teraboxapp.com/s/1qAYlpUl88nwicXE0VJn3vA
210.148.85.41302 Found 0 B URL User Request GET HTTP/1.1 teraboxapp.com/s/1qAYlpUl88nwicXE0VJn3vA
IP 210.148.85.41:443
ASN #2497 Internet Initiative Japan Inc.
Certificate IssuerDigiCert, Inc.
Subject*.teraboxapp.com
FingerprintD7:46:7C:B3:43:3C:83:85:02:0F:C7:6C:30:CE:7B:C5:F4:8A:64:84
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/1qAYlpUl88nwicXE0VJn3vA HTTP/1.1
Host: teraboxapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Cache-Control: no-cache
Connection: keep-alive
Content-Type: text/html
Date: Tue, 05 Dec 2023 10:49:03 GMT
Flow-Level: 3
Location: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Logid: 9010280486393007425
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Pragma: no-cache
Server: nginx
Set-Cookie: shareRedirectDomain=1024tera.com; expires=Sat, 03-Feb-2024 10:49:03 GMT; path=/; httponly
PANWEB=1; expires=Wed, 04-Dec-2024 10:49:03 GMT; path=/; domain=teraboxapp.com
X-Powered-By: DuboxServer
Yld: 9010280486393007425
Content-Length: 0
teraboxapp.com/
210.148.85.41 4.2 kB IP 210.148.85.41:0
ASN #2497 Internet Initiative Japan Inc.
Certificate IssuerDigiCert, Inc.
Subject*.teraboxapp.com
FingerprintD7:46:7C:B3:43:3C:83:85:02:0F:C7:6C:30:CE:7B:C5:F4:8A:64:84
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4523)
Hash 20361d85a9b43c773e5e66911fd05284
840952a2907b1f59b3dbed6c726e69cc2922320f
099bbef3d925d0dbd16b0306cb61d1ef691ce35bf3f243913420bc826210d133
GET / HTTP/1.1
Host: teraboxapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Connection: keep-alive
Content-Encoding: gzip
Content-Type: text/html
Date: Tue, 05 Dec 2023 10:49:05 GMT
Logid: 9010281117017953512
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 9010281117017953512
Yme: ZIGW+Ss3QEobdTcH
Transfer-Encoding: chunked
www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
210.148.85.59200 OK 62 kB URL User Request GET HTTP/1.1 www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (49317)
Hash 9d65c28a717b953df121a8692a4def88
3740755631382ddb425800b8e0f7ab666d6d8585
b7885f33b8a434eb3dd02088d2fb24530e35d969eae07b147d916d4444761b88
GET /sharing/link?surl=qAYlpUl88nwicXE0VJn3vA HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: text/html; charset=utf-8
Date: Tue, 05 Dec 2023 10:49:05 GMT
Flow-Level: 3
Logid: 9010280888638682035
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Set-Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; path=/
browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; path=/; max-age=5184000; expires=Sat, 03 Feb 2024 10:49:04 GMT; domain=.1024tera.com
lang=en; path=/; max-age=2592000; expires=Thu, 04 Jan 2024 10:49:04 GMT
TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; path=/; max-age=31536000; expires=Wed, 04 Dec 2024 10:49:05 GMT; domain=.1024tera.com
Strict-Transport-Security: max-age=172800
Vary: Accept-Encoding, Accept-Encoding
X-Conteneur-Nom: wrVGGgAfwpIFFhXCusOVwp7Dtw4qwo5abnPDo8O+w63DkQ1hw7PCsMO7w67DoALCmHDDi0cnXMKmd1jCtRV6J8KIMMOkw6gbRVfChMKgwrA=
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Flow-Level: 3
X-Frame-Options: SAMEORIGIN
X-Powered-By: TeraBox
X-Readtime: 378
X-Request-Id: 9010280888638682035
X-Xss-Protection: 1; mode=block
Yld: 9010280888638682035
Yme: ZIGW+Ss3QEsQdTEHUmr/tG1MvuUZTBz3rQpHyyGB
Transfer-Encoding: chunked
www.1024tera.com/ndbs/nd_bundle_430546.js
210.148.85.59200 OK 66 kB URL GET HTTP/1.1 www.1024tera.com/ndbs/nd_bundle_430546.js
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (36757)
Hash 2be70342e4695e6c13d04f9906e47635
6f4596c9cd37089ead6715fd3553c0845f1158d3
f731296cced4c20e1f9e24e3080faa044bd0fad2f8f64adf026a75038adecce8
GET /ndbs/nd_bundle_430546.js HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/x-javascript
Date: Tue, 05 Dec 2023 10:49:05 GMT
Flow-Level: 3
Last-Modified: Mon, 10 Jul 2023 02:21:26 GMT
Logid: 9010281226946618327
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 9010281226946618327
Yme: ZIGW+Ss3QE0WaSsHT2riq29Xvv4cVAT8tAJNySKDmeg=
Transfer-Encoding: chunked
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/fonts/iconfont.4f9f785d.woff
90.84.161.17200 OK 26 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/fonts/iconfont.4f9f785d.woff
IP 90.84.161.17:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type Web Open Font Format, TrueType, length 25804, version 1.0\012- data
Hash 4f9f785d98a8fa208e7f64023e124572
3e8714f56d480cfd66721447975613a1e56ca9e4
27f0ac9cff76f3925b4389a404d01e2fb525bae7b17cafb0c04e5e6bb20ca83b
GET /fe-opera-static/node-static-v4/fe-webv4-main/fonts/iconfont.4f9f785d.woff HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:07 GMT
content-type: application/x-font-woff
content-length: 25804
server: openresty
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Length, x-bce-next-append-offset, x-bce-object-type, x-bce-request-id
access-control-max-age: 1800
content-md5: T594XZio+iCOf2QCPhJFcg==
etag: "4f9f785d98a8fa208e7f64023e124572"
expires: Thu, 09 Feb 2023 02:34:52 GMT
last-modified: Thu, 02 Feb 2023 12:40:59 GMT
x-bce-content-crc32: 4229721389
x-bce-debug-id: 7WiMWIwBpNvCI1l2DEy41X6CYQbfBDD/53hHCbNUgg3chFP5F6R09q6Ha3n+sFI1w5hrFozk3M8ehG3s5jYsKw==
x-bce-request-id: 8ed250a7-98cd-4add-b067-4212e4c8ecd6
x-bce-storage-class: STANDARD
x-ccdn-expires: 1096912
via: EU-GER-frankfurt-EDGE5-CACHE4[3],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,2],EU-GER-frankfurt-GLOBAL1-CACHE11[3],EU-GER-frankfurt-GLOBAL1-CACHE3[0,TCP_HIT,1]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24823204
accept-ranges: bytes
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/loading-grey.0e512ce9.gif
90.84.161.17200 OK 13 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/loading-grey.0e512ce9.gif
IP 90.84.161.17:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type GIF image data, version 89a, 70 x 54\012- data
Hash 0e512ce91474d2c98f524fc9d479bca1
3e95fc024add69d9f13393a9dacbf625d2cf218c
48ed2dfe595001d90ea0bf9c572b15f446fcf49ae4bfa2cac84acc02aef04e17
GET /fe-opera-static/node-static-v4/fe-webv4-main/img/loading-grey.0e512ce9.gif HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:07 GMT
content-type: image/gif
content-length: 12746
server: openresty
content-md5: DlEs6RR00smPUk/J1Hm8oQ==
etag: "0e512ce91474d2c98f524fc9d479bca1"
expires: Sat, 24 Sep 2022 06:46:06 GMT
last-modified: Wed, 21 Sep 2022 05:03:27 GMT
x-bce-content-crc32: 1545165226
x-bce-debug-id: SVLAO6wp1e4OUGFHIRy8Y1IEAIpwP8YBdrzlRjHOGWEqe7/5zemw7PiCsrLuiBtk8Hkvkt7auD0iX4QbNYOajA==
x-bce-request-id: 911c9037-40e0-4339-a273-266bf634f105
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 1097668
via: EU-GER-frankfurt-EDGE5-CACHE4[8],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,1],EU-GER-frankfurt-GLOBAL1-CACHE8[3],EU-GER-frankfurt-GLOBAL1-CACHE4[0,TCP_HIT,2],EA-SGP-GLOBAL1-CACHE24[4],EA-SGP-GLOBAL1-CACHE25[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24823085
accept-ranges: bytes
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?type=web_firebase_init_success_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773354273
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_firebase_init_success_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773354273
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash ab68f50e29f3a6adc93aa612d1ea5db0
268a06f29e166891fd1d06d8ed1ed2958ea2543b
439be561e77203f918f43e6660f0008c260d8bbe4d044e6ff86500afc6153f33
GET /api/analytics?type=web_firebase_init_success_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773354273 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:08 GMT
Flow-Level: 3
Logid: 9010281934031168908
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010281934031168908
Yme: ZIGW+Ss3QE0RYysHT27iq29Xvv4cVAPxox5MxCqBmO2yISb+CiEpO4N0LtwY
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-94864b88.e650f8c9.js
90.84.161.17200 OK 12 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-94864b88.e650f8c9.js
IP 90.84.161.17:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 5221c0e049ee40a843a7b34e6b0cb892
72f2e6261a39b21006eb38a510b1de4d13994199
f2fe79dcbe7012556b40106ee81a869c14ce6cf0c4145354a54000d4f0cc2d4e
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-94864b88.e650f8c9.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:08 GMT
content-type: application/javascript
server: openresty
content-md5: sB8ZXpSwhIEirDMU9TlXIQ==
etag: W/"b01f195e94b0848122ac3314f5395721"
expires: Mon, 22 May 2023 08:06:09 GMT
last-modified: Fri, 19 May 2023 06:11:01 GMT
x-bce-content-crc32: 1763380652
x-bce-debug-id: 6/t1aZ0T4wIW5Mpdrs6rwONcVe50LnzXyMl/KxoZOSjgTHz/QchFlwkYo5YFdGxYjuFFLRMdxpL02NaFeSWQqg==
x-bce-request-id: 3b4dea47-19f8-48e2-a389-1652fd45a67a
x-bce-storage-class: STANDARD
via: EU-GER-frankfurt-EDGE5-CACHE4[2],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[1059],EU-GER-frankfurt-GLOBAL1-CACHE12[774,TCP_MISS,1057]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 17289778
x-ccdn-expires: 958499
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
ymg-api.terabox.com/abdr?_o=https%3A%2F%2Fwww.1024tera.com
210.154.124.151200 OK 181 B URL POST HTTP/1.1 ymg-api.terabox.com/abdr?_o=https%3A%2F%2Fwww.1024tera.com
IP 210.154.124.151:443
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.terabox.com
Fingerprint4F:30:79:83:60:E0:58:E8:DA:05:09:38:E1:6D:CD:F9:46:33:D6:5F
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash cb5c66b75e732cada43c91754f7b5760
11a6b64060d6a8a4e82b0c2cdb26fe507ce5fb02
16fbfb06fbf10493370f199e53e9ce121a8b3f995667d340e6d3c165f933118c
POST /abdr?_o=https%3A%2F%2Fwww.1024tera.com HTTP/1.1
Host: ymg-api.terabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 3552
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 10:49:09 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 9010282079379864217
Ab-Sr: 1.0.1_ZDE5MzE4ZDI5NDkxODViZjVlZDVjOGVlMzQ0ZjhlZDFmNmZmODk5NjBlZDI2NTgwOWE3YmVhMWY0MTAzMWNkYmRhNTQwNTA1ZDQwZjc1OWYxZTljYThhY2I3M2EwM2QxYjhkNGU4NDQyM2FjYTQwMDNhYTMwZTAyOGQ5YzMxZmYyZTY0OTEzYTZlMjhmNDQ0OTNjNzJiN2VmNGI1NWNiMw==
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, Host, Content-Type, x-requested-with, X-Custom-Header
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Expose-Headers: Ab-sr, Authentication
Access-Control-Max-Age: 3600
Authentication: 066e5fd49c9c14db1a56681914aab97d05fca2e095f59c8a
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QEoadTcAUmr/tG1MvuUfSQrrqwdNySiEnuzgEQ5wbg8QTIT73A==
Set-Cookie: ab_jid=223427676c32ecf6aba75c20e6c3a707f739; Path=/; Domain=ymg-api.terabox.com; Max-Age=2147483647; HttpOnly; Secure; SameSite=None
ab_bid=223427676c32ecf6aba75c20e6c3a707f739; Path=/; Domain=ymg-api.terabox.com; Max-Age=2147483647; HttpOnly; Secure; SameSite=None
ab_sr=1.0.1_ZDE5MzE4ZDI5NDkxODViZjVlZDVjOGVlMzQ0ZjhlZDFmNmZmODk5NjBlZDI2NTgwOWE3YmVhMWY0MTAzMWNkYmRhNTQwNTA1ZDQwZjc1OWYxZTljYThhY2I3M2EwM2QxYjhkNGU4NDQyM2FjYTQwMDNhYTMwZTAyOGQ5YzMxZmYyZTY0OTEzYTZlMjhmNDQ0OTNjNzJiN2VmNGI1NWNiMw==; Path=/; Domain=terabox.com; Max-Age=7200; HttpOnly; Secure; SameSite=None
Server: nginx
logid: 9010282079379864217
Flow-level: 3
Content-Encoding: gzip
www.1024tera.com/api/analytics?type=terabox_sharing_link_js_error_p2&sessionId=602323&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&msg=%7B%7D&stack=%5B%7B%22columnNumber%22%3A18998%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22webGlInfo%22%2C%22source%22%3A%22webGlInfo%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A18998%22%7D%2C%7B%22columnNumber%22%3A21970%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22source%22%3A%22%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A21970%22%7D%2C%7B%22columnNumber%22%3A20619%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22promise%20callback*%22%2C%22source%22%3A%22promise%20callback*%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A20619%22%7D%5D
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=terabox_sharing_link_js_error_p2&sessionId=602323&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&msg=%7B%7D&stack=%5B%7B%22columnNumber%22%3A18998%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22webGlInfo%22%2C%22source%22%3A%22webGlInfo%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A18998%22%7D%2C%7B%22columnNumber%22%3A21970%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22source%22%3A%22%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A21970%22%7D%2C%7B%22columnNumber%22%3A20619%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22promise%20callback*%22%2C%22source%22%3A%22promise%20callback*%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A20619%22%7D%5D
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 4233b85b37bacceef269ab36bfe47f4f
8f2b6b59de30e48240e22cf3fb422d81b9ff3b5f
34f14f390945356c3058f4b214ef61864d6df3deb736f2b8ead9ee94cd6398f8
GET /api/analytics?type=terabox_sharing_link_js_error_p2&sessionId=602323&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&msg=%7B%7D&stack=%5B%7B%22columnNumber%22%3A18998%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22webGlInfo%22%2C%22source%22%3A%22webGlInfo%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A18998%22%7D%2C%7B%22columnNumber%22%3A21970%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22source%22%3A%22%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A21970%22%7D%2C%7B%22columnNumber%22%3A20619%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22promise%20callback*%22%2C%22source%22%3A%22promise%20callback*%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A20619%22%7D%5D HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:09 GMT
Flow-Level: 3
Logid: 9010282090366392237
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010282090366392237
Yme: ZIGW+Ss3QE0WYisCTnb+qnFLufkASwf1tAdOySKDmOo=
Content-Length: 44
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200001&language_type=en&cfg_category_keys=%5B%5D&version=0
210.148.85.59200 OK 15 kB URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200001&language_type=en&cfg_category_keys=%5B%5D&version=0
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash d1fb09aced7801baed8a5cbee38457ab
9cb1eb7453db6b06a9f002ec242b447f0ab032ac
b46ee7d6fbb29201a03b78ad356285c2db2dcdd2b12677571ad47c7b633b7a0c
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200001&language_type=en&cfg_category_keys=%5B%5D&version=0 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:09 GMT
Flow-Level: 3
Logid: 9010282183686243634
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 9010282183686243634
Yme: ZIGW+Ss3QE0WaCsHTWniq29Xvv4cVAPxqx5MyiqBmO23
Transfer-Encoding: chunked
www.1024tera.com/rest/1.0/operation/pull?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200006&position=7&lang=en
210.148.85.59200 OK 83 B URL GET HTTP/1.1 www.1024tera.com/rest/1.0/operation/pull?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200006&position=7&lang=en
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash cdac87c4d08fc171836a116d46e6686b
3c910057f749a8d08803bf1f4bdafc59253436b4
3cc54eefd79742c02293cf4cbb549b9372fc5605a7d97d30f8d9c13d7c57c302
GET /rest/1.0/operation/pull?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200006&position=7&lang=en HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: text/plain; charset=utf-8
Date: Tue, 05 Dec 2023 10:49:09 GMT
Flow-Level: 3
Http-X-Isis-Logid: 9010282270355751055
Logid: 9010282270355751055
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 9010282270355751055
Yme: ZIGW+Ss3QEsQdTcEUmr/tG1MvuUfTgvrqwNFwSCEkJ7FRiw6RCebL4iv3A==
Content-Length: 83
sofire.terabox.com/edkey
210.148.85.32200 OK 245 B IP 210.148.85.32:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.terabox.com
Fingerprint4F:30:79:83:60:E0:58:E8:DA:05:09:38:E1:6D:CD:F9:46:33:D6:5F
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (361), with no line terminators
Hash 00d77835e23d49a7c707b96e354823a0
6fb6d6354bc23909b9d99a4eb896f214e897146d
c466f2f193eba22d21898176112e778bf254ba8a66fc4cf901a347e54f17188f
POST /edkey HTTP/1.1
Host: sofire.terabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.1024tera.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 64
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 05 Dec 2023 10:49:10 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 9010282316164845475
Access-Control-Allow-Origin: *
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0XaysET2riq29Xvv4cVAPxqR5NwCSJkO25TzhdSAR8E898usgY
logid: 9010282316164845475
Flow-level: 3
Content-Encoding: gzip
www.1024tera.com/api/analytics?errno=-6&errmsg=&data=null&logid=15714721544521177825&hasError=true¶ms=%7B%22position%22%3A7%2C%22lang%22%3A%22en%22%7D&uk=0&type=%2Frest%2F1.0%2Foperation%2Fpull_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773355844
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&errmsg=&data=null&logid=15714721544521177825&hasError=true¶ms=%7B%22position%22%3A7%2C%22lang%22%3A%22en%22%7D&uk=0&type=%2Frest%2F1.0%2Foperation%2Fpull_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773355844
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash ed70977e7e705fe929eb23781f3882c8
f2fda8985e935d9b1dd5610154f93b1d8394eb96
4a9002cc56ab56210788eb17201925ee9473e88fddfaf5b976f678951edb4f48
GET /api/analytics?errno=-6&errmsg=&data=null&logid=15714721544521177825&hasError=true¶ms=%7B%22position%22%3A7%2C%22lang%22%3A%22en%22%7D&uk=0&type=%2Frest%2F1.0%2Foperation%2Fpull_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773355844 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:10 GMT
Flow-Level: 3
Logid: 9010282355800567381
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010282355800567381
Yme: ZIGW+Ss3QE0WaCsESWPiq29Xvv4cVAPxqx5OwyOJmu2zTno=
Content-Length: 44
www.1024tera.com/share/webmaster/check?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200004&bdstoken=
210.148.85.59200 OK 86 B URL GET HTTP/1.1 www.1024tera.com/share/webmaster/check?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200004&bdstoken=
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 227ed20acf9cd8a78a650bd103c9538a
a3b877fc9dbce64c2995d6af1697982768f6d9b4
ecd5fd94d0d8f115a421bbdd7464252b7ae3d08a0024248bd26fb2459892443e
GET /share/webmaster/check?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200004&bdstoken= HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:10 GMT
Flow-Level: 3
Http-X-Isis-Logid: 9010282380445128174
Logid: 9010282380445128174
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 9010282380445128174
Yme: ZIGW+Ss3QEoadTQGUmr/tG1MvuUZTRz0rQpNwyKEu5bXnhU=
Content-Length: 86
www.1024tera.com/passport/getpubkey?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200003
210.148.85.59200 OK 404 B URL POST HTTP/1.1 www.1024tera.com/passport/getpubkey?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200003
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (466), with no line terminators
Hash a75b984383de52594ec46534c4303184
42a1f1729f4dab68a45da9ac9723c1671d146756
fe31c5cca8384142c5cf4944e2cdc673a6b09e762c0436a368e735ade45f7b2d
POST /passport/getpubkey?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200003 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 91
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/Json; charset=utf-8
Date: Tue, 05 Dec 2023 10:49:10 GMT
Flow-Level: 3
Logid: 9010282373132217849
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 9010282373132217849
Yme: ZIGW+Ss3QE0WbysHS3b+qnFLufkASwbxtAFLxCqBmO+3WUN9
Content-Length: 404
www.1024tera.com/share/linkpaylistpurchaseorder?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200005&page=1&cnt=20
210.148.85.59200 OK 86 B URL GET HTTP/1.1 www.1024tera.com/share/linkpaylistpurchaseorder?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200005&page=1&cnt=20
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 7bcf94f83864e55e2dd1c8230c483ef4
ec4a87df337f3e400b67046e614bc20c8d19ee8b
e8f30892d151ff5f6ebe7609e93c21d3a213ec70ca216c8759950ce501592485
GET /share/linkpaylistpurchaseorder?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200005&page=1&cnt=20 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:10 GMT
Flow-Level: 3
Http-X-Isis-Logid: 9010282382710984309
Logid: 9010282382710984309
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 9010282382710984309
