teraboxapp.com/s/1-THXYz1wfrQ-mzlQrPx5Gw
302 Found 0 B URL User Request GET HTTP/1.1 teraboxapp.com/s/1-THXYz1wfrQ-mzlQrPx5Gw
IP
ASN #2497 Internet Initiative Japan Inc.
Certificate IssuerDigiCert, Inc.
Subject*.teraboxapp.com
FingerprintD7:46:7C:B3:43:3C:83:85:02:0F:C7:6C:30:CE:7B:C5:F4:8A:64:84
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/1-THXYz1wfrQ-mzlQrPx5Gw HTTP/1.1
Host: teraboxapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Cache-Control: no-cache
Connection: keep-alive
Content-Type: text/html
Date: Tue, 28 Nov 2023 09:23:40 GMT
Flow-Level: 3
Location: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Logid: 8846555524369595786
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Pragma: no-cache
Server: nginx
Set-Cookie: shareRedirectDomain=1024tera.com; expires=Sat, 27-Jan-2024 09:23:40 GMT; path=/; httponly
PANWEB=1; expires=Wed, 27-Nov-2024 09:23:40 GMT; path=/; domain=teraboxapp.com
X-Powered-By: DuboxServer
Yld: 8846555524369595786
Content-Length: 0
www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
200 OK 62 kB URL User Request GET HTTP/1.1 www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
IP
ASN #2497 Internet Initiative Japan Inc.
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (49713)
Hash 13cd879b818d9cd3ada545b4c2e64f49
b8abff24809de9006df22fa72ef2d58ab00d7dc3
e0e470e3075bac0358fd443e4be5b4d4f036e82fa1c4bdba9312d4b458989f5a
GET /sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: text/html; charset=utf-8
Date: Tue, 28 Nov 2023 09:23:41 GMT
Flow-Level: 3
Logid: 8846555874053163815
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Set-Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; path=/
browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; path=/; max-age=5184000; expires=Sat, 27 Jan 2024 09:23:41 GMT; domain=.1024tera.com
lang=en; path=/; max-age=2592000; expires=Thu, 28 Dec 2023 09:23:41 GMT
TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; path=/; max-age=31536000; expires=Wed, 27 Nov 2024 09:23:41 GMT; domain=.1024tera.com
Strict-Transport-Security: max-age=172800
Vary: Accept-Encoding, Accept-Encoding
X-Conteneur-Nom: wrBHGgAfwpIFFhXCusOVwp7Dtw4qwo5abnPDo8O+w63DkQ1hw7PCsMO7w67DoALCmHDDi0cnXMKmd0bCrkIjMcKHOcOzw7kUBRPCnsOgwrHDqA==
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Flow-Level: 3
X-Frame-Options: SAMEORIGIN
X-Powered-By: TeraBox
X-Readtime: 249
X-Request-Id: 8846555874053163815
X-Xss-Protection: 1; mode=block
Yld: 8846555874053163815
Yme: ZIGW+Ss3QE0WaisESnb+qnFLufkASwb2tAlKySKDm+7YLy8=
Transfer-Encoding: chunked
www.1024tera.com/ndbs/nd_bundle_430546.js
200 OK 66 kB URL GET HTTP/1.1 www.1024tera.com/ndbs/nd_bundle_430546.js
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (36757)
Hash 2be70342e4695e6c13d04f9906e47635
6f4596c9cd37089ead6715fd3553c0845f1158d3
f731296cced4c20e1f9e24e3080faa044bd0fad2f8f64adf026a75038adecce8
GET /ndbs/nd_bundle_430546.js HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/x-javascript
Date: Tue, 28 Nov 2023 09:23:42 GMT
Flow-Level: 3
Last-Modified: Mon, 10 Jul 2023 02:21:26 GMT
Logid: 8846556189809279299
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 8846556189809279299
Yme: ZIGW+Ss3QE0WbSsBTnb+qnFLufkATQPrqwlFwSGEmKmcEnducA==
Transfer-Encoding: chunked
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/fonts/iconfont.4f9f785d.woff
200 OK 26 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/fonts/iconfont.4f9f785d.woff
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type Web Open Font Format, TrueType, length 25804, version 1.0\012- data
Hash 4f9f785d98a8fa208e7f64023e124572
3e8714f56d480cfd66721447975613a1e56ca9e4
27f0ac9cff76f3925b4389a404d01e2fb525bae7b17cafb0c04e5e6bb20ca83b
GET /fe-opera-static/node-static-v4/fe-webv4-main/fonts/iconfont.4f9f785d.woff HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:44 GMT
content-type: application/x-font-woff
content-length: 25804
server: openresty
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Length, x-bce-next-append-offset, x-bce-object-type, x-bce-request-id
