www.1024tera.com/wap/share/filelist?surl=SUVC0s2nxX-4vpf0XTv6Zw
302 Found 161 B URL User Request GET HTTP/1.1 www.1024tera.com/wap/share/filelist?surl=SUVC0s2nxX-4vpf0XTv6Zw
IP
ASN #2497 Internet Initiative Japan Inc.
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type HTML document, ASCII text, with no line terminators
Hash 3c4e25becabcd0d563afee5251e3137f
67e3d0ed24ad89422b2500af7eaeb43d2cd269ac
42519f2eb73ffeacc4215a700f3f945d96dbf4521a45c01964a6ebe520330825
GET /wap/share/filelist?surl=SUVC0s2nxX-4vpf0XTv6Zw HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Connection: keep-alive
Content-Type: text/html; charset=utf-8
Date: Tue, 05 Dec 2023 17:01:12 GMT
Flow-Level: 3
Location: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Logid: 9016274334255919172
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Set-Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; path=/
X-Conteneur-Nom: wrNGGgAfwpIFFhXCusOVwp7Dtw4qwo5abnPDo8O+w63DkQ1hw7PCsMO7w67DoALCmHDDi0cnXMKmd1jCtRV6J8KIMMOkw6gbRVfChMKgwrA=
X-Download-Options: noopen
X-Flow-Level: 3
X-Frame-Options: SAMEORIGIN
X-Powered-By: TeraBox
X-Readtime: 1
X-Request-Id: 9016274334255919172
X-Xss-Protection: 1; mode=block
Yld: 9016274334255919172
Content-Length: 161
www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
200 OK 62 kB URL User Request GET HTTP/1.1 www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
IP
ASN #2497 Internet Initiative Japan Inc.
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (49640)
Hash f2c9775fafb1646ad5790a94eee35abb
d8096774e821a9cceec064492877bc4c1b7d7b17
8fb02df5b53132686c4b87b32ff03fd3140843737192e4b6761655487386d45e
GET /sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: text/html; charset=utf-8
Date: Tue, 05 Dec 2023 17:01:12 GMT
Flow-Level: 3
Logid: 9016274415393272914
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Set-Cookie: browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; path=/; max-age=5184000; expires=Sat, 03 Feb 2024 17:01:12 GMT; domain=.1024tera.com
lang=en; path=/; max-age=2592000; expires=Thu, 04 Jan 2024 17:01:12 GMT
TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; path=/; max-age=31536000; expires=Wed, 04 Dec 2024 17:01:12 GMT; domain=.1024tera.com
Strict-Transport-Security: max-age=172800
Vary: Accept-Encoding, Accept-Encoding
X-Conteneur-Nom: wrNIGgAfwpIFFhXCusOVwp7Dtw4qwo5abnPDo8O+w63DkQ1hw7PCsMO7w67DoALCmHDDi0cnXMKmd0bCrkIjMcKHOcOzw7kUBRPCnsOgwrHDqA==
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Flow-Level: 3
X-Frame-Options: SAMEORIGIN
X-Powered-By: TeraBox
X-Readtime: 220
X-Request-Id: 9016274415393272914
X-Xss-Protection: 1; mode=block
Yld: 9016274415393272914
Yme: ZIGW+Ss3QE0RYisES2riq29Xvv4cVAPxqR5OxyeJmu21TQ==
Transfer-Encoding: chunked
static.line-scdn.net/liff/edge/2/sdk.js
200 OK 32 kB URL GET HTTP/2 static.line-scdn.net/liff/edge/2/sdk.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerAmazon
Subject*.line.me
Fingerprint39:A2:77:6F:2B:9D:03:28:CA:16:D8:21:EB:C7:7C:67:F8:C4:FB:AA
ValidityThu, 13 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 9401e899d0676ab95c03d85a709c91b9
1d72e31fd865e3e961fac993cc21f484d83bc3d2
739844ced68762af3020ce013e05c3b8d65296ad7e37b27d6d674ac94707bb0e
GET /liff/edge/2/sdk.js HTTP/1.1
Host: static.line-scdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
server: VOS
last-modified: Thu, 30 Nov 2023 02:18:33 GMT
x-amz-version-id: v.AtHv4uFQzb33ymjCyqw4IItsATTkI
x-amz-expiration: expiry-date="Tue, 30 Jan 2024 00:00:00 GMT", rule-id="bucket_lifecycle"
x-rgw-object-type: Normal
strict-transport-security: max-age=15768000
content-encoding: gzip
date: Tue, 05 Dec 2023 05:54:08 GMT
cache-control: max-age=86400
etag: W/"9b460f98f29d177a0da3183d5cf20e5e"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: hgX6o7lGm2O_jH9RSYXhMT4UasBe-1pFMZ3RGc-EAllf_2nt6kvw8A==
age: 40043
X-Firefox-Spdy: h2
www.1024tera.com/ndbs/nd_bundle_430546.js
200 OK 66 kB URL GET HTTP/1.1 www.1024tera.com/ndbs/nd_bundle_430546.js
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (36757)
Hash 2be70342e4695e6c13d04f9906e47635
6f4596c9cd37089ead6715fd3553c0845f1158d3
f731296cced4c20e1f9e24e3080faa044bd0fad2f8f64adf026a75038adecce8
GET /ndbs/nd_bundle_430546.js HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/x-javascript
Date: Tue, 05 Dec 2023 17:01:13 GMT
Flow-Level: 3
Last-Modified: Mon, 10 Jul 2023 02:21:26 GMT
Logid: 9016274713870445827
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 9016274713870445827
Yme: ZIGW+Ss3QEsVdTcMUmr/tG1MvuUZShz0rQpNwyCAxrm8SwwwON/vrHT43A==
Transfer-Encoding: chunked
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/fonts/iconfont.4f9f785d.woff
200 OK 26 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/fonts/iconfont.4f9f785d.woff
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type Web Open Font Format, TrueType, length 25804, version 1.0\012- data
Hash 4f9f785d98a8fa208e7f64023e124572
3e8714f56d480cfd66721447975613a1e56ca9e4
27f0ac9cff76f3925b4389a404d01e2fb525bae7b17cafb0c04e5e6bb20ca83b
GET /fe-opera-static/node-static-v4/fe-webv4-main/fonts/iconfont.4f9f785d.woff HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:14 GMT
content-type: application/x-font-woff
content-length: 25804
server: openresty
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Length, x-bce-next-append-offset, x-bce-object-type, x-bce-request-id
access-control-max-age: 1800
content-md5: T594XZio+iCOf2QCPhJFcg==
etag: "4f9f785d98a8fa208e7f64023e124572"
expires: Thu, 09 Feb 2023 02:34:52 GMT
last-modified: Thu, 02 Feb 2023 12:40:59 GMT
x-bce-content-crc32: 4229721389
x-bce-debug-id: 7WiMWIwBpNvCI1l2DEy41X6CYQbfBDD/53hHCbNUgg3chFP5F6R09q6Ha3n+sFI1w5hrFozk3M8ehG3s5jYsKw==
x-bce-request-id: 8ed250a7-98cd-4add-b067-4212e4c8ecd6
x-bce-storage-class: STANDARD
x-ccdn-expires: 1074585
via: EU-GER-frankfurt-EDGE5-CACHE4[3],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,2],EU-GER-frankfurt-GLOBAL1-CACHE11[3],EU-GER-frankfurt-GLOBAL1-CACHE3[0,TCP_HIT,1]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24845531
accept-ranges: bytes
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/loading-grey.0e512ce9.gif
200 OK 13 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/loading-grey.0e512ce9.gif
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type GIF image data, version 89a, 70 x 54\012- data
Hash 0e512ce91474d2c98f524fc9d479bca1
3e95fc024add69d9f13393a9dacbf625d2cf218c
48ed2dfe595001d90ea0bf9c572b15f446fcf49ae4bfa2cac84acc02aef04e17
GET /fe-opera-static/node-static-v4/fe-webv4-main/img/loading-grey.0e512ce9.gif HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:14 GMT
content-type: image/gif
content-length: 12746
server: openresty
content-md5: DlEs6RR00smPUk/J1Hm8oQ==
etag: "0e512ce91474d2c98f524fc9d479bca1"
expires: Sat, 24 Sep 2022 06:46:06 GMT
last-modified: Wed, 21 Sep 2022 05:03:27 GMT
x-bce-content-crc32: 1545165226
x-bce-debug-id: SVLAO6wp1e4OUGFHIRy8Y1IEAIpwP8YBdrzlRjHOGWEqe7/5zemw7PiCsrLuiBtk8Hkvkt7auD0iX4QbNYOajA==
x-bce-request-id: 911c9037-40e0-4339-a273-266bf634f105
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 1076994
via: EU-GER-frankfurt-EDGE5-CACHE6[9],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE8[3],EU-GER-frankfurt-GLOBAL1-CACHE4[0,TCP_HIT,2],EA-SGP-GLOBAL1-CACHE24[4],EA-SGP-GLOBAL1-CACHE25[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24845412
accept-ranges: bytes
access-control-allow-origin: *
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~copyright-feedback~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recycleb~fcf1883d.07f0a14d.js
200 OK 9.6 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~copyright-feedback~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recycleb~fcf1883d.07f0a14d.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 049406326fa60e1bd16cde253bb1545c
79c0778f4522f2f8c504791c13a63e14daaf367d
573e52072c5db61a61fd1368724ecc6372aee930c65faaa7640d1deb63a4d061
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~copyright-feedback~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recycleb~fcf1883d.07f0a14d.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:15 GMT
content-type: application/javascript
server: openresty
content-md5: AS08YcEVOlzEUsP9xXahBw==
etag: W/"012d3c61c1153a5cc452c3fdc576a107"
expires: Thu, 07 Dec 2023 10:54:11 GMT
last-modified: Mon, 04 Dec 2023 08:11:32 GMT
x-bce-content-crc32: 2179848265
x-bce-debug-id: YACd2vQQbQy06Ts5BQ8upyuI4L5wa6pbjcJmXASfKZkAVf9NnWGCkIJlUJIkolf65QSWNIeUFJ0Q7SLQmyMXbA==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 7e9ee1dd-5dd6-40f5-b235-c5d05ba5ce56
x-bce-storage-class: STANDARD
x-ccdn-expires: 2506696
via: EU-GER-frankfurt-EDGE5-CACHE6[1],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE11[18],EU-GER-frankfurt-GLOBAL1-CACHE5[0,TCP_HIT,16]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 108252
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?type=web_firebase_init_success_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795681512
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_firebase_init_success_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795681512
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash b362b6af562f8cc8a0670927c17b4e23
709931abcfa9940476b3c65854674c644ef8f42f
d5b7e4865543061e8b88c4a164c983377fc0ba8c12b5499b0f800acb6d697cd1
GET /api/analytics?type=web_firebase_init_success_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795681512 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:15 GMT
Flow-Level: 3
Logid: 9016275336357474682
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016275336357474682
Yme: ZIGW+Ss3QE0WaCsESWziq29Xvv4cVAP2oh5NwyWJmu23SEqDg16g
Content-Length: 44
ymg-api.terabox.com/abdr?_o=https%3A%2F%2Fwww.1024tera.com
200 OK 181 B URL POST HTTP/1.1 ymg-api.terabox.com/abdr?_o=https%3A%2F%2Fwww.1024tera.com
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.terabox.com
Fingerprint4F:30:79:83:60:E0:58:E8:DA:05:09:38:E1:6D:CD:F9:46:33:D6:5F
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5dd72ba0e6c0e5032ca01cbffe1f7549
75f473079d8c68002b2f0937170f6e6e93c4a18b
5a81a0a28b87bc47635af8ce1d5ba50a2f2fc87df0563eb800ee33e099ee4908
POST /abdr?_o=https%3A%2F%2Fwww.1024tera.com HTTP/1.1
Host: ymg-api.terabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 3552
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 17:01:16 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 9016275454065592810
Ab-Sr: 1.0.1_ZGZiN2YyN2MwOGZmOGVmMWExZDliMDExMzg2YWI0ZmVmY2Q3ZmU0MWMyNjVlMzNjMDdiY2NjMWFiMzkwOGUzMTJjMzM2NjRhY2ZlZDQwY2VmYzdiNjk5ZGNkM2I3MTM2NTRiYjExMGE1ZDUyODg3M2JkMjM5YTRiODA5NjQ3NTFlOTIyNTMzMWYyYzUyN2NhNWVkZGJiYjQwYjJjODk1Mg==
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, Host, Content-Type, x-requested-with, X-Custom-Header
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Expose-Headers: Ab-sr, Authentication
Access-Control-Max-Age: 3600
Authentication: a3bc697b0691efdc02e9350b0dff1bbe0000000000000000
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaSsGRnb+qnFLufkASwH9tAFIwSqLn+uwNt19
Set-Cookie: ab_jid=a8a98a87c262ada22a8cee838557b557d795; Path=/; Domain=ymg-api.terabox.com; Max-Age=2147483647; HttpOnly; Secure; SameSite=None
ab_bid=a8a98a87c262ada22a8cee838557b557d795; Path=/; Domain=ymg-api.terabox.com; Max-Age=2147483647; HttpOnly; Secure; SameSite=None
ab_sr=1.0.1_ZGZiN2YyN2MwOGZmOGVmMWExZDliMDExMzg2YWI0ZmVmY2Q3ZmU0MWMyNjVlMzNjMDdiY2NjMWFiMzkwOGUzMTJjMzM2NjRhY2ZlZDQwY2VmYzdiNjk5ZGNkM2I3MTM2NTRiYjExMGE1ZDUyODg3M2JkMjM5YTRiODA5NjQ3NTFlOTIyNTMzMWYyYzUyN2NhNWVkZGJiYjQwYjJjODk1Mg==; Path=/; Domain=terabox.com; Max-Age=7200; HttpOnly; Secure; SameSite=None
Server: nginx
logid: 9016275454065592810
Flow-level: 3
Content-Encoding: gzip
www.1024tera.com/api/analytics?type=terabox_sharing_link_js_error_p2&sessionId=257176&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&msg=%7B%7D&stack=%5B%7B%22columnNumber%22%3A18998%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22webGlInfo%22%2C%22source%22%3A%22webGlInfo%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A18998%22%7D%2C%7B%22columnNumber%22%3A21970%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22source%22%3A%22%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A21970%22%7D%2C%7B%22columnNumber%22%3A20619%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22promise%20callback*%22%2C%22source%22%3A%22promise%20callback*%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A20619%22%7D%5D
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=terabox_sharing_link_js_error_p2&sessionId=257176&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&msg=%7B%7D&stack=%5B%7B%22columnNumber%22%3A18998%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22webGlInfo%22%2C%22source%22%3A%22webGlInfo%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A18998%22%7D%2C%7B%22columnNumber%22%3A21970%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22source%22%3A%22%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A21970%22%7D%2C%7B%22columnNumber%22%3A20619%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22promise%20callback*%22%2C%22source%22%3A%22promise%20callback*%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A20619%22%7D%5D
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash a7fa2cf585911cedadf12d99993766ac
b6368a48faf77dc58366aea509de03adcfe6c275
921fe7c2a7c800cf95d6fc7c0f48500b075d7bac659ed31713ea975126f5ace4
GET /api/analytics?type=terabox_sharing_link_js_error_p2&sessionId=257176&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&msg=%7B%7D&stack=%5B%7B%22columnNumber%22%3A18998%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22webGlInfo%22%2C%22source%22%3A%22webGlInfo%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A18998%22%7D%2C%7B%22columnNumber%22%3A21970%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22source%22%3A%22%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A21970%22%7D%2C%7B%22columnNumber%22%3A20619%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22promise%20callback*%22%2C%22source%22%3A%22promise%20callback*%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A20619%22%7D%5D HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:16 GMT
Flow-Level: 3
Logid: 9016275522517713054
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016275522517713054
Yme: ZIGW+Ss3QE0RYysESWziq29Xvv4cVAPxqR5NwiSJmu2yRh4kZTJVm+JiapsY
Content-Length: 44
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000001&language_type=en&cfg_category_keys=%5B%5D&version=0
200 OK 15 kB URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000001&language_type=en&cfg_category_keys=%5B%5D&version=0
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 0fb7baf9b686a74093c395eefb2c5aee
6d42c44f12ddf227a1de58fb02d494d1fe74c194
d545e25a5655a6ca84dd014fdd0a4694b3ded3f395ee8622c2483dafa6d2e418
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000001&language_type=en&cfg_category_keys=%5B%5D&version=0 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:16 GMT
Flow-Level: 3
Logid: 9016275622465438524
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 9016275622465438524
Yme: ZIGW+Ss3QE0RYysMTnb+qnFLufkASwb1tAJOwiqBmOS1gJX9/qj7f5ABDzY=
Transfer-Encoding: chunked
sofire.terabox.com/edkey
200 OK 246 B IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.terabox.com
Fingerprint4F:30:79:83:60:E0:58:E8:DA:05:09:38:E1:6D:CD:F9:46:33:D6:5F
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (361), with no line terminators
Hash 044435f13d2e1dbda55e2c5f111d170d
c5d169dcd92ecfb39364149a8fc4c26799b17454
b6db1a2620a29bb919ca1f26ae2ef7f28bdf9697f7d8ab1b7435700cab667de6
POST /edkey HTTP/1.1
Host: sofire.terabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.1024tera.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 64
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 05 Dec 2023 17:01:17 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 9016275715039216207
Access-Control-Allow-Origin: *
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaSsESGriq29Xvv4cVAP2oh5NwCSJkO25TwQ4ITxGg7Jty2kY
logid: 9016275715039216207
Flow-level: 3
Content-Encoding: gzip
www.1024tera.com/rest/1.0/operation/pull?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000006&position=7&lang=en
200 OK 83 B URL GET HTTP/1.1 www.1024tera.com/rest/1.0/operation/pull?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000006&position=7&lang=en
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash ee59e943038f875aa7f6d71b2624aaf0
bfe373d819bd0ab6fe9999eefb256eb554b3b7b8
e6220b432e4424f3e6a8fa5f638c334e9ae4b77e2ed910c4a4e6c494d100343e
GET /rest/1.0/operation/pull?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000006&position=7&lang=en HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: text/plain; charset=utf-8
Date: Tue, 05 Dec 2023 17:01:17 GMT
Flow-Level: 3
Http-X-Isis-Logid: 9016275718074300004
Logid: 9016275718074300004
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 9016275718074300004
Yme: ZIGW+Ss3QE0WaisMSnb+qnFLufkASwb2tAJMwSqBmOi4
Content-Length: 83
s2.teraboxcdn.com/general-conf/fk/dfxaf3-598bbed9.js
200 OK 41 kB URL GET HTTP/2 s2.teraboxcdn.com/general-conf/fk/dfxaf3-598bbed9.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type C source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash 1600aace91451b237d0c4b3663294b44
f519ef2528e51de77a96cce02fe1802b7d110020
828ff2e0040ef5a9ab9dd38bdaa64dd7c37db9d9b3a1713e5996ee51b6c4896b
GET /general-conf/fk/dfxaf3-598bbed9.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:14 GMT
content-type: text/javascript
server: openresty
content-md5: +fZxgdCHtOLq9IVUxQHgZQ==
etag: W/"f9f67181d087b4e2eaf48554c501e065"
expires: Fri, 03 Nov 2023 12:27:55 GMT
last-modified: Tue, 31 Oct 2023 12:25:48 GMT
x-bce-content-crc32: 3748294646
x-bce-debug-id: aGEi7xHbLdU53XfCnCB+gn9IMUFfdLw+Ug2cTW1Uu0gn8LTbfsIrGzew5yl6vbcMd2PUBbSod+OrM3Z56BBUNg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 8d78a03a-02bd-49e4-ba41-e617432a8b15
x-bce-storage-class: STANDARD
via: EU-GER-frankfurt-EDGE5-CACHE6[4],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[2],EU-GER-frankfurt-GLOBAL1-CACHE2[0,TCP_HIT,1]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 3040398
x-ccdn-expires: 2592000
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-94864b88.e650f8c9.js
200 OK 12 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-94864b88.e650f8c9.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (42826), with no line terminators
Hash 2fe35f5d63a266df6210984f7b08bf9b
e54f3b2890f8a2804f1eca35d942802e0ce6ee42
0dbbc5f0c5a289c4efaddd0aca0b6b0d3c5ccff0a54a76a78c04608fb7f8d087
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-94864b88.e650f8c9.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:15 GMT
content-type: application/javascript
server: openresty
content-md5: sB8ZXpSwhIEirDMU9TlXIQ==
etag: W/"b01f195e94b0848122ac3314f5395721"
expires: Mon, 22 May 2023 08:06:09 GMT
last-modified: Fri, 19 May 2023 06:11:01 GMT
x-bce-content-crc32: 1763380652
x-bce-debug-id: 6/t1aZ0T4wIW5Mpdrs6rwONcVe50LnzXyMl/KxoZOSjgTHz/QchFlwkYo5YFdGxYjuFFLRMdxpL02NaFeSWQqg==
x-bce-request-id: 3b4dea47-19f8-48e2-a389-1652fd45a67a
x-bce-storage-class: STANDARD
via: EU-GER-frankfurt-EDGE5-CACHE6[1],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[1059],EU-GER-frankfurt-GLOBAL1-CACHE12[774,TCP_MISS,1057]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 17312105
x-ccdn-expires: 958499
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-5e25226a.a51d4586.js
200 OK 7.6 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-5e25226a.a51d4586.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 249a66fd6af619735ace935f4c32417e