Yme: ZIGW+Ss3QEobdTcHUmr/tG1MvuUZTBz3rQpNwyGCtu5IuRU=
Content-Length: 86
www.1024tera.com/api/analytics?time=3355&type=web_share_page_show_FP_FIRST&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773355021
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?time=3355&type=web_share_page_show_FP_FIRST&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773355021
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 86cca69a2bb2575058edbe22eedca5fb
88f521dcb53f09c422f25bc19364cbb147534729
0af442ea5cf5372fd0010ea1f48ecc73396a485f81d400cbc1d7aac9c59b12d9
GET /api/analytics?time=3355&type=web_share_page_show_FP_FIRST&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773355021 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:10 GMT
Flow-Level: 3
Logid: 9010282389230761003
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010282389230761003
Yme: ZIGW+Ss3QEobdTcHUmr/tG1MvuUZTBz3qQpNwyWA
Content-Length: 44
sofire.1024tera.com/h5/t
210.148.85.53200 OK 585 B IP 210.148.85.53:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (697), with no line terminators
Hash 81d0bca115ac91a6d5c4d46a2776ae23
24beebb875141c6589b35d3c66b8b3e1368d9df5
9a3135585cb135119eeba8f8f8eb388e9cdfaba0e628c8cae240884c260712f3
POST /h5/t HTTP/1.1
Host: sofire.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 3802
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 05 Dec 2023 10:49:10 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 9010282394250338264
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type,AccessToken,X-CSRF-Token,X-Bdh5-Pf,X-XSRF-TOKEN, Authorization
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Expose-Headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Content-Type
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaCsCTnb+qnFLufkASwb2tAJMxyqLmOWxd6IIDJUzRVS7qTY=
logid: 9010282394250338264
Flow-level: 3
Content-Encoding: gzip
www.1024tera.com/rest/2.0/membership/proxy/user?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200007&client=web&pass_version=2.8&lang=en&clientfrom=h5&pcftoken=1cfcba3df9cbcf7ff2a049b5a12adeae&method=query&membership_version=1.0
210.148.85.59200 OK 96 B URL GET HTTP/1.1 www.1024tera.com/rest/2.0/membership/proxy/user?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200007&client=web&pass_version=2.8&lang=en&clientfrom=h5&pcftoken=1cfcba3df9cbcf7ff2a049b5a12adeae&method=query&membership_version=1.0
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 102fe29ff4003544ed34666bff881264
db489dc0785f2094317ea895c3508205fbe0166b
051a2ef92939edf72beac6616d3c2f67499783e5133675d725e4a86e37209d7a
GET /rest/2.0/membership/proxy/user?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200007&client=web&pass_version=2.8&lang=en&clientfrom=h5&pcftoken=1cfcba3df9cbcf7ff2a049b5a12adeae&method=query&membership_version=1.0 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:10 GMT
Flow-Level: 3
Http-X-Isis-Logid: 9010282460926516061
Logid: 9010282460926516061
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 9010282460926516061
Yme: ZIGW+Ss3QE0RYisES2jiq29Xvv4cVAP2oh5MwiqBmOWwehE5fg==
Content-Length: 96
www.1024tera.com/api/ad/getconfig?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200008
210.148.85.59200 OK 85 B URL GET HTTP/1.1 www.1024tera.com/api/ad/getconfig?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200008
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash e78db604914cb313feababaa953673ad
623576064b75fe489dc4cada92281a51e3bc1867
06aff66597e177410d8681f8ac2665bb4e375eac5c3c5e05afa8f72327db602d
GET /api/ad/getconfig?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200008 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:10 GMT
Flow-Level: 3
Http-X-Isis-Logid: 9010282459863669701
Logid: 9010282459863669701
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 9010282459863669701
Yme: ZIGW+Ss3QE0WaCsHTWniq29Xvv4cVAPxqB5NwiqBmOy4c5Fzfg==
Content-Length: 85
www.1024tera.com/api/analytics?time=3712&type=web_share_page_show_FP_SECOND&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773355022
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?time=3712&type=web_share_page_show_FP_SECOND&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773355022
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash ab1446e71dc210fa623d2fd8eec9d762
7e5eeb0b638f0f7899237909aebe7ef63fa3fa70
7dc786da1b23f0b63c2be534589453d2d55704853bbc53a628c058d5859b9ada
GET /api/analytics?time=3712&type=web_share_page_show_FP_SECOND&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773355022 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:10 GMT
Flow-Level: 3
Logid: 9010282470168748640
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010282470168748640
Yme: ZIGW+Ss3QE0WYisESWziq29Xvv4cVAPxqR5NwyWJmu21T1gxNG8WO+jy4yEY
Content-Length: 44
www.1024tera.com/api/analytics?time=7085&type=web_share_page_show_FCP&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773355022
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?time=7085&type=web_share_page_show_FCP&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773355022
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash e228304759ba6f21aebdd8cd77059182
534e129614b23f9b107f9296406b856a5f0e4fca
593ae7cb915c44d7a019416788e98e7007ec7b24eed7f7e665a3dfd0283ad7ca
GET /api/analytics?time=7085&type=web_share_page_show_FCP&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773355022 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:10 GMT
Flow-Level: 3
Logid: 9010282478669652427
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010282478669652427
Yme: ZIGW+Ss3QEsQdTcEUmr/tG1MvuUZShz3ogpNwyOL
Content-Length: 44
www.1024tera.com/api/analytics?errno=-6&newno=&request_id=9010282380445128000&show_msg=&hasError=true¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fwebmaster%2Fcheck_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773356301
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&newno=&request_id=9010282380445128000&show_msg=&hasError=true¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fwebmaster%2Fcheck_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773356301
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 128c0d18994df4ad2eed1db9ee1d8a0b
14c909773f10e85988dedf5f47892115d015557c
f08a4b02fe9512ee85ae43b6b118a2d7150d621b24a3b3eb62545686740bfe2d
GET /api/analytics?errno=-6&newno=&request_id=9010282380445128000&show_msg=&hasError=true¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fwebmaster%2Fcheck_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773356301 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:10 GMT
Flow-Level: 3
Logid: 9010282482374927635
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010282482374927635
Yme: ZIGW+Ss3QE0WaSsHT2riq29Xvv4cVAPxqB5IxCqBmOu3UVs0O2UTG6sr+XIY
Content-Length: 44
www.1024tera.com/api/analytics?errno=-6&newno=&request_id=9010282382710985000&show_msg=&hasError=true¶ms=%7B%22page%22%3A1%2C%22cnt%22%3A20%7D&uk=0&type=%2Fshare%2Flinkpaylistpurchaseorder_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773356308
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&newno=&request_id=9010282382710985000&show_msg=&hasError=true¶ms=%7B%22page%22%3A1%2C%22cnt%22%3A20%7D&uk=0&type=%2Fshare%2Flinkpaylistpurchaseorder_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773356308
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 059393128b2b015290f6c1cc4e10d155
b5ea03893731f81b97f84b17e3abfdbba49143d9
c1a089f87982af2f5c47d54dd824a347b98b958f98a442b1399f3bc33da04042
GET /api/analytics?errno=-6&newno=&request_id=9010282382710985000&show_msg=&hasError=true¶ms=%7B%22page%22%3A1%2C%22cnt%22%3A20%7D&uk=0&type=%2Fshare%2Flinkpaylistpurchaseorder_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773356308 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:10 GMT
Flow-Level: 3
Logid: 9010282482354136294
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010282482354136294
Yme: ZIGW+Ss3QE0WaCsET27iq29Xvv4cVAPxqB5OxSWJmu21Tg==
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-5e25226a.a51d4586.js
90.84.161.17200 OK 23 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-5e25226a.a51d4586.js
IP 90.84.161.17:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65106), with no line terminators
Hash 6b32479ea21c5d9bef373095b911ce7e
be2f1ae97c1860dd69802eb2939fe0c26ad777ce
fe38ce663a5fcd110a25c65235bdd3d8e1d9d3067b55fd9f8a44efe91b4ce820
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-5e25226a.a51d4586.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:09 GMT
content-type: application/javascript
server: openresty
content-md5: ofegPgybCMrJWb5Yq2LFXw==
etag: W/"a1f7a03e0c9b08cac959be58ab62c55f"
expires: Thu, 07 Dec 2023 10:54:10 GMT
last-modified: Mon, 04 Dec 2023 08:11:33 GMT
x-bce-content-crc32: 98754670
x-bce-debug-id: Ev8l1GA83xhCDv4uh+405oq+C1nftzErTedfmI4L3NyT8GqIxbRU7XJQ/6VPp9Ooie21YFTN02oETa8BSy9Nuw==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: c417d43a-58cc-4c9b-890a-54cc45408f55
x-bce-storage-class: STANDARD
x-ccdn-expires: 2506696
via: EU-GER-frankfurt-EDGE5-CACHE4[2],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE2[11],EU-GER-frankfurt-GLOBAL1-CACHE7[0,TCP_HIT,10]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 85925
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?errno=-6&newno=&request_id=9010282459863670000&show_msg=&hasError=true¶ms=undefined&uk=0&type=%2Fapi%2Fad%2Fgetconfig_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773356572
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&newno=&request_id=9010282459863670000&show_msg=&hasError=true¶ms=undefined&uk=0&type=%2Fapi%2Fad%2Fgetconfig_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773356572
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 1c1f8b15f940199b6c11cd5c3052b162
b90ad90ce2e997b618c9fb4b860a9ce4f52107f8
ec378449508c1a57f796e3f0292a04a77627b4c4dfd1b987a39a75bbe307f09d
GET /api/analytics?errno=-6&newno=&request_id=9010282459863670000&show_msg=&hasError=true¶ms=undefined&uk=0&type=%2Fapi%2Fad%2Fgetconfig_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773356572 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:10 GMT
Flow-Level: 3
Logid: 9010282549339722889
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010282549339722889
Yme: ZIGW+Ss3QEsXdTQCUmr/tG1MvuUZSRz3rQpNwyWBaCpsWBU=
Content-Length: 44
www.1024tera.com/api/analytics?errno=100003&error_code=100003&error_msg=Invalid%20Bduss&request_id=9010282460926516061&hasError=true¶ms=%7B%22client%22%3A%22web%22%2C%22pass_version%22%3A%222.8%22%2C%22lang%22%3A%22en%22%2C%22clientfrom%22%3A%22h5%22%2C%22pcftoken%22%3A%221cfcba3df9cbcf7ff2a049b5a12adeae%22%2C%22method%22%3A%22query%22%2C%22membership_version%22%3A%221.0%22%7D&uk=0&type=%2Frest%2F2.0%2Fmembership%2Fproxy%2Fuser_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773356555
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=100003&error_code=100003&error_msg=Invalid%20Bduss&request_id=9010282460926516061&hasError=true¶ms=%7B%22client%22%3A%22web%22%2C%22pass_version%22%3A%222.8%22%2C%22lang%22%3A%22en%22%2C%22clientfrom%22%3A%22h5%22%2C%22pcftoken%22%3A%221cfcba3df9cbcf7ff2a049b5a12adeae%22%2C%22method%22%3A%22query%22%2C%22membership_version%22%3A%221.0%22%7D&uk=0&type=%2Frest%2F2.0%2Fmembership%2Fproxy%2Fuser_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773356555
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 05bcc29c9e9491869dbff345dcc430c8
f74be94b8b252d0ee495d315c59c05c0023411d9
88bdcbf91fd363c57227e8f2c56ab1e7138b8d95b8c53d736b08a904cf503c83
GET /api/analytics?errno=100003&error_code=100003&error_msg=Invalid%20Bduss&request_id=9010282460926516061&hasError=true¶ms=%7B%22client%22%3A%22web%22%2C%22pass_version%22%3A%222.8%22%2C%22lang%22%3A%22en%22%2C%22clientfrom%22%3A%22h5%22%2C%22pcftoken%22%3A%221cfcba3df9cbcf7ff2a049b5a12adeae%22%2C%22method%22%3A%22query%22%2C%22membership_version%22%3A%221.0%22%7D&uk=0&type=%2Frest%2F2.0%2Fmembership%2Fproxy%2Fuser_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773356555 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:10 GMT
Flow-Level: 3
Logid: 9010282547345802196
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010282547345802196
Yme: ZIGW+Ss3QE0WaisESmriq29Xvv4cVAPxqR5NwSqBmOi5EAdnLjVCGz2stYIY
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-2d225855.7faaefb6.js
90.84.161.17200 OK 12 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-2d225855.7faaefb6.js
IP 90.84.161.17:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 575dc4ebb7a322dee481e28a6b601883
ebab4493812433bc2e93bf42771d7fe4cf16e121
758e5da7a0b68a0193dcce202b8dea737f6f9f14540f7a81c6a9777b5f81af86
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-2d225855.7faaefb6.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:09 GMT
content-type: application/javascript
server: openresty
content-md5: iw9/Cx04dehLVypLjaFNWg==
etag: W/"8b0f7f0b1d3875e84b572a4b8da14d5a"
expires: Fri, 12 May 2023 08:44:00 GMT
last-modified: Mon, 08 May 2023 12:32:41 GMT
x-bce-content-crc32: 2125762108
x-bce-debug-id: iB6onZAdB5cwEu/eon/SnJwxjW+yEqUyso3lZkAtI8tqGqTqF5hKti5HQUqq4Il08RRUnC4QmZj/Wzs2YTkdMg==
x-bce-request-id: 6c4f78e6-e6e6-495c-8abe-dec67424c79d
x-bce-storage-class: STANDARD
x-ccdn-expires: 2592000
via: EU-GER-frankfurt-EDGE5-CACHE4[2],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE3[22],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,20]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 18151288
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-1dcd7f8a.2b42216f.js
90.84.161.17200 OK 5.8 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-1dcd7f8a.2b42216f.js
IP 90.84.161.17:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 3d2b84d05503e3bd1e411cf12f421434
f1630d992cacf1311f62b3d458625691e0585b27
70922aade0a5cf08ca8af436eb2a505436fefbc6c96c91e2b0b0da99f5aff381
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-1dcd7f8a.2b42216f.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:08 GMT
content-type: application/javascript
server: openresty
content-md5: gzS2U+Mf/YcINpBPpUD5zg==
etag: W/"8334b653e31ffd870836904fa540f9ce"
expires: Fri, 12 May 2023 08:43:54 GMT
last-modified: Mon, 08 May 2023 12:32:40 GMT
x-bce-content-crc32: 4120287129
x-bce-debug-id: Teo3loV3wqW/js/c3F+flnexjxNYfbmQInRoUF9QRAMJ7CFnw1D4NuX6sDdmfzinUfOqZghCnAt7txHYBz0myw==
x-bce-request-id: afcc4a4d-fd1a-4520-9662-3523bce519be
x-bce-storage-class: STANDARD
x-ccdn-expires: 2592000
via: EU-GER-frankfurt-EDGE5-CACHE4[1],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE2[17],EU-GER-frankfurt-GLOBAL1-CACHE8[0,TCP_HIT,15]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 18151222
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?type=terabox_sharing_link_js_error&sessionId=602323&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&msg=%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&stack=%5B%7B%22columnNumber%22%3A2705%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22h%22%2C%22source%22%3A%22h%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A2705%22%7D%2C%7B%22columnNumber%22%3A3160%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%22%2C%22source%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A3160%22%7D%2C%7B%22columnNumber%22%3A30208%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22Kt%22%2C%22source%22%3A%22Kt%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A30208%22%7D%5D
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=terabox_sharing_link_js_error&sessionId=602323&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&msg=%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&stack=%5B%7B%22columnNumber%22%3A2705%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22h%22%2C%22source%22%3A%22h%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A2705%22%7D%2C%7B%22columnNumber%22%3A3160%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%22%2C%22source%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A3160%22%7D%2C%7B%22columnNumber%22%3A30208%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22Kt%22%2C%22source%22%3A%22Kt%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A30208%22%7D%5D
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 07ac2efc01a7998efaef4ec1a06fac00
78ef2bf9aa980fd4148ddf5934c7eef8f4bc85f7
619c32e09d76f6c39ca6218217f0cfd6512179c849c034ea8a5e40018f5b5914
GET /api/analytics?type=terabox_sharing_link_js_error&sessionId=602323&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&msg=%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&stack=%5B%7B%22columnNumber%22%3A2705%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22h%22%2C%22source%22%3A%22h%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A2705%22%7D%2C%7B%22columnNumber%22%3A3160%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%22%2C%22source%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A3160%22%7D%2C%7B%22columnNumber%22%3A30208%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22Kt%22%2C%22source%22%3A%22Kt%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A30208%22%7D%5D HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:11 GMT
Flow-Level: 3
Logid: 9010282599140257554
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010282599140257554
Yme: ZIGW+Ss3QE0WaisHTHb+qnFLufkASwbxtAFIySKDmux7ga99
Content-Length: 44
firebase.googleapis.com/v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig
142.250.74.74200 OK 0 B URL OPTIONS HTTP/2 firebase.googleapis.com/v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig
IP 142.250.74.74:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig HTTP/1.1
Host: firebase.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-goog-api-key
Referer: https://www.1024tera.com/
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.1024tera.com
vary: origin, referer, x-origin
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: x-goog-api-key
access-control-max-age: 3600
date: Tue, 05 Dec 2023 10:49:11 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
firebase.googleapis.com/v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig
142.250.74.74200 OK 223 B URL OPTIONS HTTP/2 firebase.googleapis.com/v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig
IP 142.250.74.74:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text
Hash 54c11162d6ef3c32b787d4d8a6a292f8
f1e88b95b9addbd7a1e170daf6da450ab93bdecb
263070732f0c9d00ac3e625982ff38a8d08bc25a2ac03c3e3d524557b09f616f
GET /v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig HTTP/1.1
Host: firebase.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.1024tera.com/
x-goog-api-key: AIzaSyCAt5j0_j4UDEm5Nb4bNvQknuGZoMK_XK8
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 05 Dec 2023 10:49:11 GMT
server: ESF
cache-control: private
content-length: 223
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.1024tera.com
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.1024tera.com/api/shorturlinfo?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200009&shorturl=1qAYlpUl88nwicXE0VJn3vA&root=1&scene=
210.148.85.59200 OK 921 B URL GET HTTP/1.1 www.1024tera.com/api/shorturlinfo?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200009&shorturl=1qAYlpUl88nwicXE0VJn3vA&root=1&scene=
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (2445), with no line terminators
Hash a9907be0a9f24d617da20cf8f106c130
b6a0be32a974af4cde4fabc4dbe040e68346bfdb
826c19aeafcb3ef1359e4869e85ab9cc09ea4e99e2992cefa8e30683374fa4e2
GET /api/shorturlinfo?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200009&shorturl=1qAYlpUl88nwicXE0VJn3vA&root=1&scene= HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:11 GMT
Flow-Level: 3
Logid: 9010282462519638372
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010282462519638372
Yme: ZIGW+Ss3QE0WYisCRnb+qnFLufkASwb2tAFJyyqBmeyxbRF9
Transfer-Encoding: chunked
www.1024tera.com/fe-opera-static/box-static/disk-system/images/favicon.ico
210.148.85.59200 OK 1.7 kB URL GET HTTP/1.1 www.1024tera.com/fe-opera-static/box-static/disk-system/images/favicon.ico
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash 85c3fafc35604bddb3171dee4c0aa6dc
4cb347df6fbedcf8b7e77c9b0673ff3667ed0266
fd68b8c59d5d564cb46519aaaf236ef2ffab9c79c4b1e3ea67a1a57a0120731e
