRL8gCm5Eulb0C26rCSXuVdi9Hb6nmjrd2zADzZXnmTkGqYSNzYWuj3OYjJU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b5c9bdee0555ea-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2