edfac20e36d1f7c33ba0c3bc7aeb25c781e59af2
4e0ce88dc51b9629ec2590c7aee1280fc60ec0b79f2c38f793e8eea06f9bbc92
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-5e25226a.a51d4586.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:16 GMT
content-type: application/javascript
server: openresty
content-md5: ofegPgybCMrJWb5Yq2LFXw==
etag: W/"a1f7a03e0c9b08cac959be58ab62c55f"
expires: Thu, 07 Dec 2023 10:54:10 GMT
last-modified: Mon, 04 Dec 2023 08:11:33 GMT
x-bce-content-crc32: 98754670
x-bce-debug-id: Ev8l1GA83xhCDv4uh+405oq+C1nftzErTedfmI4L3NyT8GqIxbRU7XJQ/6VPp9Ooie21YFTN02oETa8BSy9Nuw==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: c417d43a-58cc-4c9b-890a-54cc45408f55
x-bce-storage-class: STANDARD
x-ccdn-expires: 2506696
via: EU-GER-frankfurt-EDGE5-CACHE6[2],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE2[11],EU-GER-frankfurt-GLOBAL1-CACHE7[0,TCP_HIT,10]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 108252
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/share/webmaster/check?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000004&bdstoken=
200 OK 85 B URL GET HTTP/1.1 www.1024tera.com/share/webmaster/check?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000004&bdstoken=
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash dac50800350c71395dc633285cc3efd9
c658f2280dba2c5bc303b05e4b57805f8f2f7041
81945d949088070a6e105386bd8b64e6acb65b09a43ae022f97596fda145c56c
GET /share/webmaster/check?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000004&bdstoken= HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:17 GMT
Flow-Level: 3
Http-X-Isis-Logid: 9016275831797499743
Logid: 9016275831797499743
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 9016275831797499743
Yme: ZIGW+Ss3QE0WaCsESmjiq29Xvv4cVAPwqh5IyiqBmO2yO0pBThoDQy9oz0IY
Content-Length: 85
sofire.1024tera.com/h5/t
200 OK 585 B IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (697), with no line terminators
Hash 8ecc3e0764aaf93220b6077525d6e588
e182736c5924a625f0a4ca1a6809c74ed871bc17
4d060d8cca264e9f87e86f73aaf961964d6154670a3d26fd9972b02e8f2768dc
POST /h5/t HTTP/1.1
Host: sofire.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 3806
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 05 Dec 2023 17:01:17 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 9016275877825633394
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type,AccessToken,X-CSRF-Token,X-Bdh5-Pf,X-XSRF-TOKEN, Authorization
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Expose-Headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Content-Type
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WbysESXb+qnFLufkASwH8tAFPxyqLmOWx
logid: 9016275877825633394
Flow-level: 3
Content-Encoding: gzip
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/apple.min.js
200 OK 18 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/apple.min.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 1995f9ba8f6f3a484034ba4276566019
d0800d4fe6720622142063a4b0e3f88616a94f02
804f99f660e3fbc248b3939151e75d6d32e48ad84edce58fa7d84d1f6a52da3b
GET /fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/apple.min.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:14 GMT
content-type: application/javascript
server: openresty
content-md5: FF9mC4xH7SHLDq/gVBei9Q==
etag: W/"145f660b8c47ed21cb0eafe05417a2f5"
expires: Sun, 05 Feb 2023 11:19:03 GMT
last-modified: Thu, 02 Feb 2023 02:44:27 GMT
x-bce-content-crc32: 3041762371
x-bce-debug-id: GooNofUHCftVSaaHEC+AzAr4FYXPEZIzOsKJwWjn94XbPwUKv4MuSNK5CZJOH/HsmlldVHL9LxC5wuj+MNetYw==
x-bce-request-id: 96560a78-91ad-47e1-a285-8df2f8efcb9d
x-bce-storage-class: STANDARD
x-ccdn-expires: 1202930
via: EU-GER-frankfurt-EDGE5-CACHE6[22],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE6[3],EU-GER-frankfurt-GLOBAL1-CACHE2[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24845531
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/rest/2.0/membership/proxy/user?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000007&client=web&pass_version=2.8&lang=en&clientfrom=h5&pcftoken=fe396fce310b1989e3f2665e5f4ead59&method=query&membership_version=1.0
200 OK 96 B URL GET HTTP/1.1 www.1024tera.com/rest/2.0/membership/proxy/user?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000007&client=web&pass_version=2.8&lang=en&clientfrom=h5&pcftoken=fe396fce310b1989e3f2665e5f4ead59&method=query&membership_version=1.0
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 1ce37d0c8cc834cf93ef594a09fa949d
fb5c51c87a7595d93bba3520a3510f86770c3c19
6f1b643b18f0ef57d2f8dbc027a65df26e63cbd743e0405b8b61f7c1e76540de
GET /rest/2.0/membership/proxy/user?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000007&client=web&pass_version=2.8&lang=en&clientfrom=h5&pcftoken=fe396fce310b1989e3f2665e5f4ead59&method=query&membership_version=1.0 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:17 GMT
Flow-Level: 3
Http-X-Isis-Logid: 9016275907114359352
Logid: 9016275907114359352
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 9016275907114359352
Yme: ZIGW+Ss3QE0WaCsHSnb+qnFLufkASwb3tAFKxyqBmOy4
Content-Length: 96
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000002&language_type=en&cfg_category_keys=%5B%5D&version=0
200 OK 15 kB URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000002&language_type=en&cfg_category_keys=%5B%5D&version=0
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash e01dfdb35de06f3cbefd3a77c4e104eb
9f1ede611c1255bc395f32700920da6682fe7599
fc2fa0847a361389870a721f6b881e4be63cedb730a7321e2408294d67d43f97
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000002&language_type=en&cfg_category_keys=%5B%5D&version=0 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:17 GMT
Flow-Level: 3
Logid: 9016275816019828600
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 9016275816019828600
Yme: ZIGW+Ss3QE0WaSsHTGriq29Xvv4cVAP2oh5OwiqBmOWxA+oO00M940XNrmcY
Transfer-Encoding: chunked
www.1024tera.com/api/analytics?errno=-6&newno=&request_id=9016275826348529000&show_msg=&hasError=true¶ms=%7B%22page%22%3A1%2C%22cnt%22%3A20%7D&uk=0&type=%2Fshare%2Flinkpaylistpurchaseorder_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795683665
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&newno=&request_id=9016275826348529000&show_msg=&hasError=true¶ms=%7B%22page%22%3A1%2C%22cnt%22%3A20%7D&uk=0&type=%2Fshare%2Flinkpaylistpurchaseorder_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795683665
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash aa9d0da00df233611fe422636b161ea0
04bb5f284b9a07259579a21e34bc1530171a646d
b1c69371e103a54af1a9b0adaa3a43c4db2fde62893ae75af237e7fa1fc4ab71
GET /api/analytics?errno=-6&newno=&request_id=9016275826348529000&show_msg=&hasError=true¶ms=%7B%22page%22%3A1%2C%22cnt%22%3A20%7D&uk=0&type=%2Fshare%2Flinkpaylistpurchaseorder_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795683665 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:17 GMT
Flow-Level: 3
Logid: 9016275911945778700
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016275911945778700
Yme: ZIGW+Ss3QEoadTcNUmr/tG1MvuUYQxz3qQpNwyWC
Content-Length: 44
www.1024tera.com/api/ad/getconfig?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000008
200 OK 85 B URL GET HTTP/1.1 www.1024tera.com/api/ad/getconfig?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000008
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash d821b6668b6860dbf006513b0833760c
ddc2097492149d5d9b4a8e567d79825cc2e58b97
68e3fd271ca0075c61f5bbf3e42f34590d0de2145855368e9a0f2dea78768d0b
GET /api/ad/getconfig?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000008 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:17 GMT
Flow-Level: 3
Http-X-Isis-Logid: 9016275919668148259
Logid: 9016275919668148259
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 9016275919668148259
Yme: ZIGW+Ss3QEobdTEHUmr/tG1MvuUZShz3ogpNwiiE
Content-Length: 85
www.1024tera.com/api/analytics?errno=-6&newno=&request_id=9016275831797500000&show_msg=&hasError=true¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fwebmaster%2Fcheck_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795683712
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&newno=&request_id=9016275831797500000&show_msg=&hasError=true¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fwebmaster%2Fcheck_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795683712
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 178080ae7a679f10c6887835495aac27
22e667f269eb62e7daef11d1356785c2c336a2e9
1a41c3b7011883aa46700269516e34c9140bae357280c83aca96033b32f2f617
GET /api/analytics?errno=-6&newno=&request_id=9016275831797500000&show_msg=&hasError=true¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fwebmaster%2Fcheck_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795683712 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:18 GMT
Flow-Level: 3
Logid: 9016275928387970233
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016275928387970233
Yme: ZIGW+Ss3QE0WaCsHTWriq29Xvv4cVAPxqx5HwiqBmOy3G1kweXpaa4Gj6CQY
Content-Length: 44
www.1024tera.com/api/shorturlinfo?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000009&shorturl=1SUVC0s2nxX-4vpf0XTv6Zw&root=1&scene=
200 OK 840 B URL GET HTTP/1.1 www.1024tera.com/api/shorturlinfo?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000009&shorturl=1SUVC0s2nxX-4vpf0XTv6Zw&root=1&scene=
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (2314), with no line terminators
Hash ce11f63754d962e62cdda196362c4aa8
31c8d3cbfc433b7a26087f49992c9f34b118e893
07757fa17d69d887a9fc7d825ef2a4f2b2465a7c87bf08daa8b93338b19ee5aa
GET /api/shorturlinfo?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000009&shorturl=1SUVC0s2nxX-4vpf0XTv6Zw&root=1&scene= HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:18 GMT
Flow-Level: 3
Logid: 9016275923691569407
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016275923691569407
Yme: ZIGW+Ss3QE0RYysHT2ziq29Xvv4cVAPxqB5OwyGJmu24S5X9/qjcy7zaAd4Y
Transfer-Encoding: chunked
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-2d225855.7faaefb6.js
200 OK 12 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-2d225855.7faaefb6.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 6769cbb04c4fe7c331fc88fab1179883
a74176c5909245b9eab0e4fa77ce09509ff62749
c3fd1cf2dafb0a8e4ef98e8ce6e4856583365d10498d56fa69db71bc97b4c76e
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-2d225855.7faaefb6.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:16 GMT
content-type: application/javascript
server: openresty
content-md5: iw9/Cx04dehLVypLjaFNWg==
etag: W/"8b0f7f0b1d3875e84b572a4b8da14d5a"
expires: Fri, 12 May 2023 08:44:00 GMT
last-modified: Mon, 08 May 2023 12:32:41 GMT
x-bce-content-crc32: 2125762108
x-bce-debug-id: iB6onZAdB5cwEu/eon/SnJwxjW+yEqUyso3lZkAtI8tqGqTqF5hKti5HQUqq4Il08RRUnC4QmZj/Wzs2YTkdMg==
x-bce-request-id: 6c4f78e6-e6e6-495c-8abe-dec67424c79d
x-bce-storage-class: STANDARD
x-ccdn-expires: 2592000
via: EU-GER-frankfurt-EDGE5-CACHE6[1],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE3[22],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,20]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 18173615
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?errno=100003&error_code=100003&error_msg=Invalid%20Bduss&request_id=9016275907114359352&hasError=true¶ms=%7B%22client%22%3A%22web%22%2C%22pass_version%22%3A%222.8%22%2C%22lang%22%3A%22en%22%2C%22clientfrom%22%3A%22h5%22%2C%22pcftoken%22%3A%22fe396fce310b1989e3f2665e5f4ead59%22%2C%22method%22%3A%22query%22%2C%22membership_version%22%3A%221.0%22%7D&uk=0&type=%2Frest%2F2.0%2Fmembership%2Fproxy%2Fuser_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795683947
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=100003&error_code=100003&error_msg=Invalid%20Bduss&request_id=9016275907114359352&hasError=true¶ms=%7B%22client%22%3A%22web%22%2C%22pass_version%22%3A%222.8%22%2C%22lang%22%3A%22en%22%2C%22clientfrom%22%3A%22h5%22%2C%22pcftoken%22%3A%22fe396fce310b1989e3f2665e5f4ead59%22%2C%22method%22%3A%22query%22%2C%22membership_version%22%3A%221.0%22%7D&uk=0&type=%2Frest%2F2.0%2Fmembership%2Fproxy%2Fuser_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795683947
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash e227c9af028966c34844032cc3f12b91
490a3d31d086b42577f5c3aa9ee2b1c060a5dd55
251cd2f022802f9433023be78e9e275ca17022e8a328d739f51ad68d0e78795a
GET /api/analytics?errno=100003&error_code=100003&error_msg=Invalid%20Bduss&request_id=9016275907114359352&hasError=true¶ms=%7B%22client%22%3A%22web%22%2C%22pass_version%22%3A%222.8%22%2C%22lang%22%3A%22en%22%2C%22clientfrom%22%3A%22h5%22%2C%22pcftoken%22%3A%22fe396fce310b1989e3f2665e5f4ead59%22%2C%22method%22%3A%22query%22%2C%22membership_version%22%3A%221.0%22%7D&uk=0&type=%2Frest%2F2.0%2Fmembership%2Fproxy%2Fuser_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795683947 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:18 GMT
Flow-Level: 3
Logid: 9016275988348339764
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016275988348339764
Yme: ZIGW+Ss3QE0WaysMSHb+qnFLufkASwb2tAJPwiqBmO649sR9
Content-Length: 44
www.1024tera.com/api/analytics?errno=-6&newno=&request_id=9016275919668148000&show_msg=&hasError=true¶ms=undefined&uk=0&type=%2Fapi%2Fad%2Fgetconfig_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795684021
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&newno=&request_id=9016275919668148000&show_msg=&hasError=true¶ms=undefined&uk=0&type=%2Fapi%2Fad%2Fgetconfig_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795684021
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 9c5d0ad723aa35f2f4985267f0745e9d
c7f27739ef3b3ec15e7e19b9820ec2899c32fc6b
dd26158e6e0b3c3590469ccaad1b4d1c2767164e59679cf522d6914fc58b4c86
GET /api/analytics?errno=-6&newno=&request_id=9016275919668148000&show_msg=&hasError=true¶ms=undefined&uk=0&type=%2Fapi%2Fad%2Fgetconfig_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795684021 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:18 GMT
Flow-Level: 3
Logid: 9016276008133126801
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276008133126801
Yme: ZIGW+Ss3QEoadTEDUmr/tG1MvuUZTxz3rQpNwyiFnWnJuRU=
Content-Length: 44
www.1024tera.com/api/analytics?time=5615&type=web_share_page_show_FCP&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795682431
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?time=5615&type=web_share_page_show_FCP&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795682431
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 428d4a913464f5ba5cad28db6c9ae720
5306a04023de445b3325a98a9bc726be5cfd53c4
049f1674966b3538ef52c0a4bb8b1908aaf607ad4e0bb700dd49463180c79073
GET /api/analytics?time=5615&type=web_share_page_show_FCP&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795682431 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:18 GMT
Flow-Level: 3
Logid: 9016275995686128280
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016275995686128280
Yme: ZIGW+Ss3QE0WbysET2jiq29Xvv4cVAPxqR5OxSKJmu2zRxhxaDhNA1gfXmYY
Content-Length: 44
www.1024tera.com/api/analytics?domain=www.1024tera.com&type=web_domain_heart_beat&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795682434
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domain=www.1024tera.com&type=web_domain_heart_beat&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795682434
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7c904d8e4b8d4bae723f463e6b8081ae
e1d7b59a57ce88eb244408394d8a1de304065dc5
6e5e191e0c88b9dfe7656a7c0d00b1ec4b1ed50ebd7e755704ee08a5524a2093
GET /api/analytics?domain=www.1024tera.com&type=web_domain_heart_beat&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795682434 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:18 GMT
Flow-Level: 3
Logid: 9016276008447414951
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276008447414951
Yme: ZIGW+Ss3QEsTdTcDUmr/tG1MvuUZTBz3rgpNwyOE9E3V
Content-Length: 44
www.1024tera.com/api/analytics?isLogin=false&surl=SUVC0s2nxX-4vpf0XTv6Zw&downloadPullNewFlag=b&videoTrialPullNewFlag=a&isUserSelfLink=false&referrer=&channelSrc=&type=share_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795684190
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?isLogin=false&surl=SUVC0s2nxX-4vpf0XTv6Zw&downloadPullNewFlag=b&videoTrialPullNewFlag=a&isUserSelfLink=false&referrer=&channelSrc=&type=share_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795684190
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash ba802bc00d3a2de65ca93b333e61e1be
41edaacfe29499167d3965e6d0424696d5851e79
c1475a73eecde51502ba0976bbe0f6713712af1b723dd60e946f80e362f22085
GET /api/analytics?isLogin=false&surl=SUVC0s2nxX-4vpf0XTv6Zw&downloadPullNewFlag=b&videoTrialPullNewFlag=a&isUserSelfLink=false&referrer=&channelSrc=&type=share_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795684190 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:18 GMT
Flow-Level: 3
Logid: 9016276055409532534
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276055409532534
Yme: ZIGW+Ss3QEsUdTcGUmr/tG1MvuUZTBz2rQpNwySL
Content-Length: 44
www.1024tera.com/api/analytics?time=5622&type=web_share_page_show_TTI&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795682438
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?time=5622&type=web_share_page_show_TTI&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795682438
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 3d1c5e6128603fce03db29952ae820dc
b0bb46ac68e45bea91d2e221824e546fd6ddf81b
38c156bd62168c3600f7a6f56f5d2eee569d749163cba4c8f45ebdc98bf9711d
GET /api/analytics?time=5622&type=web_share_page_show_TTI&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795682438 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:18 GMT
Flow-Level: 3
Logid: 9016276053525100586
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276053525100586
Yme: ZIGW+Ss3QEsTdTcHUmr/tG1MvuUZSBz3qwpNwyKFVIbfuhU=
Content-Length: 44
s2.teraboxcdn.com/general-conf/ymg/2068/abclite-2068-s.js?v=0.19109175972363168
200 OK 39 kB URL GET HTTP/2 s2.teraboxcdn.com/general-conf/ymg/2068/abclite-2068-s.js?v=0.19109175972363168
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 1cb07325bc2d3960aafe794d258d267d
6b56f8b3064db95eaa8a476453544d46ee1f0a4e
1090c5881ac867f9d6029b21b441976cdda14eebcecb769ecaa71a5e757123ad
GET /general-conf/ymg/2068/abclite-2068-s.js?v=0.19109175972363168 HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:14 GMT
content-type: application/javascript
server: openresty
content-md5: Ruoa4j+vWuccAEWEPrQz6Q==
etag: W/"46ea1ae23faf5ae71c0045843eb433e9"
expires: Fri, 07 Apr 2023 22:40:39 GMT
last-modified: Tue, 14 Mar 2023 06:06:12 GMT
x-bce-content-crc32: 1662135932
x-bce-debug-id: Jz1KOcGPkhU4n3Zck8uoB7CbklPytTa0SgCVaS0EGpxL61wnts4jWik6aFmIBGaCydmzElR8tezYRsKZD0KeZg==
x-bce-request-id: 7297b527-d932-4266-b90c-9962c07f4e61
x-bce-storage-class: STANDARD
x-ccdn-expires: 2592000
via: EU-GER-frankfurt-EDGE5-CACHE6[7],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[2],EU-GER-frankfurt-GLOBAL1-CACHE4[0,TCP_HIT,1]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 19661524
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/share/list?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000010&page=1&num=20&by=name&order=asc&site_referer=&shorturl=SUVC0s2nxX-4vpf0XTv6Zw&root=1
200 OK 603 B URL GET HTTP/1.1 www.1024tera.com/share/list?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000010&page=1&num=20&by=name&order=asc&site_referer=&shorturl=SUVC0s2nxX-4vpf0XTv6Zw&root=1
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (1941), with no line terminators