access-control-max-age: 1800
content-md5: T594XZio+iCOf2QCPhJFcg==
etag: "4f9f785d98a8fa208e7f64023e124572"
expires: Thu, 09 Feb 2023 02:34:52 GMT
last-modified: Thu, 02 Feb 2023 12:40:59 GMT
x-bce-content-crc32: 4229721389
x-bce-debug-id: 7WiMWIwBpNvCI1l2DEy41X6CYQbfBDD/53hHCbNUgg3chFP5F6R09q6Ha3n+sFI1w5hrFozk3M8ehG3s5jYsKw==
x-bce-request-id: 8ed250a7-98cd-4add-b067-4212e4c8ecd6
x-bce-storage-class: STANDARD
x-ccdn-expires: 1706835
via: EU-GER-frankfurt-EDGE5-CACHE1[4],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,2],EU-GER-frankfurt-GLOBAL1-CACHE11[3],EU-GER-frankfurt-GLOBAL1-CACHE3[0,TCP_HIT,1]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24213281
accept-ranges: bytes
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/loading-grey.0e512ce9.gif
200 OK 13 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/loading-grey.0e512ce9.gif
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type GIF image data, version 89a, 70 x 54\012- data
Hash 0e512ce91474d2c98f524fc9d479bca1
3e95fc024add69d9f13393a9dacbf625d2cf218c
48ed2dfe595001d90ea0bf9c572b15f446fcf49ae4bfa2cac84acc02aef04e17
GET /fe-opera-static/node-static-v4/fe-webv4-main/img/loading-grey.0e512ce9.gif HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:44 GMT
content-type: image/gif
content-length: 12746
server: openresty
content-md5: DlEs6RR00smPUk/J1Hm8oQ==
etag: "0e512ce91474d2c98f524fc9d479bca1"
expires: Sat, 24 Sep 2022 06:46:06 GMT
last-modified: Wed, 21 Sep 2022 05:03:27 GMT
x-bce-content-crc32: 1545165226
x-bce-debug-id: SVLAO6wp1e4OUGFHIRy8Y1IEAIpwP8YBdrzlRjHOGWEqe7/5zemw7PiCsrLuiBtk8Hkvkt7auD0iX4QbNYOajA==
x-bce-request-id: 911c9037-40e0-4339-a273-266bf634f105
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 1707591
via: EU-GER-frankfurt-EDGE5-CACHE1[27],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,2],EU-GER-frankfurt-GLOBAL1-CACHE8[3],EU-GER-frankfurt-GLOBAL1-CACHE4[0,TCP_HIT,2],EA-SGP-GLOBAL1-CACHE24[4],EA-SGP-GLOBAL1-CACHE25[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24213161
accept-ranges: bytes
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?type=web_firebase_init_success_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163429239
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_firebase_init_success_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163429239
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 37f46e95b7308e59e62aecb0e188cddb
1de047fa4ef274208fc54078fcea93dc793313f6
0157874ab8ca6421289fef743c63a361b912d19b1d7b24cd85120dcb6282fb6b
GET /api/analytics?type=web_firebase_init_success_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163429239 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:45 GMT
Flow-Level: 3
Logid: 8846556951828402159
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846556951828402159
Yme: ZIGW+Ss3QE0WaisGRnb+qnFLufkASwb2tAFKwSqBmO25Gh5haXpDzMShvjY=
Content-Length: 44
www.1024tera.com/api/analytics?type=terabox_sharing_link_js_error_p2&sessionId=773810&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&msg=%7B%7D&stack=%5B%7B%22columnNumber%22%3A18998%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22webGlInfo%22%2C%22source%22%3A%22webGlInfo%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A18998%22%7D%2C%7B%22columnNumber%22%3A21970%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22source%22%3A%22%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A21970%22%7D%2C%7B%22columnNumber%22%3A20619%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22promise%20callback*%22%2C%22source%22%3A%22promise%20callback*%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A20619%22%7D%5D
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=terabox_sharing_link_js_error_p2&sessionId=773810&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&msg=%7B%7D&stack=%5B%7B%22columnNumber%22%3A18998%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22webGlInfo%22%2C%22source%22%3A%22webGlInfo%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A18998%22%7D%2C%7B%22columnNumber%22%3A21970%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22source%22%3A%22%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A21970%22%7D%2C%7B%22columnNumber%22%3A20619%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22promise%20callback*%22%2C%22source%22%3A%22promise%20callback*%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A20619%22%7D%5D