GET /fe-opera-static/box-static/disk-system/images/favicon.ico HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Connection: keep-alive
Content-Type: image/x-icon
Date: Tue, 05 Dec 2023 10:49:11 GMT
Etag: "650a6c13-693"
Expires: Thu, 04 Jan 2024 10:49:11 GMT
Flow-Level: 3
Last-Modified: Wed, 20 Sep 2023 03:50:43 GMT
Logid: 9010282709043304361
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: TeraBox
Yld: 9010282709043304361
Yme: ZIGW+Ss3QEobdTEHUmr/tG1MvuUZTBz2qQpNwyGFza/3Ghg=
Transfer-Encoding: chunked
www.googletagmanager.com/gtag/js?l=dataLayer&id=G-06ZNKL8C2E
142.250.74.168200 OK 86 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?l=dataLayer&id=G-06ZNKL8C2E
IP 142.250.74.168:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type Unicode text, UTF-8 text, with very long lines (3034)
Hash 0fa6940104640e4f096337a4fc3c6de1
6f2898d8e0964a098e61578e07200056e7bfe0df
13bb6399f1c6c74edd338c1c77012d003f2ad6180c2c869dcbf76d8971e1e280
GET /gtag/js?l=dataLayer&id=G-06ZNKL8C2E HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 05 Dec 2023 10:49:11 GMT
expires: Tue, 05 Dec 2023 10:49:11 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 85582
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/gsi/client
209.85.233.84200 OK 80 kB URL GET HTTP/2 accounts.google.com/gsi/client
IP 209.85.233.84:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintF3:FB:54:1B:21:E9:69:01:41:02:BB:D0:97:A2:BA:45:72:5A:71:D8
ValidityMon, 20 Nov 2023 08:09:49 GMT - Mon, 12 Feb 2024 08:09:48 GMT
File type gzip compressed data, max compression\012- data
Hash bcf817cbcc04a0ebb91a0eacbdd702ee
59cf854e55088a0413a33ad6cf836fca7505fa9c
0dabc24586c356ddb253c1047eb443ef84fd8b0c5eb79bb1c11f10e393b979bf
GET /gsi/client HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
expires: Tue, 05 Dec 2023 10:49:11 GMT
date: Tue, 05 Dec 2023 10:49:11 GMT
cache-control: private, max-age=1800
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'nonce-xainmRRqlHTQrMWmm-Jdbw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-06ZNKL8C2E&cid=178514907.1701773358>m=45je3bt0v875375078&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1670234649
142.250.74.163200 OK 42 B URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-06ZNKL8C2E&cid=178514907.1701773358>m=45je3bt0v875375078&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1670234649
IP 142.250.74.163:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint6E:E4:BC:4A:67:5E:46:6A:B3:E4:CA:61:A7:C0:97:AB:14:F0:34:32
ValidityMon, 23 Oct 2023 11:27:27 GMT - Mon, 15 Jan 2024 11:27:26 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-06ZNKL8C2E&cid=178514907.1701773358>m=45je3bt0v875375078&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1670234649 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 05 Dec 2023 10:49:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.1024tera.com/share/list?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200010&page=1&num=20&by=name&order=asc&site_referer=&shorturl=qAYlpUl88nwicXE0VJn3vA&root=1
210.148.85.59200 OK 678 B URL GET HTTP/1.1 www.1024tera.com/share/list?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200010&page=1&num=20&by=name&order=asc&site_referer=&shorturl=qAYlpUl88nwicXE0VJn3vA&root=1
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (2130), with no line terminators
Hash 49e3307733da993aa06d44df9a8a42c6
19a0d50b23516728d89dea5927f44c016aa37019
71e10c6bcefacd87e9db82d9055d6f8b21a639f611c2e072ad94c4385436556b
GET /share/list?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200010&page=1&num=20&by=name&order=asc&site_referer=&shorturl=qAYlpUl88nwicXE0VJn3vA&root=1 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:12 GMT
Flow-Level: 3
Logid: 9010282779714788209
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010282779714788209
Yme: ZIGW+Ss3QE0WaCsNS3b+qnFLufkASwb2tAJNxyqBme62TlAwMWdDeFWv1TY=
Transfer-Encoding: chunked
region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701773357372&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=178514907.1701773358&ul=en-us&sr=1280x1024&_s=1&sid=1701773357&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&dt=WWW.RBDISK.COM%20.DESI%20GIRLS..Today%20Exclusive%20-Super%20Horny%20Indian%20Cpl%20Fucking%20Masahub.Net.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.origin=firebase&tfd=9724
216.239.34.36204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701773357372&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=178514907.1701773358&ul=en-us&sr=1280x1024&_s=1&sid=1701773357&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&dt=WWW.RBDISK.COM%20.DESI%20GIRLS..Today%20Exclusive%20-Super%20Horny%20Indian%20Cpl%20Fucking%20Masahub.Net.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.origin=firebase&tfd=9724
IP 216.239.34.36:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701773357372&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=178514907.1701773358&ul=en-us&sr=1280x1024&_s=1&sid=1701773357&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&dt=WWW.RBDISK.COM%20.DESI%20GIRLS..Today%20Exclusive%20-Super%20Horny%20Indian%20Cpl%20Fucking%20Masahub.Net.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.origin=firebase&tfd=9724 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.1024tera.com
date: Tue, 05 Dec 2023 10:49:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701773357372&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=178514907.1701773358&ul=en-us&sr=1280x1024&sid=1701773357&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&dt=WWW.RBDISK.COM%20.DESI%20GIRLS..Today%20Exclusive%20-Super%20Horny%20Indian%20Cpl%20Fucking%20Masahub.Net.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=2&tfd=9777
216.239.34.36204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701773357372&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=178514907.1701773358&ul=en-us&sr=1280x1024&sid=1701773357&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&dt=WWW.RBDISK.COM%20.DESI%20GIRLS..Today%20Exclusive%20-Super%20Horny%20Indian%20Cpl%20Fucking%20Masahub.Net.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=2&tfd=9777
IP 216.239.34.36:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701773357372&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=178514907.1701773358&ul=en-us&sr=1280x1024&sid=1701773357&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&dt=WWW.RBDISK.COM%20.DESI%20GIRLS..Today%20Exclusive%20-Super%20Horny%20Indian%20Cpl%20Fucking%20Masahub.Net.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=2&tfd=9777 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1733
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://www.1024tera.com
date: Tue, 05 Dec 2023 10:49:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.1024tera.com/share/querysurltransfer?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200011&bdstoken=
210.148.85.59200 OK 85 B URL POST HTTP/1.1 www.1024tera.com/share/querysurltransfer?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200011&bdstoken=
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 3103cc90b32fb41f75fd23cd3eca209a
f115a328143a95ec52bc33a5207109d876ff366b
b5ebb2c0c812c6a833b12abde0817b734cc962406624f6bc1db7354fc6fdf1d5
POST /share/querysurltransfer?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200011&bdstoken= HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 32
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773357.60.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:12 GMT
Flow-Level: 3
Http-X-Isis-Logid: 9010282943627669439
Logid: 9010282943627669439
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 9010282943627669439
Yme: ZIGW+Ss3QEsRdTEBUmr/tG1MvuUYQxz3qQpNwySEzQ==
Content-Length: 85
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/logo.2a229dfa.svg
90.84.161.17200 OK 1.7 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/logo.2a229dfa.svg
IP 90.84.161.17:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1713), with no line terminators
Hash 2a229dfa55348fc84be678f926330616
96ad6e5765a9847fd3f202aad6a88bf95dd9caf1
78055ff5570a46c5904129bfdd26d9cc327feded52e4feca75feaa8e2f180d5b
GET /fe-opera-static/node-static-v4/fe-webv4-main/img/logo.2a229dfa.svg HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:12 GMT
content-type: image/svg+xml
content-length: 1713
server: openresty
content-md5: KiKd+lU0j8hL5nj5JjMGFg==
etag: "2a229dfa55348fc84be678f926330616"
expires: Sat, 24 Sep 2022 06:46:17 GMT
last-modified: Wed, 21 Sep 2022 05:03:27 GMT
x-bce-content-crc32: 1353669740
x-bce-debug-id: NAe6EO3wT96ak0qPNr/yE8+RuLbHz64z8I5FDCDIACxRHRvP8Rcs1CH0CzIO18cwCQo293KSx7/0Hh+Zyx0VZQ==
x-bce-request-id: 3ccd90bb-d04d-43f8-a561-47d04dd6edbb
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 1097725
via: EU-GER-frankfurt-EDGE5-CACHE4[2],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,1],EU-GER-frankfurt-GLOBAL1-CACHE4[19],EU-GER-frankfurt-GLOBAL1-CACHE14[0,TCP_HIT,17],EA-SGP-GLOBAL1-CACHE17[2],EA-SGP-GLOBAL1-CACHE26[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24823084
accept-ranges: bytes
access-control-allow-origin: *
X-Firefox-Spdy: h2
ymg-api.terabox.com/abdr?data=eyJkYXRhIjoiYzFhZDgwYWEyOGFhMjE4YzE3N2RhNzg2OGU1NTU2NDc5NThhNDA1MWFkYjQ3NTMyNjhjYThiNWVkYzhmYjEzMWM5YjliNGNlYWI0OWRiZDVjYTliOGM1ODE1NDY5ZDBkZWM2ZmQ3MTE5ZWM2NDIwYjdhOTE3NjAxMGM2MjQwYjE1YWNhMTU3MWUxMGZkMDlhMDdkNjc1MmExZGMwZWY4YTU4YzI3MTJlZWJmOWQzNjMxNGZiMDFiNWQxMDhiYTkwMjViNWMxMTJkYzk3MzQxMmIyZDUxZmQ5YWRhNzZiNGYwMTc1MTA1Y2Y1NmUxZmZlODFhMTZhYzcwYjliM2NjOGQyOTA0ZDMwMjgwN2MwZTgwM2FhMDFhOWRlNDA0NTVhY2IyNzdmNmM3NjRiODBkZDA0ZmU2NTExZWNjOTA5MTg3M2M0ODQ3NTYyN2E1MDA5MjBhNjg1ODRlNTY5OThkMDdiYzNhYjg4M2Y1YWY2YTQ2MjM0MGM0ZjBiNTU3Zjc0NjE2NjhiNzBhM2Y3NWRmNjQzNmQxZDA5Y2MwOGFkOTA0MTMzYjc2ZTIzODE3MTc0MGQyYjUzOTMxNGFlNWMzNjUyNjg4NWU2NGE3MmU2ZTZhMDM5MTg5NDg5ZDYyY2IxMDk2OGJmYWQ0MjM2NTRmNmE3NmRjYTcxOGNjNWM1MTA2NGNmYzQ3MjJhNzBjYjBiNmY3YzI5MDBlOTI5ZjNiNzExMGVkZTljNTkzNjRmMzJhNjI3NmZhYTg1YjM0YTkzYjFiODY2NGE2Yjk5ZDgzNzM3MDgwZGQ1NDBmNzFkYTEwNmE1NmVkNzc1YzgzMjI0OGFlZjFkMTcxN2JiMDE2ZDkxNTIyM2ZlNGUwNWM3Yjg3MzZjZTVjOGI0MTRlNmZiNGU5MzkyN2U2NTAzODBkMWU3MzI1ZGQwNzg5YzY1YWYiLCJrZXlfaWQiOiI0ZTM3NDRmZDdjNDg0Mzc3In0%3D&_=0.32564971769786266
210.154.124.151 22 B URL GET ymg-api.terabox.com/abdr?data=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%3D&_=0.32564971769786266
IP 210.154.124.151:0
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.terabox.com
Fingerprint4F:30:79:83:60:E0:58:E8:DA:05:09:38:E1:6D:CD:F9:46:33:D6:5F
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 9d4568c009d203ab10e33ea9953a0264
dd29ecf524b030a65261e3059c48ab9e1ecb2585
12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126
GET /abdr?data=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%3D&_=0.32564971769786266 HTTP/1.1
Host: ymg-api.terabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: ab_jid=223427676c32ecf6aba75c20e6c3a707f739; ab_bid=223427676c32ecf6aba75c20e6c3a707f739; ab_sr=1.0.1_ZDE5MzE4ZDI5NDkxODViZjVlZDVjOGVlMzQ0ZjhlZDFmNmZmODk5NjBlZDI2NTgwOWE3YmVhMWY0MTAzMWNkYmRhNTQwNTA1ZDQwZjc1OWYxZTljYThhY2I3M2EwM2QxYjhkNGU4NDQyM2FjYTQwMDNhYTMwZTAyOGQ5YzMxZmYyZTY0OTEzYTZlMjhmNDQ0OTNjNzJiN2VmNGI1NWNiMw==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 10:49:12 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 9010282980681268191
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, Host, Content-Type, x-requested-with, X-Custom-Header
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Max-Age: 3600
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QEoadTcAUmr/tG1MvuUfSQvrqARFyyeFmQ==
Server: nginx
logid: 9010282980681268191
Flow-level: 3
Content-Encoding: gzip
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/fonts/yunfont.44acf892.ttf
90.84.161.17200 OK 23 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/fonts/yunfont.44acf892.ttf
IP 90.84.161.17:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, yunfont \012- data
Hash 44acf8923466a31680d910d7cc4f0903
351d9f0d3e293ae4c4e4c28e67b09f5ab2a39983
cdec6bbf708df8fbb45cb6c8477254406972c90e28bf1bc7d265b9bd0a403cd9
GET /fe-opera-static/node-static-v4/fe-webv4-main/fonts/yunfont.44acf892.ttf HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:12 GMT
content-type: application/x-font-ttf
content-length: 23268
server: openresty
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Length, x-bce-next-append-offset, x-bce-object-type, x-bce-request-id
access-control-max-age: 1800
content-md5: RKz4kjRmoxaA2RDXzE8JAw==
etag: "44acf8923466a31680d910d7cc4f0903"
expires: Sat, 24 Sep 2022 06:46:06 GMT
last-modified: Wed, 21 Sep 2022 05:03:25 GMT
x-bce-content-crc32: 848321786
x-bce-debug-id: NAe6EO3wT96ak0qPNr/yE8+RuLbHz64z8I5FDCDIACz1r140/OGU/0+MbMDWT1zTJqrTz/6OyWkOTO54TO+RgQ==
x-bce-request-id: bdfcbbdf-effe-4bb4-b741-0cdb160927f7
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 361903
via: EU-GER-frankfurt-EDGE5-CACHE4[2],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[6],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,3],EA-SGP-GLOBAL1-CACHE11[3],EA-SGP-GLOBAL1-CACHE24[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 4822229
accept-ranges: bytes
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?type=web_share_filelist_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358365
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_share_filelist_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358365
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 01ba57a0a143adc7342b82f19fc4ef87
5fe3acee14b8a6b1fcf93d384d6c33aa48078cce
ba4e6d4fbc1286c1a3fa1000fa381ea73ca390c3859c15d25f780fb3eb6c4ea7
GET /api/analytics?type=web_share_filelist_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358365 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773357.60.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:12 GMT
Flow-Level: 3
Logid: 9010283030448319284
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010283030448319284
Yme: ZIGW+Ss3QEsWdTcGUmr/tG1MvuUZTBz3qwpNwySE
Content-Length: 44
www.1024tera.com/api/analytics?value=10429&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358366
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?value=10429&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358366
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash d39884fb1a93fb7cc1a88a4e53cfed57
81d5722961367da21acc9348f1e98df4dfae40c8
288f6b3f1161391a3d3dc37e5fe6d8d616a085ab614cb13ae13e49740d0e62b2
GET /api/analytics?value=10429&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358366 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773357.60.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:12 GMT
Flow-Level: 3
Logid: 9010283030341654293
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010283030341654293
Yme: ZIGW+Ss3QEsWdTEBUmr/tG1MvuUZSxz3qApNwyOA0fviEwNnbw+oxwIX3A==
Content-Length: 44
www.1024tera.com/api/analytics?errno=-6&newno=&request_id=9010282943627670000&show_msg=&hasError=true&data=%7B%22sid%22%3A1009454168%2C%22suk%22%3A4399635254774%7D¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fquerysurltransfer_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358363
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&newno=&request_id=9010282943627670000&show_msg=&hasError=true&data=%7B%22sid%22%3A1009454168%2C%22suk%22%3A4399635254774%7D¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fquerysurltransfer_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358363
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 90905cc09f369d51ee564785ec225be6
253b1fba76d4b3b9f9df6d3230d39493394f5c08
9765cf36ff391d35abc46d73383b433203500a679a6b70a15cd37f5cc4b91539
GET /api/analytics?errno=-6&newno=&request_id=9010282943627670000&show_msg=&hasError=true&data=%7B%22sid%22%3A1009454168%2C%22suk%22%3A4399635254774%7D¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fquerysurltransfer_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358363 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773357.60.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:12 GMT
Flow-Level: 3
Logid: 9010283032612714466
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010283032612714466
Yme: ZIGW+Ss3QEsTdTQCUmr/tG1MvuUZSRz3owpNwyKBke6yHQk1Mc9tBpHu3A==
Content-Length: 44
www.1024tera.com/api/analytics?type=web_pause_close_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358433
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_pause_close_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358433
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash b2ba864922dad069ee77485c854b0313
a66aee204b06c92334a678c1ce393369419bc43b
11e7e9189031e68ab42028dad8e68bc027c1809346d5914a88da63ed86b3fe8b
GET /api/analytics?type=web_pause_close_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358433 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773357.60.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:12 GMT
Flow-Level: 3
Logid: 9010283048367247371
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010283048367247371
Yme: ZIGW+Ss3QEsUdTcGUmr/tG1MvuUZTRz2ogpNwyOBzbPmCwI=
Content-Length: 44
www.1024tera.com/api/analytics?type=play_video_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358433
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=play_video_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358433
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 66b0c75d5bd309a8e4cab41b30998e5a
a0df8636adafbeb35e05ae0484d90f38ed1cc543
fbf48f80629b76e96015b1170fc3a8df6d90018cc41fb39765f09bb9beee4fcd
GET /api/analytics?type=play_video_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358433 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773357.60.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:12 GMT
Flow-Level: 3
Logid: 9010283048019859453
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010283048019859453
Yme: ZIGW+Ss3QE0XaysMTnb+qnFLufkASwb8tAdOySKDnujELTVRRBTrovmHzDY=
Content-Length: 44
www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358432
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358432
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash fb787f3c7e500aceeb01cebcbcd0ff50
1553709190fbc032bb9eb60c6aca78d96e985629
d791d2a66fb149a0757c6e651c6070d0766f39d537bdc61a1bfc3e37f9e0f719
GET /api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358432 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773357.60.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:12 GMT
Flow-Level: 3
Logid: 9010283047967570197
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010283047967570197
Yme: ZIGW+Ss3QEsRdTcCUmr/tG1MvuUZThzxqApNwyOB3KnxUjIvSOc=
Content-Length: 44
static.line-scdn.net/liff/edge/2/sdk.js
54.230.111.109200 OK 31 kB URL GET HTTP/2 static.line-scdn.net/liff/edge/2/sdk.js
IP 54.230.111.109:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerAmazon
Subject*.line.me
Fingerprint39:A2:77:6F:2B:9D:03:28:CA:16:D8:21:EB:C7:7C:67:F8:C4:FB:AA
ValidityThu, 13 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash e905a2ef6e19b6fce40541ae9a29d2e2
0f95cbc6d4770a6d4ea209edf274a0a21d18fba7
02afce6f4626ce9e00b768774d46796775c3b520f8f66e29d30799d439a2d3da
GET /liff/edge/2/sdk.js HTTP/1.1
Host: static.line-scdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
server: VOS
last-modified: Thu, 30 Nov 2023 02:18:33 GMT
x-amz-version-id: v.AtHv4uFQzb33ymjCyqw4IItsATTkI
x-amz-expiration: expiry-date="Tue, 30 Jan 2024 00:00:00 GMT", rule-id="bucket_lifecycle"
x-rgw-object-type: Normal
strict-transport-security: max-age=15768000
content-encoding: gzip
date: Tue, 05 Dec 2023 05:54:08 GMT
cache-control: max-age=86400
etag: W/"9b460f98f29d177a0da3183d5cf20e5e"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: XvM13D1QHmnm-Ah-qD6h4PI2k5mbCVm1TuOo4fYtToiRKvin05pVbg==
age: 17715
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?type=web_share_video_premium_activity_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358503
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_share_video_premium_activity_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358503
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 9dbc6020c2e560630462877e482974c7
bab2508b8be404f9ff5a5c30b71e90a27867ddb4