Hash d5d83bac9cc4700dd83fe73b29f71eea
73545563dc5c466daa640c0c449946026b10f5a1
6b4dd579ab35c611df4954cee19a790269a658307b37642833b60764e32b0848
GET /share/list?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000010&page=1&num=20&by=name&order=asc&site_referer=&shorturl=SUVC0s2nxX-4vpf0XTv6Zw&root=1 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:18 GMT
Flow-Level: 3
Logid: 9016276056504641657
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276056504641657
Yme: ZIGW+Ss3QE0WaisETHb+qnFLufkASwb3tANMySKDm+jXOy1ONg1jS5hcsTY=
Transfer-Encoding: chunked
firebase.googleapis.com/v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig
200 OK 0 B URL GET HTTP/2 firebase.googleapis.com/v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig HTTP/1.1
Host: firebase.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-goog-api-key
Referer: https://www.1024tera.com/
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.1024tera.com
vary: origin, referer, x-origin
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: x-goog-api-key
access-control-max-age: 3600
date: Tue, 05 Dec 2023 17:01:18 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
firebase.googleapis.com/v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig
200 OK 223 B URL GET HTTP/2 firebase.googleapis.com/v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text
Hash 54c11162d6ef3c32b787d4d8a6a292f8
f1e88b95b9addbd7a1e170daf6da450ab93bdecb
263070732f0c9d00ac3e625982ff38a8d08bc25a2ac03c3e3d524557b09f616f
GET /v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig HTTP/1.1
Host: firebase.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.1024tera.com/
x-goog-api-key: AIzaSyCAt5j0_j4UDEm5Nb4bNvQknuGZoMK_XK8
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 05 Dec 2023 17:01:18 GMT
server: ESF
cache-control: private
content-length: 223
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.1024tera.com
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/gsi/client
200 OK 81 kB URL GET HTTP/2 accounts.google.com/gsi/client
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
FingerprintF3:FB:54:1B:21:E9:69:01:41:02:BB:D0:97:A2:BA:45:72:5A:71:D8
ValidityMon, 20 Nov 2023 08:09:49 GMT - Mon, 12 Feb 2024 08:09:48 GMT
File type gzip compressed data, max compression\012- data
Hash b9a2090b240da6c53583f82001f0e47d
8bf9386b7fca6ec36ad6ff6dd33619331867817b
c648592d2d7ced5e86025664ada1c91ccdc1eaf1cf7f27e08189e41b9a75bc1a
GET /gsi/client HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
expires: Tue, 05 Dec 2023 17:01:18 GMT
date: Tue, 05 Dec 2023 17:01:18 GMT
cache-control: private, max-age=1800
content-security-policy: script-src 'nonce-huI5fLwZME5tGeq5CHDtrQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/main.20d560f7.js
200 OK 231 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/main.20d560f7.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Size 231 kB (230978 bytes)
Hash b316e8ab05e975a9af4217b7bf47ea52
f4d399f04de46d0288a2417138090f318342210d
a7ccb397c312dc44f930f02f9bcf337961b3af9d16c7e385eea880906d4a6c96
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/main.20d560f7.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:14 GMT
content-type: application/javascript
server: openresty
content-md5: XBYxVdFeVZk0SBxr/7jqEg==
etag: W/"5c163155d15e559934481c6bffb8ea12"
expires: Thu, 07 Dec 2023 10:54:09 GMT
last-modified: Mon, 04 Dec 2023 08:11:44 GMT
x-bce-content-crc32: 2039423128
x-bce-debug-id: 5BTNP9EYz7/KBpfzx7FmcxPdLip0yxn6BfC+BkZW2Qt3oVBXRPoFAB5lM18t3FjJqV5cg821qGp5BgRGq2euDw==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 777ccde8-390f-4baf-911a-e695c4f497e0
x-bce-storage-class: STANDARD
x-ccdn-expires: 2503558
via: EU-GER-frankfurt-EDGE5-CACHE6[2],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE1[26],EU-GER-frankfurt-GLOBAL1-CACHE2[0,TCP_HIT,25]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 108258
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/fe-opera-static/box-static/disk-system/images/favicon.ico
200 OK 1.7 kB URL GET HTTP/1.1 www.1024tera.com/fe-opera-static/box-static/disk-system/images/favicon.ico
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash 85c3fafc35604bddb3171dee4c0aa6dc
4cb347df6fbedcf8b7e77c9b0673ff3667ed0266
fd68b8c59d5d564cb46519aaaf236ef2ffab9c79c4b1e3ea67a1a57a0120731e
GET /fe-opera-static/box-static/disk-system/images/favicon.ico HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Connection: keep-alive
Content-Type: image/x-icon
Date: Tue, 05 Dec 2023 17:01:19 GMT
Etag: "643e04cc-693"
Expires: Thu, 04 Jan 2024 17:01:19 GMT
Flow-Level: 3
Last-Modified: Tue, 18 Apr 2023 02:47:40 GMT
Logid: 9016276207044277475
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: TeraBox
Yld: 9016276207044277475
Yme: ZIGW+Ss3QE0WYisCSHb+qnFLufkASwb2tAFGySKDnezkDB5jdSLTweXviDY=
Transfer-Encoding: chunked
www.1024tera.com/share/querysurltransfer?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000011&bdstoken=
200 OK 85 B URL POST HTTP/1.1 www.1024tera.com/share/querysurltransfer?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000011&bdstoken=
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 521ca15b73fdd912c2350fdba11649f5
13e8b1ffed547e4d576d7869cff2bc4128e19a67
46d8ca3d07fce379cfd64cd7b3e367c72cd7363a85b7f95b99beb8f89e02a518
POST /share/querysurltransfer?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000011&bdstoken= HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 31
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:19 GMT
Flow-Level: 3
Http-X-Isis-Logid: 9016276212766865832
Logid: 9016276212766865832
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 9016276212766865832
Yme: ZIGW+Ss3QE0WaysESGjiq29Xvv4cVAPxqB5MwCqBmOy0UMdKfg==
Content-Length: 85
www.googletagmanager.com/gtag/js?l=dataLayer&id=G-06ZNKL8C2E
200 OK 86 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?l=dataLayer&id=G-06ZNKL8C2E
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type Unicode text, UTF-8 text, with very long lines (3034)
Hash 0fa6940104640e4f096337a4fc3c6de1
6f2898d8e0964a098e61578e07200056e7bfe0df
13bb6399f1c6c74edd338c1c77012d003f2ad6180c2c869dcbf76d8971e1e280
GET /gtag/js?l=dataLayer&id=G-06ZNKL8C2E HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 05 Dec 2023 17:01:19 GMT
expires: Tue, 05 Dec 2023 17:01:19 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 85582
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/logo.2a229dfa.svg
200 OK 1.7 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/logo.2a229dfa.svg
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1713), with no line terminators
Hash 2a229dfa55348fc84be678f926330616
96ad6e5765a9847fd3f202aad6a88bf95dd9caf1
78055ff5570a46c5904129bfdd26d9cc327feded52e4feca75feaa8e2f180d5b
GET /fe-opera-static/node-static-v4/fe-webv4-main/img/logo.2a229dfa.svg HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:19 GMT
content-type: image/svg+xml
content-length: 1713
server: openresty
content-md5: KiKd+lU0j8hL5nj5JjMGFg==
etag: "2a229dfa55348fc84be678f926330616"
expires: Sat, 24 Sep 2022 06:46:17 GMT
last-modified: Wed, 21 Sep 2022 05:03:27 GMT
x-bce-content-crc32: 1353669740
x-bce-debug-id: NAe6EO3wT96ak0qPNr/yE8+RuLbHz64z8I5FDCDIACxRHRvP8Rcs1CH0CzIO18cwCQo293KSx7/0Hh+Zyx0VZQ==
x-bce-request-id: 3ccd90bb-d04d-43f8-a561-47d04dd6edbb
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 1075915
via: EU-GER-frankfurt-EDGE5-CACHE6[2],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE4[19],EU-GER-frankfurt-GLOBAL1-CACHE14[0,TCP_HIT,17],EA-SGP-GLOBAL1-CACHE17[2],EA-SGP-GLOBAL1-CACHE26[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24845411
accept-ranges: bytes
access-control-allow-origin: *
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/fonts/yunfont.44acf892.ttf
200 OK 23 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/fonts/yunfont.44acf892.ttf
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, yunfont \012- data
Hash 44acf8923466a31680d910d7cc4f0903
351d9f0d3e293ae4c4e4c28e67b09f5ab2a39983
cdec6bbf708df8fbb45cb6c8477254406972c90e28bf1bc7d265b9bd0a403cd9
GET /fe-opera-static/node-static-v4/fe-webv4-main/fonts/yunfont.44acf892.ttf HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:19 GMT
content-type: application/x-font-ttf
content-length: 23268
server: openresty
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Length, x-bce-next-append-offset, x-bce-object-type, x-bce-request-id
access-control-max-age: 1800
content-md5: RKz4kjRmoxaA2RDXzE8JAw==
etag: "44acf8923466a31680d910d7cc4f0903"
expires: Sat, 24 Sep 2022 06:46:06 GMT
last-modified: Wed, 21 Sep 2022 05:03:25 GMT
x-bce-content-crc32: 848321786
x-bce-debug-id: NAe6EO3wT96ak0qPNr/yE8+RuLbHz64z8I5FDCDIACz1r140/OGU/0+MbMDWT1zTJqrTz/6OyWkOTO54TO+RgQ==
x-bce-request-id: bdfcbbdf-effe-4bb4-b741-0cdb160927f7
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 341163
via: EU-GER-frankfurt-EDGE5-CACHE4[2],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[6],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,3],EA-SGP-GLOBAL1-CACHE11[3],EA-SGP-GLOBAL1-CACHE24[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 4844556
accept-ranges: bytes
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?value=8286&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685102
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?value=8286&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685102
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 041f117050ac29bfd3c93f91f26659fc
2cea63795f89929fe7aaa66d95eb973cdcac4ac8
beee8fd0567f8578cee011173b3347c8ac6507a619c194f3a2add8a0f2bbb29d
GET /api/analytics?value=8286&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685102 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:19 GMT
Flow-Level: 3
Logid: 9016276301654323602
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276301654323602
Yme: ZIGW+Ss3QE0WYysHT2ziq29Xvv4cVAP2oh5OxyOJmu2zTBhwaDJRSxk/4XUY
Content-Length: 44
www.1024tera.com/api/analytics?errno=-6&newno=&request_id=9016276212766865000&show_msg=&hasError=true&data=%7B%22sid%22%3A798102270%2C%22suk%22%3A4399132249515%7D¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fquerysurltransfer_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685098
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&newno=&request_id=9016276212766865000&show_msg=&hasError=true&data=%7B%22sid%22%3A798102270%2C%22suk%22%3A4399132249515%7D¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fquerysurltransfer_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685098
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 1ad4c84c381eceda28076f7d080b9513
4a6de62ba3ffc3f5f9237c5158cb72dcb0eb7efa
6066f94690ab79aae9f55f2e3b4410ae27daf7362504a804768400dff92ba298
GET /api/analytics?errno=-6&newno=&request_id=9016276212766865000&show_msg=&hasError=true&data=%7B%22sid%22%3A798102270%2C%22suk%22%3A4399132249515%7D¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fquerysurltransfer_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685098 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:19 GMT
Flow-Level: 3
Logid: 9016276299786807269
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276299786807269
Yme: ZIGW+Ss3QE0RYisESmriq29Xvv4cVAPxqR5OxiKJmu2xRw==
Content-Length: 44
www.1024tera.com/api/analytics?type=web_share_filelist_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685102
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_share_filelist_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685102
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 3241457ed8872a8d3d44ef25f6ff75c2
4099ca67d94a29c8a70bdc374a28785918bea3c2
b9b3e53679cbe879a4bb334a1d97bb1e95441dbdcd0f2683265798f2da83ddda
GET /api/analytics?type=web_share_filelist_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685102 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:19 GMT
Flow-Level: 3
Logid: 9016276299124450121
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276299124450121
Yme: ZIGW+Ss3QE0WaSsESWLiq29Xvv4cVAPxqx5NwSmJmuyxSydXTQNq87wTf94Y
Content-Length: 44
www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685199
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685199
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 00b357bf3ed9079dabde8ed831fece13
5ec98c1eb29f9964742e56d7f2c2ca78fb771c94
f1db08921ed2cdd33073f1afd28ff41189d4bfce6c01a47bc2ee2385b1ab36f0
GET /api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685199 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:19 GMT
Flow-Level: 3
Logid: 9016276335631046269
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276335631046269
Yme: ZIGW+Ss3QE0WaCsESGniq29Xvv4cVAPxrB5MxiqBmOiz
Content-Length: 44
www.1024tera.com/api/analytics?type=web_share_video_init_rate_1&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685201
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_share_video_init_rate_1&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685201
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5546b33f575200cd50cfdf59f8760def
deab280c61e34af54ce1d521dbaa23a5ae51790a
fe8ae09785c92f43f6de895df54c055e182f3ea58dd6683821f571df84940ecd
GET /api/analytics?type=web_share_video_init_rate_1&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685201 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:19 GMT
Flow-Level: 3
Logid: 9016276336970799271
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276336970799271
Yme: ZIGW+Ss3QE0WaSsCSnb+qnFLufkASwb2tAFIxyqBmOm4F0dxaCPDo7ikbDY=
Content-Length: 44
www.1024tera.com/api/analytics?type=play_video_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685201
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=play_video_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685201
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 48d3891227c2eb5e136f335036e58aa6
d04adc59441916c2cfe85958f7ba2a35f703446a
4ef1f8aeb204ba64d78e3b11ecf28863b4f8dd832d1ee196d62304b398e568a2
GET /api/analytics?type=play_video_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685201 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:19 GMT
Flow-Level: 3
Logid: 9016276332660464834
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276332660464834
Yme: ZIGW+Ss3QE0WbysGTnb+qnFLufkASwH8tANOySKDm+uLKQtweG1DNn7yxDY=
Content-Length: 44
www.1024tera.com/api/analytics?type=web_pause_close_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685200
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_pause_close_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685200
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 41abc32dfd13139a53ac73a45c83e1b5
e4cf32b8a7e041987adf0a404798566e8963fc67
b0d757fe50963c76f31456ef9cafcb8590932bd6be1e02e556821e7922268037
GET /api/analytics?type=web_pause_close_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685200 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:19 GMT
Flow-Level: 3
Logid: 9016276333164100198
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276333164100198
Yme: ZIGW+Ss3QEsQdTEEUmr/tG1MvuUYQhz3ogpNwyWGOq8C/xU=
Content-Length: 44
www.1024tera.com/api/analytics?type=web_share_video_premium_activity_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685282
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_share_video_premium_activity_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685282
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5220fee46d2440c7ca0bc603c00f678e
9541c426aed5e42d20ba576400af3f9c97a03872
262523c6d0db6833d30c8a68c94c752b3c1d9e5ba4eda23566ae801f716ffe77
GET /api/analytics?type=web_share_video_premium_activity_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685282 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:19 GMT
Flow-Level: 3
Logid: 9016276350742956021
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276350742956021
Yme: ZIGW+Ss3QEsSdTQGUmr/tG1MvuUYQhz0rwpNwyKB/ITROg==
Content-Length: 44
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000013&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en
200 OK 967 B URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000013&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (3720), with no line terminators
Hash fc8c768ffc47a40ba43a648123793ce7
e9a32f671753ac15e615759266067531b45f7611
41e1e3335ee99da282b602413a71b4e5c5d7cae5e25b6cf4261dbdb2e1a08415
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000013&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:19 GMT
Flow-Level: 3
Logid: 9016276355002098174
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 9016276355002098174
Yme: ZIGW+Ss3QE0WaisESmriq29Xvv4cVAP2ox5OwyGJmu20T1n9/qjcE9bqtIIY
Transfer-Encoding: chunked
www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685198
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685198
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 48d82ecbd9e7330e022923747b8f9824
b6f0b67c9025022cbfd34eae602f5cd0182e59f8
7746171d76492cd7b9d393e3f6ab672e2f87f03124792b390cbb295037b10712
GET /api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685198 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:19 GMT
Flow-Level: 3
Logid: 9016276335232697498
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276335232697498
Yme: ZIGW+Ss3QE0WYisESWriq29Xvv4cVAPxox5MxCqBmO2y
Content-Length: 44
www.1024tera.com/share/webmaster/getplan?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000015&suk=4399132249515
200 OK 103 B URL GET HTTP/1.1 www.1024tera.com/share/webmaster/getplan?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000015&suk=4399132249515
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash b04d2b5feb00b67f70e2893e83ac9ff0
7de4244bdb9b954b9825150af148e7b7754c1d49
cde1fa39d6e618cd02f212b2ae527e255e1d16277457cd2c50998cab1425b500
GET /share/webmaster/getplan?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000015&suk=4399132249515 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:19 GMT
Flow-Level: 3
Http-X-Isis-Logid: 9016276425192976631
Logid: 9016276425192976631
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 9016276425192976631
Yme: ZIGW+Ss3QE0WaCsHTGriq29Xvv4cVAPxoh5NwSGJmu2xTwltdDlX66sLrWUY
Content-Length: 103
www.1024tera.com/share/mediameta?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000016&uk=4399132249515&shareid=798102270&fid=295415464199216×tamp=1701795685
200 OK 122 B URL GET HTTP/1.1 www.1024tera.com/share/mediameta?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000016&uk=4399132249515&shareid=798102270&fid=295415464199216×tamp=1701795685
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 237358e68d57098b55979ea32ccc776e
fe20b7454640d5627d917a1368d8432526231240
1b08b57b0132fa8a6542d42eec2fefccaac818c4efd574c772360006c49a765e
GET /share/mediameta?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000016&uk=4399132249515&shareid=798102270&fid=295415464199216×tamp=1701795685 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:19 GMT
Flow-Level: 3
Http-X-Isis-Logid: 9016276424043640103
Logid: 9016276424043640103
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 9016276424043640103
Yme: ZIGW+Ss3QE0WaCsHTGriq29Xvv4cVAPxox5OxyWJmu2xTw==
Content-Length: 122
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000014&language_type=en&cfg_category_keys=%5B%5D&version=0
200 OK 15 kB URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000014&language_type=en&cfg_category_keys=%5B%5D&version=0
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash db814c443e195646075e145dab23881a
41eb13fb15fb732b1772baca1a779dc191779f93
70a6333ab910bdfa31072c7ce59a466e18a0dd6d7cd02d49d885f28c571bc8f3