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 8ec6137637cf97e5fefedbf51b6cd3d3
244bcd86908e437648ef8a5e3f5d79c31f99dfd7
79312cdd5ed72b46b33958d0b231e26bb04292b2347aebfc51b55361e61be3f9
GET /api/analytics?type=terabox_sharing_link_js_error_p2&sessionId=773810&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&msg=%7B%7D&stack=%5B%7B%22columnNumber%22%3A18998%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22webGlInfo%22%2C%22source%22%3A%22webGlInfo%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A18998%22%7D%2C%7B%22columnNumber%22%3A21970%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22source%22%3A%22%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A21970%22%7D%2C%7B%22columnNumber%22%3A20619%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22promise%20callback*%22%2C%22source%22%3A%22promise%20callback*%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A20619%22%7D%5D HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:45 GMT
Flow-Level: 3
Logid: 8846557074826943597
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557074826943597
Yme: ZIGW+Ss3QE0RYisESWriq29Xvv4cVAPxox5GyiqBmO2yUVk0I3sBa8WaMykY
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-1dcd7f8a.2b42216f.js
200 OK 13 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-1dcd7f8a.2b42216f.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 6e65b94dbc2fe95e7504835d31e16464
f49268f2d804bef7f0d3f67ab12b5eeebb4e47d7
25b2b47d74f5b95ec257191a05119f27b8b143d5f777844cd65b1525674606cc
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-1dcd7f8a.2b42216f.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:45 GMT
content-type: application/javascript
server: openresty
content-md5: gzS2U+Mf/YcINpBPpUD5zg==
etag: W/"8334b653e31ffd870836904fa540f9ce"
expires: Fri, 12 May 2023 08:43:54 GMT
last-modified: Mon, 08 May 2023 12:32:40 GMT
x-bce-content-crc32: 4120287129
x-bce-debug-id: Teo3loV3wqW/js/c3F+flnexjxNYfbmQInRoUF9QRAMJ7CFnw1D4NuX6sDdmfzinUfOqZghCnAt7txHYBz0myw==
x-bce-request-id: afcc4a4d-fd1a-4520-9662-3523bce519be
x-bce-storage-class: STANDARD
x-ccdn-expires: 861170
via: EU-GER-frankfurt-EDGE5-CACHE1[2],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE2[17],EU-GER-frankfurt-GLOBAL1-CACHE8[0,TCP_HIT,15]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 17541299
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
ymg-api.terabox.com/abdr?_o=https%3A%2F%2Fwww.1024tera.com
200 OK 179 B URL POST HTTP/1.1 ymg-api.terabox.com/abdr?_o=https%3A%2F%2Fwww.1024tera.com
IP
ASN #2516 KDDI CORPORATION
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.terabox.com
Fingerprint4F:30:79:83:60:E0:58:E8:DA:05:09:38:E1:6D:CD:F9:46:33:D6:5F
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 4370108a2d0a90932fb5d2843643e515
ca2cec755e67d48b622f4a26549f915325e7e233
9b3c7eb36bd4c1f6330cb01e4d4e8000884b6619a8944e0c30db12a2cfc96510
POST /abdr?_o=https%3A%2F%2Fwww.1024tera.com HTTP/1.1
Host: ymg-api.terabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 3552
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 28 Nov 2023 09:23:46 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 8846557118129210457
Ab-Sr: 1.0.1_ZTViN2U4NmVkNzNhNzI0ZDg4ZTRlZjNhMTQ0NzI1Njc3NWVjZWMzMGMxMWJhYWJkODI1MmYxYjU5NzY0ODZmNGYzODUwYjM0MDNhNWUyNzBlNmY2NzAzYmFjZjgwNmNkMGFmYjYyNDNlM2VmZmIzY2UwY2MwOGM5ZTA1ZmM5OTJiZDQyZTdkYWI0YzA2OWU2NjUwYWJmY2I2MmQwNDVmZQ==
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, Host, Content-Type, x-requested-with, X-Custom-Header
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Expose-Headers: Ab-sr, Authentication
Access-Control-Max-Age: 3600
Authentication: 6499fd4771567840c9f7f37ff4d43e958877ea5022536264