50bf28757e0b01920cc97aeb66ba2ed574703715dd92a44371b7170cb1de5c1a
GET /api/analytics?type=web_share_video_premium_activity_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358503 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773357.60.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:12 GMT
Flow-Level: 3
Logid: 9010283071631441368
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010283071631441368
Yme: ZIGW+Ss3QE0WbysHT3b+qnFLufkASwb2tAFKwSqBmO+5DANlbz7TLk7RTzY=
Content-Length: 44
www.1024tera.com/share/webmaster/getplan?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200015&suk=4399635254774
210.148.85.59200 OK 102 B URL GET HTTP/1.1 www.1024tera.com/share/webmaster/getplan?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200015&suk=4399635254774
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 680d31ff0e0efacb5e0049761ba97604
77125b8d750449cb20e8afc3fdee961b161c394a
8d9ee5c0eda868e564dc43e87e9e525eb98af73efe6b2e7a49c78f6a68a015e1
GET /share/webmaster/getplan?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200015&suk=4399635254774 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773358.59.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:12 GMT
Flow-Level: 3
Http-X-Isis-Logid: 9010283078773807062
Logid: 9010283078773807062
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 9010283078773807062
Yme: ZIGW+Ss3QE0WaSsCTHb+qnFLufkASwb3tANMySKDmeg=
Content-Length: 102
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200013&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en
210.148.85.59200 OK 968 B URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200013&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (3720), with no line terminators
Hash 1b98c43f725633319f0dbc2ec4896b54
515360a55ab4bc2613d5f31b1c27cbeda63f706c
bef10144052a6b16910d5e2dd9f079d6d0ce6dd9c4f7079378d46f58c66746ea
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200013&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773358.59.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:12 GMT
Flow-Level: 3
Logid: 9010283078593686430
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 9010283078593686430
Yme: ZIGW+Ss3QEsUdTcGUmr/tG1MvuUYQxz0rQpNwyaFm+0J
Transfer-Encoding: chunked
www.1024tera.com/api/analytics?isHitCTR=false&type=web_share_CTR_config&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358558
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?isHitCTR=false&type=web_share_CTR_config&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358558
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 677b0e8e698e54e7ddb1ccc71149691f
f6fe576ea0602884f40383e61531fbf88c6e4ae4
3ebdc0a91ccb4c0bbf66ef61fd7858a6e300699ef48f6379ed8dfd7ecdfe8bbc
GET /api/analytics?isHitCTR=false&type=web_share_CTR_config&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358558 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773358.59.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:13 GMT
Flow-Level: 3
Logid: 9010283131970837750
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010283131970837750
Yme: ZIGW+Ss3QEsUdTQGUmr/tG1MvuUYQxzxqApNwyKGy7HoGgR2dZd6Pn1u3A==
Content-Length: 44
www.1024tera.com/share/mediameta?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200016&uk=4399635254774&shareid=1009454168&fid=771846581940664×tamp=1701773358
210.148.85.59200 OK 123 B URL GET HTTP/1.1 www.1024tera.com/share/mediameta?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200016&uk=4399635254774&shareid=1009454168&fid=771846581940664×tamp=1701773358
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 520f55bef978a55042f898185850b285
0ce13e85b6f327079ccc37078e27a7541c270665
be599b76c18c4041005ab62f7ca4af3c6a7b4ed157d638425822eb517b79298a
GET /share/mediameta?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200016&uk=4399635254774&shareid=1009454168&fid=771846581940664×tamp=1701773358 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773358.59.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:13 GMT
Flow-Level: 3
Http-X-Isis-Logid: 9010283133254044748
Logid: 9010283133254044748
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 9010283133254044748
Yme: ZIGW+Ss3QEsUdTcCUmr/tG1MvuUZTBz2qQpNwyGAmOihOw9hIW8rX2JY3A==
Content-Length: 123
region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701773357372&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=178514907.1701773358&ul=en-us&sr=1280x1024&_eu=AEA&_s=3&sid=1701773357&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&dt=WWW.RBDISK.COM%20.DESI%20GIRLS..Today%20Exclusive%20-Super%20Horny%20Indian%20Cpl%20Fucking%20Masahub.Net.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=scroll&ep.origin=firebase&epn.percent_scrolled=90&tfd=10576
216.239.34.36204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701773357372&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=178514907.1701773358&ul=en-us&sr=1280x1024&_eu=AEA&_s=3&sid=1701773357&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&dt=WWW.RBDISK.COM%20.DESI%20GIRLS..Today%20Exclusive%20-Super%20Horny%20Indian%20Cpl%20Fucking%20Masahub.Net.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=scroll&ep.origin=firebase&epn.percent_scrolled=90&tfd=10576
IP 216.239.34.36:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701773357372&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=178514907.1701773358&ul=en-us&sr=1280x1024&_eu=AEA&_s=3&sid=1701773357&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&dt=WWW.RBDISK.COM%20.DESI%20GIRLS..Today%20Exclusive%20-Super%20Horny%20Indian%20Cpl%20Fucking%20Masahub.Net.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=scroll&ep.origin=firebase&epn.percent_scrolled=90&tfd=10576 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://www.1024tera.com
date: Tue, 05 Dec 2023 10:49:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200014&language_type=en&cfg_category_keys=%5B%5D&version=0
210.148.85.59200 OK 15 kB URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200014&language_type=en&cfg_category_keys=%5B%5D&version=0
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash e0734fa67909a2dad7b4c2c3a7fadf0d
af579d20a7dcc1268fe4336a6cdc2058fa46c537
f5d1bed7fc5251502b903ef84a4b823671fc4b8770743cbcbda6b109aba61ba5
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200014&language_type=en&cfg_category_keys=%5B%5D&version=0 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=deleted; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:12 GMT
Flow-Level: 3
Logid: 9010283072693666712
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 9010283072693666712
Yme: ZIGW+Ss3QEsVdTcAUmr/tG1MvuUZTBz3qwpNwyODFbSfKkfNz1+r8bwL3A==
Transfer-Encoding: chunked
www.1024tera.com/api/analytics?type=web_skip_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358863
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_skip_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358863
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash a06a9cd7ff4787deec6d20f6cc427e25
03ec49367733fade8766904c0b33ddac685eab13
fc5b87fd973e87c603ecd61710ad8fab8aaba3137fe6d0f176260d14f73d31c1
GET /api/analytics?type=web_skip_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358863 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773358.59.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:13 GMT
Flow-Level: 3
Logid: 9010283164844375474
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010283164844375474
Yme: ZIGW+Ss3QEobdTcEUmr/tG1MvuUYQhz3rApNwyGFm/2wT1A2OEe92yvp3A==
Content-Length: 44
www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358862
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358862
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash ac8c8b49efda2e969ffcf220b5c7d86c
5f1eaf614804f6c8980e1fe42361b0cd45105330
cb60443ce2be1566599065d8ef447f164bbcce2a00a2960763d1d7d53dc08515
GET /api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358862 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773358.59.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:13 GMT
Flow-Level: 3
Logid: 9010283169682506781
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010283169682506781
Yme: ZIGW+Ss3QE0WaSsHTm/iq29Xvv4cVAP2oh5OxSWJmu2zRllAQGMVO/rgig==
Content-Length: 44
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200017&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en
210.148.85.59200 OK 968 B URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200017&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (3720), with no line terminators
Hash c49ceed265804a950bebf937827ae888
f99ec71abaec6623dcdb2fd5c95317f08c23a1af
d393bb17abb49b62687160582617306dd8334bcc3367d8fe3b2627cd222e7ffd
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200017&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773358.59.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:13 GMT
Flow-Level: 3
Logid: 9010283166450246698
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 9010283166450246698
Yme: ZIGW+Ss3QE0WYisCTnb+qnFLufkASwb3tAFIwCqBmOi1
Transfer-Encoding: chunked
www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=pause&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358895
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=pause&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358895
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 70fe20f9f208759eedcdaa1559d686d3
1b4eacae8168e6b7f5c7a695235a06d3c8bd6169
8a08fd184f0ba1a40843a69f7488a7966bc24dd41b82aa5e2cfe7bdd25b3d3d8
GET /api/analytics?domId=adsterra&showType=1x2&country=NO&where=pause&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358895 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773358.59.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:13 GMT
Flow-Level: 3
Logid: 9010283177361240364
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010283177361240364
Yme: ZIGW+Ss3QE0XaysMTHb+qnFLufkASwH8tAdKySKDm+xX
Content-Length: 44
www.1024tera.com/api/analytics?from=shareLink&type=videoplayer_open_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773359068
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?from=shareLink&type=videoplayer_open_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773359068
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7fcc83893de07d6741dafe1ecf0d5352
3b3b1e4bf3c8e58b3036ee8002821fe34f3ffc3f
92b6c6a2d9e24c205c4863d18b260ee905617ce269f553ac57bca9bdea8875a6
GET /api/analytics?from=shareLink&type=videoplayer_open_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773359068 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773358.59.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:13 GMT
Flow-Level: 3
Logid: 9010283218891894275
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010283218891894275
Yme: ZIGW+Ss3QE0WaSsETHb+qnFLufkASwb8tAFGySKDmOzVLw==
Content-Length: 44
www.1024tera.com/api/analytics?type=videoplayer_open&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773359068
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=videoplayer_open&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773359068
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash f194e74c49858ef2d0ea9f3d34669dfc
7365eebacd19efd7fb542e551270ff6e574c09c4
8caf76fc45c93bbb07716c53488ba1baf18360ee1ade643f93a8b876cc15d485
GET /api/analytics?type=videoplayer_open&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773359068 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773358.59.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:13 GMT
Flow-Level: 3
Logid: 9010283222392739432
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010283222392739432
Yme: ZIGW+Ss3QE0RYisETnb+qnFLufkASwH9tAdIySKDnOmp32ZPB9dTlmy0oDY=
Content-Length: 44
www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773359210
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773359210
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 80b8b170e1d735814b55d2ac892d0ab9
62e1e6f8742e12f1acc49e4ba9f2cbb642682008
4a923db567faad875231dfc77a3e2bda71cb4f7d31f2f956a2b71cd5e55ef88a
GET /api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773359210 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773359.58.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:13 GMT
Flow-Level: 3
Logid: 9010283256622071814
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010283256622071814
Yme: ZIGW+Ss3QEsRdTQGUmr/tG1MvuUZTRz2rQpNwyaB
Content-Length: 44
www.1024tera.com/api/analytics?type=web_share_video_carousel_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773359351
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_share_video_carousel_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773359351
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5540921b1cc2d4a29c446c9abcccbc49
1c6c79ad0851962c3dac209da9648bcce694b5fa
fe0b0bd073fe1fda18e1cb95a50636c3dfc67010cb2deebd655bbbeaad0803fd
GET /api/analytics?type=web_share_video_carousel_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773359351 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773359.58.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:13 GMT
Flow-Level: 3
Logid: 9010283302510924459
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010283302510924459
Yme: ZIGW+Ss3QEsXdTcCUmr/tG1MvuUZSBz3qwpNwiSLkZjAO1xBM8/M9U2b3A==
Content-Length: 44
pl18043214.highperformancecpmgate.com/5c8996e8e3cb5e10b7fd36115b800ac7/invoke.js
192.243.61.227200 OK 9.3 kB URL GET HTTP/1.1 pl18043214.highperformancecpmgate.com/5c8996e8e3cb5e10b7fd36115b800ac7/invoke.js
IP 192.243.61.227:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerLet's Encrypt
Subjecthighperformancecpmgate.com
FingerprintEC:5C:1C:3A:AB:08:18:CE:84:A7:E0:33:D8:44:0B:AF:12:12:CE:C4
ValiditySat, 28 Oct 2023 06:31:01 GMT - Fri, 26 Jan 2024 06:31:00 GMT
File type Unicode text, UTF-8 text, with very long lines (25130), with no line terminators
Hash 241a2aa91833280cb401e52fa7edffd5
7e223bd1822b3ed052e7e997f8d62e7218246a97
7218868c1d2c7c78b3efcd95f5fe27b0f3f9bc9931d1b33b8483a0949aae238d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /5c8996e8e3cb5e10b7fd36115b800ac7/invoke.js HTTP/1.1
Host: pl18043214.highperformancecpmgate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 10:49:13 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 79a9d679ced0cffa5673fae63ea1a342
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.1024tera.com/api/analytics?value=11415&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773359352
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?value=11415&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773359352
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash d05f3e8fe2250dd68d9231c01efebf95
ce93baddddbc9e2bf63459b748c9e3d5936172e1
7cf2c0a89842303c21c468f679cd0b0e526569f513fe88dcaf591acc184ef921
GET /api/analytics?value=11415&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773359352 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773359.58.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:13 GMT
Flow-Level: 3
Logid: 9010283295972967490
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010283295972967490
Yme: ZIGW+Ss3QE0WaysHTWziq29Xvv4cVAP2ox5OxiqBmO6x+qA8fg==
Content-Length: 44
www.1024tera.com/api/analytics?type=videoplayer_play_btn_click&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773359409
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=videoplayer_play_btn_click&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773359409
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 1d6998abc6cee723cee7825ed44a8bce
8dbddd00668bb83acd6bb40bdb6aa21bad37d455
6556ec62ffb807d38f35a34b6d372641c4609ac12e0c10bb6ec8152700753ef4
GET /api/analytics?type=videoplayer_play_btn_click&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773359409 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773359.58.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:13 GMT
Flow-Level: 3
Logid: 9010283315069962508
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010283315069962508
Yme: ZIGW+Ss3QE0WaisHTGriq29Xvv4cVAPxqR5LwCqBmOmzEARsZDRXq/GqH8MY
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-fdedac32.68a159c0.js
90.84.161.17200 OK 21 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-fdedac32.68a159c0.js
IP 90.84.161.17:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash c7409394d15238dec89b71886cc063b6
e79a141730c09641dd55197bdfc276caa93a1895
11e9b7872d5b816f2c1a2203692050cdec14fb4f2b4c8f62a51e3aae2f10b0f9
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-fdedac32.68a159c0.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:13 GMT
content-type: application/javascript
server: openresty
content-md5: fvMe6ZlLuOpfBUbbnYT1og==
etag: W/"7ef31ee9994bb8ea5f0546db9d84f5a2"
expires: Thu, 17 Aug 2023 11:01:40 GMT
last-modified: Mon, 14 Aug 2023 05:25:49 GMT
x-bce-content-crc32: 3183863461
x-bce-debug-id: AQBq72xN1KX+ruW3aqp1xkmekXXaYh0i39b8sd2sQtmjC5dG590ZtpaEFSUwE16V73TOukcLyO6ly/sQLIZ4bg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: b4d412dc-3e8c-456b-bf34-9d06ca0b4fd9
x-bce-storage-class: STANDARD
via: EU-GER-frankfurt-EDGE5-CACHE4[13],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE6[1934],EU-GER-frankfurt-GLOBAL1-CACHE14[953,TCP_MISS,1933]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 9762452
x-ccdn-expires: 709823
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.r2m03.amazontrust.com/
54.230.218.11 471 B URL ocsp.r2m03.amazontrust.com/
IP 54.230.218.11:0
Hash 24a776b1f2e9d3fff472472cff5e9b16
38a6b9ce7b18c9204f5ace875325ca74c863d1a9
108f3caa2c7db8c122fcea5f02f4f0f1e058d4da8e913dc2b4e8ace4e5a50e81
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Tue, 05 Dec 2023 10:49:14 GMT
Last-Modified: Tue, 05 Dec 2023 09:05:56 GMT
Server: ECAcc (ska/F6E3)
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 5pKKlNJ__8F0flnpeUPNrpB0gneu_i-P4T-8gLdQ8S2zP0eZqt_r8Q==
Age: 6198
proftrafficcounter.com/stats
18.157.140.81200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP 18.157.140.81:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash d4e47aff09ed587e368d741198dbab6a
b20ac03463330cdca4029e8e7c9ab2e2a5322ed8
494506c209ea945fd5807510ab54b179def7abbaff152db55d7bddcb8fcb8392
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:14 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.1024tera.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=897fdf71-4a24-4453-a8f9-83e8af457f1e:3:1; expires=Fri, 02 Dec 2033 10:49:14 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
pl18427035.highcpmrevenuenetwork.com/627e2f8a423975bc4bd7a76128c2d552/invoke.js
192.243.59.13200 OK 9.3 kB URL GET HTTP/1.1 pl18427035.highcpmrevenuenetwork.com/627e2f8a423975bc4bd7a76128c2d552/invoke.js
IP 192.243.59.13:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerLet's Encrypt
Subjecthighcpmrevenuenetwork.com
FingerprintEE:67:85:23:95:09:5B:1B:88:45:C2:65:23:64:81:DD:65:D4:15:14
ValidityThu, 19 Oct 2023 06:40:46 GMT - Wed, 17 Jan 2024 06:40:45 GMT
File type Unicode text, UTF-8 text, with very long lines (25166), with no line terminators
Hash 23a6f79226647b835b74df68ce46cddb
0280aec9db71eaad28f1a012df55d97686a789e1
3d97f95eaad25bbcd2b7fd15734d4387bbb0d6d41f592bde95088afda3275c08
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /627e2f8a423975bc4bd7a76128c2d552/invoke.js HTTP/1.1
Host: pl18427035.highcpmrevenuenetwork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 05 Dec 2023 10:49:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 309f2df0b471b417a17be95ac3804db1
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
lotclergyman.com/ntv.json?key=5c8996e8e3cb5e10b7fd36115b800ac7&vstc=1
192.243.59.20200 OK 4.5 kB URL GET HTTP/1.1 lotclergyman.com/ntv.json?key=5c8996e8e3cb5e10b7fd36115b800ac7&vstc=1
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerLet's Encrypt
Subjectlotclergyman.com
Fingerprint4D:40:39:11:E0:27:47:DF:86:BF:5E:B5:51:40:08:D7:AB:31:7D:11
ValidityTue, 28 Nov 2023 07:49:04 GMT - Mon, 26 Feb 2024 07:49:03 GMT
File type JSON data\012- , ASCII text, with very long lines (4511), with no line terminators
Hash 6f752f5216d2ab0f74cb480f8f1d48b1
90e38a32dba9fa5c37198f050714109f6e7cc141