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000014&language_type=en&cfg_category_keys=%5B%5D&version=0 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:19 GMT
Flow-Level: 3
Logid: 9016276355529479614
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 9016276355529479614
Yme: ZIGW+Ss3QEsWdTcGUmr/tG1MvuUZTRz2ogpNwyGK7pojKxU=
Transfer-Encoding: chunked
www.1024tera.com/api/analytics?isHitCTR=false&type=web_share_CTR_config&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685304
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?isHitCTR=false&type=web_share_CTR_config&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685304
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash d637b663d352bb8e27391e5bdbd14416
18b74ae8dc0fca5e871c4a782ad915132782a661
0f0a91cc3cd1a62aef112eb955d02d1bab94b917fe3970e2662a0241a96ced84
GET /api/analytics?isHitCTR=false&type=web_share_CTR_config&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685304 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:19 GMT
Flow-Level: 3
Logid: 9016276435674787558
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276435674787558
Yme: ZIGW+Ss3QE0WaSsGTnb+qnFLufkASwb3tAFIwSqBmOi2WQluaDIzkuXrtzY=
Content-Length: 44
www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=pause&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685657
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=pause&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685657
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 666f1e16b2b10658cb2bf7816d0e21e7
c84f8a17d914b16863cb1d828c8dc06c41bb808e
df49de36a890d753dcf572ea60bc627efd27c43547bf61b21c45ebe4ddb7297b
GET /api/analytics?domId=adsterra&showType=1x2&country=NO&where=pause&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685657 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207; _ga_06ZNKL8C2E=GS1.1.1701795685.1.0.1701795685.60.0.0; _ga=GA1.1.70349640.1701795685
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:19 GMT
Flow-Level: 3
Logid: 9016276449750064900
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276449750064900
Yme: ZIGW+Ss3QE0RYisGSnb+qnFLufkASwb2tAdMySKCmu0=
Content-Length: 44
region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701795684931&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=70349640.1701795685&ul=en-us&sr=1280x1024&_s=1&sid=1701795685&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&dt=VID_20230818_225035_502.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.origin=firebase&tfd=8618
204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701795684931&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=70349640.1701795685&ul=en-us&sr=1280x1024&_s=1&sid=1701795685&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&dt=VID_20230818_225035_502.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.origin=firebase&tfd=8618
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701795684931&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=70349640.1701795685&ul=en-us&sr=1280x1024&_s=1&sid=1701795685&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&dt=VID_20230818_225035_502.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.origin=firebase&tfd=8618 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.1024tera.com
date: Tue, 05 Dec 2023 17:01:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ymg-api.terabox.com/abdr?data=eyJkYXRhIjoiYzFhZDgwYWEyOGFhMjE4YzE3N2RhNzg2OGU1NTU2NDc5NThhNDA1MWFkYjQ3NTMyNjhjYThiNWVkYzhmYjEzMWM5YjliNGNlYWI0OWRiZDVjYTliOGM1ODE1NDY5ZDBkZWM2ZmQ3MTE5ZWM2NDIwYjdhOTE3NjAxMGM2MjQwYjE1YWNhMTU3MWUxMGZkMDlhMDdkNjc1MmExZGMwZWY4YTM2MWJlYzQ4NjgxMTdiNGExYzdlOGE2Y2I4ZDkwYmM3ZDdhZjY5NzhkYTFiYTExOWNjY2IzZmI2YTAxMDhhZjY0YzZlOWZkYjNjNmM4ODgzMWJmZjRjOTFjMzQ0YjlkZWVkYmZhZjQxZmIwOGMxYmJjODk5ZDJlZDkxZmI3NjI4M2MzMjc3ZWQ3YjQ2NDBlMTM1YTI5MTE2MTgxMzJkMDM3NDk3ODhiYTRhMzgyMGQ1ZjcwYmNlNzE2MGM2YTU4ZDY2ZDhjNzAwMzMzYjEzODNiMmJkY2IxMmU1OTBiOGYwNzM4NDczMjU3YzM2YzE0M2JiODA4NjRiNDc3NTliODFiY2YxNjNlYTJkN2MzOGY1MDY4YmQ5NGViMDlhOTBjODdjNDJlYzRiZTYxYjIxYjY2ZjQ2YWZhY2M1NzBlOWM4ZjUxNmUxMGY5ZDA2YTgwMTEyZDliYWVjMmM0Njg0MmJlOGRlNDJmZjUzNTgxZmQyY2U5OTkzMGQxODA5YzQ5OTAzOWQ2ZmEzM2NiYzUyOGM4ZTYxYTIwZGQ4NzRlYzcxZGQ1OTdiNTYzMWMyNGY3Y2M1YzZhZmQ5ZTFjMzBjM2E2ZTRlOTM1OTExYTZlMzU2NDI4N2NjNTljN2ZmMjgwYmY2NmJmMDk1MDc3MzgwNzhiZDNmMDViYmVmZDA0YmExNmMzNDg2MGIxMDgzN2Y5MWVkOWRjYzljNDkxNzVhM2IiLCJrZXlfaWQiOiI0ZTM3NDRmZDdjNDg0Mzc3In0%3D&_=0.47197007932407076
22 B URL GET ymg-api.terabox.com/abdr?data=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%3D&_=0.47197007932407076
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.terabox.com
Fingerprint4F:30:79:83:60:E0:58:E8:DA:05:09:38:E1:6D:CD:F9:46:33:D6:5F
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 9d4568c009d203ab10e33ea9953a0264
dd29ecf524b030a65261e3059c48ab9e1ecb2585
12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126
GET /abdr?data=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%3D&_=0.47197007932407076 HTTP/1.1
Host: ymg-api.terabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: ab_jid=a8a98a87c262ada22a8cee838557b557d795; ab_bid=a8a98a87c262ada22a8cee838557b557d795; ab_sr=1.0.1_ZGZiN2YyN2MwOGZmOGVmMWExZDliMDExMzg2YWI0ZmVmY2Q3ZmU0MWMyNjVlMzNjMDdiY2NjMWFiMzkwOGUzMTJjMzM2NjRhY2ZlZDQwY2VmYzdiNjk5ZGNkM2I3MTM2NTRiYjExMGE1ZDUyODg3M2JkMjM5YTRiODA5NjQ3NTFlOTIyNTMzMWYyYzUyN2NhNWVkZGJiYjQwYjJjODk1Mg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 17:01:20 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 9016276472732809504
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, Host, Content-Type, x-requested-with, X-Custom-Header
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Max-Age: 3600
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaSsGRnb+qnFLufkASwH8tAJLySiEnuzSMd19
Server: nginx
logid: 9016276472732809504
Flow-level: 3
Content-Encoding: gzip
region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701795684931&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=70349640.1701795685&ul=en-us&sr=1280x1024&sid=1701795685&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&dt=VID_20230818_225035_502.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=2&tfd=8746
204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701795684931&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=70349640.1701795685&ul=en-us&sr=1280x1024&sid=1701795685&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&dt=VID_20230818_225035_502.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=2&tfd=8746
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701795684931&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=70349640.1701795685&ul=en-us&sr=1280x1024&sid=1701795685&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&dt=VID_20230818_225035_502.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=2&tfd=8746 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2736
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://www.1024tera.com
date: Tue, 05 Dec 2023 17:01:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685898
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685898
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 00d4cbba10c88b43ab5042207cdeb5ce
4fa5a3e0c0062552e010f26f72db00a8cd4986e8
d96b4c58d0df2c2b589801a28d31ed2ce902470742c5a411ca77feb61d52b398
GET /api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685898 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207; _ga_06ZNKL8C2E=GS1.1.1701795685.1.0.1701795685.60.0.0; _ga=GA1.1.70349640.1701795685
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:20 GMT
Flow-Level: 3
Logid: 9016276515626756759
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276515626756759
Yme: ZIGW+Ss3QEoadTEDUmr/tG1MvuUYQxz3qQpNwyKE
Content-Length: 44
www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685899
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685899
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 50385f64e408593876c04123598a275f
f796a5fc921be7265c20b151b61747949495fd06
350d9594a209c886a9ea484e61aacbb98e30f0a2554ac9aeda61dd05b0bedbef
GET /api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685899 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207; _ga_06ZNKL8C2E=GS1.1.1701795685.1.0.1701795685.60.0.0; _ga=GA1.1.70349640.1701795685
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:20 GMT
Flow-Level: 3
Logid: 9016276512356699100
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276512356699100
Yme: ZIGW+Ss3QEsSdTcBUmr/tG1MvuUZThz2qgpNwyGAlfK6Xw5tbGd/msZ/3A==
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-fdedac32.68a159c0.js
200 OK 18 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-fdedac32.68a159c0.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash d5bd77f0c292925ad6c86ca00503405d
748d434118cbb9447ddd1d63444428d60c549b12
784891d4d3d068fae5d0fb908747262eb7fe05b07adc0e70c0b05a23ae6f6680
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-fdedac32.68a159c0.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:20 GMT
content-type: application/javascript
server: openresty
content-md5: fvMe6ZlLuOpfBUbbnYT1og==
etag: W/"7ef31ee9994bb8ea5f0546db9d84f5a2"
expires: Thu, 17 Aug 2023 11:01:40 GMT
last-modified: Mon, 14 Aug 2023 05:25:49 GMT
x-bce-content-crc32: 3183863461
x-bce-debug-id: AQBq72xN1KX+ruW3aqp1xkmekXXaYh0i39b8sd2sQtmjC5dG590ZtpaEFSUwE16V73TOukcLyO6ly/sQLIZ4bg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: b4d412dc-3e8c-456b-bf34-9d06ca0b4fd9
x-bce-storage-class: STANDARD
via: EU-GER-frankfurt-EDGE5-CACHE6[2],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE6[1934],EU-GER-frankfurt-GLOBAL1-CACHE14[953,TCP_MISS,1933]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 9784779
x-ccdn-expires: 709823
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?type=videoplayer_open&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685920
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=videoplayer_open&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685920
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash c8b6a4416ac88a356a5eb9c431f231da
888b437fba97fd99d9e402091bada51a8bd3319d
aae7b9b1c300fd96e024160cf4bcbe4c356c7100d6574eedf6c6d88276f7d2de
GET /api/analytics?type=videoplayer_open&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685920 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207; _ga_06ZNKL8C2E=GS1.1.1701795685.1.0.1701795685.60.0.0; _ga=GA1.1.70349640.1701795685
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:20 GMT
Flow-Level: 3
Logid: 9016276521407377418
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276521407377418
Yme: ZIGW+Ss3QEoadTEDUmr/tG1MvuUZThz3qQpNwyGF
Content-Length: 44
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000017&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en
200 OK 967 B URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000017&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (3720), with no line terminators
Hash 1fbb40808b0949cee20371c98f23420c
9e774cabbaea8424ebcea68df9beee85b0ea2114
052339c688ef9376db7227759242ac2b08f5c79efd007856123fdf2e675c9449
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000017&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207; _ga_06ZNKL8C2E=GS1.1.1701795685.1.0.1701795685.60.0.0; _ga=GA1.1.70349640.1701795685
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:20 GMT
Flow-Level: 3
Logid: 9016276517059251356
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 9016276517059251356
Yme: ZIGW+Ss3QE0WaSsCSHb+qnFLufkASwH8tAFIwiqBmO22O1AiMFopi2pwbOk=
Transfer-Encoding: chunked
www.1024tera.com/api/analytics?type=web_skip_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685899
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_skip_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685899
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 92807413f21d4c48b770c4f3f33f312d
f1baeeabaee34af4d99774946feade8ccf112570
6277547d726de609fd318389e2a513737384b0c6a302f7448fbfde9786101c1a
GET /api/analytics?type=web_skip_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685899 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207; _ga_06ZNKL8C2E=GS1.1.1701795685.1.0.1701795685.60.0.0; _ga=GA1.1.70349640.1701795685
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:20 GMT
Flow-Level: 3
Logid: 9016276515161750280
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276515161750280
Yme: ZIGW+Ss3QE0RYysCSnb+qnFLufkASwf1tAdMySKDmO6fYsx9
Content-Length: 44
www.1024tera.com/api/analytics?from=shareLink&type=videoplayer_open_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685920
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?from=shareLink&type=videoplayer_open_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685920
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash b2f1e918699c0c862199c63e13a22913
937c1f235274b9059a628885f1d53b268f7f4928
2d34629921c8aa8b723cedc2c88e9905e9f6ceaa73a03f8dd26c745a298f3ded
GET /api/analytics?from=shareLink&type=videoplayer_open_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795685920 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207; _ga_06ZNKL8C2E=GS1.1.1701795685.1.0.1701795685.60.0.0; _ga=GA1.1.70349640.1701795685
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:20 GMT
Flow-Level: 3
Logid: 9016276521270562232
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276521270562232
Yme: ZIGW+Ss3QE0WYisESWziq29Xvv4cVAPxqh5OxSWJmu2ySgFnb2oSc+lubtkY
Content-Length: 44
region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701795684931&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=70349640.1701795685&ul=en-us&sr=1280x1024&_eu=AEA&_s=3&sid=1701795685&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&dt=VID_20230818_225035_502.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=scroll&ep.origin=firebase&epn.percent_scrolled=90&tfd=8845
204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701795684931&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=70349640.1701795685&ul=en-us&sr=1280x1024&_eu=AEA&_s=3&sid=1701795685&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&dt=VID_20230818_225035_502.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=scroll&ep.origin=firebase&epn.percent_scrolled=90&tfd=8845
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701795684931&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=70349640.1701795685&ul=en-us&sr=1280x1024&_eu=AEA&_s=3&sid=1701795685&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&dt=VID_20230818_225035_502.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=scroll&ep.origin=firebase&epn.percent_scrolled=90&tfd=8845 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://www.1024tera.com
date: Tue, 05 Dec 2023 17:01:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.1024tera.com/api/analytics?value=9337&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795686152
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?value=9337&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795686152
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 35d55b9887f2b296ec9d2abb1fa58637
70d57a6fb9ea4f713e1fb3e2fb52794c08b93ea7
f3f62660e52334ee848fcb94893f00a294f982726e8efe099e889c6faf2e9bdb
GET /api/analytics?value=9337&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795686152 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207; _ga_06ZNKL8C2E=GS1.1.1701795685.1.0.1701795685.60.0.0; _ga=GA1.1.70349640.1701795685
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:20 GMT
Flow-Level: 3
Logid: 9016276579353100820
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276579353100820
Yme: ZIGW+Ss3QE0RYysESWjiq29Xvv4cVAP2oh5MwCqBmOuyCQ9wfg==
Content-Length: 44
pl18043214.highperformancecpmgate.com/5c8996e8e3cb5e10b7fd36115b800ac7/invoke.js
200 OK 9.3 kB URL GET HTTP/1.1 pl18043214.highperformancecpmgate.com/5c8996e8e3cb5e10b7fd36115b800ac7/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerLet's Encrypt
Subjecthighperformancecpmgate.com
FingerprintEC:5C:1C:3A:AB:08:18:CE:84:A7:E0:33:D8:44:0B:AF:12:12:CE:C4
ValiditySat, 28 Oct 2023 06:31:01 GMT - Fri, 26 Jan 2024 06:31:00 GMT
File type Unicode text, UTF-8 text, with very long lines (25194), with no line terminators
Hash 26f9b5340dd6a53f9afc25f81c6d20e7
9d93efd0037f5459e10bdc0382701a329c70f97a
ce805361778d4d8cba9a9175b93b2af229971b88423532cbc73bb0e4f2b46dc8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /5c8996e8e3cb5e10b7fd36115b800ac7/invoke.js HTTP/1.1
Host: pl18043214.highperformancecpmgate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 05 Dec 2023 17:01:20 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4ef07dad8b2b04c78b8527657eecdbcb
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.1024tera.com/api/analytics?type=web_share_video_carousel_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795686151
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_share_video_carousel_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795686151
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash f4c3914dc21253bf992e835c8879a881
4aead524d4e9c7b73c5900c630a4ad5046e0609f
8ffe5312c9a1c14a0ec164b72a3b46ab03ed3f91b619eb2fd7e719871dafe982
GET /api/analytics?type=web_share_video_carousel_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795686151 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207; _ga_06ZNKL8C2E=GS1.1.1701795685.1.0.1701795685.60.0.0; _ga=GA1.1.70349640.1701795685
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:20 GMT
Flow-Level: 3
Logid: 9016276582560525768
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276582560525768
Yme: ZIGW+Ss3QEsWdTcGUmr/tG1MvuUYQxz0qQpNwyOF
Content-Length: 44
www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795686256
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795686256
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 6fec94018b0628707255ed16d4f1ed76
9bfddebc439220f90c526d11ec9379c269d7765e
c4006d17f1f8a8013599a2d6572d3584727111cb9d5c9b7a721283efea79dbd9
GET /api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795686256 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207; _ga_06ZNKL8C2E=GS1.1.1701795685.1.0.1701795686.59.0.0; _ga=GA1.1.70349640.1701795685
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:20 GMT
Flow-Level: 3
Logid: 9016276611443907480
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276611443907480
Yme: ZIGW+Ss3QE0WaysESW7iq29Xvv4cVAP2oh5OxyeJmu2ySh0wfg==
Content-Length: 44
www.1024tera.com/share/streaming?uk=4399132249515&shareid=798102270&type=M3U8_FLV_264_480&fid=295415464199216&sign=6938617833f8d17477f82f7f8bfcb2f9668926b1×tamp=1701795685&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&esl=1&isplayer=1&ehps=1&clienttype=0&app_id=250528&web=1&channel=dubox
200 OK 2.7 kB URL GET HTTP/1.1 www.1024tera.com/share/streaming?uk=4399132249515&shareid=798102270&type=M3U8_FLV_264_480&fid=295415464199216&sign=6938617833f8d17477f82f7f8bfcb2f9668926b1×tamp=1701795685&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&esl=1&isplayer=1&ehps=1&clienttype=0&app_id=250528&web=1&channel=dubox
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (865)
Hash 159a3c8b6bad9a367ef56dfb8c8f0d0c
4c40a446e5ff04abe7151378b266d5b058c58041
a7b02b59a62910ed3b6d6a0d3dd8e01cda01ae280a97909e7986da4edf2846e1
GET /share/streaming?uk=4399132249515&shareid=798102270&type=M3U8_FLV_264_480&fid=295415464199216&sign=6938617833f8d17477f82f7f8bfcb2f9668926b1×tamp=1701795685&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&esl=1&isplayer=1&ehps=1&clienttype=0&app_id=250528&web=1&channel=dubox HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207; _ga_06ZNKL8C2E=GS1.1.1701795685.1.0.1701795686.59.0.0; _ga=GA1.1.70349640.1701795685