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QEsTdTQCUmr/tG1MvuUfSQrrqwdNySiEnuycD3dlcKeOKpHu3A==
Set-Cookie: ab_jid=fa2d6043ffee98d1dbeb35f362dae1c6ce40; Path=/; Domain=ymg-api.terabox.com; Max-Age=2147483647; HttpOnly; Secure; SameSite=None
ab_bid=fa2d6043ffee98d1dbeb35f362dae1c6ce40; Path=/; Domain=ymg-api.terabox.com; Max-Age=2147483647; HttpOnly; Secure; SameSite=None
ab_sr=1.0.1_ZTViN2U4NmVkNzNhNzI0ZDg4ZTRlZjNhMTQ0NzI1Njc3NWVjZWMzMGMxMWJhYWJkODI1MmYxYjU5NzY0ODZmNGYzODUwYjM0MDNhNWUyNzBlNmY2NzAzYmFjZjgwNmNkMGFmYjYyNDNlM2VmZmIzY2UwY2MwOGM5ZTA1ZmM5OTJiZDQyZTdkYWI0YzA2OWU2NjUwYWJmY2I2MmQwNDVmZQ==; Path=/; Domain=terabox.com; Max-Age=7200; HttpOnly; Secure; SameSite=None
Server: nginx
logid: 8846557118129210457
Flow-level: 3
Content-Encoding: gzip
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-2d225855.7faaefb6.js
200 OK 27 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-2d225855.7faaefb6.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 7fc2ff5305e06f786e6c3d1f7cd393dd
be360c0c42147668c86da57f844def9800745261
b69302279e38fd911d80ef576b7ec7364e0bc2bc159c7563151f589138c2b2f5
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-2d225855.7faaefb6.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:45 GMT
content-type: application/javascript
server: openresty
content-md5: iw9/Cx04dehLVypLjaFNWg==
etag: W/"8b0f7f0b1d3875e84b572a4b8da14d5a"
expires: Fri, 12 May 2023 08:44:00 GMT
last-modified: Mon, 08 May 2023 12:32:41 GMT
x-bce-content-crc32: 2125762108
x-bce-debug-id: iB6onZAdB5cwEu/eon/SnJwxjW+yEqUyso3lZkAtI8tqGqTqF5hKti5HQUqq4Il08RRUnC4QmZj/Wzs2YTkdMg==
x-bce-request-id: 6c4f78e6-e6e6-495c-8abe-dec67424c79d
x-bce-storage-class: STANDARD
x-ccdn-expires: 880105
via: EU-GER-frankfurt-EDGE5-CACHE1[1],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE3[22],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,20]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 17541364
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/main.e2847943.js
200 OK 227 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/main.e2847943.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65031), with no line terminators
Size 227 kB (226738 bytes)
Hash 7efd65eece96d169e530328efc9520ca
9c548290cddafec01daac983d66f186443824940
6ce9bf2cfae1c954b5b639d0c4c1e647899961851dfb24b4fdda5cfdbf2c8a8b
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/main.e2847943.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:44 GMT
content-type: application/javascript
server: openresty
content-md5: pmUPGfFN1P8Hwd9DBANl9g==
etag: W/"a6650f19f14dd4ff07c1df43040365f6"
expires: Thu, 30 Nov 2023 08:59:34 GMT
last-modified: Mon, 27 Nov 2023 03:07:00 GMT
x-bce-content-crc32: 3413177399
x-bce-debug-id: j6YckP5/M2UvySO79tEdnqYB1hGDnUELMT0rINqpKTUnsE6bZkgWiWtlWF+FfdTz3J6lTlugxw6/0+3BjhR3Og==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 0459d39d-9871-438c-8173-fa5c60412e75
x-bce-storage-class: STANDARD
x-ccdn-expires: 2527998
via: EU-GER-frankfurt-EDGE5-CACHE1[21],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[25],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,24]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 87123
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?errno=-6&errmsg=&data=null&logid=15387271373199033542&hasError=true¶ms=%7B%22position%22%3A7%2C%22lang%22%3A%22en%22%7D&uk=0&type=%2Frest%2F1.0%2Foperation%2Fpull_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163430429
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&errmsg=&data=null&logid=15387271373199033542&hasError=true¶ms=%7B%22position%22%3A7%2C%22lang%22%3A%22en%22%7D&uk=0&type=%2Frest%2F1.0%2Foperation%2Fpull_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163430429
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7243a861b6333febb9a1b2ed0c53bc83
0bb7af89d5332c3c09d290b390987e2644531bad
67048c6c537447b39d301b6c658c425b500e99f22d7f7c8ee28127c63b2d3b2b