231a443f1f22972c5b05432a46f15e17c0311f37cde80aeb1dda8d5082c394d7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ntv.json?key=5c8996e8e3cb5e10b7fd36115b800ac7&vstc=1 HTTP/1.1
Host: lotclergyman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 05 Dec 2023 10:49:14 GMT
Content-Type: application/json
Content-Length: 4511
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.1024tera.com
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17942715; expires=Wed, 06 Dec 2023 10:49:14 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 06 Dec 2023 10:49:14 GMT; secure; SameSite=None
uncs=1; expires=Wed, 06 Dec 2023 10:49:14 GMT; secure; SameSite=None
pdhtkv49=true; expires=Wed, 06 Dec 2023 10:49:14 GMT; secure; SameSite=None
uncs49=1; expires=Wed, 06 Dec 2023 10:49:14 GMT; secure; SameSite=None
nlec5c8996e8e3cb5e10b7fd36115b800ac7=[1690161]; expires=Tue, 05 Dec 2023 10:49:19 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f626d4cb238d71d9a63a617a75c0441d
Strict-Transport-Security: max-age=0; includeSubdomains
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-b20230be.0a893307.js
90.84.161.17200 OK 64 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-b20230be.0a893307.js
IP 90.84.161.17:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (61528), with no line terminators
Hash a75fca7474e89c4b6cb7ad2ffaef06d3
78205fab1a5663b129d388e2b824aeb62c67712a
677e639e53541ab5521275b10c5be4474bd2c7aea1be82df16b31a5d69722c30
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-b20230be.0a893307.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:13 GMT
content-type: application/javascript
server: openresty
content-md5: lkWxCU7mztbQBa5ORv1xRQ==
etag: W/"9645b1094ee6ced6d005ae4e46fd7145"
expires: Thu, 07 Sep 2023 07:34:05 GMT
last-modified: Mon, 04 Sep 2023 04:39:49 GMT
x-bce-content-crc32: 860175862
x-bce-debug-id: YxKaPLFml5ovwtS++EvPw1ID/HiMt+Zhii4NCGGd5BA+u+1ccgAwlYXqpryUmBj7YqU863R0gVkKEFuqafmKAg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: aeea44c1-7e31-4002-a3ac-fcdfed6855de
x-bce-storage-class: STANDARD
x-ccdn-expires: 2512206
via: EU-GER-frankfurt-EDGE5-CACHE4[11],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE5[14],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,13]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 7960040
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
shineinternalindolent.com/f1/95/e5/f195e5fa577c23352666448243864c68.js
173.233.137.52200 OK 15 kB URL GET HTTP/1.1 shineinternalindolent.com/f1/95/e5/f195e5fa577c23352666448243864c68.js
IP 173.233.137.52:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerLet's Encrypt
Subjectshineinternalindolent.com
Fingerprint6D:2F:FA:76:0F:F3:87:81:20:04:11:2D:33:E8:C3:A4:9F:8E:07:5D
ValidityTue, 28 Nov 2023 08:00:05 GMT - Mon, 26 Feb 2024 08:00:04 GMT
File type ASCII text, with very long lines (42849), with no line terminators
Hash 0173497391003dfbd072da61a1aca4cb
05c5907c90e4e4fe0763fc83b589bedde33600e2
c39b049bcbaedf2d46c33f328a594c2c3693d914ee17eb53576560a70fe7e840
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /f1/95/e5/f195e5fa577c23352666448243864c68.js HTTP/1.1
Host: shineinternalindolent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 10:49:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d7e6d5f8fdbc021eb0a625fdd04b81ba
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
shineinternalindolent.com/ntv.json?key=627e2f8a423975bc4bd7a76128c2d552&vstc=2&uuid=897fdf71-4a24-4453-a8f9-83e8af457f1e%3A3%3A1&custom=%7B%22d37e3bc4%22%3A%22a%22%7D
173.233.137.52200 OK 8.6 kB URL GET HTTP/1.1 shineinternalindolent.com/ntv.json?key=627e2f8a423975bc4bd7a76128c2d552&vstc=2&uuid=897fdf71-4a24-4453-a8f9-83e8af457f1e%3A3%3A1&custom=%7B%22d37e3bc4%22%3A%22a%22%7D
IP 173.233.137.52:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerLet's Encrypt
Subjectshineinternalindolent.com
Fingerprint6D:2F:FA:76:0F:F3:87:81:20:04:11:2D:33:E8:C3:A4:9F:8E:07:5D
ValidityTue, 28 Nov 2023 08:00:05 GMT - Mon, 26 Feb 2024 08:00:04 GMT
File type JSON data\012- , ASCII text, with very long lines (8587), with no line terminators
Hash d85956e5e5beb3823eb3e5858a0c964b
e192f429df78d2e3926af58a12c91e1a3cff063a
2809a4fbaabf1952976cbebec213bee105eaede23ab19a605cfc66cdaff8da19
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ntv.json?key=627e2f8a423975bc4bd7a76128c2d552&vstc=2&uuid=897fdf71-4a24-4453-a8f9-83e8af457f1e%3A3%3A1&custom=%7B%22d37e3bc4%22%3A%22a%22%7D HTTP/1.1
Host: shineinternalindolent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 10:49:14 GMT
Content-Type: application/json
Content-Length: 8587
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.1024tera.com
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=18326536; expires=Wed, 06 Dec 2023 10:49:14 GMT; secure; SameSite=None
uid_id2=897fdf71-4a24-4453-a8f9-83e8af457f1e:3:1; expires=Tue, 12 Dec 2023 10:49:14 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 06 Dec 2023 10:49:14 GMT; secure; SameSite=None
uncs=1; expires=Wed, 06 Dec 2023 10:49:14 GMT; secure; SameSite=None
pdhtkv49=true; expires=Wed, 06 Dec 2023 10:49:14 GMT; secure; SameSite=None
uncs49=1; expires=Wed, 06 Dec 2023 10:49:14 GMT; secure; SameSite=None
nlec627e2f8a423975bc4bd7a76128c2d552=[2229215,2229214]; expires=Tue, 05 Dec 2023 10:49:19 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 17b2434063e523a3e1c788ccbb464233
Strict-Transport-Security: max-age=0; includeSubdomains
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/ud-i18n-en.e44e7bde.js
90.84.161.17200 OK 956 B URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/ud-i18n-en.e44e7bde.js
IP 90.84.161.17:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash c575398e9c5ad794fc53efd6bd1907bb
b31cfd02c574fb4924f0b142092a118ccc26dde1
64ca0b65ea87662ada5d94d9ed3fdd3fc5d2f3c918ba7fc9e62177e7ad47aa4c
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/ud-i18n-en.e44e7bde.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:08 GMT
content-type: application/javascript
server: openresty
content-md5: DyUZIaD1cN4PN459aJhnNg==
etag: W/"0f251921a0f570de0f378e7d68986736"
expires: Fri, 12 May 2023 08:43:54 GMT
last-modified: Mon, 08 May 2023 12:32:48 GMT
x-bce-content-crc32: 2133490345
x-bce-debug-id: NSexvRTV0lZWQYtbdWLSgX+v6Hr/56aCZJ1ADylLSrA41ImIsmNUOALc2+imcrFlB95XXzUoxQ6mngOJKiIOKA==
x-bce-request-id: ebaa8284-e667-42db-a2f8-0aab2662e8dc
x-bce-storage-class: STANDARD
x-ccdn-expires: 2591999
via: EU-GER-frankfurt-EDGE5-CACHE4[2],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE5[36],EU-GER-frankfurt-GLOBAL1-CACHE2[0,TCP_HIT,32]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 18151323
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
v1.1024tera.com/video/netdisk-videotran-tky/07bb1e4b6ac4a3ad7724441a6517f7e6_1138_1_ts/47aa174e180aad27559efd14e1029a22?ts_size=7058460&app_id=250528&ccn=NO&csl=0&dp-logid=9010283304175017291&fn=WWW.RBDISK.COM++.DESI+GIRLS..Today+Exclusive+-Super+Horny+Indian+Cpl+Fucking+Masahub.Net.mp4&from_type=3&fsid=771846581940664&isplayer=1&iv=2&logid=9010283304175017291&ouk=4399635254774&r=254506585&size=26589563&sta_cs=0&sta_dt=video&sta_dx=25&time=1701802153&to=any&tot=ctpxh&uo=any&uva=1499419338&vuk=&dtime=10&etag=47aa174e180aad27559efd14e1029a22&fid=c5edf9cadd25df9c4cb069f84eaf2425-&len=403260&range=2132108-2535367®ion=tky&resv4=&sign=BOUTHNF-F3530edecde9cd71b79378b290804a96-MB1jfdWIyD7SKGDmV6i4jjEbERI%253D&xcode=8f852242498dad5dd0cb8af5ae3b336ce4f5d8672fb33a44a3975ae7a8da94727f605e0884f9d3a22f34d31b3fd7c148316128a2cdfcce4d&xv=6&need_suf=&pmk=140047aa174e180aad27559efd14e1029a22494395040000006bb41c&by=my-streaming
185.207.113.204200 OK 403 kB URL GET HTTP/2 v1.1024tera.com/video/netdisk-videotran-tky/07bb1e4b6ac4a3ad7724441a6517f7e6_1138_1_ts/47aa174e180aad27559efd14e1029a22?ts_size=7058460&app_id=250528&ccn=NO&csl=0&dp-logid=9010283304175017291&fn=WWW.RBDISK.COM++.DESI+GIRLS..Today+Exclusive+-Super+Horny+Indian+Cpl+Fucking+Masahub.Net.mp4&from_type=3&fsid=771846581940664&isplayer=1&iv=2&logid=9010283304175017291&ouk=4399635254774&r=254506585&size=26589563&sta_cs=0&sta_dt=video&sta_dx=25&time=1701802153&to=any&tot=ctpxh&uo=any&uva=1499419338&vuk=&dtime=10&etag=47aa174e180aad27559efd14e1029a22&fid=c5edf9cadd25df9c4cb069f84eaf2425-&len=403260&range=2132108-2535367®ion=tky&resv4=&sign=BOUTHNF-F3530edecde9cd71b79378b290804a96-MB1jfdWIyD7SKGDmV6i4jjEbERI%253D&xcode=8f852242498dad5dd0cb8af5ae3b336ce4f5d8672fb33a44a3975ae7a8da94727f605e0884f9d3a22f34d31b3fd7c148316128a2cdfcce4d&xv=6&need_suf=&pmk=140047aa174e180aad27559efd14e1029a22494395040000006bb41c&by=my-streaming
IP 185.207.113.204:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
Size 403 kB (403260 bytes)
Hash 8fc9d015c5d219d5fc5c002ca7d6cad8
a6cd378eb0c2c17fa3e86d801e4f36f40d7bb9b6
be271a085687f99d736b414d46954f1da54f4dd9d6e69c37bbf799bb6800c0af
GET /video/netdisk-videotran-tky/07bb1e4b6ac4a3ad7724441a6517f7e6_1138_1_ts/47aa174e180aad27559efd14e1029a22?ts_size=7058460&app_id=250528&ccn=NO&csl=0&dp-logid=9010283304175017291&fn=WWW.RBDISK.COM++.DESI+GIRLS..Today+Exclusive+-Super+Horny+Indian+Cpl+Fucking+Masahub.Net.mp4&from_type=3&fsid=771846581940664&isplayer=1&iv=2&logid=9010283304175017291&ouk=4399635254774&r=254506585&size=26589563&sta_cs=0&sta_dt=video&sta_dx=25&time=1701802153&to=any&tot=ctpxh&uo=any&uva=1499419338&vuk=&dtime=10&etag=47aa174e180aad27559efd14e1029a22&fid=c5edf9cadd25df9c4cb069f84eaf2425-&len=403260&range=2132108-2535367®ion=tky&resv4=&sign=BOUTHNF-F3530edecde9cd71b79378b290804a96-MB1jfdWIyD7SKGDmV6i4jjEbERI%253D&xcode=8f852242498dad5dd0cb8af5ae3b336ce4f5d8672fb33a44a3975ae7a8da94727f605e0884f9d3a22f34d31b3fd7c148316128a2cdfcce4d&xv=6&need_suf=&pmk=140047aa174e180aad27559efd14e1029a22494395040000006bb41c&by=my-streaming HTTP/1.1
Host: v1.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Zen/2.7
date: Tue, 05 Dec 2023 10:49:14 GMT
content-type: application/octet-stream
content-length: 403260
strict-transport-security: max-age=31536000; preload
x-bs-file-size: 7058460
x-bs-meta-crc32: 1229165828
cache-control: max-age=259200
etag: 47aa174e180aad27559efd14e1029a22
x-bs-client-ip: NDkuMTQuODMuMjAz
x-bs-request-id: MTAuMjUyLjcwLjM1OjIwMTc6NzgwMjA1NTUzNTk3MzY0MTU4MDoyMDIzLTEyLTAzIDA5OjM1OjIx
content-md5: 47aa174e180aad27559efd14e1029a22
superfile: 0
accept-ranges: bytes
last-modified: Fri, 26 May 2023 14:12:17 GMT
age: 0
via: https/1.1 JP.TYO.837.P.230.86 (Cache-6.1.14), http/1.1 DE.FRA5.837.E.113.199 (Cache-6.1.15)
hittype: TCP_MISS
cache-server: ZenCache
access-control-allow-origin: https://www.1024tera.com
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-3c39bfc4.baa0ab5e.js
90.84.161.17200 OK 199 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-3c39bfc4.baa0ab5e.js
IP 90.84.161.17:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Size 199 kB (198688 bytes)
Hash d59ee88a988885576d974e302b1851a4
28cae64c1937376fb475a81f651c7f357fb37cae
096e12c16605f15e755e714e9eb8991c5a1c77d18b766ca828d2e3976b413d71
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-3c39bfc4.baa0ab5e.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:13 GMT
content-type: application/javascript
server: openresty
content-md5: J2TcvyWm6gv2Eaqsv2udoA==
etag: W/"2764dcbf25a6ea0bf611aaacbf6b9da0"
expires: Sat, 04 Nov 2023 08:02:39 GMT
last-modified: Wed, 01 Nov 2023 07:11:44 GMT
x-bce-content-crc32: 568789530
x-bce-debug-id: xbaDKK50jlBZJ18L45fu3bSp+fDzE/r7QhsyaypWutuc/ChXmeJlm9RANAVDEiI6LAFEIbdQCthtn8HiVncnMQ==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 45ec87e7-f8da-4b01-bf46-6d2b8c70cc37
x-bce-storage-class: STANDARD
x-ccdn-expires: 2341028
via: EU-GER-frankfurt-EDGE5-CACHE4[2],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE6[31],EU-GER-frankfurt-GLOBAL1-CACHE14[0,TCP_HIT,29]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 2947215
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
shineinternalindolent.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRiddYwUoCEREkJQHAghQPi8u7frvSNFRAhBESGOkiDXszOz58GzO6uZ3duzq4RIkILioAKqvXd2DMFC5A8AoTNNZIHka5ALTE2NFFGic046%2BIrvx7yveO9988mwPCYeSnp07QO9JZWiy2HTbby2JjOuK9u4erPhuU33XGNNZivBuUZ%2FmkzvLc8Nm%2B7rjfcE29DLvuu5rud6jUvSiET3l09QyHyv4zU7bjPwm14YoG%2F%2BP9vSgaUOeO%2BYnIXkkyfWHz6AZGNk6Q8Xhd0odP7mu2mpaKENenz3w2wj01WGdN4mxkGS7c62oe2EkC8XoLPdmQLo3vZUAWI5Ic7vHuJsd0YTcW%2FnMdNYQWSI%2BdOoemMINYakYzB9B5IfEoBxXF1Flt67qk1FNx%2BjdIpOyOKjvyGrCVn841lk6fcXlOw3bmhVFlJnFv2khuyPIbtj5OU%2Bii0HstoHKz6G5L%2BR5UdXkKXbq1ZpSH70SrsTJTyJvKWA%2BsFSEIStJdpOOkvtlmjTJAijxBMnFkk5hkzGUGIAak%2BhtA5K6aBMHJS5g5QfNWjYSVw3SuKk1WoHjLFWi7GwvcJD3graiYuSTTUMUOQDMDUAM7eQm9vf8FYkWjELhhQb8vPD8CxM%2BTPseg3LHdiCoMdrVIKgsgQVJagkQVUQVL16hyvr2%2FoeV7aMvVn1Z7VVj3TRHdIdXXRFRkDNYJgfkzNTK53ntk9jQxw1VvxI%2BEmbBn6rE4UxC2Ie0WjF89vM52How8oa0i6AWgdbckJeeuEz5HJCnoz2ENN9WLUPJs%2BAlh5oNYp8F3R9FLRdbGV7nusHhTC0yXQKrmvkxSKKTWeojsnzJyd9%2BdSfEOzg%2FP0X9057r%2F4FZmrkpsZH8heCrro7uq4rsn1dV5Y8WM0LmcotOj33jYIW4tT998VmpQ2%2FfNEOvn2bTYFpu3dT2OIKzbjMupZ8d0FyLswlbZggP162ayK%2BVtr1C6XJyvzKtXcuXU5zI6yVOhuDysPVf8DkhCze%2FunkIz%2Fz66eQZgxT1kjLAzILSL0Plt%2BCzefsrSYwar4T5w6qsh4ZP54%2FKkmgxHymcQ37nzme90N7F12zAFrcQZbW6JkaPVWDqgFs%2BdSoyM3B%2BYdfTeNrxGphFCuzsB0ro744sXaajmHlUUOEiZsI1xdx0omTiLq8kwSdmHY8EcUh9VDYidDkjX8BAAD%2F%2FwEAAP%2F%2FmXMtmqUEAAA%3D
173.233.137.52200 OK 7 B URL GET HTTP/1.1 shineinternalindolent.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRiddYwUoCEREkJQHAghQPi8u7frvSNFRAhBESGOkiDXszOz58GzO6uZ3duzq4RIkILioAKqvXd2DMFC5A8AoTNNZIHka5ALTE2NFFGic046%2BIrvx7yveO9988mwPCYeSnp07QO9JZWiy2HTbby2JjOuK9u4erPhuU33XGNNZivBuUZ%2FmkzvLc8Nm%2B7rjfcE29DLvuu5rud6jUvSiET3l09QyHyv4zU7bjPwm14YoG%2F%2BP9vSgaUOeO%2BYnIXkkyfWHz6AZGNk6Q8Xhd0odP7mu2mpaKENenz3w2wj01WGdN4mxkGS7c62oe2EkC8XoLPdmQLo3vZUAWI5Ic7vHuJsd0YTcW%2FnMdNYQWSI%2BdOoemMINYakYzB9B5IfEoBxXF1Flt67qk1FNx%2BjdIpOyOKjvyGrCVn841lk6fcXlOw3bmhVFlJnFv2khuyPIbtj5OU%2Bii0HstoHKz6G5L%2BR5UdXkKXbq1ZpSH70SrsTJTyJvKWA%2BsFSEIStJdpOOkvtlmjTJAijxBMnFkk5hkzGUGIAak%2BhtA5K6aBMHJS5g5QfNWjYSVw3SuKk1WoHjLFWi7GwvcJD3graiYuSTTUMUOQDMDUAM7eQm9vf8FYkWjELhhQb8vPD8CxM%2BTPseg3LHdiCoMdrVIKgsgQVJagkQVUQVL16hyvr2%2FoeV7aMvVn1Z7VVj3TRHdIdXXRFRkDNYJgfkzNTK53ntk9jQxw1VvxI%2BEmbBn6rE4UxC2Ie0WjF89vM52How8oa0i6AWgdbckJeeuEz5HJCnoz2ENN9WLUPJs%2BAlh5oNYp8F3R9FLRdbGV7nusHhTC0yXQKrmvkxSKKTWeojsnzJyd9%2BdSfEOzg%2FP0X9057r%2F4FZmrkpsZH8heCrro7uq4rsn1dV5Y8WM0LmcotOj33jYIW4tT998VmpQ2%2FfNEOvn2bTYFpu3dT2OIKzbjMupZ8d0FyLswlbZggP162ayK%2BVtr1C6XJyvzKtXcuXU5zI6yVOhuDysPVf8DkhCze%2FunkIz%2Fz66eQZgxT1kjLAzILSL0Plt%2BCzefsrSYwar4T5w6qsh4ZP54%2FKkmgxHymcQ37nzme90N7F12zAFrcQZbW6JkaPVWDqgFs%2BdSoyM3B%2BYdfTeNrxGphFCuzsB0ro744sXaajmHlUUOEiZsI1xdx0omTiLq8kwSdmHY8EcUh9VDYidDkjX8BAAD%2F%2FwEAAP%2F%2FmXMtmqUEAAA%3D
IP 173.233.137.52:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerLet's Encrypt
Subjectshineinternalindolent.com
Fingerprint6D:2F:FA:76:0F:F3:87:81:20:04:11:2D:33:E8:C3:A4:9F:8E:07:5D
ValidityTue, 28 Nov 2023 08:00:05 GMT - Mon, 26 Feb 2024 08:00:04 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRiddYwUoCEREkJQHAghQPi8u7frvSNFRAhBESGOkiDXszOz58GzO6uZ3duzq4RIkILioAKqvXd2DMFC5A8AoTNNZIHka5ALTE2NFFGic046%2BIrvx7yveO9988mwPCYeSnp07QO9JZWiy2HTbby2JjOuK9u4erPhuU33XGNNZivBuUZ%2FmkzvLc8Nm%2B7rjfcE29DLvuu5rud6jUvSiET3l09QyHyv4zU7bjPwm14YoG%2F%2BP9vSgaUOeO%2BYnIXkkyfWHz6AZGNk6Q8Xhd0odP7mu2mpaKENenz3w2wj01WGdN4mxkGS7c62oe2EkC8XoLPdmQLo3vZUAWI5Ic7vHuJsd0YTcW%2FnMdNYQWSI%2BdOoemMINYakYzB9B5IfEoBxXF1Flt67qk1FNx%2BjdIpOyOKjvyGrCVn841lk6fcXlOw3bmhVFlJnFv2khuyPIbtj5OU%2Bii0HstoHKz6G5L%2BR5UdXkKXbq1ZpSH70SrsTJTyJvKWA%2BsFSEIStJdpOOkvtlmjTJAijxBMnFkk5hkzGUGIAak%2BhtA5K6aBMHJS5g5QfNWjYSVw3SuKk1WoHjLFWi7GwvcJD3graiYuSTTUMUOQDMDUAM7eQm9vf8FYkWjELhhQb8vPD8CxM%2BTPseg3LHdiCoMdrVIKgsgQVJagkQVUQVL16hyvr2%2FoeV7aMvVn1Z7VVj3TRHdIdXXRFRkDNYJgfkzNTK53ntk9jQxw1VvxI%2BEmbBn6rE4UxC2Ie0WjF89vM52How8oa0i6AWgdbckJeeuEz5HJCnoz2ENN9WLUPJs%2BAlh5oNYp8F3R9FLRdbGV7nusHhTC0yXQKrmvkxSKKTWeojsnzJyd9%2BdSfEOzg%2FP0X9057r%2F4FZmrkpsZH8heCrro7uq4rsn1dV5Y8WM0LmcotOj33jYIW4tT998VmpQ2%2FfNEOvn2bTYFpu3dT2OIKzbjMupZ8d0FyLswlbZggP162ayK%2BVtr1C6XJyvzKtXcuXU5zI6yVOhuDysPVf8DkhCze%2FunkIz%2Fz66eQZgxT1kjLAzILSL0Plt%2BCzefsrSYwar4T5w6qsh4ZP54%2FKkmgxHymcQ37nzme90N7F12zAFrcQZbW6JkaPVWDqgFs%2BdSoyM3B%2BYdfTeNrxGphFCuzsB0ro744sXaajmHlUUOEiZsI1xdx0omTiLq8kwSdmHY8EcUh9VDYidDkjX8BAAD%2F%2FwEAAP%2F%2FmXMtmqUEAAA%3D HTTP/1.1
Host: shineinternalindolent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=18326536; uid_id2=897fdf71-4a24-4453-a8f9-83e8af457f1e:3:1; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 10:49:14 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f49106a5174b117b7aa7c663ef994992
Strict-Transport-Security: max-age=0; includeSubdomains
mockingcolloquial.com/pixel/purst?dl=0&th=0&sc=0&rs=12402&rd=12402&fd=615&bv=23.12.v.1&tmpl=136
173.233.137.44200 OK 0 B URL GET HTTP/1.1 mockingcolloquial.com/pixel/purst?dl=0&th=0&sc=0&rs=12402&rd=12402&fd=615&bv=23.12.v.1&tmpl=136
IP 173.233.137.44:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerLet's Encrypt
Subjectmockingcolloquial.com
Fingerprint0D:DD:6E:9D:B2:2D:04:39:9A:AE:2B:D7:A5:16:91:38:8C:C7:3B:0E
ValidityTue, 28 Nov 2023 08:07:55 GMT - Mon, 26 Feb 2024 08:07:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=12402&rd=12402&fd=615&bv=23.12.v.1&tmpl=136 HTTP/1.1
Host: mockingcolloquial.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 10:49:14 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
banquetunarmedgrater.com/advertisers.js
104.21.86.121200 OK 0 B URL GET HTTP/2 banquetunarmedgrater.com/advertisers.js
IP 104.21.86.121:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerGoogle Trust Services LLC
Subjectbanquetunarmedgrater.com
Fingerprint92:8E:AD:72:AC:AD:3B:21:99:CD:21:A0:9F:BD:F2:AF:0D:98:D8:57
ValidityThu, 09 Nov 2023 11:40:15 GMT - Wed, 07 Feb 2024 11:40:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:15 GMT
content-type: application/javascript
content-length: 0
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=172800
x-request-id: 7467b7f1a89056ded42f09c8f2169565
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 05 Dec 2023 10:49:14 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tyZIwdla3%2BNh%2FyRToIAEkx%2BtXJ9UpYMOX%2B%2FRgFCUwMtyyFyqwaVy7hSGRsi37M8RW3aIxTGGzPjHljoTnpSB4h2y15wgMGO9elsk8DPefIqXYLx4o%2FYasnN5t%2BDIKqcgmXprRGPFqKgpkAo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830bb8ab8ddab509-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
shineinternalindolent.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSQW%2FcRBgdb4NU4EIrJITgsCCEAJGN7bXjXXqoKKWoojRVW9TzeGa8GTL2WDP2eptTS6WqBw4LJ%2BDkfZs2UCJEfwAIbbhUEUjZC8qBcOaMVHFEm6y08B38fc%2FvO7z3vrk7Kg%2BJh5IeXPlIb0ql6ErYcptv3JAZ15VtXr7e9NyWe6Z5Q2arwZnmYPYx%2FXc8N2y5bzY%2FEGxDr%2Fiu57qe6zUvSCMSPVg5YiHzna7X6rqtwG95YYCB%2BT%2B2pQNLHfD%2BITkNyadPrT9%2BBMkmyNIfzgu7Uej87ffTUtFCG%2FT59sfZRqarDOliTIyDJNueb0PbKSFfNqCz7bkD6P7WzAFiOSXO7x7ibHsuE3H%2F%2FrHSWEFkiPmzqPoTCDWBpBMwfQeS7xOAcVxeQ5Y%2BuKxNRW8es3TGTsnSk78hqylZ%2BuN5ZOn355QcNK9pVRZSZxaDpIYcTCB7E%2BTlLopNB7LaBSs%2BheS%2FkZUnl5ClW2tWaUh%2B8FqnGyU8ibzlgPrBchCE7WXaSbrLnbbo0CQIo8QTRxFJOYFMJlBiCGpPoLQOSumgTByUuYOUHzRp2E1cN0ripN3uBIyxdpuxsLPKQ94OOomLks08DFHkQzA1BDO3kJvb3%2FB2JNoxC0YUG%2FLz%2FfA0TPkz7HoNyx3YgqDPa1SCoLIEFSWoJEFVEFT9%2Bj5X1rf1A65sGXvz7s97ux7rojei93XRExkBNcNRfkhOzaJ0Xtg6iQ1x0Fz1I%2BEnHRr47W4UxiyIeUSjVc%2FvMJ%2BHoQ8ra0jbALUONuWUvPLSZ8jllDwd7SCmu7BqF0yeAi090Goc%2BS7o%2BjjouNjMdjzXDwphaIvpFFzXyIslFDedkTokLx6d9NUThxBs7%2BzDl3dOeq%2F%2FBWZq5KbGJ%2FIXgp66N76qK7J1VVeWPFrLC5nKTTo797WCFuLEww%2FFzUobfvG8HX77LpsRs3HnurDFJZpxmfUs%2Be6c5FyYC9owQX68aG%2BI%2BEpp18%2BVJivzS1feu3AxzY2wVupsAir31%2F4Bk1OydPuno4f83K93Ic0EpqyRlntkXpB6Fyy%2FBZsv1FtNYNRiJ84bqMp6bPx48VNJAiUWmMY17H9wvJhH9h56pgFa3EGW1uibGn1Vg6ohbPnMuMjN3tnHX83qa8SqMY6VaWzFyqgvZtH%2BeZyvlQdNESZuIlxfxEk3TiLq8m4SdGPa9UQUh9RDYadCk7f%2BBQAA%2F%2F8BAAD%2F%2FyqAZ42lBAAA