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Type: application/x-mpegURL;charset=utf-8
Date: Tue, 05 Dec 2023 17:01:20 GMT
Flow-Level: 3
Http-X-Isis-Logid: 9016276592374855496
Logid: 9016276592374855496
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Yld: 9016276592374855496
Yme: ZIGW+Ss3QEsVdTcEUmr/tG1MvuUZTxz3rQpNwyKBPWY=
Transfer-Encoding: chunked
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 1bfba60a71cfc2840a9d32837d6e0007
a0b0d4b59cdb00e6b087cad1a6c4b08aa7459fc9
7e592639e95cbc324b3017f1a6aa171657ee61fa9e4eea956c1b719cebd1f44d
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Tue, 05 Dec 2023 17:01:20 GMT
Last-Modified: Tue, 05 Dec 2023 16:25:16 GMT
Server: ECAcc (ska/F7A3)
X-Cache: Miss from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: kfvSqmO6s0G97-kVj6CEbzVpJOVutRDek3Iw8VV6JfUQmXIMe7ciSg==
Age: 2164
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash c46b1d8c75406d43c238318751f9d24d
1a3846e583bcdd7704720adcaadb9a4c67f0c0c7
4d4736f10992f0f13e09f772b9866a03498a5c0190238792d017cb4048310635
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:20 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.1024tera.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=9f62b5ae-ad37-454d-ba2c-499ebbde53fb:1:1; expires=Fri, 02 Dec 2033 17:01:20 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-b20230be.0a893307.js
200 OK 41 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-b20230be.0a893307.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 1bc115b6d2d5bf1f1b904693c7655e0e
f5c2a6fd9353bf0cc1b764b8a415a97c3648ce18
bd412ab251b4a0d62b3e1d783035a8b7b907f434f1a5b1f30a609125c18aff13
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-b20230be.0a893307.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:20 GMT
content-type: application/javascript
server: openresty
content-md5: lkWxCU7mztbQBa5ORv1xRQ==
etag: W/"9645b1094ee6ced6d005ae4e46fd7145"
expires: Thu, 07 Sep 2023 07:34:05 GMT
last-modified: Mon, 04 Sep 2023 04:39:49 GMT
x-bce-content-crc32: 860175862
x-bce-debug-id: YxKaPLFml5ovwtS++EvPw1ID/HiMt+Zhii4NCGGd5BA+u+1ccgAwlYXqpryUmBj7YqU863R0gVkKEFuqafmKAg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: aeea44c1-7e31-4002-a3ac-fcdfed6855de
x-bce-storage-class: STANDARD
x-ccdn-expires: 2512206
via: EU-GER-frankfurt-EDGE5-CACHE6[2],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE5[14],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,13]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 7982367
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
pl18427035.highcpmrevenuenetwork.com/627e2f8a423975bc4bd7a76128c2d552/invoke.js
200 OK 9.3 kB URL GET HTTP/1.1 pl18427035.highcpmrevenuenetwork.com/627e2f8a423975bc4bd7a76128c2d552/invoke.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerLet's Encrypt
Subjecthighcpmrevenuenetwork.com
FingerprintEE:67:85:23:95:09:5B:1B:88:45:C2:65:23:64:81:DD:65:D4:15:14
ValidityThu, 19 Oct 2023 06:40:46 GMT - Wed, 17 Jan 2024 06:40:45 GMT
File type Unicode text, UTF-8 text, with very long lines (25142), with no line terminators
Hash c46cfa5a20695b116435129cc35c2885
acdd2e1d640994d336421f49b05ebfa7c7aed569
030e1fc9f7c8f5ba37eca831f2b1d6263b0429e51410a9f49fa1f6a97d041fe8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /627e2f8a423975bc4bd7a76128c2d552/invoke.js HTTP/1.1
Host: pl18427035.highcpmrevenuenetwork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 17:01:21 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 857bc8f143114b743c43478c8312589d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
venisonreservationbarefooted.com/1e/1b/bd/1e1bbdc937ccd35cd1897b4e58c7407b.js
200 OK 24 kB URL GET HTTP/1.1 venisonreservationbarefooted.com/1e/1b/bd/1e1bbdc937ccd35cd1897b4e58c7407b.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerLet's Encrypt
Subjectvenisonreservationbarefooted.com
FingerprintCA:72:5B:8E:9B:7A:DB:16:E7:68:23:87:55:BC:13:FB:6D:A0:E0:5F
ValidityTue, 28 Nov 2023 07:52:40 GMT - Mon, 26 Feb 2024 07:52:39 GMT
File type ASCII text, with very long lines (59888)
Hash 660d8043bdf7e2779d183b79cd243bc7
118a7b7af4a366e9fa6c8a058749139493db7a9d
259480de73e42de417100e2f7bbc44683ca8a291c803858f7bee6559a2daa657
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /1e/1b/bd/1e1bbdc937ccd35cd1897b4e58c7407b.js HTTP/1.1
Host: venisonreservationbarefooted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 17:01:21 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_AN-1159_new=1; expires=Sat, 09 Dec 2023 21:01:21 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7c60e6d043367f1053ec3c24e2be8813
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
data.1024tera.com/thumbnail/a383e03ce9fb19f0ca219cd5b0d7db5d?fid=4399132249515-250528-295415464199216&time=1701795600&rt=sh&sign=FDTAER-DCb740ccc5511e5e8fedcff06b081203-whuTlhpCK2wDiMdJPfxMB%2BsdRSA%3D&expires=8h&chkv=0&chkbd=0&chkpc=&dp-logid=9016276056504641657&dp-callid=0&size=c850_u580&quality=100&vuk=-&ft=video
200 OK 7.9 kB URL GET HTTP/1.1 data.1024tera.com/thumbnail/a383e03ce9fb19f0ca219cd5b0d7db5d?fid=4399132249515-250528-295415464199216&time=1701795600&rt=sh&sign=FDTAER-DCb740ccc5511e5e8fedcff06b081203-whuTlhpCK2wDiMdJPfxMB%2BsdRSA%3D&expires=8h&chkv=0&chkbd=0&chkpc=&dp-logid=9016276056504641657&dp-callid=0&size=c850_u580&quality=100&vuk=-&ft=video
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 70x70, segment length 16, baseline, precision 8, 196x360, components 3\012- data
Hash 29a536b6029ea1641d3e906972502699
43d4ed7d13451ca362a4f97ba204efeec251cb48
a0df67449b0f35f00315b18b64581e253a7c39ed0d77968ed28a11525fb7e86c
GET /thumbnail/a383e03ce9fb19f0ca219cd5b0d7db5d?fid=4399132249515-250528-295415464199216&time=1701795600&rt=sh&sign=FDTAER-DCb740ccc5511e5e8fedcff06b081203-whuTlhpCK2wDiMdJPfxMB%2BsdRSA%3D&expires=8h&chkv=0&chkbd=0&chkpc=&dp-logid=9016276056504641657&dp-callid=0&size=c850_u580&quality=100&vuk=-&ft=video HTTP/1.1
Host: data.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207; _ga_06ZNKL8C2E=GS1.1.1701795685.1.0.1701795686.59.0.0; _ga=GA1.1.70349640.1701795685
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 17:01:21 GMT
Content-Type: image/jpeg
Connection: keep-alive
x-bs-client-ip: OTEuOTAuNDIuMTU0
x-bs-request-id: MTAuMjUyLjcxLjM1OjIwMjA6OTAxNjI3NjA1NjUwNDY0MTY1NzoyMDIzLTEyLTA2IDAxOjAxOjIx
Content-Length: 7940
Server: TERABOX UI
venisonreservationbarefooted.com/ntv.json?key=5c8996e8e3cb5e10b7fd36115b800ac7&vstc=1
200 OK 4.3 kB URL GET HTTP/1.1 venisonreservationbarefooted.com/ntv.json?key=5c8996e8e3cb5e10b7fd36115b800ac7&vstc=1
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerLet's Encrypt
Subjectvenisonreservationbarefooted.com
FingerprintCA:72:5B:8E:9B:7A:DB:16:E7:68:23:87:55:BC:13:FB:6D:A0:E0:5F
ValidityTue, 28 Nov 2023 07:52:40 GMT - Mon, 26 Feb 2024 07:52:39 GMT
File type JSON data\012- , ASCII text, with very long lines (4280), with no line terminators
Hash a5fc3a2ae04b3e07a76cc485edbcbff3
62826c2b3b3a91e9285b3df40ed2f7074d699551
80e7277bdb1174ba1890a8fa9493903c27d52351f7c84262ef13f61424552f5b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ntv.json?key=5c8996e8e3cb5e10b7fd36115b800ac7&vstc=1 HTTP/1.1
Host: venisonreservationbarefooted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 17:01:21 GMT
Content-Type: application/json
Content-Length: 4280
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.1024tera.com
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17942715; expires=Wed, 06 Dec 2023 17:01:21 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 06 Dec 2023 17:01:21 GMT; secure; SameSite=None
uncs=1; expires=Wed, 06 Dec 2023 17:01:21 GMT; secure; SameSite=None
pdhtkv49=true; expires=Wed, 06 Dec 2023 17:01:21 GMT; secure; SameSite=None
uncs49=1; expires=Wed, 06 Dec 2023 17:01:21 GMT; secure; SameSite=None
nlec5c8996e8e3cb5e10b7fd36115b800ac7=[2229333]; expires=Tue, 05 Dec 2023 17:01:26 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a45cd06127bb287817db2d2b510cff2b
Strict-Transport-Security: max-age=0; includeSubdomains
v1.1024tera.com/video/netdisk-videotran-tky/a383e03ce9fb19f0ca219cd5b0d7db5d_1138_1_ts/93d89124d435d436ce3a6b7cd4ad09d9?ts_size=4953988&app_id=250528&ccn=NO&csl=0&dp-logid=9016276592374855496&fn=VID_20230818_225035_502.mp4&from_type=3&fsid=295415464199216&isplayer=1&iv=2&logid=9016276592374855496&ouk=4399132249515&r=123058045&size=8561857&sta_cs=0&sta_dt=video&sta_dx=8&time=1701824480&to=any&tot=ctkon&uo=any&uva=1499419338&vuk=&dtime=10&etag=93d89124d435d436ce3a6b7cd4ad09d9&fid=77ff2f2df07064b3b3f566f2536b225f-&len=261696&range=2053148-2314843®ion=tky&resv4=&sign=BOUTHNF-F3530edecde9cd71b79378b290804a96-wU2Azeve3CVeNIlkvyx59Z95pcM%253D&xcode=5d5c552a06b913938e1ab865a63ae932b0da4dc2fdd3a5b82943d1f4f1b78ff4e39f6663ee318463f113fa460252a00b0b2977702d3e6764&xv=6&need_suf=&pmk=140093d89124d435d436ce3a6b7cd4ad09d96c3eabea0000004b9784&by=my-streaming
200 OK 262 kB URL GET HTTP/2 v1.1024tera.com/video/netdisk-videotran-tky/a383e03ce9fb19f0ca219cd5b0d7db5d_1138_1_ts/93d89124d435d436ce3a6b7cd4ad09d9?ts_size=4953988&app_id=250528&ccn=NO&csl=0&dp-logid=9016276592374855496&fn=VID_20230818_225035_502.mp4&from_type=3&fsid=295415464199216&isplayer=1&iv=2&logid=9016276592374855496&ouk=4399132249515&r=123058045&size=8561857&sta_cs=0&sta_dt=video&sta_dx=8&time=1701824480&to=any&tot=ctkon&uo=any&uva=1499419338&vuk=&dtime=10&etag=93d89124d435d436ce3a6b7cd4ad09d9&fid=77ff2f2df07064b3b3f566f2536b225f-&len=261696&range=2053148-2314843®ion=tky&resv4=&sign=BOUTHNF-F3530edecde9cd71b79378b290804a96-wU2Azeve3CVeNIlkvyx59Z95pcM%253D&xcode=5d5c552a06b913938e1ab865a63ae932b0da4dc2fdd3a5b82943d1f4f1b78ff4e39f6663ee318463f113fa460252a00b0b2977702d3e6764&xv=6&need_suf=&pmk=140093d89124d435d436ce3a6b7cd4ad09d96c3eabea0000004b9784&by=my-streaming
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
Size 262 kB (261696 bytes)
Hash 566928c8a067a564929f4cf3cc30adab
703597ba69e5229cab978064a7e96384b4821308
cf51ab312bc0d208ebc0018be790029550b4ff8b1f110156092fdd02a845f40a
GET /video/netdisk-videotran-tky/a383e03ce9fb19f0ca219cd5b0d7db5d_1138_1_ts/93d89124d435d436ce3a6b7cd4ad09d9?ts_size=4953988&app_id=250528&ccn=NO&csl=0&dp-logid=9016276592374855496&fn=VID_20230818_225035_502.mp4&from_type=3&fsid=295415464199216&isplayer=1&iv=2&logid=9016276592374855496&ouk=4399132249515&r=123058045&size=8561857&sta_cs=0&sta_dt=video&sta_dx=8&time=1701824480&to=any&tot=ctkon&uo=any&uva=1499419338&vuk=&dtime=10&etag=93d89124d435d436ce3a6b7cd4ad09d9&fid=77ff2f2df07064b3b3f566f2536b225f-&len=261696&range=2053148-2314843®ion=tky&resv4=&sign=BOUTHNF-F3530edecde9cd71b79378b290804a96-wU2Azeve3CVeNIlkvyx59Z95pcM%253D&xcode=5d5c552a06b913938e1ab865a63ae932b0da4dc2fdd3a5b82943d1f4f1b78ff4e39f6663ee318463f113fa460252a00b0b2977702d3e6764&xv=6&need_suf=&pmk=140093d89124d435d436ce3a6b7cd4ad09d96c3eabea0000004b9784&by=my-streaming HTTP/1.1
Host: v1.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Zen/2.7
date: Tue, 05 Dec 2023 17:01:21 GMT
content-type: application/octet-stream
content-length: 261696
strict-transport-security: max-age=31536000; preload
x-bs-file-size: 4953988
x-bs-meta-crc32: 1816046570
cache-control: max-age=259200
etag: 93d89124d435d436ce3a6b7cd4ad09d9
x-bs-client-ip: OTEuOTAuNDIuMTU0
x-bs-request-id: MTAuMjUyLjE0OS4zNzoyMDE5Ojc4NjMzNTUzMzQ2MzE2MjQwMjU6MjAyMy0xMi0wNiAwMTowMToyMQ==
content-md5: 93d89124d435d436ce3a6b7cd4ad09d9
superfile: 0
accept-ranges: bytes
last-modified: Fri, 03 Nov 2023 09:00:24 GMT
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length, ETag, x-bs-request-id
access-control-allow-credentials: true
access-control-allow-methods: HEAD, GET, OPTIONS, PUT, POST, DELETE
access-control-allow-origin: https://www.1024tera.com
access-control-allow-headers: Range, Origin, Content-Type, Accept, Content-Length
age: 0
via: http/1.1 JP.TYO.837.P.230.88 (Cache-6.1.14), http/1.1 DE.FRA5.837.E.113.200 (Cache-6.1.15)
hittype: TCP_MISS
cache-server: ZenCache
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/video-fail-bg.b77a1e8a.png
200 OK 105 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/video-fail-bg.b77a1e8a.png
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type PNG image data, 980 x 438, 4-bit colormap, non-interlaced\012- data
Size 105 kB (104817 bytes)
Hash b77a1e8a238d4e4191ff9e8a80d6d86d
30d6d726f8f3bfac5770d3ba9ac464f36b4c51b3
73af449450a319a9c3b28782e4bfa3ed17e6b5f7c04a834dba21f96dd0f28949
GET /fe-opera-static/node-static-v4/fe-webv4-main/img/video-fail-bg.b77a1e8a.png HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:21 GMT
content-type: image/png
content-length: 104817
server: openresty
content-md5: t3oeiiONTkGR/56KgNbYbQ==
etag: "b77a1e8a238d4e4191ff9e8a80d6d86d"
expires: Wed, 15 Feb 2023 22:47:56 GMT
last-modified: Fri, 10 Feb 2023 07:43:39 GMT
x-bce-content-crc32: 4025551842
x-bce-debug-id: GU0GXuuVmHD1E2Z4twTBIaO14v2edTIrZIjjemDK7yWOsY+HCIeciS9bgQOAOSIWMUxPucybY5m7VzvcBt1c3A==
x-bce-request-id: 47c77fdc-17bf-44d4-8c6d-c40c7548a183
x-bce-storage-class: STANDARD
x-ccdn-expires: 1086940
via: EU-GER-frankfurt-EDGE5-CACHE6[2],EU-GER-frankfurt-EDGE5-CACHE1[0,TCP_HIT,1],EU-GER-frankfurt-GLOBAL1-CACHE2[3],EU-GER-frankfurt-GLOBAL1-CACHE8[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24842376
accept-ranges: bytes
access-control-allow-origin: *
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-3c39bfc4.baa0ab5e.js
200 OK 209 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-3c39bfc4.baa0ab5e.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Size 209 kB (209185 bytes)
Hash 95b68c8d651ef7ee477774a1fe97de34
3abc67a2c2055e67eaa98325d50627b24503830b
a793f90bded9a971e6e0c87eb006f4fb1ec58b4de3131c5247e2d630aba98e29
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-3c39bfc4.baa0ab5e.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:20 GMT
content-type: application/javascript
server: openresty
content-md5: J2TcvyWm6gv2Eaqsv2udoA==
etag: W/"2764dcbf25a6ea0bf611aaacbf6b9da0"
expires: Sat, 04 Nov 2023 08:02:39 GMT
last-modified: Wed, 01 Nov 2023 07:11:44 GMT
x-bce-content-crc32: 568789530
x-bce-debug-id: xbaDKK50jlBZJ18L45fu3bSp+fDzE/r7QhsyaypWutuc/ChXmeJlm9RANAVDEiI6LAFEIbdQCthtn8HiVncnMQ==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 45ec87e7-f8da-4b01-bf46-6d2b8c70cc37
x-bce-storage-class: STANDARD
x-ccdn-expires: 2341028
via: EU-GER-frankfurt-EDGE5-CACHE6[1],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE6[31],EU-GER-frankfurt-GLOBAL1-CACHE14[0,TCP_HIT,29]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 2969542
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
incurableyankmarshal.com/pixel/purst?dl=0&th=0&sc=0&rs=10521&rd=10521&fd=837&bv=23.12.v.2&tmpl=136
200 OK 0 B URL GET HTTP/1.1 incurableyankmarshal.com/pixel/purst?dl=0&th=0&sc=0&rs=10521&rd=10521&fd=837&bv=23.12.v.2&tmpl=136
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerLet's Encrypt
Subjectincurableyankmarshal.com
Fingerprint27:8D:20:90:2C:CE:6C:5B:CA:85:05:4D:BF:55:1E:B2:FB:AF:60:B3
ValidityTue, 17 Oct 2023 12:46:41 GMT - Mon, 15 Jan 2024 12:46:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=10521&rd=10521&fd=837&bv=23.12.v.2&tmpl=136 HTTP/1.1
Host: incurableyankmarshal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 05 Dec 2023 17:01:21 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
www.1024tera.com/api/analytics?errno=undefined&errormsg=Unable%20to%20connect%20to%20the%20Internet%2C%20please%20connect%20and%20try%20again&type=videoplayer_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795687556
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=undefined&errormsg=Unable%20to%20connect%20to%20the%20Internet%2C%20please%20connect%20and%20try%20again&type=videoplayer_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795687556
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 8044ff1a55f574272f6ac6ee7e7a93dc
f6f70ce5de40a553416b29460c66ce1288d95f50
3a61ff336501b1f9ceb82f3fd504e87adab6b8811adc4c8c3c7cfb7755d5b6ad
GET /api/analytics?errno=undefined&errormsg=Unable%20to%20connect%20to%20the%20Internet%2C%20please%20connect%20and%20try%20again&type=videoplayer_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795687556 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207; _ga_06ZNKL8C2E=GS1.1.1701795685.1.0.1701795687.58.0.0; _ga=GA1.1.70349640.1701795685; dom3ic8zudi28v8lr6fgphwffqoz0j6c=9f62b5ae-ad37-454d-ba2c-499ebbde53fb%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=venisonreservationbarefooted.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:21 GMT
Flow-Level: 3
Logid: 9016276976720486980
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276976720486980
Yme: ZIGW+Ss3QE0WYisCTHb+qnFLufkASwbxtAFIySKDmeo=
Content-Length: 44
fixedencampment.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuu3s3v8Fsv7urFk40gKMike2Y6M%2BMii3GNBGMS94Oc66snZaq7mqru6UlOwQXZ4%2BxNPXWeSTboBnHPIshE0CUoZC5LDuZP8CIsHmWSgdEXqt73qec9PM%2F71hd7xTkJUdCz9U%2FMjtKazke1wH9rQ6XClM5fveeHQS246W%2BodKF50%2B9PLtt7NwyiWvC2%2F5HkW2a%2BHoRBEAahv6SsjE1%2F%2FoKFyo46Ya0T1Jr1Whg10bf%2Fxa7w4KgH0TsnN6DE%2BH%2Bbz55C8RHS5Pvb0m3lJnvnw6TQNDcWPXF4P91KTZkimZWx9RCnh9NuGDcm5MsrMOnh1AFMb3%2FiAEyNifc8BEsPpzLBegeXSpmGTMHESyh7I0g9gqIjcPMASpwSgAusriFNHq8aW9LtS5ZO2DGZe%2FEXVDkmc3%2B8ijT5blGrvn%2FX6CJXJnXoxxVUfwTVHSErjpHveFDlMXj%2BOZT4ncy%2FWEGa7K85baBEdeFeqRFUPIKWA1DnoZgc5aGIPRSZh0Sc%2BTTqxEHQilncaLSbnPNGg%2FOovSAi0Wi24wAFn8gbIM8G4HoAbneR2V1sqUen0Q3Y4ie4zQpOeHD5mHif7qInKpSSoHQEJSUoFUGZE5S96kBoV3fVY6FdwcJprk9zoxqavLtHD0zelSkBtYO97Jxcn4zHu%2F7rD9iSZ37E253OgmzLBmeRDAPWikVjIQwj1g4CyltwqoJyVy4c76gxeb1%2FFZkak%2F%2B3jsDoMZw%2BBldXQYsQtBy26gHo5rDZDrCTPsmlpcz0a9wkEKZCls8h3%2Fb29Dl57WJLb8zdh%2BQnt3659l42fH4N3FbIbIXP1M8EXf1weMeUZP%2BOKR15upblKlE7dLLBuznN5dVvP5bbpbFi%2BbYbfPM%2BnxCT8uiedPkKTYVKu448WVRCSLtkLJfkx2W3Idl64TYXC5sW2cr6B0vLSWalc8qkI1B1uvY3uBqTuTdfufibL%2F%2F2J5QdwRYVkuKETAPKHINnu3DZTL0zBFbPeljmoSyqoa2z2aNWBFrOMGUV3L8wm9V77iG61gPNHyBNKvRshZ6uQPUArrg2zDN7cuvZV5P4Gkx7Q6att8%2B01Y8uR%2BvUmS%2BjOIhlUJcs7rC4RQPRiZsdRjuhbLGIhsjdWJoN%2Bg8AAAD%2F%2FwEAAP%2F%2FLWebo3MEAAA%3D
200 OK 7 B URL GET HTTP/1.1 fixedencampment.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuu3s3v8Fsv7urFk40gKMike2Y6M%2BMii3GNBGMS94Oc66snZaq7mqru6UlOwQXZ4%2BxNPXWeSTboBnHPIshE0CUoZC5LDuZP8CIsHmWSgdEXqt73qec9PM%2F71hd7xTkJUdCz9U%2FMjtKazke1wH9rQ6XClM5fveeHQS246W%2BodKF50%2B9PLtt7NwyiWvC2%2F5HkW2a%2BHoRBEAahv6SsjE1%2F%2FoKFyo46Ya0T1Jr1Whg10bf%2Fxa7w4KgH0TsnN6DE%2BH%2Bbz55C8RHS5Pvb0m3lJnvnw6TQNDcWPXF4P91KTZkimZWx9RCnh9NuGDcm5MsrMOnh1AFMb3%2FiAEyNifc8BEsPpzLBegeXSpmGTMHESyh7I0g9gqIjcPMASpwSgAusriFNHq8aW9LtS5ZO2DGZe%2FEXVDkmc3%2B8ijT5blGrvn%2FX6CJXJnXoxxVUfwTVHSErjpHveFDlMXj%2BOZT4ncy%2FWEGa7K85baBEdeFeqRFUPIKWA1DnoZgc5aGIPRSZh0Sc%2BTTqxEHQilncaLSbnPNGg%2FOovSAi0Wi24wAFn8gbIM8G4HoAbneR2V1sqUen0Q3Y4ie4zQpOeHD5mHif7qInKpSSoHQEJSUoFUGZE5S96kBoV3fVY6FdwcJprk9zoxqavLtHD0zelSkBtYO97Jxcn4zHu%2F7rD9iSZ37E253OgmzLBmeRDAPWikVjIQwj1g4CyltwqoJyVy4c76gxeb1%2FFZkak%2F%2B3jsDoMZw%2BBldXQYsQtBy26gHo5rDZDrCTPsmlpcz0a9wkEKZCls8h3%2Fb29Dl57WJLb8zdh%2BQnt3659l42fH4N3FbIbIXP1M8EXf1weMeUZP%2BOKR15upblKlE7dLLBuznN5dVvP5bbpbFi%2BbYbfPM%2BnxCT8uiedPkKTYVKu448WVRCSLtkLJfkx2W3Idl64TYXC5sW2cr6B0vLSWalc8qkI1B1uvY3uBqTuTdfufibL%2F%2F2J5QdwRYVkuKETAPKHINnu3DZTL0zBFbPeljmoSyqoa2z2aNWBFrOMGUV3L8wm9V77iG61gPNHyBNKvRshZ6uQPUArrg2zDN7cuvZV5P4Gkx7Q6att8%2B01Y8uR%2BvUmS%2BjOIhlUJcs7rC4RQPRiZsdRjuhbLGIhsjdWJoN%2Bg8AAAD%2F%2FwEAAP%2F%2FLWebo3MEAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerLet's Encrypt
Subjectfixedencampment.com
Fingerprint69:01:89:A0:02:2B:E6:FC:72:F8:53:1D:E8:B8:52:AB:EB:5F:A9:A7