GET /api/analytics?errno=-6&errmsg=&data=null&logid=15387271373199033542&hasError=true¶ms=%7B%22position%22%3A7%2C%22lang%22%3A%22en%22%7D&uk=0&type=%2Frest%2F1.0%2Foperation%2Fpull_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163430429 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:46 GMT
Flow-Level: 3
Logid: 8846557270584067808
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557270584067808
Yme: ZIGW+Ss3QE0WbysES27iq29Xvv4cVAPxrh5OwiqBmOuw
Content-Length: 44
sofire.terabox.com/edkey
200 OK 245 B IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.terabox.com
Fingerprint4F:30:79:83:60:E0:58:E8:DA:05:09:38:E1:6D:CD:F9:46:33:D6:5F
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (361), with no line terminators
Hash 8dbc30a4ec4350a60768dd6dc172d967
83d97c6a3ebce00fd5eecbe4e2fb4722e1b3d171
3ba62bb542e892c188115ad59bad12bbbc2d09c23bea559f130c7c0d4348ca8f
POST /edkey HTTP/1.1
Host: sofire.terabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.1024tera.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 64
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 28 Nov 2023 09:23:46 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 8846557284675241813
Access-Control-Allow-Origin: *
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaisBTnb+qnFLufkASwH9tAJMxyqLmOWx
logid: 8846557284675241813
Flow-level: 3
Content-Encoding: gzip
www.1024tera.com/api/shorturlinfo?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030009&shorturl=1-THXYz1wfrQ-mzlQrPx5Gw&root=1&scene=purchased_list
200 OK 854 B URL GET HTTP/1.1 www.1024tera.com/api/shorturlinfo?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030009&shorturl=1-THXYz1wfrQ-mzlQrPx5Gw&root=1&scene=purchased_list
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (2325), with no line terminators
Hash 895102fdc28e7b80ac51e8e81a81a3d0
95e0b48f550f3b9d51f17d81d116201825383461
21971a0b661691597d32a191cc996f412be62af2b3f4e49f29f0cc82c3b54f0e
GET /api/shorturlinfo?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030009&shorturl=1-THXYz1wfrQ-mzlQrPx5Gw&root=1&scene=purchased_list HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:46 GMT
Flow-Level: 3
Logid: 8846557262178977651
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557262178977651
Yme: ZIGW+Ss3QEsWdTcGUmr/tG1MvuUfTgbrqABFwSGHmon0GkYiM58CHDwf3A==
Transfer-Encoding: chunked
www.1024tera.com/share/webmaster/check?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030004&bdstoken=
200 OK 86 B URL GET HTTP/1.1 www.1024tera.com/share/webmaster/check?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030004&bdstoken=
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash c5efe998b3fa5abf0805df7158ab4669
bafe272e7542a362836155b853df4a2f44d4a8e8
4c13faabb35b64dd6e19873807ae8b3e8edfaede4ae02fe6847c9ee90d9b3340
GET /share/webmaster/check?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030004&bdstoken= HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:46 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8846557350001860097
Logid: 8846557350001860097
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8846557350001860097
Yme: ZIGW+Ss3QE0WaCsESmriq29Xvv4cVAPxrh5GxiqBmO61
Content-Length: 86
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/manifest.46f62028.js
200 OK 12 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/manifest.46f62028.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (41409), with no line terminators
Hash c2f4985411b6232575066f2e19476a72
567c6c1eff7a0692d911fb3e3c902fedef08b4fd
51254eb44ad346168e04c39db4097fa9842cec416e8f3b93e95049dc8df1f2b8
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/manifest.46f62028.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:44 GMT
content-type: application/javascript
server: openresty
content-md5: X0UBuDlEs2cT+/iWt9dowQ==
etag: W/"5f4501b83944b36713fbf896b7d768c1"
expires: Thu, 30 Nov 2023 08:59:33 GMT
last-modified: Mon, 27 Nov 2023 03:07:00 GMT
x-bce-content-crc32: 2051750269
x-bce-debug-id: Ev8l1GA83xhCDv4uh+405sNFBYAKhBlsu+uLgbmI7gATC+EP9qsAfuMbUaz+xfmxbNc+/iE2jUK9LWW+EAMbnQ==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: cd708941-8a9b-475b-951d-4df2ad160c59