173.233.137.52200 OK 7 B URL GET HTTP/1.1 shineinternalindolent.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSQW%2FcRBgdb4NU4EIrJITgsCCEAJGN7bXjXXqoKKWoojRVW9TzeGa8GTL2WDP2eptTS6WqBw4LJ%2BDkfZs2UCJEfwAIbbhUEUjZC8qBcOaMVHFEm6y08B38fc%2FvO7z3vrk7Kg%2BJh5IeXPlIb0ql6ErYcptv3JAZ15VtXr7e9NyWe6Z5Q2arwZnmYPYx%2FXc8N2y5bzY%2FEGxDr%2Fiu57qe6zUvSCMSPVg5YiHzna7X6rqtwG95YYCB%2BT%2B2pQNLHfD%2BITkNyadPrT9%2BBMkmyNIfzgu7Uej87ffTUtFCG%2FT59sfZRqarDOliTIyDJNueb0PbKSFfNqCz7bkD6P7WzAFiOSXO7x7ibHsuE3H%2F%2FrHSWEFkiPmzqPoTCDWBpBMwfQeS7xOAcVxeQ5Y%2BuKxNRW8es3TGTsnSk78hqylZ%2BuN5ZOn355QcNK9pVRZSZxaDpIYcTCB7E%2BTlLopNB7LaBSs%2BheS%2FkZUnl5ClW2tWaUh%2B8FqnGyU8ibzlgPrBchCE7WXaSbrLnbbo0CQIo8QTRxFJOYFMJlBiCGpPoLQOSumgTByUuYOUHzRp2E1cN0ripN3uBIyxdpuxsLPKQ94OOomLks08DFHkQzA1BDO3kJvb3%2FB2JNoxC0YUG%2FLz%2FfA0TPkz7HoNyx3YgqDPa1SCoLIEFSWoJEFVEFT9%2Bj5X1rf1A65sGXvz7s97ux7rojei93XRExkBNcNRfkhOzaJ0Xtg6iQ1x0Fz1I%2BEnHRr47W4UxiyIeUSjVc%2FvMJ%2BHoQ8ra0jbALUONuWUvPLSZ8jllDwd7SCmu7BqF0yeAi090Goc%2BS7o%2BjjouNjMdjzXDwphaIvpFFzXyIslFDedkTokLx6d9NUThxBs7%2BzDl3dOeq%2F%2FBWZq5KbGJ%2FIXgp66N76qK7J1VVeWPFrLC5nKTTo797WCFuLEww%2FFzUobfvG8HX77LpsRs3HnurDFJZpxmfUs%2Be6c5FyYC9owQX68aG%2BI%2BEpp18%2BVJivzS1feu3AxzY2wVupsAir31%2F4Bk1OydPuno4f83K93Ic0EpqyRlntkXpB6Fyy%2FBZsv1FtNYNRiJ84bqMp6bPx48VNJAiUWmMY17H9wvJhH9h56pgFa3EGW1uibGn1Vg6ohbPnMuMjN3tnHX83qa8SqMY6VaWzFyqgvZtH%2BeZyvlQdNESZuIlxfxEk3TiLq8m4SdGPa9UQUh9RDYadCk7f%2BBQAA%2F%2F8BAAD%2F%2FyqAZ42lBAAA
IP 173.233.137.52:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerLet's Encrypt
Subjectshineinternalindolent.com
Fingerprint6D:2F:FA:76:0F:F3:87:81:20:04:11:2D:33:E8:C3:A4:9F:8E:07:5D
ValidityTue, 28 Nov 2023 08:00:05 GMT - Mon, 26 Feb 2024 08:00:04 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSQW%2FcRBgdb4NU4EIrJITgsCCEAJGN7bXjXXqoKKWoojRVW9TzeGa8GTL2WDP2eptTS6WqBw4LJ%2BDkfZs2UCJEfwAIbbhUEUjZC8qBcOaMVHFEm6y08B38fc%2FvO7z3vrk7Kg%2BJh5IeXPlIb0ql6ErYcptv3JAZ15VtXr7e9NyWe6Z5Q2arwZnmYPYx%2FXc8N2y5bzY%2FEGxDr%2Fiu57qe6zUvSCMSPVg5YiHzna7X6rqtwG95YYCB%2BT%2B2pQNLHfD%2BITkNyadPrT9%2BBMkmyNIfzgu7Uej87ffTUtFCG%2FT59sfZRqarDOliTIyDJNueb0PbKSFfNqCz7bkD6P7WzAFiOSXO7x7ibHsuE3H%2F%2FrHSWEFkiPmzqPoTCDWBpBMwfQeS7xOAcVxeQ5Y%2BuKxNRW8es3TGTsnSk78hqylZ%2BuN5ZOn355QcNK9pVRZSZxaDpIYcTCB7E%2BTlLopNB7LaBSs%2BheS%2FkZUnl5ClW2tWaUh%2B8FqnGyU8ibzlgPrBchCE7WXaSbrLnbbo0CQIo8QTRxFJOYFMJlBiCGpPoLQOSumgTByUuYOUHzRp2E1cN0ripN3uBIyxdpuxsLPKQ94OOomLks08DFHkQzA1BDO3kJvb3%2FB2JNoxC0YUG%2FLz%2FfA0TPkz7HoNyx3YgqDPa1SCoLIEFSWoJEFVEFT9%2Bj5X1rf1A65sGXvz7s97ux7rojei93XRExkBNcNRfkhOzaJ0Xtg6iQ1x0Fz1I%2BEnHRr47W4UxiyIeUSjVc%2FvMJ%2BHoQ8ra0jbALUONuWUvPLSZ8jllDwd7SCmu7BqF0yeAi090Goc%2BS7o%2BjjouNjMdjzXDwphaIvpFFzXyIslFDedkTokLx6d9NUThxBs7%2BzDl3dOeq%2F%2FBWZq5KbGJ%2FIXgp66N76qK7J1VVeWPFrLC5nKTTo797WCFuLEww%2FFzUobfvG8HX77LpsRs3HnurDFJZpxmfUs%2Be6c5FyYC9owQX68aG%2BI%2BEpp18%2BVJivzS1feu3AxzY2wVupsAir31%2F4Bk1OydPuno4f83K93Ic0EpqyRlntkXpB6Fyy%2FBZsv1FtNYNRiJ84bqMp6bPx48VNJAiUWmMY17H9wvJhH9h56pgFa3EGW1uibGn1Vg6ohbPnMuMjN3tnHX83qa8SqMY6VaWzFyqgvZtH%2BeZyvlQdNESZuIlxfxEk3TiLq8m4SdGPa9UQUh9RDYadCk7f%2BBQAA%2F%2F8BAAD%2F%2FyqAZ42lBAAA HTTP/1.1
Host: shineinternalindolent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=18326536; uid_id2=897fdf71-4a24-4453-a8f9-83e8af457f1e:3:1; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 10:49:14 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4a19762443dd4a2b058b3cf5b15ecbcb
Strict-Transport-Security: max-age=0; includeSubdomains
shineinternalindolent.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRiddYwUoCEREkJQHAghQPi8P717pIgIISgixFESlHp2ZtYePLuzmtm9dVwlRIIUFAcVUO29c2IIFiJ%2FAAidaaIIJF%2BDXGBqaqSIEp1z0sFXfD%2FmfcV775tPhvUh8VDTg0sf6C2pFF2Oum7ntWuy4LqxnYtXO57bdU91rsliJTzV2Zwm03%2FLc6Ou%2B3rnPcE29LLveq7ruV7nnDQi05vLRyhkudvzuj23G%2FpdLwqxaf4%2F29qBpQ54%2F5CchOSTJ9Yf3IdkYxT5D2eF3ah0%2Bea7ea1opQ36fOfDYqPQTYF83mbGQVbszLah7YSQLxegi52ZAuj%2B9lQBUjkhzu8e0mJnRhNp%2F85jpqmCKJDyp9H0xxBqDEnHYPoWJN8nAOO4uIoiv3tRm4Zef4zSKTohi4%2F%2BhmwmZPGPZ1Hk359RcrNzRau6krqw2MxayM0x5NoYZb2HasuBbPbAqo8h%2BW9k%2BdEFFPn2qlUakh%2B8kvTijGextxRSP1wKwyhYoknWW0oCkdAsjOLME0cWSTmGzMZQYgBqj6G2DmrpoM4c1KWDnB90aNTLXDfO0iwIkpAxFgSMRckKj3gQJpmLmk01DFCVAzA1ADM3UJqb3%2FAgFkHKwiHFhvx8PzoJU%2F8Mu97Ccge2IujzFo0gaCxBQwkaSdBUBE2%2FvcOV9W17lytbp96s%2BrMatCNdrQ3pHV2tiYKAmsGwPCQnplY6z20fx4Y46Kz4sfCzhIZ%2B0IujlIUpj2m84vkJ83kU%2BbCyhbQLoNbBlpyQl174DKWckCfjXaR0D1btgckToLUH2oxi3wVdH4WJi61i13P9sBKGdpnOwXWLslpEdd0ZqkPy%2FNFJXz72JwR7ePrei7vHvVf%2FAjMtStPiI%2FkLwZq6PbqsG7J9WTeW3F8tK5nLLTo995WKVuLYvffF9UYbfv6sHXz7NpsC03b3qrDVBVpwWaxZ8t0Zybkw57Rhgvx43l4T6aXarp%2BpTVGXFy69c%2B58XhphrdTFGFTur%2F4DJidk8eZPRx%2F5mV8%2FhTRjmLpFXj8ks4DUe2DlDdhyzt5qAqPmO2npoKnbkfHT%2BaOSBErMZ5q2sP%2BZ03k%2FtLexZhZAq1so8hZ906KvWlA1gK2fGlWleXj6wVfT%2BBqpWhilyixsp8qoL46snaZDWHnQibxQJGkSM85TwbgX%2B0ESuK7PeRj3hNdDZSdCkzf%2BBQAA%2F%2F8BAAD%2F%2F417o3ylBAAA
173.233.137.52200 OK 7 B URL GET HTTP/1.1 shineinternalindolent.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRiddYwUoCEREkJQHAghQPi8P717pIgIISgixFESlHp2ZtYePLuzmtm9dVwlRIIUFAcVUO29c2IIFiJ%2FAAidaaIIJF%2BDXGBqaqSIEp1z0sFXfD%2FmfcV775tPhvUh8VDTg0sf6C2pFF2Oum7ntWuy4LqxnYtXO57bdU91rsliJTzV2Zwm03%2FLc6Ou%2B3rnPcE29LLveq7ruV7nnDQi05vLRyhkudvzuj23G%2FpdLwqxaf4%2F29qBpQ54%2F5CchOSTJ9Yf3IdkYxT5D2eF3ah0%2Bea7ea1opQ36fOfDYqPQTYF83mbGQVbszLah7YSQLxegi52ZAuj%2B9lQBUjkhzu8e0mJnRhNp%2F85jpqmCKJDyp9H0xxBqDEnHYPoWJN8nAOO4uIoiv3tRm4Zef4zSKTohi4%2F%2BhmwmZPGPZ1Hk359RcrNzRau6krqw2MxayM0x5NoYZb2HasuBbPbAqo8h%2BW9k%2BdEFFPn2qlUakh%2B8kvTijGextxRSP1wKwyhYoknWW0oCkdAsjOLME0cWSTmGzMZQYgBqj6G2DmrpoM4c1KWDnB90aNTLXDfO0iwIkpAxFgSMRckKj3gQJpmLmk01DFCVAzA1ADM3UJqb3%2FAgFkHKwiHFhvx8PzoJU%2F8Mu97Ccge2IujzFo0gaCxBQwkaSdBUBE2%2FvcOV9W17lytbp96s%2BrMatCNdrQ3pHV2tiYKAmsGwPCQnplY6z20fx4Y46Kz4sfCzhIZ%2B0IujlIUpj2m84vkJ83kU%2BbCyhbQLoNbBlpyQl174DKWckCfjXaR0D1btgckToLUH2oxi3wVdH4WJi61i13P9sBKGdpnOwXWLslpEdd0ZqkPy%2FNFJXz72JwR7ePrei7vHvVf%2FAjMtStPiI%2FkLwZq6PbqsG7J9WTeW3F8tK5nLLTo995WKVuLYvffF9UYbfv6sHXz7NpsC03b3qrDVBVpwWaxZ8t0Zybkw57Rhgvx43l4T6aXarp%2BpTVGXFy69c%2B58XhphrdTFGFTur%2F4DJidk8eZPRx%2F5mV8%2FhTRjmLpFXj8ks4DUe2DlDdhyzt5qAqPmO2npoKnbkfHT%2BaOSBErMZ5q2sP%2BZ03k%2FtLexZhZAq1so8hZ906KvWlA1gK2fGlWleXj6wVfT%2BBqpWhilyixsp8qoL46snaZDWHnQibxQJGkSM85TwbgX%2B0ESuK7PeRj3hNdDZSdCkzf%2BBQAA%2F%2F8BAAD%2F%2F417o3ylBAAA
IP 173.233.137.52:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerLet's Encrypt
Subjectshineinternalindolent.com
Fingerprint6D:2F:FA:76:0F:F3:87:81:20:04:11:2D:33:E8:C3:A4:9F:8E:07:5D
ValidityTue, 28 Nov 2023 08:00:05 GMT - Mon, 26 Feb 2024 08:00:04 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRiddYwUoCEREkJQHAghQPi8P717pIgIISgixFESlHp2ZtYePLuzmtm9dVwlRIIUFAcVUO29c2IIFiJ%2FAAidaaIIJF%2BDXGBqaqSIEp1z0sFXfD%2FmfcV775tPhvUh8VDTg0sf6C2pFF2Oum7ntWuy4LqxnYtXO57bdU91rsliJTzV2Zwm03%2FLc6Ou%2B3rnPcE29LLveq7ruV7nnDQi05vLRyhkudvzuj23G%2FpdLwqxaf4%2F29qBpQ54%2F5CchOSTJ9Yf3IdkYxT5D2eF3ah0%2Bea7ea1opQ36fOfDYqPQTYF83mbGQVbszLah7YSQLxegi52ZAuj%2B9lQBUjkhzu8e0mJnRhNp%2F85jpqmCKJDyp9H0xxBqDEnHYPoWJN8nAOO4uIoiv3tRm4Zef4zSKTohi4%2F%2BhmwmZPGPZ1Hk359RcrNzRau6krqw2MxayM0x5NoYZb2HasuBbPbAqo8h%2BW9k%2BdEFFPn2qlUakh%2B8kvTijGextxRSP1wKwyhYoknWW0oCkdAsjOLME0cWSTmGzMZQYgBqj6G2DmrpoM4c1KWDnB90aNTLXDfO0iwIkpAxFgSMRckKj3gQJpmLmk01DFCVAzA1ADM3UJqb3%2FAgFkHKwiHFhvx8PzoJU%2F8Mu97Ccge2IujzFo0gaCxBQwkaSdBUBE2%2FvcOV9W17lytbp96s%2BrMatCNdrQ3pHV2tiYKAmsGwPCQnplY6z20fx4Y46Kz4sfCzhIZ%2B0IujlIUpj2m84vkJ83kU%2BbCyhbQLoNbBlpyQl174DKWckCfjXaR0D1btgckToLUH2oxi3wVdH4WJi61i13P9sBKGdpnOwXWLslpEdd0ZqkPy%2FNFJXz72JwR7ePrei7vHvVf%2FAjMtStPiI%2FkLwZq6PbqsG7J9WTeW3F8tK5nLLTo995WKVuLYvffF9UYbfv6sHXz7NpsC03b3qrDVBVpwWaxZ8t0Zybkw57Rhgvx43l4T6aXarp%2BpTVGXFy69c%2B58XhphrdTFGFTur%2F4DJidk8eZPRx%2F5mV8%2FhTRjmLpFXj8ks4DUe2DlDdhyzt5qAqPmO2npoKnbkfHT%2BaOSBErMZ5q2sP%2BZ03k%2FtLexZhZAq1so8hZ906KvWlA1gK2fGlWleXj6wVfT%2BBqpWhilyixsp8qoL46snaZDWHnQibxQJGkSM85TwbgX%2B0ESuK7PeRj3hNdDZSdCkzf%2BBQAA%2F%2F8BAAD%2F%2F417o3ylBAAA HTTP/1.1
Host: shineinternalindolent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=18326536; uid_id2=897fdf71-4a24-4453-a8f9-83e8af457f1e:3:1; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 10:49:14 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: fbcff8b2d70d21a416f840a52e7590ff
Strict-Transport-Security: max-age=0; includeSubdomains
shineinternalindolent.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRiddYwUoCEREkJQHAghQPi8P717pIgIISgixFESlHp2ZtYePLuzmtm9dVwlRIpSUBxUQLX3zokhWIj8ASB0pokikHINcoGpqZEiSnT2SQdfsd%2F39n3Fe%2B%2Bb28P6gHio6f6lj%2FSWVIouR12388Y1WXDd2M7Fqx3P7bqnOtdksRKe6mxOP6b%2FjudGXffNzgeCbehl3%2FVc13O9zjlpRKY3lw9ZyHK353V7bjf0u14UYtP8H9vagaUOeP%2BAnITkk6fWHz6AZGMU%2BQ9nhd2odPn2%2B3mtaKUN%2Bnzn42Kj0E2BfD5mxkFW7My2oe2EkC8XoIudmQPo%2FvbUAVI5Ic7vHtJiZyYTaf%2FukdJUQRRI%2BbNo%2BmMINYakYzB9C5I%2FJgDjuLiKIr93UZuGXj9i6ZSdkMUnf0M2E7L4x%2FMo8u%2FPKLnZuaJVXUldWGxmLeTmGHJtjLLeQ7XlQDZ7YNWnkPw3svzkAop8e9UqDcn3X0t6ccaz2FsKqR8uhWEULNEk6y0lgUhoFkZx5onDiKQcQ2ZjKDEAtcdQWwe1dFBnDurSQc73OzTqZa4bZ2kWBEnIGAsCxqJkhUc8CJPMRc2mHgaoygGYGoCZGyjNzW94EIsgZeGQYkN%2B%2Fjg6CVP%2FDLvewnIHtiLo8xaNIGgsQUMJGknQVARNv73LlfVte48rW6ferPuzHrQjXa0N6V1drYmCgJrBsDwgJ6ZROi9sH8eG2O%2Bs%2BLHws4SGftCLo5SFKY9pvOL5CfN5FPmwsoW0C6DWwZackFde%2BgylnJCn412kdA9W7YHJE6C1B9qMYt8FXR%2BFiYutYtdz%2FbAShnaZzsF1i7JaRHXdGaoD8uLhSV89dgDBHp2%2B%2F%2FLuce%2F1v8BMi9K0%2BET%2BQrCm7owu64ZsX9aNJQ9Wy0rmcotOz32lopU4dv9Dcb3Rhp8%2FawffvsumxHTcvSpsdYEWXBZrlnx3RnIuzDltmCA%2FnrfXRHqptutnalPU5YVL7507n5dGWCt1MQaVj1f%2FAZMTsnjzp8OH%2FNyvtyHNGKZukdePyKwg9R5YeQO2nKu3msCo%2BU5aLqCp25Hx0%2FlPJQmUmGOatrD%2Fwel8Hto7WDMLoNUtFHmLvmnRVy2oGsDWz4yq0jw6%2FfCraX2NVC2MUmUWtlNl1BfTaP88ytfK%2FU7khSJJk5hxngrGvdgPksB1fc7DuCe8Hio7EZq89S8AAAD%2F%2FwEAAP%2F%2FPojpa6UEAAA%3D
173.233.137.52200 OK 7 B URL GET HTTP/1.1 shineinternalindolent.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRiddYwUoCEREkJQHAghQPi8P717pIgIISgixFESlHp2ZtYePLuzmtm9dVwlRIpSUBxUQLX3zokhWIj8ASB0pokikHINcoGpqZEiSnT2SQdfsd%2F39n3Fe%2B%2Bb28P6gHio6f6lj%2FSWVIouR12388Y1WXDd2M7Fqx3P7bqnOtdksRKe6mxOP6b%2FjudGXffNzgeCbehl3%2FVc13O9zjlpRKY3lw9ZyHK353V7bjf0u14UYtP8H9vagaUOeP%2BAnITkk6fWHz6AZGMU%2BQ9nhd2odPn2%2B3mtaKUN%2Bnzn42Kj0E2BfD5mxkFW7My2oe2EkC8XoIudmQPo%2FvbUAVI5Ic7vHtJiZyYTaf%2FukdJUQRRI%2BbNo%2BmMINYakYzB9C5I%2FJgDjuLiKIr93UZuGXj9i6ZSdkMUnf0M2E7L4x%2FMo8u%2FPKLnZuaJVXUldWGxmLeTmGHJtjLLeQ7XlQDZ7YNWnkPw3svzkAop8e9UqDcn3X0t6ccaz2FsKqR8uhWEULNEk6y0lgUhoFkZx5onDiKQcQ2ZjKDEAtcdQWwe1dFBnDurSQc73OzTqZa4bZ2kWBEnIGAsCxqJkhUc8CJPMRc2mHgaoygGYGoCZGyjNzW94EIsgZeGQYkN%2B%2Fjg6CVP%2FDLvewnIHtiLo8xaNIGgsQUMJGknQVARNv73LlfVte48rW6ferPuzHrQjXa0N6V1drYmCgJrBsDwgJ6ZROi9sH8eG2O%2Bs%2BLHws4SGftCLo5SFKY9pvOL5CfN5FPmwsoW0C6DWwZackFde%2BgylnJCn412kdA9W7YHJE6C1B9qMYt8FXR%2BFiYutYtdz%2FbAShnaZzsF1i7JaRHXdGaoD8uLhSV89dgDBHp2%2B%2F%2FLuce%2F1v8BMi9K0%2BET%2BQrCm7owu64ZsX9aNJQ9Wy0rmcotOz32lopU4dv9Dcb3Rhp8%2FawffvsumxHTcvSpsdYEWXBZrlnx3RnIuzDltmCA%2FnrfXRHqptutnalPU5YVL7507n5dGWCt1MQaVj1f%2FAZMTsnjzp8OH%2FNyvtyHNGKZukdePyKwg9R5YeQO2nKu3msCo%2BU5aLqCp25Hx0%2FlPJQmUmGOatrD%2Fwel8Hto7WDMLoNUtFHmLvmnRVy2oGsDWz4yq0jw6%2FfCraX2NVC2MUmUWtlNl1BfTaP88ytfK%2FU7khSJJk5hxngrGvdgPksB1fc7DuCe8Hio7EZq89S8AAAD%2F%2FwEAAP%2F%2FPojpa6UEAAA%3D
IP 173.233.137.52:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerLet's Encrypt
Subjectshineinternalindolent.com
Fingerprint6D:2F:FA:76:0F:F3:87:81:20:04:11:2D:33:E8:C3:A4:9F:8E:07:5D
ValidityTue, 28 Nov 2023 08:00:05 GMT - Mon, 26 Feb 2024 08:00:04 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRiddYwUoCEREkJQHAghQPi8P717pIgIISgixFESlHp2ZtYePLuzmtm9dVwlRIpSUBxUQLX3zokhWIj8ASB0pokikHINcoGpqZEiSnT2SQdfsd%2F39n3Fe%2B%2Bb28P6gHio6f6lj%2FSWVIouR12388Y1WXDd2M7Fqx3P7bqnOtdksRKe6mxOP6b%2FjudGXffNzgeCbehl3%2FVc13O9zjlpRKY3lw9ZyHK353V7bjf0u14UYtP8H9vagaUOeP%2BAnITkk6fWHz6AZGMU%2BQ9nhd2odPn2%2B3mtaKUN%2Bnzn42Kj0E2BfD5mxkFW7My2oe2EkC8XoIudmQPo%2FvbUAVI5Ic7vHtJiZyYTaf%2FukdJUQRRI%2BbNo%2BmMINYakYzB9C5I%2FJgDjuLiKIr93UZuGXj9i6ZSdkMUnf0M2E7L4x%2FMo8u%2FPKLnZuaJVXUldWGxmLeTmGHJtjLLeQ7XlQDZ7YNWnkPw3svzkAop8e9UqDcn3X0t6ccaz2FsKqR8uhWEULNEk6y0lgUhoFkZx5onDiKQcQ2ZjKDEAtcdQWwe1dFBnDurSQc73OzTqZa4bZ2kWBEnIGAsCxqJkhUc8CJPMRc2mHgaoygGYGoCZGyjNzW94EIsgZeGQYkN%2B%2Fjg6CVP%2FDLvewnIHtiLo8xaNIGgsQUMJGknQVARNv73LlfVte48rW6ferPuzHrQjXa0N6V1drYmCgJrBsDwgJ6ZROi9sH8eG2O%2Bs%2BLHws4SGftCLo5SFKY9pvOL5CfN5FPmwsoW0C6DWwZackFde%2BgylnJCn412kdA9W7YHJE6C1B9qMYt8FXR%2BFiYutYtdz%2FbAShnaZzsF1i7JaRHXdGaoD8uLhSV89dgDBHp2%2B%2F%2FLuce%2F1v8BMi9K0%2BET%2BQrCm7owu64ZsX9aNJQ9Wy0rmcotOz32lopU4dv9Dcb3Rhp8%2FawffvsumxHTcvSpsdYEWXBZrlnx3RnIuzDltmCA%2FnrfXRHqptutnalPU5YVL7507n5dGWCt1MQaVj1f%2FAZMTsnjzp8OH%2FNyvtyHNGKZukdePyKwg9R5YeQO2nKu3msCo%2BU5aLqCp25Hx0%2FlPJQmUmGOatrD%2Fwel8Hto7WDMLoNUtFHmLvmnRVy2oGsDWz4yq0jw6%2FfCraX2NVC2MUmUWtlNl1BfTaP88ytfK%2FU7khSJJk5hxngrGvdgPksB1fc7DuCe8Hio7EZq89S8AAAD%2F%2FwEAAP%2F%2FPojpa6UEAAA%3D HTTP/1.1
Host: shineinternalindolent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=18326536; uid_id2=897fdf71-4a24-4453-a8f9-83e8af457f1e:3:1; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 10:49:15 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e59aa1dbc21fbb1772fd2bd7b6c2de28
Strict-Transport-Security: max-age=0; includeSubdomains
www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773360746
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773360746
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash fc3aed6a77307fe61fb006958ff34204
bd7f870b0ef0ab42288c3743fa3c7bf6f9d9b230
3e73b798a6f39f51782b6c590cfc650d9678c6e2922cc4ad7fa6af2fdd2dc362
GET /api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773360746 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773360.57.0.0; _ga=GA1.1.178514907.1701773358; dom3ic8zudi28v8lr6fgphwffqoz0j6c=897fdf71-4a24-4453-a8f9-83e8af457f1e%3A3%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=shineinternalindolent.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:15 GMT
Flow-Level: 3
Logid: 9010283679980827130
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010283679980827130
Yme: ZIGW+Ss3QEsQdTEHUmr/tG1MvuUZSxz0qQpNwyOCYL3MXRU=
Content-Length: 44
www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773360744
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773360744
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 0ca3a3a3086abf63b19025f8a86b4be3
76e05f623efa6648ba0e54e1b3ba549e015bb726
de96f4d180f3db7a45b410b8c81edbcf0ca8fcea5cbffcd6a285a4f04e0e51bf
GET /api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773360744 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773360.57.0.0; _ga=GA1.1.178514907.1701773358; dom3ic8zudi28v8lr6fgphwffqoz0j6c=897fdf71-4a24-4453-a8f9-83e8af457f1e%3A3%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=shineinternalindolent.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:15 GMT
Flow-Level: 3
Logid: 9010283680741897381
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010283680741897381
Yme: ZIGW+Ss3QE0WaCsHTGriq29Xvv4cVAPxqh5NwyeJmu2zTFhhZzB8k2FBqGUY
Content-Length: 44
cdn.cloudimagesb.com/cti/4e/61/98/4e619871efbab123abb0e0121e08e11d/1628586907.jpg
45.133.44.10200 OK 23 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/4e/61/98/4e619871efbab123abb0e0121e08e11d/1628586907.jpg
IP 45.133.44.10:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash c6f19781c79ff746b99178f813cfbff2
5c307e43c63001535aa3a3683777dbb1a7f0775b
816b5a5d078f27271fa2d7c210d708f386a6f9fbd9242531b07f0b051382870d
GET /cti/4e/61/98/4e619871efbab123abb0e0121e08e11d/1628586907.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:15 GMT
content-type: image/jpeg
content-length: 22883
server: nginx/1.21.6
last-modified: Tue, 10 Aug 2021 09:15:16 GMT
etag: "611243a4-5963"
expires: Thu, 07 Dec 2023 10:49:15 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/5d/60/ed/5d60edea793259cd719bfa3d19bcae3e/1628587069.jpg
45.133.44.10200 OK 28 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/5d/60/ed/5d60edea793259cd719bfa3d19bcae3e/1628587069.jpg
IP 45.133.44.10:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 321x240, components 3\012- data
Hash f4fabf64be47ce667e0cfc150667b36c
234d722efa06cbedfdad9c1bb497a942997741dd
272b7875492a55c6f53a4e4704e715cc5b3cc4e5093758cbfedd95441bfe98d8
GET /cti/5d/60/ed/5d60edea793259cd719bfa3d19bcae3e/1628587069.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:15 GMT
content-type: image/jpeg
content-length: 27606
server: nginx/1.21.6
last-modified: Tue, 10 Aug 2021 09:17:59 GMT
etag: "61124447-6bd6"
expires: Thu, 07 Dec 2023 10:49:15 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/video-fail-bg.b77a1e8a.png
90.84.161.17200 OK 105 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/video-fail-bg.b77a1e8a.png
IP 90.84.161.17:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type PNG image data, 980 x 438, 4-bit colormap, non-interlaced\012- data
Size 105 kB (104817 bytes)
Hash b77a1e8a238d4e4191ff9e8a80d6d86d
30d6d726f8f3bfac5770d3ba9ac464f36b4c51b3
73af449450a319a9c3b28782e4bfa3ed17e6b5f7c04a834dba21f96dd0f28949
GET /fe-opera-static/node-static-v4/fe-webv4-main/img/video-fail-bg.b77a1e8a.png HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:15 GMT
content-type: image/png
content-length: 104817
server: openresty
content-md5: t3oeiiONTkGR/56KgNbYbQ==
etag: "b77a1e8a238d4e4191ff9e8a80d6d86d"
expires: Wed, 15 Feb 2023 22:47:56 GMT
last-modified: Fri, 10 Feb 2023 07:43:39 GMT
x-bce-content-crc32: 4025551842
x-bce-debug-id: GU0GXuuVmHD1E2Z4twTBIaO14v2edTIrZIjjemDK7yWOsY+HCIeciS9bgQOAOSIWMUxPucybY5m7VzvcBt1c3A==
x-bce-request-id: 47c77fdc-17bf-44d4-8c6d-c40c7548a183
x-bce-storage-class: STANDARD
x-ccdn-expires: 1109266
via: EU-GER-frankfurt-EDGE5-CACHE4[3],EU-GER-frankfurt-EDGE5-CACHE1[0,TCP_HIT,2],EU-GER-frankfurt-GLOBAL1-CACHE2[3],EU-GER-frankfurt-GLOBAL1-CACHE8[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24820050
accept-ranges: bytes
access-control-allow-origin: *
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701773357372&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=178514907.1701773358&ul=en-us&sr=1280x1024&sid=1701773357&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&dt=WWW.RBDISK.COM%20.DESI%20GIRLS..Today%20Exclusive%20-Super%20Horny%20Indian%20Cpl%20Fucking%20Masahub.Net.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=4&tfd=12835
216.239.34.36204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701773357372&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=178514907.1701773358&ul=en-us&sr=1280x1024&sid=1701773357&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&dt=WWW.RBDISK.COM%20.DESI%20GIRLS..Today%20Exclusive%20-Super%20Horny%20Indian%20Cpl%20Fucking%20Masahub.Net.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=4&tfd=12835
IP 216.239.34.36:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701773357372&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=178514907.1701773358&ul=en-us&sr=1280x1024&sid=1701773357&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&dt=WWW.RBDISK.COM%20.DESI%20GIRLS..Today%20Exclusive%20-Super%20Horny%20Indian%20Cpl%20Fucking%20Masahub.Net.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=4&tfd=12835 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1996
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://www.1024tera.com
date: Tue, 05 Dec 2023 10:49:15 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.1024tera.com/api/analytics?errno=undefined&errormsg=Unable%20to%20connect%20to%20the%20Internet%2C%20please%20connect%20and%20try%20again&type=videoplayer_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773360982
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=undefined&errormsg=Unable%20to%20connect%20to%20the%20Internet%2C%20please%20connect%20and%20try%20again&type=videoplayer_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773360982
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 1a5345d6bf8cbeb2e82e7faa4d5f1fce
f3fdc8ee402a5d3792f38f32e28bd1ba8e62f01b
e5b7bad3eeb9202e30e36ddf78a3a356babd3f0dc4033f042117109935b7b4b9
GET /api/analytics?errno=undefined&errormsg=Unable%20to%20connect%20to%20the%20Internet%2C%20please%20connect%20and%20try%20again&type=videoplayer_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773360982 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773361.56.0.0; _ga=GA1.1.178514907.1701773358; dom3ic8zudi28v8lr6fgphwffqoz0j6c=897fdf71-4a24-4453-a8f9-83e8af457f1e%3A3%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=shineinternalindolent.com; pp_main_1e1bbdc937ccd35cd1897b4e58c7407b=1; pp_idelay_1e1bbdc937ccd35cd1897b4e58c7407b=1; sb_main_f195e5fa577c23352666448243864c68=1; sb_idelay_f195e5fa577c23352666448243864c68=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:15 GMT
Flow-Level: 3
Logid: 9010283809823780180
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010283809823780180
Yme: ZIGW+Ss3QEsSdTQGUmr/tG1MvuUZTBz3qQpNwyeL
Content-Length: 44
www.1024tera.com/api/analytics?type=videoplayer_pause&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773361013
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=videoplayer_pause&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773361013