ValidityTue, 28 Nov 2023 07:58:26 GMT - Mon, 26 Feb 2024 07:58:25 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuu3s3v8Fsv7urFk40gKMike2Y6M%2BMii3GNBGMS94Oc66snZaq7mqru6UlOwQXZ4%2BxNPXWeSTboBnHPIshE0CUoZC5LDuZP8CIsHmWSgdEXqt73qec9PM%2F71hd7xTkJUdCz9U%2FMjtKazke1wH9rQ6XClM5fveeHQS246W%2BodKF50%2B9PLtt7NwyiWvC2%2F5HkW2a%2BHoRBEAahv6SsjE1%2F%2FoKFyo46Ya0T1Jr1Whg10bf%2Fxa7w4KgH0TsnN6DE%2BH%2Bbz55C8RHS5Pvb0m3lJnvnw6TQNDcWPXF4P91KTZkimZWx9RCnh9NuGDcm5MsrMOnh1AFMb3%2FiAEyNifc8BEsPpzLBegeXSpmGTMHESyh7I0g9gqIjcPMASpwSgAusriFNHq8aW9LtS5ZO2DGZe%2FEXVDkmc3%2B8ijT5blGrvn%2FX6CJXJnXoxxVUfwTVHSErjpHveFDlMXj%2BOZT4ncy%2FWEGa7K85baBEdeFeqRFUPIKWA1DnoZgc5aGIPRSZh0Sc%2BTTqxEHQilncaLSbnPNGg%2FOovSAi0Wi24wAFn8gbIM8G4HoAbneR2V1sqUen0Q3Y4ie4zQpOeHD5mHif7qInKpSSoHQEJSUoFUGZE5S96kBoV3fVY6FdwcJprk9zoxqavLtHD0zelSkBtYO97Jxcn4zHu%2F7rD9iSZ37E253OgmzLBmeRDAPWikVjIQwj1g4CyltwqoJyVy4c76gxeb1%2FFZkak%2F%2B3jsDoMZw%2BBldXQYsQtBy26gHo5rDZDrCTPsmlpcz0a9wkEKZCls8h3%2Fb29Dl57WJLb8zdh%2BQnt3659l42fH4N3FbIbIXP1M8EXf1weMeUZP%2BOKR15upblKlE7dLLBuznN5dVvP5bbpbFi%2BbYbfPM%2BnxCT8uiedPkKTYVKu448WVRCSLtkLJfkx2W3Idl64TYXC5sW2cr6B0vLSWalc8qkI1B1uvY3uBqTuTdfufibL%2F%2F2J5QdwRYVkuKETAPKHINnu3DZTL0zBFbPeljmoSyqoa2z2aNWBFrOMGUV3L8wm9V77iG61gPNHyBNKvRshZ6uQPUArrg2zDN7cuvZV5P4Gkx7Q6att8%2B01Y8uR%2BvUmS%2BjOIhlUJcs7rC4RQPRiZsdRjuhbLGIhsjdWJoN%2Bg8AAAD%2F%2FwEAAP%2F%2FLWebo3MEAAA%3D HTTP/1.1
Host: fixedencampment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 17:01:21 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 17151666d31c1e657a2ed1fe56950060
Strict-Transport-Security: max-age=0; includeSubdomains
fixedencampment.com/f1/95/e5/f195e5fa577c23352666448243864c68.js
200 OK 15 kB URL GET HTTP/1.1 fixedencampment.com/f1/95/e5/f195e5fa577c23352666448243864c68.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerLet's Encrypt
Subjectfixedencampment.com
Fingerprint69:01:89:A0:02:2B:E6:FC:72:F8:53:1D:E8:B8:52:AB:EB:5F:A9:A7
ValidityTue, 28 Nov 2023 07:58:26 GMT - Mon, 26 Feb 2024 07:58:25 GMT
File type ASCII text, with very long lines (42819), with no line terminators
Hash 306806e9e594c1a83586a209546b3690
b175f3daf56b1aa333b1dc7ac70e18e3432dabcf
b16e32111dafafd11bd703d2ef3e1ca29db91f083076778f1b77c8ee634c7257
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /f1/95/e5/f195e5fa577c23352666448243864c68.js HTTP/1.1
Host: fixedencampment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 17:01:21 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f2bced90ae220b99f7b2903de3710ad6
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.1024tera.com/api/analytics?type=videoplayer_pause&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795687596
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=videoplayer_pause&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795687596
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 1d619a9ff5042bbd4970fbe922da2d7d
d925cdcdbb5fa47843cab243b95e737797e5a09a
8e27eb6613d2b4186a36098941deec8dd828ac69c76c3221637b4a3020ad6fef
GET /api/analytics?type=videoplayer_pause&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795687596 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207; _ga_06ZNKL8C2E=GS1.1.1701795685.1.0.1701795687.58.0.0; _ga=GA1.1.70349640.1701795685; dom3ic8zudi28v8lr6fgphwffqoz0j6c=9f62b5ae-ad37-454d-ba2c-499ebbde53fb%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=venisonreservationbarefooted.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:21 GMT
Flow-Level: 3
Logid: 9016276982037547981
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276982037547981
Yme: ZIGW+Ss3QE0XaysMTHb+qnFLufkASwbxtAFJySKDnOphx9jiufUTHMw31TY=
Content-Length: 44
fixedencampment.com/ntv.json?key=627e2f8a423975bc4bd7a76128c2d552&vstc=2&uuid=9f62b5ae-ad37-454d-ba2c-499ebbde53fb%3A1%3A1&custom=%7B%22d37e3bc4%22%3A%22b%22%7D
200 OK 8.6 kB URL GET HTTP/1.1 fixedencampment.com/ntv.json?key=627e2f8a423975bc4bd7a76128c2d552&vstc=2&uuid=9f62b5ae-ad37-454d-ba2c-499ebbde53fb%3A1%3A1&custom=%7B%22d37e3bc4%22%3A%22b%22%7D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerLet's Encrypt
Subjectfixedencampment.com
Fingerprint69:01:89:A0:02:2B:E6:FC:72:F8:53:1D:E8:B8:52:AB:EB:5F:A9:A7
ValidityTue, 28 Nov 2023 07:58:26 GMT - Mon, 26 Feb 2024 07:58:25 GMT
File type JSON data\012- , ASCII text, with very long lines (8649), with no line terminators
Hash 73e50bd7a8a17f8cd0fa73347525a28b
27cabdc4f91858147aa3ccb5908b964f8b203c42
98d6cb79bc5e3096e91693f93d4fef0a3e55ea0f44cfbf6a3e945a8d92293d24
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ntv.json?key=627e2f8a423975bc4bd7a76128c2d552&vstc=2&uuid=9f62b5ae-ad37-454d-ba2c-499ebbde53fb%3A1%3A1&custom=%7B%22d37e3bc4%22%3A%22b%22%7D HTTP/1.1
Host: fixedencampment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 17:01:22 GMT
Content-Type: application/json
Content-Length: 8649
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.1024tera.com
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=18326536; expires=Wed, 06 Dec 2023 17:01:21 GMT; secure; SameSite=None
uid_id2=9f62b5ae-ad37-454d-ba2c-499ebbde53fb:1:1; expires=Tue, 12 Dec 2023 17:01:21 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 06 Dec 2023 17:01:22 GMT; secure; SameSite=None
uncs=1; expires=Wed, 06 Dec 2023 17:01:22 GMT; secure; SameSite=None
pdhtkv49=true; expires=Wed, 06 Dec 2023 17:01:22 GMT; secure; SameSite=None
uncs49=1; expires=Wed, 06 Dec 2023 17:01:22 GMT; secure; SameSite=None
nlec627e2f8a423975bc4bd7a76128c2d552=[2229213,2106764]; expires=Tue, 05 Dec 2023 17:01:27 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6e6203aca638112c1cba96e5678c4421
Strict-Transport-Security: max-age=0; includeSubdomains
fixedencampment.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRuu3uwH%2BfRigiCih1ZUFNzZ7p7unR1zCMYYCcZsSCJ7rl%2B9W251V1PVPb3ZU2JQcshh9KSeep7ZZDUuYv4ARWa9hKCQucgesnfPQvAoMxkYfaHqfd963sPzPG99PqiOSIiKHl76yOworely0gr8N9dVLkzt%2FItX%2FTBoBaf8dZWvxKf87clle%2B%2BEQdIK3vI%2FkHzLLEdBGARhEPrnlJWp2V6eolDFfjdsdYNWHLXCJMa2%2FW%2FvKg%2BOehC9I3ISSoz%2Ft%2FngPhQfIc9%2BPCvdVmmKt9%2FPKk1LY9ETex%2FnW7mpc2TzMrUe0nxvNg3jxoR8tQCT780UwPR2JwrA1Jh4f4Rg%2Bd6MJljvzlOmTEPmYOJZ1L0RpB5B0RG4uQklHhGAC1xcQ57dvWhsTa89RekEHZPFJ39B1WOy%2BPh55NkPZ7Ta9q8YXZXK5A7baQO1PYLaGKGoDlDueFD1AXj5KZT4nSw%2FuYA8211z2kCJw9e66UrEEiqXqGh3luIkFkuMRnwp7nYlY0Im7ZRNLVJqBJWOoGUf1HmoJkd5qFIPVeEhE4c%2BTbppEHRSlrbbqzHnvN3mPFldEYlox6tpgIpPNPRRFn1w3Qe311HYG9%2BKdke2GY8HDFvqi0fJSdjqF7jNBk54cCVBTzSoJUHtCGpKUCuCuiSoe80doV3kmrtCu4qFsxzNcrsZmnJjQO%2BYckPmBNT2B8UROTGx0nth9zi25KG%2FEnVklK7SOGp3OwnjMRMd2lkJo1UeiSSJ4FQD5RamwnfUmLzy0m0Uakz%2B39kHowdw%2BgBcnQCtQtB62IkC0M1hvBpgJ98PgygupaUtbjII06AoF1Fe8wb6iLw4Xemrxx5D8oen7728fzx8409w26CwDT5RvxJs6FvDy6Ymu5dN7cj9taJUmdqhk3VfKWkpj937UF6rjRXnz7r%2Bd%2B%2FyCTAp969KV16guVD5hiPfn1FCSHvOWC7JT%2BfdumSXKrd5prJ5VVy49N6581lhpXPK5CNQ9Wjtb3A1Jos3fp5%2B5Od%2B%2BwzKjmCrBln1kMwCyhyAF9fhijl7Zwisns%2BwwkNdNUMbsfmjVgRaznvKGrh%2F9WxeD9wtbNgF0PIm8qxBzzbo6QZU9%2BGqZ4ZlYR%2BefvD1JL4B0wtDpu3CLtNWfzm1dkz812%2FDqUNfJmmQyiCSLO2ytEMD0U3jLqPdUHZYQkOUbizNOvsHAAD%2F%2FwEAAP%2F%2FH5UkhqUEAAA%3D
200 OK 7 B URL GET HTTP/1.1 fixedencampment.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRuu3uwH%2BfRigiCih1ZUFNzZ7p7unR1zCMYYCcZsSCJ7rl%2B9W251V1PVPb3ZU2JQcshh9KSeep7ZZDUuYv4ARWa9hKCQucgesnfPQvAoMxkYfaHqfd963sPzPG99PqiOSIiKHl76yOworely0gr8N9dVLkzt%2FItX%2FTBoBaf8dZWvxKf87clle%2B%2BEQdIK3vI%2FkHzLLEdBGARhEPrnlJWp2V6eolDFfjdsdYNWHLXCJMa2%2FW%2FvKg%2BOehC9I3ISSoz%2Ft%2FngPhQfIc9%2BPCvdVmmKt9%2FPKk1LY9ETex%2FnW7mpc2TzMrUe0nxvNg3jxoR8tQCT780UwPR2JwrA1Jh4f4Rg%2Bd6MJljvzlOmTEPmYOJZ1L0RpB5B0RG4uQklHhGAC1xcQ57dvWhsTa89RekEHZPFJ39B1WOy%2BPh55NkPZ7Ta9q8YXZXK5A7baQO1PYLaGKGoDlDueFD1AXj5KZT4nSw%2FuYA8211z2kCJw9e66UrEEiqXqGh3luIkFkuMRnwp7nYlY0Im7ZRNLVJqBJWOoGUf1HmoJkd5qFIPVeEhE4c%2BTbppEHRSlrbbqzHnvN3mPFldEYlox6tpgIpPNPRRFn1w3Qe311HYG9%2BKdke2GY8HDFvqi0fJSdjqF7jNBk54cCVBTzSoJUHtCGpKUCuCuiSoe80doV3kmrtCu4qFsxzNcrsZmnJjQO%2BYckPmBNT2B8UROTGx0nth9zi25KG%2FEnVklK7SOGp3OwnjMRMd2lkJo1UeiSSJ4FQD5RamwnfUmLzy0m0Uakz%2B39kHowdw%2BgBcnQCtQtB62IkC0M1hvBpgJ98PgygupaUtbjII06AoF1Fe8wb6iLw4Xemrxx5D8oen7728fzx8409w26CwDT5RvxJs6FvDy6Ymu5dN7cj9taJUmdqhk3VfKWkpj937UF6rjRXnz7r%2Bd%2B%2FyCTAp969KV16guVD5hiPfn1FCSHvOWC7JT%2BfdumSXKrd5prJ5VVy49N6581lhpXPK5CNQ9Wjtb3A1Jos3fp5%2B5Od%2B%2BwzKjmCrBln1kMwCyhyAF9fhijl7Zwisns%2BwwkNdNUMbsfmjVgRaznvKGrh%2F9WxeD9wtbNgF0PIm8qxBzzbo6QZU9%2BGqZ4ZlYR%2BefvD1JL4B0wtDpu3CLtNWfzm1dkz812%2FDqUNfJmmQyiCSLO2ytEMD0U3jLqPdUHZYQkOUbizNOvsHAAD%2F%2FwEAAP%2F%2FH5UkhqUEAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerLet's Encrypt
Subjectfixedencampment.com
Fingerprint69:01:89:A0:02:2B:E6:FC:72:F8:53:1D:E8:B8:52:AB:EB:5F:A9:A7
ValidityTue, 28 Nov 2023 07:58:26 GMT - Mon, 26 Feb 2024 07:58:25 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRuu3uwH%2BfRigiCih1ZUFNzZ7p7unR1zCMYYCcZsSCJ7rl%2B9W251V1PVPb3ZU2JQcshh9KSeep7ZZDUuYv4ARWa9hKCQucgesnfPQvAoMxkYfaHqfd963sPzPG99PqiOSIiKHl76yOworely0gr8N9dVLkzt%2FItX%2FTBoBaf8dZWvxKf87clle%2B%2BEQdIK3vI%2FkHzLLEdBGARhEPrnlJWp2V6eolDFfjdsdYNWHLXCJMa2%2FW%2FvKg%2BOehC9I3ISSoz%2Ft%2FngPhQfIc9%2BPCvdVmmKt9%2FPKk1LY9ETex%2FnW7mpc2TzMrUe0nxvNg3jxoR8tQCT780UwPR2JwrA1Jh4f4Rg%2Bd6MJljvzlOmTEPmYOJZ1L0RpB5B0RG4uQklHhGAC1xcQ57dvWhsTa89RekEHZPFJ39B1WOy%2BPh55NkPZ7Ta9q8YXZXK5A7baQO1PYLaGKGoDlDueFD1AXj5KZT4nSw%2FuYA8211z2kCJw9e66UrEEiqXqGh3luIkFkuMRnwp7nYlY0Im7ZRNLVJqBJWOoGUf1HmoJkd5qFIPVeEhE4c%2BTbppEHRSlrbbqzHnvN3mPFldEYlox6tpgIpPNPRRFn1w3Qe311HYG9%2BKdke2GY8HDFvqi0fJSdjqF7jNBk54cCVBTzSoJUHtCGpKUCuCuiSoe80doV3kmrtCu4qFsxzNcrsZmnJjQO%2BYckPmBNT2B8UROTGx0nth9zi25KG%2FEnVklK7SOGp3OwnjMRMd2lkJo1UeiSSJ4FQD5RamwnfUmLzy0m0Uakz%2B39kHowdw%2BgBcnQCtQtB62IkC0M1hvBpgJ98PgygupaUtbjII06AoF1Fe8wb6iLw4Xemrxx5D8oen7728fzx8409w26CwDT5RvxJs6FvDy6Ymu5dN7cj9taJUmdqhk3VfKWkpj937UF6rjRXnz7r%2Bd%2B%2FyCTAp969KV16guVD5hiPfn1FCSHvOWC7JT%2BfdumSXKrd5prJ5VVy49N6581lhpXPK5CNQ9Wjtb3A1Jos3fp5%2B5Od%2B%2BwzKjmCrBln1kMwCyhyAF9fhijl7Zwisns%2BwwkNdNUMbsfmjVgRaznvKGrh%2F9WxeD9wtbNgF0PIm8qxBzzbo6QZU9%2BGqZ4ZlYR%2BefvD1JL4B0wtDpu3CLtNWfzm1dkz812%2FDqUNfJmmQyiCSLO2ytEMD0U3jLqPdUHZYQkOUbizNOvsHAAD%2F%2FwEAAP%2F%2FH5UkhqUEAAA%3D HTTP/1.1
Host: fixedencampment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=18326536; uid_id2=9f62b5ae-ad37-454d-ba2c-499ebbde53fb:1:1; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 17:01:22 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e6c5510971b00fe16a3c8ee8adeae4ef
Strict-Transport-Security: max-age=0; includeSubdomains
fixedencampment.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSu3qwQ9SAJgogeWlFRcGe7e7p3dswhGGMkGLMhiey5fvVuudVdTVX39GRPiQHJIYfRk3rq%2BWaT1bgE8wcoMuslBITMRfaQvXsWgkeZzcDog6r3Xn3v8H3fq6%2BG1SEJUdGDS5%2BZbaU1XU5agf%2FuusqFqZ1%2F8aofBq3glL%2Bu8pX4lN%2BfXrb3QRgkreA9%2FxPJt8xyFIRBEAahf05ZmZr%2B8hEKVex1w1Y3aMVRK0xi9O3%2Fe1d5cNSD6B2Sk1Bi8tzmwwdQfIw8%2B%2FmsdFulKd7%2FOKs0LY1FT%2Bx%2Bnm%2Flps6RzcvUekjz3dk0jJsQ8u0CTL47UwDT25kqAFMT4v0ZguW7M5pgvTvPmDINmYOJF1H3xpB6DEXH4OYmlHhMAC5wcQ15dveisTW99gylU3RCFp%2F%2BDVVPyOKTl5Fn989o1fevGF2VyuQO%2FbSB6o%2BhNsYoqn2U2x5UvQ9efgkl%2FiDLTy8gz3bWnDZQ4uCtbroSsYTKJSranaU4icUSoxFfirtdyZiQSTtlRxYpNYZKx9ByAOo8VNOjPFSph6rwkIkDnybdNAg6KUvb7dWYc95uc56srohEtOPVNEDFpxoGKIsBuB6A2%2Bso7I0fRLsj24zHQ4Yt9fXj5CRs9RvcZgMnPLiSoCca1JKgdgQ1JagVQV0S1L3mjtAucs1doV3FwlmOZrndjEy5MaR3TLkhcwJqB8PikJyYWum9snMcW%2FLAX4k6MkpXaRy1u52E8ZiJDu2shNEqj0SSRHCqgXILR8K31YS88dptFGpCnu%2FsgdF9OL0Prk6AViFoPepEAejmKF4NsJ3vhUEUl9LSFjcZhGlQlIsor3lDfUhePVqp%2F%2FZtSP7o9L3X946H7%2FwFbhsUtsEX6neCDX1rdNnUZOeyqR15sFaUKlPbdLruKyUt5bF7n8prtbHi%2FFk3%2BPFDPgWm5d5V6coLNBcq33DkpzNKCGnPGcsl%2BeW8W5fsUuU2z1Q2r4oLlz46dz4rrHROmXwMqh6v%2FQOuJmTxxq9HH%2FmlyX0oO4atGmTVIzILKLMPXlyHK%2BbsnSGwej7DigXUVTOyEZs%2FakWg5bynrIH7T8%2Fm9dDdwoZdAC1vIs8a9GyDnm5A9QCuemFUFvbR6YffTeN7ML0wYtou7DBt9TcT8uaxJ8%2F8derAl0kapDKIJEu7LO3QQHTTuMtoN5QdltAQpZtIs87%2BBQAA%2F%2F8BAAD%2F%2F3TupuylBAAA
200 OK 7 B URL GET HTTP/1.1 fixedencampment.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSu3qwQ9SAJgogeWlFRcGe7e7p3dswhGGMkGLMhiey5fvVuudVdTVX39GRPiQHJIYfRk3rq%2BWaT1bgE8wcoMuslBITMRfaQvXsWgkeZzcDog6r3Xn3v8H3fq6%2BG1SEJUdGDS5%2BZbaU1XU5agf%2FuusqFqZ1%2F8aofBq3glL%2Bu8pX4lN%2BfXrb3QRgkreA9%2FxPJt8xyFIRBEAahf05ZmZr%2B8hEKVex1w1Y3aMVRK0xi9O3%2Fe1d5cNSD6B2Sk1Bi8tzmwwdQfIw8%2B%2FmsdFulKd7%2FOKs0LY1FT%2Bx%2Bnm%2Flps6RzcvUekjz3dk0jJsQ8u0CTL47UwDT25kqAFMT4v0ZguW7M5pgvTvPmDINmYOJF1H3xpB6DEXH4OYmlHhMAC5wcQ15dveisTW99gylU3RCFp%2F%2BDVVPyOKTl5Fn989o1fevGF2VyuQO%2FbSB6o%2BhNsYoqn2U2x5UvQ9efgkl%2FiDLTy8gz3bWnDZQ4uCtbroSsYTKJSranaU4icUSoxFfirtdyZiQSTtlRxYpNYZKx9ByAOo8VNOjPFSph6rwkIkDnybdNAg6KUvb7dWYc95uc56srohEtOPVNEDFpxoGKIsBuB6A2%2Bso7I0fRLsj24zHQ4Yt9fXj5CRs9RvcZgMnPLiSoCca1JKgdgQ1JagVQV0S1L3mjtAucs1doV3FwlmOZrndjEy5MaR3TLkhcwJqB8PikJyYWum9snMcW%2FLAX4k6MkpXaRy1u52E8ZiJDu2shNEqj0SSRHCqgXILR8K31YS88dptFGpCnu%2FsgdF9OL0Prk6AViFoPepEAejmKF4NsJ3vhUEUl9LSFjcZhGlQlIsor3lDfUhePVqp%2F%2FZtSP7o9L3X946H7%2FwFbhsUtsEX6neCDX1rdNnUZOeyqR15sFaUKlPbdLruKyUt5bF7n8prtbHi%2FFk3%2BPFDPgWm5d5V6coLNBcq33DkpzNKCGnPGcsl%2BeW8W5fsUuU2z1Q2r4oLlz46dz4rrHROmXwMqh6v%2FQOuJmTxxq9HH%2FmlyX0oO4atGmTVIzILKLMPXlyHK%2BbsnSGwej7DigXUVTOyEZs%2FakWg5bynrIH7T8%2Fm9dDdwoZdAC1vIs8a9GyDnm5A9QCuemFUFvbR6YffTeN7ML0wYtou7DBt9TcT8uaxJ8%2F8derAl0kapDKIJEu7LO3QQHTTuMtoN5QdltAQpZtIs87%2BBQAA%2F%2F8BAAD%2F%2F3TupuylBAAA
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerLet's Encrypt
Subjectfixedencampment.com
Fingerprint69:01:89:A0:02:2B:E6:FC:72:F8:53:1D:E8:B8:52:AB:EB:5F:A9:A7
ValidityTue, 28 Nov 2023 07:58:26 GMT - Mon, 26 Feb 2024 07:58:25 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSu3qwQ9SAJgogeWlFRcGe7e7p3dswhGGMkGLMhiey5fvVuudVdTVX39GRPiQHJIYfRk3rq%2BWaT1bgE8wcoMuslBITMRfaQvXsWgkeZzcDog6r3Xn3v8H3fq6%2BG1SEJUdGDS5%2BZbaU1XU5agf%2FuusqFqZ1%2F8aofBq3glL%2Bu8pX4lN%2BfXrb3QRgkreA9%2FxPJt8xyFIRBEAahf05ZmZr%2B8hEKVex1w1Y3aMVRK0xi9O3%2Fe1d5cNSD6B2Sk1Bi8tzmwwdQfIw8%2B%2FmsdFulKd7%2FOKs0LY1FT%2Bx%2Bnm%2Flps6RzcvUekjz3dk0jJsQ8u0CTL47UwDT25kqAFMT4v0ZguW7M5pgvTvPmDINmYOJF1H3xpB6DEXH4OYmlHhMAC5wcQ15dveisTW99gylU3RCFp%2F%2BDVVPyOKTl5Fn989o1fevGF2VyuQO%2FbSB6o%2BhNsYoqn2U2x5UvQ9efgkl%2FiDLTy8gz3bWnDZQ4uCtbroSsYTKJSranaU4icUSoxFfirtdyZiQSTtlRxYpNYZKx9ByAOo8VNOjPFSph6rwkIkDnybdNAg6KUvb7dWYc95uc56srohEtOPVNEDFpxoGKIsBuB6A2%2Bso7I0fRLsj24zHQ4Yt9fXj5CRs9RvcZgMnPLiSoCca1JKgdgQ1JagVQV0S1L3mjtAucs1doV3FwlmOZrndjEy5MaR3TLkhcwJqB8PikJyYWum9snMcW%2FLAX4k6MkpXaRy1u52E8ZiJDu2shNEqj0SSRHCqgXILR8K31YS88dptFGpCnu%2FsgdF9OL0Prk6AViFoPepEAejmKF4NsJ3vhUEUl9LSFjcZhGlQlIsor3lDfUhePVqp%2F%2FZtSP7o9L3X946H7%2FwFbhsUtsEX6neCDX1rdNnUZOeyqR15sFaUKlPbdLruKyUt5bF7n8prtbHi%2FFk3%2BPFDPgWm5d5V6coLNBcq33DkpzNKCGnPGcsl%2BeW8W5fsUuU2z1Q2r4oLlz46dz4rrHROmXwMqh6v%2FQOuJmTxxq9HH%2FmlyX0oO4atGmTVIzILKLMPXlyHK%2BbsnSGwej7DigXUVTOyEZs%2FakWg5bynrIH7T8%2Fm9dDdwoZdAC1vIs8a9GyDnm5A9QCuemFUFvbR6YffTeN7ML0wYtou7DBt9TcT8uaxJ8%2F8derAl0kapDKIJEu7LO3QQHTTuMtoN5QdltAQpZtIs87%2BBQAA%2F%2F8BAAD%2F%2F3TupuylBAAA HTTP/1.1
Host: fixedencampment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=18326536; uid_id2=9f62b5ae-ad37-454d-ba2c-499ebbde53fb:1:1; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 17:01:22 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: dc7920df151723f3645630a620a74f5e
Strict-Transport-Security: max-age=0; includeSubdomains
fixedencampment.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzW8cxRPtcfyT8oMLiZAQgsOCAIGE1%2FPp2SWHiBCCIkIcJUE%2B99fYjXumR90zO45PCREohxwWTsBp%2FNaJIViI%2FAEgtOYSRSBlL8iH%2BM4ZKeKI1rG0UFJ3VfWrw3uv%2BvOt%2BoAEqOn%2BpY%2FMptKaLiZdv%2FPmiiqEaVzn4tVO4Hf9U50VVSzFpzob08sO3gn8pOu%2F1flA8nWzGPqB7wd%2B0DmnrMzMxuIhClXu9oNu3%2B%2FGYTdIYmzY%2F%2Fau9uCoBzE4ICehxOR%2Faw%2FuQ%2FExivzHs9KtV6Z8%2B%2F281rQyFgOx83GxXpimQD4rM%2BshK3aOpmHchJCv5mCKnSMFMIPtqQIwNSHeHwFYsXNEE2xw5ylTpiELMPEsmsEYUo%2Bh6Bjc3IQSjwjABS4uo8jvXjS2odeeonSKTsj8k7%2BgmgmZf%2Fw8ivyHM1ptdK4YXVfKFA4bWQu1MYZaHaOs91BtelDNHnj1KZT4nSw%2BuYAi31522kCJ%2Fdf62VLIEioXqIjShTiJxQKjIV%2BI%2B33JmJBJlLFDi5QaQ2VjaDkEdR7q6VEe6sxDXXrIxX6HJv3M99OMZVHUiznnUcR50lsSiYjiXuaj5lMNQ1TlEFwPwe11lPbGtyJKZcR4vMWwrr54lJyErX%2BBW2vhhAdXEQxEi0YSNI6goQSNImgqgmbQ3hHaha69K7SrWXCUw6MctSNTrW7RO6ZalQUBtcOt8oCcmFrpvbB9HOtyv7MUpjLMejQOo36aMB4zkdJ0KQh7PBRJEsKpFsrNHQrfVBPyyku3UaoJ%2BX%2B6C0b34PQeuDoBWgegzSgNfdC1UdzzsVnsBn4YV9LSLjc5hGlRVvOornlb%2BoC8eLjSV489huQPT997efd48Maf4LZFaVt8on4lWNW3RpdNQ7Yvm8aR%2B8tlpXK1SafrvlLRSh6796G81hgrzp91w%2B%2Fe5VNgWu5ela66QAuhilVHvj%2BjhJD2nLFckp%2FOuxXJLtVu7Uxti7q8cOm9c%2Bfz0krnlCnGoOrR8t%2FgakLmb%2Fx8%2BJGf%2B%2B0zKDuGrVvk9UNyFFBmD7y8DlfO2DtDYPVshpUemrod2ZDNHrUi0HLWU9bC%2Fatns3rL3cKqnQOtbqLIWwxsi4FuQfUQrn5mVJX24ekHX0%2FjGzA9N2Lazm0zbfWXh9ZOSOf123Bqv5MEseyxXsqFYJKLIA2jXuT7oRBx2pdBH5WbSLPC%2FgEAAP%2F%2FAQAA%2F%2F8LnapgpQQAAA%3D%3D
200 OK 7 B URL GET HTTP/1.1 fixedencampment.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzW8cxRPtcfyT8oMLiZAQgsOCAIGE1%2FPp2SWHiBCCIkIcJUE%2B99fYjXumR90zO45PCREohxwWTsBp%2FNaJIViI%2FAEgtOYSRSBlL8iH%2BM4ZKeKI1rG0UFJ3VfWrw3uv%2BvOt%2BoAEqOn%2BpY%2FMptKaLiZdv%2FPmiiqEaVzn4tVO4Hf9U50VVSzFpzob08sO3gn8pOu%2F1flA8nWzGPqB7wd%2B0DmnrMzMxuIhClXu9oNu3%2B%2FGYTdIYmzY%2F%2Fau9uCoBzE4ICehxOR%2Faw%2FuQ%2FExivzHs9KtV6Z8%2B%2F281rQyFgOx83GxXpimQD4rM%2BshK3aOpmHchJCv5mCKnSMFMIPtqQIwNSHeHwFYsXNEE2xw5ylTpiELMPEsmsEYUo%2Bh6Bjc3IQSjwjABS4uo8jvXjS2odeeonSKTsj8k7%2BgmgmZf%2Fw8ivyHM1ptdK4YXVfKFA4bWQu1MYZaHaOs91BtelDNHnj1KZT4nSw%2BuYAi31522kCJ%2Fdf62VLIEioXqIjShTiJxQKjIV%2BI%2B33JmJBJlLFDi5QaQ2VjaDkEdR7q6VEe6sxDXXrIxX6HJv3M99OMZVHUiznnUcR50lsSiYjiXuaj5lMNQ1TlEFwPwe11lPbGtyJKZcR4vMWwrr54lJyErX%2BBW2vhhAdXEQxEi0YSNI6goQSNImgqgmbQ3hHaha69K7SrWXCUw6MctSNTrW7RO6ZalQUBtcOt8oCcmFrpvbB9HOtyv7MUpjLMejQOo36aMB4zkdJ0KQh7PBRJEsKpFsrNHQrfVBPyyku3UaoJ%2BX%2B6C0b34PQeuDoBWgegzSgNfdC1UdzzsVnsBn4YV9LSLjc5hGlRVvOornlb%2BoC8eLjSV489huQPT997efd48Maf4LZFaVt8on4lWNW3RpdNQ7Yvm8aR%2B8tlpXK1SafrvlLRSh6796G81hgrzp91w%2B%2Fe5VNgWu5ela66QAuhilVHvj%2BjhJD2nLFckp%2FOuxXJLtVu7Uxti7q8cOm9c%2Bfz0krnlCnGoOrR8t%2FgakLmb%2Fx8%2BJGf%2B%2B0zKDuGrVvk9UNyFFBmD7y8DlfO2DtDYPVshpUemrod2ZDNHrUi0HLWU9bC%2Fatns3rL3cKqnQOtbqLIWwxsi4FuQfUQrn5mVJX24ekHX0%2FjGzA9N2Lazm0zbfWXh9ZOSOf123Bqv5MEseyxXsqFYJKLIA2jXuT7oRBx2pdBH5WbSLPC%2FgEAAP%2F%2FAQAA%2F%2F8LnapgpQQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerLet's Encrypt
Subjectfixedencampment.com
Fingerprint69:01:89:A0:02:2B:E6:FC:72:F8:53:1D:E8:B8:52:AB:EB:5F:A9:A7
ValidityTue, 28 Nov 2023 07:58:26 GMT - Mon, 26 Feb 2024 07:58:25 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSzW8cxRPtcfyT8oMLiZAQgsOCAIGE1%2FPp2SWHiBCCIkIcJUE%2B99fYjXumR90zO45PCREohxwWTsBp%2FNaJIViI%2FAEgtOYSRSBlL8iH%2BM4ZKeKI1rG0UFJ3VfWrw3uv%2BvOt%2BoAEqOn%2BpY%2FMptKaLiZdv%2FPmiiqEaVzn4tVO4Hf9U50VVSzFpzob08sO3gn8pOu%2F1flA8nWzGPqB7wd%2B0DmnrMzMxuIhClXu9oNu3%2B%2FGYTdIYmzY%2F%2Fau9uCoBzE4ICehxOR%2Faw%2FuQ%2FExivzHs9KtV6Z8%2B%2F281rQyFgOx83GxXpimQD4rM%2BshK3aOpmHchJCv5mCKnSMFMIPtqQIwNSHeHwFYsXNEE2xw5ylTpiELMPEsmsEYUo%2Bh6Bjc3IQSjwjABS4uo8jvXjS2odeeonSKTsj8k7%2BgmgmZf%2Fw8ivyHM1ptdK4YXVfKFA4bWQu1MYZaHaOs91BtelDNHnj1KZT4nSw%2BuYAi31522kCJ%2Fdf62VLIEioXqIjShTiJxQKjIV%2BI%2B33JmJBJlLFDi5QaQ2VjaDkEdR7q6VEe6sxDXXrIxX6HJv3M99OMZVHUiznnUcR50lsSiYjiXuaj5lMNQ1TlEFwPwe11lPbGtyJKZcR4vMWwrr54lJyErX%2BBW2vhhAdXEQxEi0YSNI6goQSNImgqgmbQ3hHaha69K7SrWXCUw6MctSNTrW7RO6ZalQUBtcOt8oCcmFrpvbB9HOtyv7MUpjLMejQOo36aMB4zkdJ0KQh7PBRJEsKpFsrNHQrfVBPyyku3UaoJ%2BX%2B6C0b34PQeuDoBWgegzSgNfdC1UdzzsVnsBn4YV9LSLjc5hGlRVvOornlb%2BoC8eLjSV489huQPT997efd48Maf4LZFaVt8on4lWNW3RpdNQ7Yvm8aR%2B8tlpXK1SafrvlLRSh6796G81hgrzp91w%2B%2Fe5VNgWu5ela66QAuhilVHvj%2BjhJD2nLFckp%2FOuxXJLtVu7Uxti7q8cOm9c%2Bfz0krnlCnGoOrR8t%2FgakLmb%2Fx8%2BJGf%2B%2B0zKDuGrVvk9UNyFFBmD7y8DlfO2DtDYPVshpUemrod2ZDNHrUi0HLWU9bC%2Fatns3rL3cKqnQOtbqLIWwxsi4FuQfUQrn5mVJX24ekHX0%2FjGzA9N2Lazm0zbfWXh9ZOSOf123Bqv5MEseyxXsqFYJKLIA2jXuT7oRBx2pdBH5WbSLPC%2FgEAAP%2F%2FAQAA%2F%2F8LnapgpQQAAA%3D%3D HTTP/1.1
Host: fixedencampment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=18326536; uid_id2=9f62b5ae-ad37-454d-ba2c-499ebbde53fb:1:1; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 17:01:22 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5425863db73d128adde5a54472e51c7d
Strict-Transport-Security: max-age=0; includeSubdomains