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 825c49f49609085a3cda306c6af4d47b
2898a4e29d71a6d92db1e2c2470f2ca5e6fcd32e
b5f7ea948676721f1591707298a288fd6277f6e3174d24aa4792daaca8c5e15b
GET /api/analytics?type=videoplayer_pause&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773361013 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773361.56.0.0; _ga=GA1.1.178514907.1701773358; dom3ic8zudi28v8lr6fgphwffqoz0j6c=897fdf71-4a24-4453-a8f9-83e8af457f1e%3A3%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=shineinternalindolent.com; pp_main_1e1bbdc937ccd35cd1897b4e58c7407b=1; pp_idelay_1e1bbdc937ccd35cd1897b4e58c7407b=1; sb_main_f195e5fa577c23352666448243864c68=1; sb_idelay_f195e5fa577c23352666448243864c68=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:15 GMT
Flow-Level: 3
Logid: 9010283807447899371
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010283807447899371
Yme: ZIGW+Ss3QE0WYisETnb+qnFLufkASwb8tAFJxCqBmOuxtSh9
Content-Length: 44
region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701773357372&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=178514907.1701773358&ul=en-us&sr=1280x1024&sid=1701773357&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&dt=WWW.RBDISK.COM%20.DESI%20GIRLS..Today%20Exclusive%20-Super%20Horny%20Indian%20Cpl%20Fucking%20Masahub.Net.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=5&tfd=17837
216.239.34.36 0 B URL region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701773357372&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=178514907.1701773358&ul=en-us&sr=1280x1024&sid=1701773357&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&dt=WWW.RBDISK.COM%20.DESI%20GIRLS..Today%20Exclusive%20-Super%20Horny%20Indian%20Cpl%20Fucking%20Masahub.Net.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=5&tfd=17837
IP 216.239.34.36:0
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701773357372&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=178514907.1701773358&ul=en-us&sr=1280x1024&sid=1701773357&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&dt=WWW.RBDISK.COM%20.DESI%20GIRLS..Today%20Exclusive%20-Super%20Horny%20Indian%20Cpl%20Fucking%20Masahub.Net.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=5&tfd=17837 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 391
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://www.1024tera.com
date: Tue, 05 Dec 2023 10:49:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
distancemedicalchristian.com/sbar.json?key=f195e5fa577c23352666448243864c68&uuid=897fdf71-4a24-4453-a8f9-83e8af457f1e%3A3%3A1
192.243.59.13 4.4 kB URL distancemedicalchristian.com/sbar.json?key=f195e5fa577c23352666448243864c68&uuid=897fdf71-4a24-4453-a8f9-83e8af457f1e%3A3%3A1
IP 192.243.59.13:0
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (6256), with no line terminators
Hash cec94f941ff68eace53c2b13d674aa81
2c76f3d6b46a39224595cabca1c3ef4e178659b3
def85fd3d07294ac75c33273ca106361def4d1a3933257c9961d9746359e7e77
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sbar.json?key=f195e5fa577c23352666448243864c68&uuid=897fdf71-4a24-4453-a8f9-83e8af457f1e%3A3%3A1 HTTP/1.1
Host: distancemedicalchristian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 05 Dec 2023 10:49:20 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.1024tera.com
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=20651427; expires=Wed, 06 Dec 2023 10:49:20 GMT; secure; SameSite=None
uid_id2=897fdf71-4a24-4453-a8f9-83e8af457f1e:3:1; expires=Tue, 12 Dec 2023 10:49:20 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 06 Dec 2023 10:49:20 GMT; secure; SameSite=None
uncs=1; expires=Wed, 06 Dec 2023 10:49:20 GMT; secure; SameSite=None
pdhtkv29=true; expires=Wed, 06 Dec 2023 10:49:20 GMT; secure; SameSite=None
uncs29=1; expires=Wed, 06 Dec 2023 10:49:20 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 70f1256dcd292155d0141c9244ff62cd
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
distancemedicalchristian.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSu3l0PIgi7eJFlYQQPK5hJ%2F5wf7mFxXSPBmMTdSM7VVdWTMtVdTVX39CRegguyBw%2BzN4%2Bdb5INahT3Kggy8SIBYceD5GAu%2FgcKe5ZJBkbfod97%2FT2o7%2Fve%2B2K%2FPCceSnq2%2FpHelUrRxajpNm5vyozryjZWNxqe23TvNDZl1grvNAbTj%2Bm%2F47lR032r8YFg23rRdz3X9VyvsSSNSPRg8QKFzI%2B7XrPrNkO%2F6UUhBub%2FvS0dWOqA98%2FJDUg%2BeWnr12eQbIws%2FeG%2BsNuFzt9%2BPy0VLbRBnx99km1nusqQzsvEOEiyo9k0tJ0Q8tUV6OxopgC6fzBVgFhOiPOHhzg7mtFE3D%2B8ZBoriAwxfwVVfwyhxpB0DKYfQfLnBGAcq2vI0qer2lR05xKlU3RCrr34B7KakGt%2FvoYs%2Ff6ekoPGQ63KQurMYpDUkIMxZG%2BMvDxBsetAVidgxeeQ%2FDey%2BGIFWXqwZpWG5GdvdrrthCdtbyGkfrgQhlGwQDtJd6ETiA5NwqideOLCIinHkMkYSgxB7VWU1kEpHZSJgzJ3kPKzBo26ieu2kzgJgk7IGAsCxqJOi0c8CDuJi5JNNQxR5EMwNQQze8jNHrblk%2BfRDZjyZ9itGpZfgS0mxPn4M%2FR5jUoQVJagogSVJKgKgqpfH3JlfVs%2F5cqWsTfL%2FiwH9UgXvX16qIueyAioGe7n5%2BT61EPnzq0RtsVZI%2FG6kYgSGrXbzA%2BCyG%2B1WmHY8cOg0wpZqwMra0h7BdQ62JUT8sbNL5HLCXm5fYyYnsCqEzB5HbS8BVqN2r4LujUKOy52s2PP9cNCGNpkOgXXNfLiGoodZ1%2Bdk9cvdrm89h0EO737V3ARYKZGbmp8Kn8h6KnHowe6IgcPdGXJs7W8kKncpdM9PyxoIa5%2B86HYqbThy%2Fft8Ot32RSYlscbwhYrNOMy61ny7T3JuTBL2jBBflq2myJeL%2B3WvdJkZb6y%2Ft7ScpobYa3U2Rh0erN%2FGzA5Ia%2Fe3Li44ds%2FrkCaMUxZIy1PySwg9Rgs34PN5%2FytJjBqPhPnDqqyHhk%2Fnv9UkkCJeU%2FjGvY%2FfTyv9%2B1j9IwDWjxCltbomxp9VYOqIWx5dVTk5vTu77PHY%2BWMYmWcg1gZ9eTSXCvPGiJK3ES4voiTbpy0qcu7SdiNadcT7TiiHgo7EZq4%2FwIAAP%2F%2FAQAA%2F%2F%2BTGwCQmwQAAA%3D%3D
192.243.59.13 7 B URL distancemedicalchristian.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSu3l0PIgi7eJFlYQQPK5hJ%2F5wf7mFxXSPBmMTdSM7VVdWTMtVdTVX39CRegguyBw%2BzN4%2Bdb5INahT3Kggy8SIBYceD5GAu%2FgcKe5ZJBkbfod97%2FT2o7%2Fve%2B2K%2FPCceSnq2%2FpHelUrRxajpNm5vyozryjZWNxqe23TvNDZl1grvNAbTj%2Bm%2F47lR032r8YFg23rRdz3X9VyvsSSNSPRg8QKFzI%2B7XrPrNkO%2F6UUhBub%2FvS0dWOqA98%2FJDUg%2BeWnr12eQbIws%2FeG%2BsNuFzt9%2BPy0VLbRBnx99km1nusqQzsvEOEiyo9k0tJ0Q8tUV6OxopgC6fzBVgFhOiPOHhzg7mtFE3D%2B8ZBoriAwxfwVVfwyhxpB0DKYfQfLnBGAcq2vI0qer2lR05xKlU3RCrr34B7KakGt%2FvoYs%2Ff6ekoPGQ63KQurMYpDUkIMxZG%2BMvDxBsetAVidgxeeQ%2FDey%2BGIFWXqwZpWG5GdvdrrthCdtbyGkfrgQhlGwQDtJd6ETiA5NwqideOLCIinHkMkYSgxB7VWU1kEpHZSJgzJ3kPKzBo26ieu2kzgJgk7IGAsCxqJOi0c8CDuJi5JNNQxR5EMwNQQze8jNHrblk%2BfRDZjyZ9itGpZfgS0mxPn4M%2FR5jUoQVJagogSVJKgKgqpfH3JlfVs%2F5cqWsTfL%2FiwH9UgXvX16qIueyAioGe7n5%2BT61EPnzq0RtsVZI%2FG6kYgSGrXbzA%2BCyG%2B1WmHY8cOg0wpZqwMra0h7BdQ62JUT8sbNL5HLCXm5fYyYnsCqEzB5HbS8BVqN2r4LujUKOy52s2PP9cNCGNpkOgXXNfLiGoodZ1%2Bdk9cvdrm89h0EO737V3ARYKZGbmp8Kn8h6KnHowe6IgcPdGXJs7W8kKncpdM9PyxoIa5%2B86HYqbThy%2Fft8Ot32RSYlscbwhYrNOMy61ny7T3JuTBL2jBBflq2myJeL%2B3WvdJkZb6y%2Ft7ScpobYa3U2Rh0erN%2FGzA5Ia%2Fe3Li44ds%2FrkCaMUxZIy1PySwg9Rgs34PN5%2FytJjBqPhPnDqqyHhk%2Fnv9UkkCJeU%2FjGvY%2FfTyv9%2B1j9IwDWjxCltbomxp9VYOqIWx5dVTk5vTu77PHY%2BWMYmWcg1gZ9eTSXCvPGiJK3ES4voiTbpy0qcu7SdiNadcT7TiiHgo7EZq4%2FwIAAP%2F%2FAQAA%2F%2F%2BTGwCQmwQAAA%3D%3D
IP 192.243.59.13:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSu3l0PIgi7eJFlYQQPK5hJ%2F5wf7mFxXSPBmMTdSM7VVdWTMtVdTVX39CRegguyBw%2BzN4%2Bdb5INahT3Kggy8SIBYceD5GAu%2FgcKe5ZJBkbfod97%2FT2o7%2Fve%2B2K%2FPCceSnq2%2FpHelUrRxajpNm5vyozryjZWNxqe23TvNDZl1grvNAbTj%2Bm%2F47lR032r8YFg23rRdz3X9VyvsSSNSPRg8QKFzI%2B7XrPrNkO%2F6UUhBub%2FvS0dWOqA98%2FJDUg%2BeWnr12eQbIws%2FeG%2BsNuFzt9%2BPy0VLbRBnx99km1nusqQzsvEOEiyo9k0tJ0Q8tUV6OxopgC6fzBVgFhOiPOHhzg7mtFE3D%2B8ZBoriAwxfwVVfwyhxpB0DKYfQfLnBGAcq2vI0qer2lR05xKlU3RCrr34B7KakGt%2FvoYs%2Ff6ekoPGQ63KQurMYpDUkIMxZG%2BMvDxBsetAVidgxeeQ%2FDey%2BGIFWXqwZpWG5GdvdrrthCdtbyGkfrgQhlGwQDtJd6ETiA5NwqideOLCIinHkMkYSgxB7VWU1kEpHZSJgzJ3kPKzBo26ieu2kzgJgk7IGAsCxqJOi0c8CDuJi5JNNQxR5EMwNQQze8jNHrblk%2BfRDZjyZ9itGpZfgS0mxPn4M%2FR5jUoQVJagogSVJKgKgqpfH3JlfVs%2F5cqWsTfL%2FiwH9UgXvX16qIueyAioGe7n5%2BT61EPnzq0RtsVZI%2FG6kYgSGrXbzA%2BCyG%2B1WmHY8cOg0wpZqwMra0h7BdQ62JUT8sbNL5HLCXm5fYyYnsCqEzB5HbS8BVqN2r4LujUKOy52s2PP9cNCGNpkOgXXNfLiGoodZ1%2Bdk9cvdrm89h0EO737V3ARYKZGbmp8Kn8h6KnHowe6IgcPdGXJs7W8kKncpdM9PyxoIa5%2B86HYqbThy%2Fft8Ot32RSYlscbwhYrNOMy61ny7T3JuTBL2jBBflq2myJeL%2B3WvdJkZb6y%2Ft7ScpobYa3U2Rh0erN%2FGzA5Ia%2Fe3Li44ds%2FrkCaMUxZIy1PySwg9Rgs34PN5%2FytJjBqPhPnDqqyHhk%2Fnv9UkkCJeU%2FjGvY%2FfTyv9%2B1j9IwDWjxCltbomxp9VYOqIWx5dVTk5vTu77PHY%2BWMYmWcg1gZ9eTSXCvPGiJK3ES4voiTbpy0qcu7SdiNadcT7TiiHgo7EZq4%2FwIAAP%2F%2FAQAA%2F%2F%2BTGwCQmwQAAA%3D%3D HTTP/1.1
Host: distancemedicalchristian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=20651427; uid_id2=897fdf71-4a24-4453-a8f9-83e8af457f1e:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 05 Dec 2023 10:49:21 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7fc67f212ea5b1603b4b8d821b3d0bd0
Strict-Transport-Security: max-age=0; includeSubdomains
friendshipmale.com/sfp.js
104.21.234.33200 OK 41 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP 104.21.234.33:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 924e967bca1d599992556a8d139b1c5a
222b09dbf164ddc03d39100fd0524a22018d28b2
ac84c2f8288b59f8e04ba77287ce696052bfeee0d462a566d94dc305df646c95
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:15 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 5259c088ab41dc7c0b08d74929ab776c
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 05 Dec 2023 10:49:14 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0DzKyOrQqioBHeZdUtOiOOLIdJvdaz1vHWJvapar03IkbAaZDfA%2F52NcFd76qA0%2BrTkMviljTZCfcjcVNTLrzX4tXLiTX1p8fwCGotggNiPLmUD77vJq5mVDuQgvjoAJ%2BpsEre0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830bb8aab9021c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/sweep/social-box/white-small/img/close.png
172.64.109.10 6.0 kB URL cdn.creative-bars1.com/sb/ssp/sweep/social-box/white-small/img/close.png
IP 172.64.109.10:0
File type PNG image data, 522 x 391, 8-bit/color RGBA, non-interlaced\012- data
Hash c489ce2c491a22ee37a55e26a92dfd73
2fa588ab09e94dd902e5bd24b48f98ad1949c9d6
1eed147c7d5de6291c25fbc5274830c12d5549262fb144271576d4e15966e5bd
GET /sb/ssp/sweep/social-box/white-small/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:21 GMT
content-type: image/png
content-length: 5982
last-modified: Tue, 21 Sep 2021 12:02:03 GMT
etag: "6149c9bb-175e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 2017644
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gW4hJASxz4pbioLpndBOkmDGv8i4nrfGV5342MIC%2BcpkuMUYLo%2FQxP5Mg1FSXXf%2FTwWxS7VEVyNGUW9EGfBPRnVDRi43wOLCy5Ztm8L9ZdOGqqjtXzMTje2lRk13RNycgjkAkdSUmDCu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830bb8d53a2048bb-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/sweep/social-box/white-small/css/style.css
172.64.109.10 1.2 kB URL cdn.creative-bars1.com/sb/ssp/sweep/social-box/white-small/css/style.css
IP 172.64.109.10:0
Hash 75807d769c7dba52f1211747f7315922
7257b776387519132bd5dc76779791d491909f63
07ba6d794f0272e7457c1aad8f1c9eb035266eae47acf005caa28baa9d61d387
GET /sb/ssp/sweep/social-box/white-small/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:21 GMT
content-type: text/css
last-modified: Mon, 24 Jan 2022 10:39:40 GMT
etag: W/"61ee81ec-123b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 96886
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1cHpk0MR3ADye3cPGlcILx5eCnLix9D52p3KJ4Vyr34Tz3dvDZOD5OrI77gG%2B9zFcMvm467K4nfWtBrKXuayIYORJGN%2BlTrszxcVDqeVuBpRfL1lUIFoN53bccuCXu%2F%2FWOv7ynD5v9CF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830bb8d52a0a48bb-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.163 16 kB URL fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 23:43:03 GMT
expires: Tue, 03 Dec 2024 23:43:03 GMT
cache-control: public, max-age=31536000
age: 39978
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
142.250.74.163 16 kB URL fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:52:12 GMT
expires: Thu, 28 Nov 2024 21:52:12 GMT
cache-control: public, max-age=31536000
age: 478630
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
distancemedicalchristian.com/pixel/sbs?c=1
192.243.59.13 0 B URL distancemedicalchristian.com/pixel/sbs?c=1
IP 192.243.59.13:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: distancemedicalchristian.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=20651427; uid_id2=897fdf71-4a24-4453-a8f9-83e8af457f1e:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 05 Dec 2023 10:49:22 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
data.1024tera.com/thumbnail/07bb1e4b6ac4a3ad7724441a6517f7e6?fid=4399635254774-250528-771846581940664&time=1701770400&rt=sh&sign=FDTAER-DCb740ccc5511e5e8fedcff06b081203-A5LmMpCZbc7mWFafcx1EunOUPsY%3D&expires=8h&chkv=0&chkbd=0&chkpc=&dp-logid=9010282779714788209&dp-callid=0&size=c850_u580&quality=100&vuk=-&ft=video
210.148.85.35200 OK 17 kB URL GET HTTP/1.1 data.1024tera.com/thumbnail/07bb1e4b6ac4a3ad7724441a6517f7e6?fid=4399635254774-250528-771846581940664&time=1701770400&rt=sh&sign=FDTAER-DCb740ccc5511e5e8fedcff06b081203-A5LmMpCZbc7mWFafcx1EunOUPsY%3D&expires=8h&chkv=0&chkbd=0&chkpc=&dp-logid=9010282779714788209&dp-callid=0&size=c850_u580&quality=100&vuk=-&ft=video
IP 210.148.85.35:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 70x70, segment length 16, baseline, precision 8, 318x580, components 3\012- data
Hash c3ca12bdb9e8bfed65ef0385046bc790
55a0239e38ccd778de75dfef0d3bba223f862b62
da758884db169448a7d7267f3d8bb93811a0eae0df9d5aef21dfa1fd680ed4e2
GET /thumbnail/07bb1e4b6ac4a3ad7724441a6517f7e6?fid=4399635254774-250528-771846581940664&time=1701770400&rt=sh&sign=FDTAER-DCb740ccc5511e5e8fedcff06b081203-A5LmMpCZbc7mWFafcx1EunOUPsY%3D&expires=8h&chkv=0&chkbd=0&chkpc=&dp-logid=9010282779714788209&dp-callid=0&size=c850_u580&quality=100&vuk=-&ft=video HTTP/1.1
Host: data.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773359.58.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 10:49:14 GMT
Content-Type: image/jpeg
Connection: keep-alive
x-bs-client-ip: OTEuOTAuNDIuMTU0
x-bs-request-id: MTAuMjUyLjc2LjEzOjIwNDE6OTAxMDI4Mjc3OTcxNDc4ODIwOToyMDIzLTEyLTA1IDE4OjQ5OjE0
Content-Length: 17128
Server: TERABOX UI
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/facebook.min.js
90.84.161.17200 OK 4.1 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/facebook.min.js
IP 90.84.161.17:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (4246), with no line terminators
Hash a80e27408d2ae3596aadac56d9c72ed0
37348a3ed8934ee41f99a05149abce511cc9ba67
bd7f1f57a1a99c9473f1c10db30eee2abfdcbffda0c1992ece9948db001502eb
GET /fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/facebook.min.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:07 GMT
content-type: application/javascript
server: openresty
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT
access-control-expose-headers: ETag, Content-Length, x-bce-next-append-offset, x-bce-object-type, x-bce-request-id
access-control-max-age: 1800
content-md5: Aowl118tEMuXoOFINDERYw==
etag: W/"028c25d75f2d10cb97a0e14834311163"
expires: Sat, 24 Sep 2022 06:46:06 GMT
last-modified: Wed, 21 Sep 2022 05:03:33 GMT
x-bce-content-crc32: 3600293201
x-bce-debug-id: drF3pXV387iC2EyFCn4G8jIjxuuDcbNW6JT4jDmhDeNosKMTV4jVPaeR4QxYWsldtHHLV0pqg9KhEHfx+45FOQ==
x-bce-request-id: 1e1dfa93-d4b6-4000-b380-bdf1ecb59464
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 1202930
via: EU-GER-frankfurt-EDGE5-CACHE4[13],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE3[3],EU-GER-frankfurt-GLOBAL1-CACHE10[0,TCP_HIT,2],EA-SGP-GLOBAL1-CACHE9[4],EA-SGP-GLOBAL1-CACHE30[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24823204
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
sofire.bdstatic.com/js/fsec-hd.js
60.190.116.48200 OK 295 kB URL GET HTTP/2 sofire.bdstatic.com/js/fsec-hd.js
IP 60.190.116.48:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
Size 295 kB (295197 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/fsec-hd.js HTTP/1.1
Host: sofire.bdstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: JSP3/2.0.14
date: Tue, 05 Dec 2023 10:49:06 GMT
content-type: text/javascript
expires: Wed, 06 Dec 2023 03:12:09 GMT
last-modified: Fri, 30 Jun 2023 07:31:01 GMT
etag: "834113d1867d8ec45fc41e3c692fdead"
content-encoding: br
age: 200217
accept-ranges: bytes
content-md5: g0ET0YZ9jsRfxB48aS/erQ==
x-bce-content-crc32: 1744549445
x-bce-debug-id: OpAI/YsGDxPA7KJwy3hkIg/Qi7pvbu7nGDz77YfG2ongeXSU84MMeDcIpIgQ9RIQAc+BUAU3z3NpX7Ups27V8Q==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: acf1816d-2c7d-4d27-946b-d819e10fa80f
x-bce-storage-class: STANDARD
ohc-global-saved-time: Sun, 03 Dec 2023 03:12:08 GMT
ohc-cache-hit: wz2ct50 [2], nb2ctcache78 [2]
ohc-response-time: 1 0 0 0 0 0
X-Firefox-Spdy: h2
s2.teraboxcdn.com/general-conf/ymg/2068/abclite-2068-s.js?v=0.8056740376617568
90.84.161.17200 OK 100 kB URL GET HTTP/2 s2.teraboxcdn.com/general-conf/ymg/2068/abclite-2068-s.js?v=0.8056740376617568
IP 90.84.161.17:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 100 kB (100051 bytes)
Hash 46ea1ae23faf5ae71c0045843eb433e9
16888edbe3dd7626386b04d43e37a89427f0aea8
dd8c44b26db60a31584a292ad74cd2325799a19c1c8e1d567d32c3dada94fb55
GET /general-conf/ymg/2068/abclite-2068-s.js?v=0.8056740376617568 HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:07 GMT
content-type: application/javascript
server: openresty
content-md5: Ruoa4j+vWuccAEWEPrQz6Q==
etag: W/"46ea1ae23faf5ae71c0045843eb433e9"
expires: Fri, 07 Apr 2023 22:40:39 GMT
last-modified: Tue, 14 Mar 2023 06:06:12 GMT
x-bce-content-crc32: 1662135932
x-bce-debug-id: Jz1KOcGPkhU4n3Zck8uoB7CbklPytTa0SgCVaS0EGpxL61wnts4jWik6aFmIBGaCydmzElR8tezYRsKZD0KeZg==
x-bce-request-id: 7297b527-d932-4266-b90c-9962c07f4e61
x-bce-storage-class: STANDARD
x-ccdn-expires: 2592000
via: EU-GER-frankfurt-EDGE5-CACHE4[16],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[2],EU-GER-frankfurt-GLOBAL1-CACHE4[0,TCP_HIT,1]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 19639197
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200002&language_type=en&cfg_category_keys=%5B%5D&version=0
210.148.85.59200 OK 68 kB URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200002&language_type=en&cfg_category_keys=%5B%5D&version=0
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash c46c10fe1ee5cef5d791e71ce886cedc
3fb4ad2ca005aec79daa9f7cc29db53b50788eb0
e0e2d04240b0bdbdf4aa53b6908ed787a6df47ce29386779be588e1e5830438e
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&dp-logid=60232300971789200002&language_type=en&cfg_category_keys=%5B%5D&version=0 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:10 GMT
Flow-Level: 3
Logid: 9010282370648064013
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 9010282370648064013
Yme: ZIGW+Ss3QE0WaysES2ziq29Xvv4cVAP2oh5OxyeJmu2ySylNVBl3Y2BnmPwY
Transfer-Encoding: chunked
www.1024tera.com/api/analytics?time=7089&type=web_share_page_show_TTI&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773355026
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?time=7089&type=web_share_page_show_TTI&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773355026
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5389d6b257345a9cf4fb7019bbee6123
1c9800e23d5dcadb999706db8c599fb09ab830a0
8ce51730ce69f076af4bda2c128cbb57dd655a9ac86459dc74c4b7dc37cc737d
GET /api/analytics?time=7089&type=web_share_page_show_TTI&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773355026 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:11 GMT
Flow-Level: 3
Logid: 9010282584121161666
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010282584121161666
Yme: ZIGW+Ss3QE0WaSsHTGriq29Xvv4cVAP2oh5GwCqBmOSyJXksfg==
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-vendors.0c91416b.js
90.84.161.17200 OK 1.3 MB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-vendors.0c91416b.js
IP 90.84.161.17:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Size 1.3 MB (1276997 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-vendors.0c91416b.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:07 GMT
content-type: application/javascript
server: openresty
content-md5: a1l6Bl6z/WmUk5VRMLJRyw==
etag: W/"6b597a065eb3fd699493955130b251cb"
expires: Sat, 25 Nov 2023 10:39:04 GMT
last-modified: Wed, 22 Nov 2023 02:21:52 GMT
x-bce-content-crc32: 3304779663
x-bce-debug-id: qN0aN2KGmEnQNotbwTj5EO9MHr42l1O3a48iCP9ZQ1QdFJqG7umOmDl00uQpHIgJHgNjtdiGCMrsn+tYuWFRhg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 566c3b22-e053-4880-b154-222038dabd24
x-bce-storage-class: STANDARD
x-ccdn-expires: 1572514