fixedencampment.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSu2awQ9SAJgogeWlFRcGf75%2FaMOQRjjARjNiSRPdev3i23uqup6p7e7CkxIDnkMHpST73fbLIal2D%2BAEVmvYSAkLnIHrJ3z0LwKLNZGH1Q9d6r7x2%2B73v11VZ9QALUdP%2FSZ2ZTaU0Xk67vvbuiCmEa51286gV%2B1z%2FlrahiKT7lbUwvO%2Fgg8JOu%2F573ieTrZjH0A98P%2FMA7p6zMzMbiIQpV7vaDbt%2FvxmE3SGJs2P%2F3ru7A0Q7E4ICchBKT59YePoDiYxT5z2elW69M%2Bf7Hea1pZSwGYufzYr0wTYF8Vma2g6zYOZqGcRNCvp2DKXaOFMAMtqcKwNSEdP4MwIqdI5pggzvPmDINWYCJF9EMxpB6DEXH4OYmlHhMAC5wcRlFfveisQ299gylU3RC5p%2F%2BDdVMyPyTl1Hk989oteFdMbqulCkcNrIWamMMtTpGWe%2Bh2uxANXvg1ZdQ4g%2By%2BPQCinx72WkDJfbf6mdLIUuoXKAiShfiJBYLjIZ8Ie73JWNCJlHGDi1SagyVjaHlENR1UE%2BP6qDOOqjLDnKx79Gkn%2Fl%2BmrEsinox5zyKOE96SyIRUdzLfNR8qmGIqhyC6yG4vY7S3vhBRKmMGI%2B3GNbV14%2BTk7D1b3BrLZzowFUEA9GikQSNI2goQaMImoqgGbR3hHaha%2B8K7WoWHOXwKEftyFSrW%2FSOqVZlQUDtcKs8ICemVnZe2T6OdbnvLYWpDLMejcOonyaMx0ykNF0Kwh4PRZKEcKqFcnOHwjfVhLzx2m2UakKeT3fB6B6c3gNXJ0DrALQZpaEPujaKez42i93AD%2BNKWtrlJocwLcpqHtW1zpY%2BIK8ertR7%2BzYkf3T63uu7x4N3%2FgK3LUrb4gv1O8GqvjW6bBqyfdk0jjxYLiuVq006XfeVilby2L1P5bXGWHH%2BrBv%2B%2BCGfAtNy96p01QVaCFWsOvLTGSWEtOeM5ZL8ct6tSHapdmtnalvU5YVLH507n5dWOqdMMQZVj5f%2FAVcTMn%2Fj18OP%2FNLkPpQdw9Yt8voROQooswdeXocrZ%2BydIbB6NsPKOTR1O7Ihmz1qRaDlrKeshftPz2b1lruFVTsHWt1EkbcY2BYD3YLqIVz9wqgq7aPTD7%2Bbxvdgem7EtJ3bZtrqbybkzWNPnvnr1L6XBLHssV7KhWCSiyANo17k%2B6EQcdqXQR%2BVm0izwv4FAAD%2F%2FwEAAP%2F%2FYOYoCqUEAAA%3D
200 OK 7 B URL GET HTTP/1.1 fixedencampment.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSu2awQ9SAJgogeWlFRcGf75%2FaMOQRjjARjNiSRPdev3i23uqup6p7e7CkxIDnkMHpST73fbLIal2D%2BAEVmvYSAkLnIHrJ3z0LwKLNZGH1Q9d6r7x2%2B73v11VZ9QALUdP%2FSZ2ZTaU0Xk67vvbuiCmEa51286gV%2B1z%2FlrahiKT7lbUwvO%2Fgg8JOu%2F573ieTrZjH0A98P%2FMA7p6zMzMbiIQpV7vaDbt%2FvxmE3SGJs2P%2F3ru7A0Q7E4ICchBKT59YePoDiYxT5z2elW69M%2Bf7Hea1pZSwGYufzYr0wTYF8Vma2g6zYOZqGcRNCvp2DKXaOFMAMtqcKwNSEdP4MwIqdI5pggzvPmDINWYCJF9EMxpB6DEXH4OYmlHhMAC5wcRlFfveisQ299gylU3RC5p%2F%2BDdVMyPyTl1Hk989oteFdMbqulCkcNrIWamMMtTpGWe%2Bh2uxANXvg1ZdQ4g%2By%2BPQCinx72WkDJfbf6mdLIUuoXKAiShfiJBYLjIZ8Ie73JWNCJlHGDi1SagyVjaHlENR1UE%2BP6qDOOqjLDnKx79Gkn%2Fl%2BmrEsinox5zyKOE96SyIRUdzLfNR8qmGIqhyC6yG4vY7S3vhBRKmMGI%2B3GNbV14%2BTk7D1b3BrLZzowFUEA9GikQSNI2goQaMImoqgGbR3hHaha%2B8K7WoWHOXwKEftyFSrW%2FSOqVZlQUDtcKs8ICemVnZe2T6OdbnvLYWpDLMejcOonyaMx0ykNF0Kwh4PRZKEcKqFcnOHwjfVhLzx2m2UakKeT3fB6B6c3gNXJ0DrALQZpaEPujaKez42i93AD%2BNKWtrlJocwLcpqHtW1zpY%2BIK8ertR7%2BzYkf3T63uu7x4N3%2FgK3LUrb4gv1O8GqvjW6bBqyfdk0jjxYLiuVq006XfeVilby2L1P5bXGWHH%2BrBv%2B%2BCGfAtNy96p01QVaCFWsOvLTGSWEtOeM5ZL8ct6tSHapdmtnalvU5YVLH507n5dWOqdMMQZVj5f%2FAVcTMn%2Fj18OP%2FNLkPpQdw9Yt8voROQooswdeXocrZ%2BydIbB6NsPKOTR1O7Ihmz1qRaDlrKeshftPz2b1lruFVTsHWt1EkbcY2BYD3YLqIVz9wqgq7aPTD7%2Bbxvdgem7EtJ3bZtrqbybkzWNPnvnr1L6XBLHssV7KhWCSiyANo17k%2B6EQcdqXQR%2BVm0izwv4FAAD%2F%2FwEAAP%2F%2FYOYoCqUEAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerLet's Encrypt
Subjectfixedencampment.com
Fingerprint69:01:89:A0:02:2B:E6:FC:72:F8:53:1D:E8:B8:52:AB:EB:5F:A9:A7
ValidityTue, 28 Nov 2023 07:58:26 GMT - Mon, 26 Feb 2024 07:58:25 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSu2awQ9SAJgogeWlFRcGf75%2FaMOQRjjARjNiSRPdev3i23uqup6p7e7CkxIDnkMHpST73fbLIal2D%2BAEVmvYSAkLnIHrJ3z0LwKLNZGH1Q9d6r7x2%2B73v11VZ9QALUdP%2FSZ2ZTaU0Xk67vvbuiCmEa51286gV%2B1z%2FlrahiKT7lbUwvO%2Fgg8JOu%2F573ieTrZjH0A98P%2FMA7p6zMzMbiIQpV7vaDbt%2FvxmE3SGJs2P%2F3ru7A0Q7E4ICchBKT59YePoDiYxT5z2elW69M%2Bf7Hea1pZSwGYufzYr0wTYF8Vma2g6zYOZqGcRNCvp2DKXaOFMAMtqcKwNSEdP4MwIqdI5pggzvPmDINWYCJF9EMxpB6DEXH4OYmlHhMAC5wcRlFfveisQ299gylU3RC5p%2F%2BDdVMyPyTl1Hk989oteFdMbqulCkcNrIWamMMtTpGWe%2Bh2uxANXvg1ZdQ4g%2By%2BPQCinx72WkDJfbf6mdLIUuoXKAiShfiJBYLjIZ8Ie73JWNCJlHGDi1SagyVjaHlENR1UE%2BP6qDOOqjLDnKx79Gkn%2Fl%2BmrEsinox5zyKOE96SyIRUdzLfNR8qmGIqhyC6yG4vY7S3vhBRKmMGI%2B3GNbV14%2BTk7D1b3BrLZzowFUEA9GikQSNI2goQaMImoqgGbR3hHaha%2B8K7WoWHOXwKEftyFSrW%2FSOqVZlQUDtcKs8ICemVnZe2T6OdbnvLYWpDLMejcOonyaMx0ykNF0Kwh4PRZKEcKqFcnOHwjfVhLzx2m2UakKeT3fB6B6c3gNXJ0DrALQZpaEPujaKez42i93AD%2BNKWtrlJocwLcpqHtW1zpY%2BIK8ertR7%2BzYkf3T63uu7x4N3%2FgK3LUrb4gv1O8GqvjW6bBqyfdk0jjxYLiuVq006XfeVilby2L1P5bXGWHH%2BrBv%2B%2BCGfAtNy96p01QVaCFWsOvLTGSWEtOeM5ZL8ct6tSHapdmtnalvU5YVLH507n5dWOqdMMQZVj5f%2FAVcTMn%2Fj18OP%2FNLkPpQdw9Yt8voROQooswdeXocrZ%2BydIbB6NsPKOTR1O7Ihmz1qRaDlrKeshftPz2b1lruFVTsHWt1EkbcY2BYD3YLqIVz9wqgq7aPTD7%2Bbxvdgem7EtJ3bZtrqbybkzWNPnvnr1L6XBLHssV7KhWCSiyANo17k%2B6EQcdqXQR%2BVm0izwv4FAAD%2F%2FwEAAP%2F%2FYOYoCqUEAAA%3D HTTP/1.1
Host: fixedencampment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=18326536; uid_id2=9f62b5ae-ad37-454d-ba2c-499ebbde53fb:1:1; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 17:01:22 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 05ae5cf174ec9e8bea5454ae4782ece0
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.cloudimagesb.com/cti/28/5d/66/285d66474f8eb1391e6c869128c7a3ea/1628587131.jpg
200 OK 29 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/28/5d/66/285d66474f8eb1391e6c869128c7a3ea/1628587131.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash 76f54f42b70d14a6d6bfe2f8b1945265
197daa3737be8968bf39ff28000663c1c17deeb2
c864fde3026e05a2cc34b4348fa4888d3ae44202179277877d082cadd9971abc
GET /cti/28/5d/66/285d66474f8eb1391e6c869128c7a3ea/1628587131.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:22 GMT
content-type: image/jpeg
content-length: 28852
server: nginx/1.21.6
last-modified: Tue, 10 Aug 2021 09:18:59 GMT
etag: "61124483-70b4"
expires: Thu, 07 Dec 2023 17:01:22 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/29/eb/08/29eb08c32bad57ff8c8e14af3a16e9c1/1628586955.jpg
200 OK 23 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/29/eb/08/29eb08c32bad57ff8c8e14af3a16e9c1/1628586955.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash 4452445afb73fab8af9ff308eb667024
130401c47d822426e1cce9981c30d775cba1b576
923b0ac505decd181f473f1fa460f21590777993c3581723f127b032d8c45bdd
GET /cti/29/eb/08/29eb08c32bad57ff8c8e14af3a16e9c1/1628586955.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:22 GMT
content-type: image/jpeg
content-length: 22987
server: nginx/1.21.6
last-modified: Tue, 10 Aug 2021 09:16:05 GMT
etag: "611243d5-59cb"
expires: Thu, 07 Dec 2023 17:01:22 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795688023
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795688023
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash f8dc28fece01083dfaa9473e9db29a4b
f28296a510e7248c90039727034155eedbafbf31
640ed2c8d3ccad5412eed4a3234fe7f7f35911d09bfd1397c9ba318c51b53673
GET /api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795688023 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207; _ga_06ZNKL8C2E=GS1.1.1701795685.1.0.1701795688.57.0.0; _ga=GA1.1.70349640.1701795685; dom3ic8zudi28v8lr6fgphwffqoz0j6c=9f62b5ae-ad37-454d-ba2c-499ebbde53fb%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=fixedencampment.com; pp_main_1e1bbdc937ccd35cd1897b4e58c7407b=1; pp_idelay_1e1bbdc937ccd35cd1897b4e58c7407b=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:22 GMT
Flow-Level: 3
Logid: 9016277098167306869
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016277098167306869
Yme: ZIGW+Ss3QEoadTEDUmr/tG1MvuUZSRz0rwpNxSeB
Content-Length: 44
www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795688022
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795688022
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 0739063934cf50f40143b635317e5771
620d1c6dc1e8d62900745f7a32c49fc9c80770f7
21ea8723bdff6d920231b34554e24738fb3d6bccfe030ec3497b52f0d6533cf0
GET /api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795688022 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207; _ga_06ZNKL8C2E=GS1.1.1701795685.1.0.1701795688.57.0.0; _ga=GA1.1.70349640.1701795685; dom3ic8zudi28v8lr6fgphwffqoz0j6c=9f62b5ae-ad37-454d-ba2c-499ebbde53fb%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=fixedencampment.com; pp_main_1e1bbdc937ccd35cd1897b4e58c7407b=1; pp_idelay_1e1bbdc937ccd35cd1897b4e58c7407b=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:22 GMT
Flow-Level: 3
Logid: 9016277094259251781
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016277094259251781
Yme: ZIGW+Ss3QEsSdTEBUmr/tG1MvuUZTxz0qwpNwyKL
Content-Length: 44
friendshipmale.com/sfp.js
200 OK 27 kB URL GET HTTP/3 friendshipmale.com/sfp.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 924e967bca1d599992556a8d139b1c5a
222b09dbf164ddc03d39100fd0524a22018d28b2
ac84c2f8288b59f8e04ba77287ce696052bfeee0d462a566d94dc305df646c95
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 17:01:22 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: c7d48017869d0881085d394dc73bf0d0
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 05 Dec 2023 17:01:22 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3iJGOdEMzDr024VPmThjvgPkVbtZyqpnYe9MazfqRRHF64tlPFWEhhCtkYuzz24weiCWObQM5kUgQlqJFgrwnrKHrIcRrjE4o%2FDLfc7B%2Fhu0o5d0e3d51Q0twcNciyUhW44bDRE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830dd9c51bb86543-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
unseenreport.com/pxf.gif?uuid=9f62b5ae-ad37-454d-ba2c-499ebbde53fb&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=1e1bbdc937ccd35cd1897b4e58c7407b&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=17
200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=9f62b5ae-ad37-454d-ba2c-499ebbde53fb&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=1e1bbdc937ccd35cd1897b4e58c7407b&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=17
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14
ValidityWed, 22 Nov 2023 07:56:28 GMT - Tue, 20 Feb 2024 07:56:27 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=9f62b5ae-ad37-454d-ba2c-499ebbde53fb&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=1e1bbdc937ccd35cd1897b4e58c7407b&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=17 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 17:01:23 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9f9dc048c56188a1dd9e89a909f2773a
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=9f62b5ae-ad37-454d-ba2c-499ebbde53fb&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=f195e5fa577c23352666448243864c68&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=17
200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=9f62b5ae-ad37-454d-ba2c-499ebbde53fb&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=f195e5fa577c23352666448243864c68&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=17
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14
ValidityWed, 22 Nov 2023 07:56:28 GMT - Tue, 20 Feb 2024 07:56:27 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=9f62b5ae-ad37-454d-ba2c-499ebbde53fb&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=f195e5fa577c23352666448243864c68&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=17 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 17:01:23 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ff00cf6d39e734c5260af25379354d74
Strict-Transport-Security: max-age=0; includeSubdomains
region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701795684931&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=70349640.1701795685&ul=en-us&sr=1280x1024&sid=1701795685&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&dt=VID_20230818_225035_502.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=4&tfd=13848
204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701795684931&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=70349640.1701795685&ul=en-us&sr=1280x1024&sid=1701795685&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&dt=VID_20230818_225035_502.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=4&tfd=13848
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3bt0v875375078&_p=1701795684931&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=70349640.1701795685&ul=en-us&sr=1280x1024&sid=1701795685&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&dt=VID_20230818_225035_502.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=4&tfd=13848 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1065
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://www.1024tera.com
date: Tue, 05 Dec 2023 17:01:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
undertakinghomeyegg.com/sbar.json?key=f195e5fa577c23352666448243864c68&uuid=9f62b5ae-ad37-454d-ba2c-499ebbde53fb%3A1%3A1
2.9 kB URL undertakinghomeyegg.com/sbar.json?key=f195e5fa577c23352666448243864c68&uuid=9f62b5ae-ad37-454d-ba2c-499ebbde53fb%3A1%3A1
IP
File type JSON data\012- , ASCII text, with very long lines (6708), with no line terminators
Hash 088cc5b811596329da68729153ff0f5e
1f170b3e32e7570b63235c2fa6af631e4c0f0771
d7072bf2d90745790c32f603bc52e3aba376f12cf318190ff4f810203599fffa
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sbar.json?key=f195e5fa577c23352666448243864c68&uuid=9f62b5ae-ad37-454d-ba2c-499ebbde53fb%3A1%3A1 HTTP/1.1
Host: undertakinghomeyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 17:01:28 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.1024tera.com
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=20651427; expires=Wed, 06 Dec 2023 17:01:28 GMT; secure; SameSite=None
uid_id2=9f62b5ae-ad37-454d-ba2c-499ebbde53fb:1:1; expires=Tue, 12 Dec 2023 17:01:28 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 06 Dec 2023 17:01:28 GMT; secure; SameSite=None
uncs=1; expires=Wed, 06 Dec 2023 17:01:28 GMT; secure; SameSite=None
pdhtkv29=true; expires=Wed, 06 Dec 2023 17:01:28 GMT; secure; SameSite=None
uncs29=1; expires=Wed, 06 Dec 2023 17:01:28 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ba4cb00cbc944d45f34734d6703aca49
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
undertakinghomeyegg.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzYtcxRetl%2BS3%2BCEICW4kBFpwEcHpeZ%2F9YRbBGCODcSYmkVnX15spp96rR9V7%2FTq9CgYkCxedncs3pycZ1EHNVhCkx40EhLQLmYWz8T9QyFq609B6oereW%2BdC3XPu%2FXy%2FOiUBKnpy6yMzUlrT9aTtty5vq1yY2rU277YCv%2B1faW2rvBNfaQ3nlx28E%2FhJ23%2Br9YHke2Y99APfD%2FygdUNZmZrh%2BgKFKo76Qbvvt%2BOwHSQxhva%2Fuas8OOpBDE7JBSgx%2B9%2FuL0%2Bh%2BBR59v116fZKU7z9flZpWhqLgTj8JN%2FLTZ0jW4Wp9ZDmh8tqGDcj5MszMPnhkgHM4GDOAEzNiPd7AJYfLtsEGzx%2B2SnTkDmYeAX1YAqpp1B0Cm4eQInnBOACm1vIsyebxtb03kuUztEZOffib6h6Rs798Rry7NtrWg1bd4yuSmVyh2HaQA2nUDtTFNUxypEHVR%2BDl59BiV%2FJ%2BoubyLODLacNlDh5s592QpZQuUZF1F2Lk1isMRrytbjfl4wJmUQpW0ik1BQqnULLMajzUM2P8lClHqrCQyZOWjTpp77fTVkaRb2Ycx5FnCe9jkhEFPdSHxWfcxijLMbgegxu76Ow97GnHj1PLsBWP8HtNnDiDFw5I97HIwxEg1oS1I6gpgS1IqhLgnrQPBbaha55IrSrWLD04dJHzcSUO%2Fv0sSl3ZE5A7Xi%2FOCXn5xp6Vy5NsCdPWmnQT2SS0qTb5WEUJWGn04njXhhHvU7MOz041UC5MwvGIzUjb1z8AoWakf93j8DoMZw%2BBlfnQatLoPWkG%2Fqgu5O452OUHwV%2BGJfS0jY3GYRpUJTnUN7z9vUpeX0xy42t7yD5s6t%2FRgsDtw0K2%2BBT9TPBjn44uW1qcnDb1I483SpKlakRnc%2F5TklLefbrD%2BW92lixcd2Nv3qXz4F5eHRXuvImzYXKdxz55poSQtobxnJJftxw25LdqtzutcrmVXHz1ns3NrLCSueUyaeg8539y4KrGXn14t3FDl%2F%2BYRPKTmGrBln1jCwNykzBi%2Ftwxap%2FZwisXtWwwkNdNRMbstWjVgRarnLKGrh%2F5WwV77uH2LEeaPkAedZgYBsMdAOqx3DV2UlZ2GdXf1t%2BzrQ3Ydp6B0xb%2FeiluE6dtGSS%2Bqn0Q8nSPku71Bf9NO4z2g9klyU0QOlm0mzv%2FgMAAP%2F%2FAQAA%2F%2F%2F5OD7JmwQAAA%3D%3D
7 B URL undertakinghomeyegg.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzYtcxRetl%2BS3%2BCEICW4kBFpwEcHpeZ%2F9YRbBGCODcSYmkVnX15spp96rR9V7%2FTq9CgYkCxedncs3pycZ1EHNVhCkx40EhLQLmYWz8T9QyFq609B6oereW%2BdC3XPu%2FXy%2FOiUBKnpy6yMzUlrT9aTtty5vq1yY2rU277YCv%2B1faW2rvBNfaQ3nlx28E%2FhJ23%2Br9YHke2Y99APfD%2FygdUNZmZrh%2BgKFKo76Qbvvt%2BOwHSQxhva%2Fuas8OOpBDE7JBSgx%2B9%2FuL0%2Bh%2BBR59v116fZKU7z9flZpWhqLgTj8JN%2FLTZ0jW4Wp9ZDmh8tqGDcj5MszMPnhkgHM4GDOAEzNiPd7AJYfLtsEGzx%2B2SnTkDmYeAX1YAqpp1B0Cm4eQInnBOACm1vIsyebxtb03kuUztEZOffib6h6Rs798Rry7NtrWg1bd4yuSmVyh2HaQA2nUDtTFNUxypEHVR%2BDl59BiV%2FJ%2BoubyLODLacNlDh5s592QpZQuUZF1F2Lk1isMRrytbjfl4wJmUQpW0ik1BQqnULLMajzUM2P8lClHqrCQyZOWjTpp77fTVkaRb2Ycx5FnCe9jkhEFPdSHxWfcxijLMbgegxu76Ow97GnHj1PLsBWP8HtNnDiDFw5I97HIwxEg1oS1I6gpgS1IqhLgnrQPBbaha55IrSrWLD04dJHzcSUO%2Fv0sSl3ZE5A7Xi%2FOCXn5xp6Vy5NsCdPWmnQT2SS0qTb5WEUJWGn04njXhhHvU7MOz041UC5MwvGIzUjb1z8AoWakf93j8DoMZw%2BBlfnQatLoPWkG%2Fqgu5O452OUHwV%2BGJfS0jY3GYRpUJTnUN7z9vUpeX0xy42t7yD5s6t%2FRgsDtw0K2%2BBT9TPBjn44uW1qcnDb1I483SpKlakRnc%2F5TklLefbrD%2BW92lixcd2Nv3qXz4F5eHRXuvImzYXKdxz55poSQtobxnJJftxw25LdqtzutcrmVXHz1ns3NrLCSueUyaeg8539y4KrGXn14t3FDl%2F%2BYRPKTmGrBln1jCwNykzBi%2Ftwxap%2FZwisXtWwwkNdNRMbstWjVgRarnLKGrh%2F5WwV77uH2LEeaPkAedZgYBsMdAOqx3DV2UlZ2GdXf1t%2BzrQ3Ydp6B0xb%2FeiluE6dtGSS%2Bqn0Q8nSPku71Bf9NO4z2g9klyU0QOlm0mzv%2FgMAAP%2F%2FAQAA%2F%2F%2F5OD7JmwQAAA%3D%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSzYtcxRetl%2BS3%2BCEICW4kBFpwEcHpeZ%2F9YRbBGCODcSYmkVnX15spp96rR9V7%2FTq9CgYkCxedncs3pycZ1EHNVhCkx40EhLQLmYWz8T9QyFq609B6oereW%2BdC3XPu%2FXy%2FOiUBKnpy6yMzUlrT9aTtty5vq1yY2rU277YCv%2B1faW2rvBNfaQ3nlx28E%2FhJ23%2Br9YHke2Y99APfD%2FygdUNZmZrh%2BgKFKo76Qbvvt%2BOwHSQxhva%2Fuas8OOpBDE7JBSgx%2B9%2FuL0%2Bh%2BBR59v116fZKU7z9flZpWhqLgTj8JN%2FLTZ0jW4Wp9ZDmh8tqGDcj5MszMPnhkgHM4GDOAEzNiPd7AJYfLtsEGzx%2B2SnTkDmYeAX1YAqpp1B0Cm4eQInnBOACm1vIsyebxtb03kuUztEZOffib6h6Rs798Rry7NtrWg1bd4yuSmVyh2HaQA2nUDtTFNUxypEHVR%2BDl59BiV%2FJ%2BoubyLODLacNlDh5s592QpZQuUZF1F2Lk1isMRrytbjfl4wJmUQpW0ik1BQqnULLMajzUM2P8lClHqrCQyZOWjTpp77fTVkaRb2Ycx5FnCe9jkhEFPdSHxWfcxijLMbgegxu76Ow97GnHj1PLsBWP8HtNnDiDFw5I97HIwxEg1oS1I6gpgS1IqhLgnrQPBbaha55IrSrWLD04dJHzcSUO%2Fv0sSl3ZE5A7Xi%2FOCXn5xp6Vy5NsCdPWmnQT2SS0qTb5WEUJWGn04njXhhHvU7MOz041UC5MwvGIzUjb1z8AoWakf93j8DoMZw%2BBlfnQatLoPWkG%2Fqgu5O452OUHwV%2BGJfS0jY3GYRpUJTnUN7z9vUpeX0xy42t7yD5s6t%2FRgsDtw0K2%2BBT9TPBjn44uW1qcnDb1I483SpKlakRnc%2F5TklLefbrD%2BW92lixcd2Nv3qXz4F5eHRXuvImzYXKdxz55poSQtobxnJJftxw25LdqtzutcrmVXHz1ns3NrLCSueUyaeg8539y4KrGXn14t3FDl%2F%2BYRPKTmGrBln1jCwNykzBi%2Ftwxap%2FZwisXtWwwkNdNRMbstWjVgRarnLKGrh%2F5WwV77uH2LEeaPkAedZgYBsMdAOqx3DV2UlZ2GdXf1t%2BzrQ3Ydp6B0xb%2FeiluE6dtGSS%2Bqn0Q8nSPku71Bf9NO4z2g9klyU0QOlm0mzv%2FgMAAP%2F%2FAQAA%2F%2F%2F5OD7JmwQAAA%3D%3D HTTP/1.1
Host: undertakinghomeyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=20651427; uid_id2=9f62b5ae-ad37-454d-ba2c-499ebbde53fb:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 17:01:28 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 346c0d45127a8858059c4bc707068d0e
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.cloudimagesb.com/si/53/8c/6d/538c6d14c11465cad60a6fff9f4e66bb/1701651853.png
83 kB URL cdn.cloudimagesb.com/si/53/8c/6d/538c6d14c11465cad60a6fff9f4e66bb/1701651853.png
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type PNG image data, 360 x 240, 8-bit/color RGBA, non-interlaced\012- data
Hash 7310a1b7798db42cef036b303df3c140
d1a4b062d4703ca04d1089393ff1cd7f66aae3f1
668cd1cff2362c9fe27026f23a241deeb005b67b0dd3428713a57435705d1650
GET /si/53/8c/6d/538c6d14c11465cad60a6fff9f4e66bb/1701651853.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:28 GMT
content-type: image/png
content-length: 83188
server: nginx/1.21.6
last-modified: Mon, 04 Dec 2023 01:04:22 GMT
etag: "656d2596-144f4"
expires: Thu, 07 Dec 2023 17:01:28 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/d9/00/89/d90089da48b102b32e93dd9b6d740f49/1701651794.png
14 kB URL cdn.cloudimagesb.com/si/d9/00/89/d90089da48b102b32e93dd9b6d740f49/1701651794.png
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 962ac416cce3fad636d4904386c8d3d4
811166fceb971353dc6a9ea3a153367f20b47592
ec6c8e1c030499a846897265d0c1f66dedc6ece17c1ea6006b700faf37e73555
GET /si/d9/00/89/d90089da48b102b32e93dd9b6d740f49/1701651794.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:28 GMT
content-type: image/png
content-length: 14496
server: nginx/1.21.6
last-modified: Mon, 04 Dec 2023 01:03:23 GMT
etag: "656d255b-38a0"
expires: Thu, 07 Dec 2023 17:01:28 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.barscreative1.com/sb/au/bb/09/20/bb0920e920b04fdebd2119739150c93c/1698574651.html
17 kB URL cdn.barscreative1.com/sb/au/bb/09/20/bb0920e920b04fdebd2119739150c93c/1698574651.html
IP
ASN #39572 DataWeb Global Group B.V.
File type gzip compressed data, from Unix\012- data
Hash f7e8ef13c45a2f55e0d2ad5f9104d3c7
2a88effc59c01c68a969e4740e463883f56368d1
2b138271b87e5cd1da3b1887a2ff13e2759fb5d33a7c1427b2666646457c7b53
GET /sb/au/bb/09/20/bb0920e920b04fdebd2119739150c93c/1698574651.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:28 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Sun, 29 Oct 2023 10:17:36 GMT
etag: W/"653e3140-6f1"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Tue, 05 Dec 2023 18:01:28 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
16 kB URL fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:52:12 GMT
expires: Thu, 28 Nov 2024 21:52:12 GMT
cache-control: public, max-age=31536000
age: 500957
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
undertakinghomeyegg.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scxRevTvI9fBGEBC8SAiN4iODO9s%2F5YQ7BGCOLcTcmK3uurqqeLbe6q6nqnp6d02JAcvAwuXns%2FcxuFnVRcxUEmfUiC0LGg%2BzBvfgfKOQsMzsw%2BqDqvVefB%2FU%2Bn%2Fc%2B3y%2FPiYeSnj34SA%2BlUnQ1arqNm1sy47qyjfXNhuc23VuNLZm1wluNwewy%2FXc8N2q6bzU%2BEGxHr%2Fqu57qe6zXuSSMSPVido5D5cddrdt1m6De9KMTA%2FDe3pQNLHfD%2BObkGyaf%2F2%2F7lOSSbIEu%2FvyvsTqHzt99PS0ULbdDnR59kO5muMqTLMDEOkuxoUQ1tp4R8eQk6O1owgO4fzBggllPi%2FO4hzo4WbSLuH150GiuIDDF%2FBVV%2FAqEmkHQCph9D8hcEYBzrG8jSZ%2BvaVHT3AqUzdEquvPwbspqSK3%2B8hiz99o6Sg8YjrcpC6sxikNSQgwlkb4K8PEExdCCrE7DiM0j%2BK1l9eR9ZerBhlYbkZ292k5YfR1SsUB60V8Io5Csx9dlK2O2KOOYiCpJ4LpGUE8hkAiVGoNZBOTvSQZk4KHMHKT9r0KibuG47iZMg6ISMsSBgLOq0eMSDsJO4KNmMwwhFPgJTIzCzh9zsYUc%2BfRFdgyl%2Fgt2uYfkl2GJKnI%2BH6PMalSCoLEFFCSpJUBUEVb8%2B5Mr6tn7GlS1jb%2BH9hQ%2FqsS56%2B%2FRQFz2REVAz2s%2FPydWZhs6tG2PsiLNG4nUjESU0areZHwSR32q1wrDjh0GnFbJWB1bWkPbSnPFQTskb179ALqfk%2F%2B1jxPQEVp2Ayaug5Q3Qatz2XdDtcdhxMcyOPdcPC2Fok%2BkUXNfIiysodp19dU5en89ybeM7CHZ6%2B89gbmCmRm5qfCp%2FJuipJ%2BOHuiIHD3VlyfONvJCpHNLZnB8VtBCXv%2F5Q7Fba8LW7dvTVu2wGzMLjTWGL%2BzTjMutZ8s0dybkw97Rhgvy4ZrdE%2FKC023dKk5X5%2FQfv3VtLcyOslTqbgM529i8DJqfk1eub8x2%2B%2BcM6pJnAlDXS8pQsDFJPwPI92HzZv9UERi1r4txBVdZj48fLRyUJlFjmNK5h%2F5XHy3jfPkHPOKDFY2Rpjb6p0Vc1qBrBlpfHRW5Ob%2F%2B2%2BDxWzjhWxjmIlVFPL8S18qwReaHoxJ024zwWjHttP%2BgErutzHra7wuuisFOht7b%2FAQAA%2F%2F8BAAD%2F%2F%2B0wsC%2BbBAAA
7 B URL undertakinghomeyegg.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scxRevTvI9fBGEBC8SAiN4iODO9s%2F5YQ7BGCOLcTcmK3uurqqeLbe6q6nqnp6d02JAcvAwuXns%2FcxuFnVRcxUEmfUiC0LGg%2BzBvfgfKOQsMzsw%2BqDqvVefB%2FU%2Bn%2Fc%2B3y%2FPiYeSnj34SA%2BlUnQ1arqNm1sy47qyjfXNhuc23VuNLZm1wluNwewy%2FXc8N2q6bzU%2BEGxHr%2Fqu57qe6zXuSSMSPVido5D5cddrdt1m6De9KMTA%2FDe3pQNLHfD%2BObkGyaf%2F2%2F7lOSSbIEu%2FvyvsTqHzt99PS0ULbdDnR59kO5muMqTLMDEOkuxoUQ1tp4R8eQk6O1owgO4fzBggllPi%2FO4hzo4WbSLuH150GiuIDDF%2FBVV%2FAqEmkHQCph9D8hcEYBzrG8jSZ%2BvaVHT3AqUzdEquvPwbspqSK3%2B8hiz99o6Sg8YjrcpC6sxikNSQgwlkb4K8PEExdCCrE7DiM0j%2BK1l9eR9ZerBhlYbkZ292k5YfR1SsUB60V8Io5Csx9dlK2O2KOOYiCpJ4LpGUE8hkAiVGoNZBOTvSQZk4KHMHKT9r0KibuG47iZMg6ISMsSBgLOq0eMSDsJO4KNmMwwhFPgJTIzCzh9zsYUc%2BfRFdgyl%2Fgt2uYfkl2GJKnI%2BH6PMalSCoLEFFCSpJUBUEVb8%2B5Mr6tn7GlS1jb%2BH9hQ%2FqsS56%2B%2FRQFz2REVAz2s%2FPydWZhs6tG2PsiLNG4nUjESU0areZHwSR32q1wrDjh0GnFbJWB1bWkPbSnPFQTskb179ALqfk%2F%2B1jxPQEVp2Ayaug5Q3Qatz2XdDtcdhxMcyOPdcPC2Fok%2BkUXNfIiysodp19dU5en89ybeM7CHZ6%2B89gbmCmRm5qfCp%2FJuipJ%2BOHuiIHD3VlyfONvJCpHNLZnB8VtBCXv%2F5Q7Fba8LW7dvTVu2wGzMLjTWGL%2BzTjMutZ8s0dybkw97Rhgvy4ZrdE%2FKC023dKk5X5%2FQfv3VtLcyOslTqbgM529i8DJqfk1eub8x2%2B%2BcM6pJnAlDXS8pQsDFJPwPI92HzZv9UERi1r4txBVdZj48fLRyUJlFjmNK5h%2F5XHy3jfPkHPOKDFY2Rpjb6p0Vc1qBrBlpfHRW5Ob%2F%2B2%2BDxWzjhWxjmIlVFPL8S18qwReaHoxJ024zwWjHttP%2BgErutzHra7wuuisFOht7b%2FAQAA%2F%2F8BAAD%2F%2F%2B0wsC%2BbBAAA
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scxRevTvI9fBGEBC8SAiN4iODO9s%2F5YQ7BGCOLcTcmK3uurqqeLbe6q6nqnp6d02JAcvAwuXns%2FcxuFnVRcxUEmfUiC0LGg%2BzBvfgfKOQsMzsw%2BqDqvVefB%2FU%2Bn%2Fc%2B3y%2FPiYeSnj34SA%2BlUnQ1arqNm1sy47qyjfXNhuc23VuNLZm1wluNwewy%2FXc8N2q6bzU%2BEGxHr%2Fqu57qe6zXuSSMSPVido5D5cddrdt1m6De9KMTA%2FDe3pQNLHfD%2BObkGyaf%2F2%2F7lOSSbIEu%2FvyvsTqHzt99PS0ULbdDnR59kO5muMqTLMDEOkuxoUQ1tp4R8eQk6O1owgO4fzBggllPi%2FO4hzo4WbSLuH150GiuIDDF%2FBVV%2FAqEmkHQCph9D8hcEYBzrG8jSZ%2BvaVHT3AqUzdEquvPwbspqSK3%2B8hiz99o6Sg8YjrcpC6sxikNSQgwlkb4K8PEExdCCrE7DiM0j%2BK1l9eR9ZerBhlYbkZ292k5YfR1SsUB60V8Io5Csx9dlK2O2KOOYiCpJ4LpGUE8hkAiVGoNZBOTvSQZk4KHMHKT9r0KibuG47iZMg6ISMsSBgLOq0eMSDsJO4KNmMwwhFPgJTIzCzh9zsYUc%2BfRFdgyl%2Fgt2uYfkl2GJKnI%2BH6PMalSCoLEFFCSpJUBUEVb8%2B5Mr6tn7GlS1jb%2BH9hQ%2FqsS56%2B%2FRQFz2REVAz2s%2FPydWZhs6tG2PsiLNG4nUjESU0areZHwSR32q1wrDjh0GnFbJWB1bWkPbSnPFQTskb179ALqfk%2F%2B1jxPQEVp2Ayaug5Q3Qatz2XdDtcdhxMcyOPdcPC2Fok%2BkUXNfIiysodp19dU5en89ybeM7CHZ6%2B89gbmCmRm5qfCp%2FJuipJ%2BOHuiIHD3VlyfONvJCpHNLZnB8VtBCXv%2F5Q7Fba8LW7dvTVu2wGzMLjTWGL%2BzTjMutZ8s0dybkw97Rhgvy4ZrdE%2FKC023dKk5X5%2FQfv3VtLcyOslTqbgM529i8DJqfk1eub8x2%2B%2BcM6pJnAlDXS8pQsDFJPwPI92HzZv9UERi1r4txBVdZj48fLRyUJlFjmNK5h%2F5XHy3jfPkHPOKDFY2Rpjb6p0Vc1qBrBlpfHRW5Ob%2F%2B2%2BDxWzjhWxjmIlVFPL8S18qwReaHoxJ024zwWjHttP%2BgErutzHra7wuuisFOht7b%2FAQAA%2F%2F8BAAD%2F%2F%2B0wsC%2BbBAAA HTTP/1.1
Host: undertakinghomeyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=20651427; uid_id2=9f62b5ae-ad37-454d-ba2c-499ebbde53fb:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 17:01:29 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9ea9ec9d1fa8abe7fbf35eb354ec3d4e
Strict-Transport-Security: max-age=0; includeSubdomains
undertakinghomeyegg.com/pixel/sbs?c=1
0 B URL undertakinghomeyegg.com/pixel/sbs?c=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: undertakinghomeyegg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=20651427; uid_id2=9f62b5ae-ad37-454d-ba2c-499ebbde53fb:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 05 Dec 2023 17:01:29 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-06ZNKL8C2E&cid=70349640.1701795685>m=45je3bt0v875375078&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=14951736
200 OK 42 B URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-06ZNKL8C2E&cid=70349640.1701795685>m=45je3bt0v875375078&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=14951736
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint6E:E4:BC:4A:67:5E:46:6A:B3:E4:CA:61:A7:C0:97:AB:14:F0:34:32
ValidityMon, 23 Oct 2023 11:27:27 GMT - Mon, 15 Jan 2024 11:27:26 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-06ZNKL8C2E&cid=70349640.1701795685>m=45je3bt0v875375078&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=14951736 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 05 Dec 2023 17:01:22 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/facebook.min.js
200 OK 4.1 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/facebook.min.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (4246), with no line terminators
Hash a80e27408d2ae3596aadac56d9c72ed0
37348a3ed8934ee41f99a05149abce511cc9ba67
bd7f1f57a1a99c9473f1c10db30eee2abfdcbffda0c1992ece9948db001502eb
GET /fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/facebook.min.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:14 GMT
content-type: application/javascript
server: openresty
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT
access-control-expose-headers: ETag, Content-Length, x-bce-next-append-offset, x-bce-object-type, x-bce-request-id
access-control-max-age: 1800
content-md5: Aowl118tEMuXoOFINDERYw==
etag: W/"028c25d75f2d10cb97a0e14834311163"
expires: Sat, 24 Sep 2022 06:46:06 GMT
last-modified: Wed, 21 Sep 2022 05:03:33 GMT
x-bce-content-crc32: 3600293201
x-bce-debug-id: drF3pXV387iC2EyFCn4G8jIjxuuDcbNW6JT4jDmhDeNosKMTV4jVPaeR4QxYWsldtHHLV0pqg9KhEHfx+45FOQ==
x-bce-request-id: 1e1dfa93-d4b6-4000-b380-bdf1ecb59464
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 1202930
via: EU-GER-frankfurt-EDGE5-CACHE6[22],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE3[3],EU-GER-frankfurt-GLOBAL1-CACHE10[0,TCP_HIT,2],EA-SGP-GLOBAL1-CACHE9[4],EA-SGP-GLOBAL1-CACHE30[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24845531
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/kakao.min.js
200 OK 115 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/kakao.min.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Size 115 kB (114576 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/kakao.min.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:14 GMT
content-type: application/javascript
server: openresty
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT
access-control-expose-headers: ETag, Content-Length, x-bce-next-append-offset, x-bce-object-type, x-bce-request-id
access-control-max-age: 1800
content-md5: Ng3YsEXIR8ylP6d+vhUKPw==
etag: W/"360dd8b045c847cca53fa77ebe150a3f"
expires: Sat, 24 Sep 2022 06:46:06 GMT
last-modified: Wed, 21 Sep 2022 05:03:33 GMT
x-bce-content-crc32: 3787281588
x-bce-debug-id: NdXOHvJhWdykwQRMkfwzkNsOZ5AZbm+dI56Adia+fvxzTQbCnAlm9HuK5oYXV0mvHXmPazsRbY1yj9LO6Ud5AQ==
x-bce-request-id: 95d5b42d-7d75-47b4-acd7-57e276abb336
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 1202930
via: EU-GER-frankfurt-EDGE5-CACHE6[6],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE4[3],EU-GER-frankfurt-GLOBAL1-CACHE9[0,TCP_HIT,2],EA-SGP-GLOBAL1-CACHE5[4],EA-SGP-GLOBAL1-CACHE7[0,TCP_HIT,3]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24845531
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/passport/getpubkey?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000003
200 OK 466 B URL POST HTTP/1.1 www.1024tera.com/passport/getpubkey?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000003
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (492), with no line terminators
Hash 9739f48e6e30375367c5d2db5abd6eef
c7d5d4141d58e4d0d2c856d83c3b411af44382eb
fbf7a83484e76ca53cb70e88c6c080cc3458965b2d23f1ba35b36ca121380dec
POST /passport/getpubkey?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000003 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 91
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/Json; charset=utf-8
Date: Tue, 05 Dec 2023 17:01:17 GMT
Flow-Level: 3
Logid: 9016275830056350372
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 9016275830056350372
Yme: ZIGW+Ss3QE0WYisESWLiq29Xvv4cVAPxqx5GxCqBme22KyIxVyR089moMO4Y
Content-Length: 404
www.1024tera.com/api/analytics?errno=-6&errmsg=&data=null&logid=15726708455524616533&hasError=true¶ms=%7B%22position%22%3A7%2C%22lang%22%3A%22en%22%7D&uk=0&type=%2Frest%2F1.0%2Foperation%2Fpull_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795683606
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&errmsg=&data=null&logid=15726708455524616533&hasError=true¶ms=%7B%22position%22%3A7%2C%22lang%22%3A%22en%22%7D&uk=0&type=%2Frest%2F1.0%2Foperation%2Fpull_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795683606
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 4a1010bbf01d8590a6e5fa43f7d1ee5c
e27b2504a71f9f9b6117bb5b090e1c3c25ed0dd7
3d568f7f18ed6720dfa0bcc6043aaf5e44fd52c33e304b0cc7b48c0cebfd5c98
GET /api/analytics?errno=-6&errmsg=&data=null&logid=15726708455524616533&hasError=true¶ms=%7B%22position%22%3A7%2C%22lang%22%3A%22en%22%7D&uk=0&type=%2Frest%2F1.0%2Foperation%2Fpull_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795683606 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:17 GMT
Flow-Level: 3
Logid: 9016275899250970170
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016275899250970170
Yme: ZIGW+Ss3QEsWdTQEUmr/tG1MvuUZTBz0qwpNwyKAqQ==
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-vendors.0c91416b.js
200 OK 1.3 MB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-vendors.0c91416b.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Size 1.3 MB (1276997 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-vendors.0c91416b.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:14 GMT
content-type: application/javascript
server: openresty
content-md5: a1l6Bl6z/WmUk5VRMLJRyw==
etag: W/"6b597a065eb3fd699493955130b251cb"
expires: Sat, 25 Nov 2023 10:39:04 GMT
last-modified: Wed, 22 Nov 2023 02:21:52 GMT
x-bce-content-crc32: 3304779663
x-bce-debug-id: qN0aN2KGmEnQNotbwTj5EO9MHr42l1O3a48iCP9ZQ1QdFJqG7umOmDl00uQpHIgJHgNjtdiGCMrsn+tYuWFRhg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 566c3b22-e053-4880-b154-222038dabd24
x-bce-storage-class: STANDARD
x-ccdn-expires: 1572514
via: EU-GER-frankfurt-EDGE5-CACHE6[3],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE1[22],EU-GER-frankfurt-GLOBAL1-CACHE9[0,TCP_HIT,20]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 1146050
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?type=terabox_sharing_link_js_error&sessionId=257176&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&msg=%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&stack=%5B%7B%22columnNumber%22%3A2705%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22h%22%2C%22source%22%3A%22h%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A2705%22%7D%2C%7B%22columnNumber%22%3A3160%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%22%2C%22source%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A3160%22%7D%2C%7B%22columnNumber%22%3A30208%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22Kt%22%2C%22source%22%3A%22Kt%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A30208%22%7D%5D
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=terabox_sharing_link_js_error&sessionId=257176&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&msg=%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&stack=%5B%7B%22columnNumber%22%3A2705%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22h%22%2C%22source%22%3A%22h%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A2705%22%7D%2C%7B%22columnNumber%22%3A3160%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%22%2C%22source%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A3160%22%7D%2C%7B%22columnNumber%22%3A30208%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22Kt%22%2C%22source%22%3A%22Kt%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A30208%22%7D%5D
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 53f0d92ed878f84053e6faaf718546cd
d6636915d93e3bbdf2e885ffe387f3eb3064f73b
52fdc625ee946d540a55247472dde97d30562ebde58292547cee317106a8938a
GET /api/analytics?type=terabox_sharing_link_js_error&sessionId=257176&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&msg=%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&stack=%5B%7B%22columnNumber%22%3A2705%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22h%22%2C%22source%22%3A%22h%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A2705%22%7D%2C%7B%22columnNumber%22%3A3160%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%22%2C%22source%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A3160%22%7D%2C%7B%22columnNumber%22%3A30208%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22Kt%22%2C%22source%22%3A%22Kt%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A30208%22%7D%5D HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:18 GMT
Flow-Level: 3
Logid: 9016276090541515758
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276090541515758
Yme: ZIGW+Ss3QEobdTcGUmr/tG1MvuUZSBz3rApNwyKDwbPm
Content-Length: 44
www.1024tera.com/api/analytics?type=videoplayer_play_btn_click&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795686208
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=videoplayer_play_btn_click&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795686208
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 45a88cc072a4a764bd4951c26bf17002
4dbbd1fd238f83970bd1f7c9ed7470824cbccb7c
896908712ca5d2b6003527200d034a863018bd0a266d0afce63c1ccca62c20e8
GET /api/analytics?type=videoplayer_play_btn_click&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795686208 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207; _ga_06ZNKL8C2E=GS1.1.1701795685.1.0.1701795686.59.0.0; _ga=GA1.1.70349640.1701795685
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:20 GMT
Flow-Level: 3
Logid: 9016276599568696890
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016276599568696890
Yme: ZIGW+Ss3QE0WbysHS3b+qnFLufkASwbxtAROySKDm++zTQ==
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/share.f672a6ad.js
200 OK 1.1 MB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/share.f672a6ad.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Size 1.1 MB (1055211 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/share.f672a6ad.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:14 GMT
content-type: application/javascript
server: openresty
content-md5: KwOqTU5tJIFZrjBKTB/n0g==
etag: W/"2b03aa4d4e6d248159ae304a4c1fe7d2"
expires: Thu, 07 Dec 2023 10:54:10 GMT
last-modified: Mon, 04 Dec 2023 08:11:44 GMT
x-bce-content-crc32: 3779137827
x-bce-debug-id: mgI7aOYZZEK+qu0uBsZYQTn3mO2YPN1m1yWMIslXVcQbelEgmnNGL6hhPRgbBC66RNL/zurLp2jRSx2Cx0gAcQ==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 44d14b44-921c-4303-a4ba-222d444c5b56
x-bce-storage-class: STANDARD
x-ccdn-expires: 2493166
via: EU-GER-frankfurt-EDGE5-CACHE6[8],EU-GER-frankfurt-EDGE5-CACHE1[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE10[28],EU-GER-frankfurt-GLOBAL1-CACHE1[0,TCP_HIT,27]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 108068
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
sofire.bdstatic.com/js/fsec-hd.js
200 OK 295 kB URL GET HTTP/2 sofire.bdstatic.com/js/fsec-hd.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
Size 295 kB (295197 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/fsec-hd.js HTTP/1.1
Host: sofire.bdstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: JSP3/2.0.14
date: Tue, 05 Dec 2023 17:01:14 GMT
content-type: text/javascript
expires: Wed, 06 Dec 2023 03:12:08 GMT
last-modified: Fri, 30 Jun 2023 07:31:01 GMT
etag: "834113d1867d8ec45fc41e3c692fdead"
content-encoding: br
age: 222546
accept-ranges: bytes
content-md5: g0ET0YZ9jsRfxB48aS/erQ==
x-bce-content-crc32: 1744549445
x-bce-debug-id: pmwOPs6TwXuIuqgkHTlpEk/8vFw6h4RzBYfHbfmcyD2Cod3s4Ck2OGK0+cpSc/pvzUQd8yR5hAizocjuO8jv/w==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 2cfb6092-110f-439a-aca9-fa6132a89f36
x-bce-storage-class: STANDARD
ohc-global-saved-time: Sun, 03 Dec 2023 03:12:08 GMT
ohc-cache-hit: wz2ct53 [2], nb2ctcache78 [2]
ohc-response-time: 1 0 0 0 0 0
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-1dcd7f8a.2b42216f.js
200 OK 16 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-1dcd7f8a.2b42216f.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (16064), with no line terminators
Hash 8334b653e31ffd870836904fa540f9ce
5b1fc5423940bd27d5df9f215ad9d4db6c666668
a6899ed227f04b484d74815a564fda0bc224c9c74fa35a6cd8febb416c7fced8
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-1dcd7f8a.2b42216f.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:15 GMT
content-type: application/javascript
server: openresty
content-md5: gzS2U+Mf/YcINpBPpUD5zg==
etag: W/"8334b653e31ffd870836904fa540f9ce"
expires: Fri, 12 May 2023 08:43:54 GMT
last-modified: Mon, 08 May 2023 12:32:40 GMT
x-bce-content-crc32: 4120287129
x-bce-debug-id: Teo3loV3wqW/js/c3F+flnexjxNYfbmQInRoUF9QRAMJ7CFnw1D4NuX6sDdmfzinUfOqZghCnAt7txHYBz0myw==
x-bce-request-id: afcc4a4d-fd1a-4520-9662-3523bce519be
x-bce-storage-class: STANDARD
x-ccdn-expires: 2592000
via: EU-GER-frankfurt-EDGE5-CACHE6[2],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE2[17],EU-GER-frankfurt-GLOBAL1-CACHE8[0,TCP_HIT,15]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 18173549
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/manifest.10b4667f.js
200 OK 42 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/manifest.10b4667f.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (42022), with no line terminators
Hash edae6f2ca85f2ed5e1f3dadc18fb235c
8019006521594801ad2c578c3f14af682e861b89
b0dee26a9e55a8480f34f220b05eb8c384823bcf75260f645801c85f9491e7b3
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/manifest.10b4667f.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:14 GMT
content-type: application/javascript
server: openresty
content-md5: 7a5vLKhfLtXh89rcGPsjXA==
etag: W/"edae6f2ca85f2ed5e1f3dadc18fb235c"
expires: Thu, 07 Dec 2023 10:54:10 GMT
last-modified: Mon, 04 Dec 2023 08:11:44 GMT
x-bce-content-crc32: 1613090346
x-bce-debug-id: yl7NK2eDJ/krSbQYEc0rFUkdSk+cpDVhn1sTMzSZaROM18+G+kdtLK7lbJeQnVywzaxHMdMQ5L5FF1oD7Vh/3A==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 0ccd5ba0-0fd9-4046-9701-51882477aaca
x-bce-storage-class: STANDARD
x-ccdn-expires: 2503558
via: EU-GER-frankfurt-EDGE5-CACHE6[4],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE11[23],EU-GER-frankfurt-GLOBAL1-CACHE14[0,TCP_HIT,23]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 108258
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?time=2000&type=web_share_page_show_FP_FIRST&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795682430
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?time=2000&type=web_share_page_show_FP_FIRST&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795682430
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash dd83390ca51770e19d1f1de6b774c602
d7a8600d450a2c2cf81efa348224dadbd1b548d4
75b00ba4332678fc65ab56c81439aa15e53b07dea8d4d5c9947ac29125591e26
GET /api/analytics?time=2000&type=web_share_page_show_FP_FIRST&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795682430 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:17 GMT
Flow-Level: 3
Logid: 9016275832159458566
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016275832159458566
Yme: ZIGW+Ss3QE0WaCsESmniq29Xvv4cVAP2oh5OyiqBmOq3
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recyclebin~share~shortLink~~a6807c0b.04a18b24.js
200 OK 496 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recyclebin~share~shortLink~~a6807c0b.04a18b24.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Size 496 kB (495840 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recyclebin~share~shortLink~~a6807c0b.04a18b24.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:14 GMT
content-type: application/javascript
server: openresty
content-md5: mBU1wxf0TvKK5InNQvBhrw==
etag: W/"981535c317f44ef28ae489cd42f061af"
expires: Thu, 07 Dec 2023 10:54:10 GMT
last-modified: Mon, 04 Dec 2023 08:11:32 GMT
x-bce-content-crc32: 3667673518
x-bce-debug-id: K2X9lIphgkqRGFiI7g2dxhr6NF6kPtBdPJj/pJH7fc7eM68F1ajxDcVpE/6LCEQyX9va0YxP2/uXuEw3xqDG6Q==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 9bb99d02-2ae1-414e-9ed0-05fb30929781
x-bce-storage-class: STANDARD
x-ccdn-expires: 2506696
via: EU-GER-frankfurt-EDGE5-CACHE6[8],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE3[17],EU-GER-frankfurt-GLOBAL1-CACHE10[0,TCP_HIT,16]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 108251
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?time=2376&type=web_share_page_show_FP_SECOND&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795682431
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?time=2376&type=web_share_page_show_FP_SECOND&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795682431
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash d56de9c4b8f2229db2711a794cb7ce51
bb9b9ab1b3303bd296e4a652e52ce41d9f1f8c0e
baaa4d1f509642d2b5a56ff080a16e13bd741504fdec05d9543a701f928d9c5c
GET /api/analytics?time=2376&type=web_share_page_show_FP_SECOND&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DSUVC0s2nxX-4vpf0XTv6Zw&client=web&t=1701795682431 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:18 GMT
Flow-Level: 3
Logid: 9016275985596668723
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 9016275985596668723
Yme: ZIGW+Ss3QE0WaCsESmjiq29Xvv4cVAP2oh5GwiqBmOu57z4=
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/ud-i18n-en.e44e7bde.js
200 OK 1.9 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/ud-i18n-en.e44e7bde.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (2106), with no line terminators
Hash 06240b1a3219761cfc4ffe585ac34e48
128bc2aef718748c147232d35cce5fe70443d653
ea008c5e63b36af9dd66e6be5f8d8f3e1c86d005e981cfced09cc1964517907d
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/ud-i18n-en.e44e7bde.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 17:01:15 GMT
content-type: application/javascript
server: openresty
content-md5: DyUZIaD1cN4PN459aJhnNg==
etag: W/"0f251921a0f570de0f378e7d68986736"
expires: Fri, 12 May 2023 08:43:54 GMT
last-modified: Mon, 08 May 2023 12:32:48 GMT
x-bce-content-crc32: 2133490345
x-bce-debug-id: NSexvRTV0lZWQYtbdWLSgX+v6Hr/56aCZJ1ADylLSrA41ImIsmNUOALc2+imcrFlB95XXzUoxQ6mngOJKiIOKA==
x-bce-request-id: ebaa8284-e667-42db-a2f8-0aab2662e8dc
x-bce-storage-class: STANDARD
x-ccdn-expires: 2591999
via: EU-GER-frankfurt-EDGE5-CACHE6[1],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE5[36],EU-GER-frankfurt-GLOBAL1-CACHE2[0,TCP_HIT,32]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 18173650
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/share/linkpaylistpurchaseorder?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000005&page=1&cnt=20
200 OK 71 B URL GET HTTP/1.1 www.1024tera.com/share/linkpaylistpurchaseorder?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000005&page=1&cnt=20
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 8119d4efb4f5b1a7dc411a524390c87a
0ed6dd69f7698222c21c1a84a8ab392a529f9571
1b668d1b5cb7eca1695f1f4337fefe2e03938b627fccd808562804118e419fdd
GET /share/linkpaylistpurchaseorder?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=B6FF2D4DBD4AAAFC266A280C7040D3B2B319D31F394177F82B7F368DBB3B2BF5FABC3EFF00D38275948A7EBB06F6A6D2B9BBAAA1FE25A8E02AE36E98413A0A147D943C633C845C7F7DEF85DB8F363793ADD51F8FC4C57321B27CB861B17F9ABE&dp-logid=25717600104412000005&page=1&cnt=20 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=SUVC0s2nxX-4vpf0XTv6Zw
Cookie: csrfToken=v27VFGTo7YCUvbmF-jYyvQgb; browserid=W1qoNcNkwzjZMmFu-HSvxD2MutUerky3gCxZpRBKIuvBi1kKbYkU08KNdos=; lang=en; TSID=PUqk1vPvhb0JoHbDKie7wYA0HcLDy3b3; __bid_n=18c3aed5332ddc4ab44207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 05 Dec 2023 17:01:17 GMT
Flow-Level: 3
Http-X-Isis-Logid: 9016275826348528486
Logid: 9016275826348528486
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 9016275826348528486
Yme: ZIGW+Ss3QEsRdTEHUmr/tG1MvuUZSxzxrgpNwyeB
Content-Length: 85
210.148.85.59
142.250.74.168
60.190.116.48
18.157.140.81
90.84.161.16
185.207.113.202
0.0.0.0