via: EU-GER-frankfurt-EDGE5-CACHE4[7],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE1[22],EU-GER-frankfurt-GLOBAL1-CACHE9[0,TCP_HIT,20]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 1123723
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/main.20d560f7.js
90.84.161.17200 OK 574 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/main.20d560f7.js
IP 90.84.161.17:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Size 574 kB (573528 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/main.20d560f7.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:07 GMT
content-type: application/javascript
server: openresty
content-md5: XBYxVdFeVZk0SBxr/7jqEg==
etag: W/"5c163155d15e559934481c6bffb8ea12"
expires: Thu, 07 Dec 2023 10:54:09 GMT
last-modified: Mon, 04 Dec 2023 08:11:44 GMT
x-bce-content-crc32: 2039423128
x-bce-debug-id: 5BTNP9EYz7/KBpfzx7FmcxPdLip0yxn6BfC+BkZW2Qt3oVBXRPoFAB5lM18t3FjJqV5cg821qGp5BgRGq2euDw==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 777ccde8-390f-4baf-911a-e695c4f497e0
x-bce-storage-class: STANDARD
x-ccdn-expires: 2506590
via: EU-GER-frankfurt-EDGE5-CACHE4[2],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE1[26],EU-GER-frankfurt-GLOBAL1-CACHE2[0,TCP_HIT,25]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 85931
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/general-conf/fk/dfxaf3-598bbed9.js
90.84.161.17200 OK 98 kB URL GET HTTP/2 s2.teraboxcdn.com/general-conf/fk/dfxaf3-598bbed9.js
IP 90.84.161.17:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /general-conf/fk/dfxaf3-598bbed9.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:07 GMT
content-type: text/javascript
server: openresty
content-md5: +fZxgdCHtOLq9IVUxQHgZQ==
etag: W/"f9f67181d087b4e2eaf48554c501e065"
expires: Fri, 03 Nov 2023 12:27:55 GMT
last-modified: Tue, 31 Oct 2023 12:25:48 GMT
x-bce-content-crc32: 3748294646
x-bce-debug-id: aGEi7xHbLdU53XfCnCB+gn9IMUFfdLw+Ug2cTW1Uu0gn8LTbfsIrGzew5yl6vbcMd2PUBbSod+OrM3Z56BBUNg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 8d78a03a-02bd-49e4-ba41-e617432a8b15
x-bce-storage-class: STANDARD
via: EU-GER-frankfurt-EDGE5-CACHE4[1],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[2],EU-GER-frankfurt-GLOBAL1-CACHE2[0,TCP_HIT,1]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 3018071
x-ccdn-expires: 2592000
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recyclebin~share~shortLink~~a6807c0b.04a18b24.js
90.84.161.17200 OK 496 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recyclebin~share~shortLink~~a6807c0b.04a18b24.js
IP 90.84.161.17:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Size 496 kB (495840 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recyclebin~share~shortLink~~a6807c0b.04a18b24.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:07 GMT
content-type: application/javascript
server: openresty
content-md5: mBU1wxf0TvKK5InNQvBhrw==
etag: W/"981535c317f44ef28ae489cd42f061af"
expires: Thu, 07 Dec 2023 10:54:10 GMT
last-modified: Mon, 04 Dec 2023 08:11:32 GMT
x-bce-content-crc32: 3667673518
x-bce-debug-id: K2X9lIphgkqRGFiI7g2dxhr6NF6kPtBdPJj/pJH7fc7eM68F1ajxDcVpE/6LCEQyX9va0YxP2/uXuEw3xqDG6Q==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 9bb99d02-2ae1-414e-9ed0-05fb30929781
x-bce-storage-class: STANDARD
x-ccdn-expires: 2506696
via: EU-GER-frankfurt-EDGE5-CACHE4[2],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE3[17],EU-GER-frankfurt-GLOBAL1-CACHE10[0,TCP_HIT,16]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 85924
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~copyright-feedback~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recycleb~fcf1883d.07f0a14d.js
90.84.161.17200 OK 19 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~copyright-feedback~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recycleb~fcf1883d.07f0a14d.js
IP 90.84.161.17:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~copyright-feedback~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recycleb~fcf1883d.07f0a14d.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:08 GMT
content-type: application/javascript
server: openresty
content-md5: AS08YcEVOlzEUsP9xXahBw==
etag: W/"012d3c61c1153a5cc452c3fdc576a107"
expires: Thu, 07 Dec 2023 10:54:11 GMT
last-modified: Mon, 04 Dec 2023 08:11:32 GMT
x-bce-content-crc32: 2179848265
x-bce-debug-id: YACd2vQQbQy06Ts5BQ8upyuI4L5wa6pbjcJmXASfKZkAVf9NnWGCkIJlUJIkolf65QSWNIeUFJ0Q7SLQmyMXbA==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 7e9ee1dd-5dd6-40f5-b235-c5d05ba5ce56
x-bce-storage-class: STANDARD
x-ccdn-expires: 2506696
via: EU-GER-frankfurt-EDGE5-CACHE4[1],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE11[18],EU-GER-frankfurt-GLOBAL1-CACHE5[0,TCP_HIT,16]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 85925
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/kakao.min.js
90.84.161.17200 OK 115 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/kakao.min.js
IP 90.84.161.17:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Size 115 kB (114576 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/kakao.min.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:07 GMT
content-type: application/javascript
server: openresty
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT
access-control-expose-headers: ETag, Content-Length, x-bce-next-append-offset, x-bce-object-type, x-bce-request-id
access-control-max-age: 1800
content-md5: Ng3YsEXIR8ylP6d+vhUKPw==
etag: W/"360dd8b045c847cca53fa77ebe150a3f"
expires: Sat, 24 Sep 2022 06:46:06 GMT
last-modified: Wed, 21 Sep 2022 05:03:33 GMT
x-bce-content-crc32: 3787281588
x-bce-debug-id: NdXOHvJhWdykwQRMkfwzkNsOZ5AZbm+dI56Adia+fvxzTQbCnAlm9HuK5oYXV0mvHXmPazsRbY1yj9LO6Ud5AQ==
x-bce-request-id: 95d5b42d-7d75-47b4-acd7-57e276abb336
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 1202930
via: EU-GER-frankfurt-EDGE5-CACHE4[14],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE4[3],EU-GER-frankfurt-GLOBAL1-CACHE9[0,TCP_HIT,2],EA-SGP-GLOBAL1-CACHE5[4],EA-SGP-GLOBAL1-CACHE7[0,TCP_HIT,3]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24823204
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?type=web_share_video_init_rate_1&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358433
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_share_video_init_rate_1&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358433
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5258084f4569f1478ef6e64e4fc5d552
d252f613e8db52a6a458d28298be5fee7387f08f
72409d91d3398cb0e4251229ccf0df72e3883135a96ad756995d47b743c19a9d
GET /api/analytics?type=web_share_video_init_rate_1&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773358433 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773357.60.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:12 GMT
Flow-Level: 3
Logid: 9010283048667941483
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010283048667941483
Yme: ZIGW+Ss3QE0WaSsESnb+qnFLufkASwH8tAdGySKDm+8=
Content-Length: 44
lotclergyman.com/1e/1b/bd/1e1bbdc937ccd35cd1897b4e58c7407b.js
192.243.59.20200 OK 60 kB URL GET HTTP/1.1 lotclergyman.com/1e/1b/bd/1e1bbdc937ccd35cd1897b4e58c7407b.js
IP 192.243.59.20:443
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerLet's Encrypt
Subjectlotclergyman.com
Fingerprint4D:40:39:11:E0:27:47:DF:86:BF:5E:B5:51:40:08:D7:AB:31:7D:11
ValidityTue, 28 Nov 2023 07:49:04 GMT - Mon, 26 Feb 2024 07:49:03 GMT
File type ASCII text, with very long lines (59547)
Hash 6288901fc0ca3d9284dad1930f38420f
8980e572580c7f8cd20a029334dfdf1d0a238ba2
f1e741e4b47cbb54c41ae2e3c784d78eac8757d48f231ef81ff9edbd4fde847d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /1e/1b/bd/1e1bbdc937ccd35cd1897b4e58c7407b.js HTTP/1.1
Host: lotclergyman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 05 Dec 2023 10:49:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_AN-1159_new=0; expires=Sat, 09 Dec 2023 14:49:14 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 09be60229bfc7cd6149cb5490ccfd32b
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.1024tera.com/api/analytics?domain=www.1024tera.com&type=web_domain_heart_beat&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773355024
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domain=www.1024tera.com&type=web_domain_heart_beat&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773355024
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash f4c823eec2b79249e31fc79a8cbd232c
9d92aacdf1258d5a6744a75b6d2750cfc41e1d32
6cf28eb84648773454b89e26c360e99a17c44a66e1a08b32bcad122ce3671879
GET /api/analytics?domain=www.1024tera.com&type=web_domain_heart_beat&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773355024 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:10 GMT
Flow-Level: 3
Logid: 9010282573779785131
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010282573779785131
Yme: ZIGW+Ss3QEsUdTEBUmr/tG1MvuUYQxz0rwpNwyKChZvOLT1DUzcOTZrw3A==
Content-Length: 44
www.1024tera.com/api/analytics?isLogin=false&surl=qAYlpUl88nwicXE0VJn3vA&downloadPullNewFlag=b&videoTrialPullNewFlag=a&isUserSelfLink=false&referrer=&channelSrc=&type=share_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773357419
210.148.85.59200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?isLogin=false&surl=qAYlpUl88nwicXE0VJn3vA&downloadPullNewFlag=b&videoTrialPullNewFlag=a&isUserSelfLink=false&referrer=&channelSrc=&type=share_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773357419
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 27d26d93ee6e45a7850779dd310d4ea0
50f623bc9358864c29cdeb2f1f92935907726130
c0e6ba4499993062180abc6966a975cfc7b1f5dadabf6d43ce0bbe0f00c71d88
GET /api/analytics?isLogin=false&surl=qAYlpUl88nwicXE0VJn3vA&downloadPullNewFlag=b&videoTrialPullNewFlag=a&isUserSelfLink=false&referrer=&channelSrc=&type=share_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DqAYlpUl88nwicXE0VJn3vA&client=web&t=1701773357419 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 10:49:11 GMT
Flow-Level: 3
Logid: 9010282777697305832
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9010282777697305832
Yme: ZIGW+Ss3QEobdTEAUmr/tG1MvuUZTBz0qwpNwyKD55rIMQ==
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/manifest.10b4667f.js
90.84.161.17200 OK 42 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/manifest.10b4667f.js
IP 90.84.161.17:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (42022), with no line terminators
Hash edae6f2ca85f2ed5e1f3dadc18fb235c
8019006521594801ad2c578c3f14af682e861b89
b0dee26a9e55a8480f34f220b05eb8c384823bcf75260f645801c85f9491e7b3
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/manifest.10b4667f.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:07 GMT
content-type: application/javascript
server: openresty
content-md5: 7a5vLKhfLtXh89rcGPsjXA==
etag: W/"edae6f2ca85f2ed5e1f3dadc18fb235c"
expires: Thu, 07 Dec 2023 10:54:10 GMT
last-modified: Mon, 04 Dec 2023 08:11:44 GMT
x-bce-content-crc32: 1613090346
x-bce-debug-id: yl7NK2eDJ/krSbQYEc0rFUkdSk+cpDVhn1sTMzSZaROM18+G+kdtLK7lbJeQnVywzaxHMdMQ5L5FF1oD7Vh/3A==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 0ccd5ba0-0fd9-4046-9701-51882477aaca
x-bce-storage-class: STANDARD
x-ccdn-expires: 2506590
via: EU-GER-frankfurt-EDGE5-CACHE4[7],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE11[23],EU-GER-frankfurt-GLOBAL1-CACHE14[0,TCP_HIT,23]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 85931
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
shineinternalindolent.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzWsk1Rd9lclv8XNgYAY3s7J2fiCdqu6udLezEOMYCcYkzoxk%2Fb6q88yresV7VV2drIIDMsvOTl1VTicTdII4axGl48IxIKQ3koX5GwRh1tJJS%2BOFqnvPPe%2FBOfe%2BLw6KSxKioBcbH5tdpTVdiGqB%2F8amSoUpnb%2F2yA%2BDWnDP31TpYvOe35%2F8bO%2BdMIhqwZv%2Bh5Jvm4V6EAZBGIT%2BsrIyNv2FKxYqO%2BmEtU5Qa9ZrYdRE3%2F4Xu8KDox5E75LcgRLj%2F229eA7FR0iT7%2B9Lt52b7O0PkkLT3Fj0xPGn6XZqyhTJrIythzg9np6GcWNCvpyDSY%2BnDmB6hxMHYGpMvD9CsPR4KhOsd3StlGnIFEzcRNkbQeoRFB2Bm8dQ4pwAXGBtHWnydM3Yku5cs3TCjsn8y7%2BhyjGZ%2F%2FNVpMl3S1r1%2FYdGF7kyqUM%2FrqD6I6juCFlxinzXgypPwfPPocTvZOHlKtLkcN1pAyWqK%2FdKjaDiEbQcgDoPxeRTHorYQ5F5SMSFT6NOHAStmMWNRrvJOW80OI%2FaiyISjWY7DlDwibwB8mwArgfgdg%2BZ3cO22j%2BP7sAWP8NtVXDCg8vHxPtkDz1RoZQEpSMoKUGpCMqcoOxVR0K7uqueCu0KFk5zfZob1dDk3QN6ZPKuTAmoHRxkl%2BT2ZDze7V9%2FwLa88CPe7nQWZVs2OItkGLBWLBqLYRixdhBQ3oJTFZSbu3K8q8bktf4NZGpM%2Ft86AaOncPoUXN0ALULQctiqB6Bbw2Y7wG76LJeWMtOvcZNAmApZPo98xzvQl%2BTu1Zbu%2FhZC8jMyDXBbIbMVPlO%2FEHT1k%2BEDU5LDB6Z05Pl6lqtE7dLJBh%2FmNJfetx%2FJndJYsXLfDb55j0%2BISXnySLp8laZCpV1Hni0pIaRdNpZL8uOK25Rso3BbS4VNi2x14%2F3llSSz0jll0hGoOr91C1yNydx%2BePU2b%2B69DmVHsEWFpJgpVeYUPNuDy2Y9ZwisnmGWeSiLamjrbNbUikDLGaasgpNnP%2F3176VZfeCeoGs90Pwx0qRCz1bo6QpUD%2BCKV4Z5Zs%2FeffHVJL4G096QaesdMm31%2FvVonbrwZRQHsQzqksUdFrdoIDpxs8NoJ5QtFtEQuRtLQ976BwAA%2F%2F8BAAD%2F%2F%2Bkb8HVzBAAA
173.233.137.52200 OK 0 B URL GET HTTP/1.1 shineinternalindolent.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzWsk1Rd9lclv8XNgYAY3s7J2fiCdqu6udLezEOMYCcYkzoxk%2Fb6q88yresV7VV2drIIDMsvOTl1VTicTdII4axGl48IxIKQ3koX5GwRh1tJJS%2BOFqnvPPe%2FBOfe%2BLw6KSxKioBcbH5tdpTVdiGqB%2F8amSoUpnb%2F2yA%2BDWnDP31TpYvOe35%2F8bO%2BdMIhqwZv%2Bh5Jvm4V6EAZBGIT%2BsrIyNv2FKxYqO%2BmEtU5Qa9ZrYdRE3%2F4Xu8KDox5E75LcgRLj%2F229eA7FR0iT7%2B9Lt52b7O0PkkLT3Fj0xPGn6XZqyhTJrIythzg9np6GcWNCvpyDSY%2BnDmB6hxMHYGpMvD9CsPR4KhOsd3StlGnIFEzcRNkbQeoRFB2Bm8dQ4pwAXGBtHWnydM3Yku5cs3TCjsn8y7%2BhyjGZ%2F%2FNVpMl3S1r1%2FYdGF7kyqUM%2FrqD6I6juCFlxinzXgypPwfPPocTvZOHlKtLkcN1pAyWqK%2FdKjaDiEbQcgDoPxeRTHorYQ5F5SMSFT6NOHAStmMWNRrvJOW80OI%2FaiyISjWY7DlDwibwB8mwArgfgdg%2BZ3cO22j%2BP7sAWP8NtVXDCg8vHxPtkDz1RoZQEpSMoKUGpCMqcoOxVR0K7uqueCu0KFk5zfZob1dDk3QN6ZPKuTAmoHRxkl%2BT2ZDze7V9%2FwLa88CPe7nQWZVs2OItkGLBWLBqLYRixdhBQ3oJTFZSbu3K8q8bktf4NZGpM%2Ft86AaOncPoUXN0ALULQctiqB6Bbw2Y7wG76LJeWMtOvcZNAmApZPo98xzvQl%2BTu1Zbu%2FhZC8jMyDXBbIbMVPlO%2FEHT1k%2BEDU5LDB6Z05Pl6lqtE7dLJBh%2FmNJfetx%2FJndJYsXLfDb55j0%2BISXnySLp8laZCpV1Hni0pIaRdNpZL8uOK25Rso3BbS4VNi2x14%2F3llSSz0jll0hGoOr91C1yNydx%2BePU2b%2B69DmVHsEWFpJgpVeYUPNuDy2Y9ZwisnmGWeSiLamjrbNbUikDLGaasgpNnP%2F3176VZfeCeoGs90Pwx0qRCz1bo6QpUD%2BCKV4Z5Zs%2FeffHVJL4G096QaesdMm31%2FvVonbrwZRQHsQzqksUdFrdoIDpxs8NoJ5QtFtEQuRtLQ976BwAA%2F%2F8BAAD%2F%2F%2Bkb8HVzBAAA
IP 173.233.137.52:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerLet's Encrypt
Subjectshineinternalindolent.com
Fingerprint6D:2F:FA:76:0F:F3:87:81:20:04:11:2D:33:E8:C3:A4:9F:8E:07:5D
ValidityTue, 28 Nov 2023 08:00:05 GMT - Mon, 26 Feb 2024 08:00:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSzWsk1Rd9lclv8XNgYAY3s7J2fiCdqu6udLezEOMYCcYkzoxk%2Fb6q88yresV7VV2drIIDMsvOTl1VTicTdII4axGl48IxIKQ3koX5GwRh1tJJS%2BOFqnvPPe%2FBOfe%2BLw6KSxKioBcbH5tdpTVdiGqB%2F8amSoUpnb%2F2yA%2BDWnDP31TpYvOe35%2F8bO%2BdMIhqwZv%2Bh5Jvm4V6EAZBGIT%2BsrIyNv2FKxYqO%2BmEtU5Qa9ZrYdRE3%2F4Xu8KDox5E75LcgRLj%2F229eA7FR0iT7%2B9Lt52b7O0PkkLT3Fj0xPGn6XZqyhTJrIythzg9np6GcWNCvpyDSY%2BnDmB6hxMHYGpMvD9CsPR4KhOsd3StlGnIFEzcRNkbQeoRFB2Bm8dQ4pwAXGBtHWnydM3Yku5cs3TCjsn8y7%2BhyjGZ%2F%2FNVpMl3S1r1%2FYdGF7kyqUM%2FrqD6I6juCFlxinzXgypPwfPPocTvZOHlKtLkcN1pAyWqK%2FdKjaDiEbQcgDoPxeRTHorYQ5F5SMSFT6NOHAStmMWNRrvJOW80OI%2FaiyISjWY7DlDwibwB8mwArgfgdg%2BZ3cO22j%2BP7sAWP8NtVXDCg8vHxPtkDz1RoZQEpSMoKUGpCMqcoOxVR0K7uqueCu0KFk5zfZob1dDk3QN6ZPKuTAmoHRxkl%2BT2ZDze7V9%2FwLa88CPe7nQWZVs2OItkGLBWLBqLYRixdhBQ3oJTFZSbu3K8q8bktf4NZGpM%2Ft86AaOncPoUXN0ALULQctiqB6Bbw2Y7wG76LJeWMtOvcZNAmApZPo98xzvQl%2BTu1Zbu%2FhZC8jMyDXBbIbMVPlO%2FEHT1k%2BEDU5LDB6Z05Pl6lqtE7dLJBh%2FmNJfetx%2FJndJYsXLfDb55j0%2BISXnySLp8laZCpV1Hni0pIaRdNpZL8uOK25Rso3BbS4VNi2x14%2F3llSSz0jll0hGoOr91C1yNydx%2BePU2b%2B69DmVHsEWFpJgpVeYUPNuDy2Y9ZwisnmGWeSiLamjrbNbUikDLGaasgpNnP%2F3176VZfeCeoGs90Pwx0qRCz1bo6QpUD%2BCKV4Z5Zs%2FeffHVJL4G096QaesdMm31%2FvVonbrwZRQHsQzqksUdFrdoIDpxs8NoJ5QtFtEQuRtLQ976BwAA%2F%2F8BAAD%2F%2F%2Bkb8HVzBAAA HTTP/1.1
Host: shineinternalindolent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 10:49:14 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 334138c118ea2b58ce96ad0adcc64d6c
Strict-Transport-Security: max-age=0; includeSubdomains
www.1024tera.com/share/streaming?uk=4399635254774&shareid=1009454168&type=M3U8_FLV_264_480&fid=771846581940664&sign=430c9334c4ccbb27936ad3a3e75751406ef91843×tamp=1701773358&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&esl=1&isplayer=1&ehps=1&clienttype=0&app_id=250528&web=1&channel=dubox
210.148.85.59200 OK 2.9 kB URL GET HTTP/1.1 www.1024tera.com/share/streaming?uk=4399635254774&shareid=1009454168&type=M3U8_FLV_264_480&fid=771846581940664&sign=430c9334c4ccbb27936ad3a3e75751406ef91843×tamp=1701773358&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&esl=1&isplayer=1&ehps=1&clienttype=0&app_id=250528&web=1&channel=dubox
IP 210.148.85.59:443
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (2914), with no line terminators
Hash fa3683fbf9841bb0fd1bf92995237afb
782ffd3c761307700448cc078052476e9f764ff8
828fea086205fbf3534a3e0b22f20b9a2e806375f45b5a3767aa6ce75e8beab5
GET /share/streaming?uk=4399635254774&shareid=1009454168&type=M3U8_FLV_264_480&fid=771846581940664&sign=430c9334c4ccbb27936ad3a3e75751406ef91843×tamp=1701773358&jsToken=71A6BE587AE52B77523B35A7BADAD6EED4C93F9AA0D01F4DEF2F27C7C49DA3ABF859A762ABFFC396AAC82AF5B5741168D22D3787E672F3C10287E8941DC49D9C04A3E0E409F31996D07DA59EBA396D330E6DA95E53C2008FE3992C080F9DC334&esl=1&isplayer=1&ehps=1&clienttype=0&app_id=250528&web=1&channel=dubox HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Cookie: csrfToken=W79Cme9eyYvQkKsNkuWJO6OZ; browserid=O1SXVOMtsivP11AijTATydmqUMO3SPNKGaA65FHySbiOUJ442NGHVavMlGE=; lang=en; TSID=r9j4GjyW0nAU5nfPJbFnMCJipBK3Qc3t; __bid_n=18c3998a39762867a24207; _ga_06ZNKL8C2E=GS1.1.1701773357.1.0.1701773359.58.0.0; _ga=GA1.1.178514907.1701773358
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Type: application/x-mpegURL;charset=utf-8
Date: Tue, 05 Dec 2023 10:49:13 GMT
Flow-Level: 3
Http-X-Isis-Logid: 9010283304175017291
Logid: 9010283304175017291
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Yld: 9010283304175017291
Yme: ZIGW+Ss3QE0WaisMRnb+qnFLufkASwH8tAFJwiqBmO2xY5t9
Transfer-Encoding: chunked
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/share.f672a6ad.js
90.84.161.17200 OK 1.1 MB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/share.f672a6ad.js
IP 90.84.161.17:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Size 1.1 MB (1055211 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/share.f672a6ad.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:07 GMT
content-type: application/javascript
server: openresty
content-md5: KwOqTU5tJIFZrjBKTB/n0g==
etag: W/"2b03aa4d4e6d248159ae304a4c1fe7d2"
expires: Thu, 07 Dec 2023 10:54:10 GMT
last-modified: Mon, 04 Dec 2023 08:11:44 GMT
x-bce-content-crc32: 3779137827
x-bce-debug-id: mgI7aOYZZEK+qu0uBsZYQTn3mO2YPN1m1yWMIslXVcQbelEgmnNGL6hhPRgbBC66RNL/zurLp2jRSx2Cx0gAcQ==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 44d14b44-921c-4303-a4ba-222d444c5b56
x-bce-storage-class: STANDARD
x-ccdn-expires: 2506808
via: EU-GER-frankfurt-EDGE5-CACHE4[2],EU-GER-frankfurt-EDGE5-CACHE1[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE10[28],EU-GER-frankfurt-GLOBAL1-CACHE1[0,TCP_HIT,27]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 85741
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/apple.min.js
90.84.161.17200 OK 42 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/apple.min.js
IP 90.84.161.17:443
Requested by https://www.1024tera.com/sharing/link?surl=qAYlpUl88nwicXE0VJn3vA
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/apple.min.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 10:49:07 GMT
content-type: application/javascript
server: openresty
content-md5: FF9mC4xH7SHLDq/gVBei9Q==
etag: W/"145f660b8c47ed21cb0eafe05417a2f5"
expires: Sun, 05 Feb 2023 11:19:03 GMT
last-modified: Thu, 02 Feb 2023 02:44:27 GMT
x-bce-content-crc32: 3041762371
x-bce-debug-id: GooNofUHCftVSaaHEC+AzAr4FYXPEZIzOsKJwWjn94XbPwUKv4MuSNK5CZJOH/HsmlldVHL9LxC5wuj+MNetYw==
x-bce-request-id: 96560a78-91ad-47e1-a285-8df2f8efcb9d
x-bce-storage-class: STANDARD
x-ccdn-expires: 1202930
via: EU-GER-frankfurt-EDGE5-CACHE4[12],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE6[3],EU-GER-frankfurt-GLOBAL1-CACHE2[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24823204
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2