x-bce-storage-class: STANDARD
x-ccdn-expires: 2527998
via: EU-GER-frankfurt-EDGE5-CACHE1[21],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE1[10],EU-GER-frankfurt-GLOBAL1-CACHE7[0,TCP_HIT,9]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 87123
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
sofire.1024tera.com/h5/t
200 OK 583 B IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (697), with no line terminators
Hash 59e2a3b20d66a2471cf0e9506ab57be8
04f0581f181a46a02a9af59acbccaaedd5259257
c8b8d1f949b6af7bbce76fa364af5b0230faa3cbcf84cc26f8331e749ed88948
POST /h5/t HTTP/1.1
Host: sofire.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 3802
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 28 Nov 2023 09:23:47 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 8846557358495955569
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type,AccessToken,X-CSRF-Token,X-Bdh5-Pf,X-XSRF-TOKEN, Authorization
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Expose-Headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Content-Type
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaisES2ziq29Xvv4cVAP2ox5OwySJkO25Tw==
logid: 8846557358495955569
Flow-level: 3
Content-Encoding: gzip
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-vendors.0c91416b.js
200 OK 469 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-vendors.0c91416b.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (22560)
Size 469 kB (469417 bytes)
Hash d30aceb83813d9542c79dc0da8797adc
682a144cfde2db48b849fdec76189328f6482894
c75dbddfa0e1131e583fbb4bd40c95167a61a9a44fef93196d19b7dba991450f
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-vendors.0c91416b.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:44 GMT
content-type: application/javascript
server: openresty
content-md5: a1l6Bl6z/WmUk5VRMLJRyw==
etag: W/"6b597a065eb3fd699493955130b251cb"
expires: Sat, 25 Nov 2023 10:39:04 GMT
last-modified: Wed, 22 Nov 2023 02:21:52 GMT
x-bce-content-crc32: 3304779663
x-bce-debug-id: qN0aN2KGmEnQNotbwTj5EO9MHr42l1O3a48iCP9ZQ1QdFJqG7umOmDl00uQpHIgJHgNjtdiGCMrsn+tYuWFRhg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 566c3b22-e053-4880-b154-222038dabd24
x-bce-storage-class: STANDARD
x-ccdn-expires: 2101321
via: EU-GER-frankfurt-EDGE5-CACHE1[2],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE1[22],EU-GER-frankfurt-GLOBAL1-CACHE9[0,TCP_HIT,20]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 513800
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/share.fe18f530.js
200 OK 356 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/share.fe18f530.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 356 kB (355698 bytes)
Hash 7623af6756097110802378013e0bfcd0
35716e27fe4f2ba7b4bfa4bf57896c2b638803b0
3e1b51145b346cceb961e2187a19e1b2f6b3b1e72956e7aebc501b5e3a4e1b66
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/share.fe18f530.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:44 GMT
content-type: application/javascript
server: openresty
content-md5: rdWS6ofs8OpmcmYSiGnOhg==
etag: W/"add592ea87ecf0ea667266128869ce86"
expires: Thu, 30 Nov 2023 08:59:35 GMT
last-modified: Mon, 27 Nov 2023 03:07:00 GMT
x-bce-content-crc32: 2351142310
x-bce-debug-id: Euh2TOBZCzLFdtEsMdWSrmbSkF9sbDOwY8VdofX9HAZ3X8rsCZvQrVlOmDj8VEi/NLcP/QhSeYa0dgerGwdj1w==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: dfde89f1-160f-472f-a72c-786ef119905c
x-bce-storage-class: STANDARD
x-ccdn-expires: 2523621
via: EU-GER-frankfurt-EDGE5-CACHE1[5],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE7[19],EU-GER-frankfurt-GLOBAL1-CACHE4[0,TCP_HIT,16]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 87117
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recyclebin~share~shortLink~~a6807c0b.fc45cce5.js
200 OK 181 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recyclebin~share~shortLink~~a6807c0b.fc45cce5.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Size 181 kB (181004 bytes)
Hash 03efd6994536039f04ee1f3730982e2f
9ae139da8865b3efe2482124e1ffd7f15787c86f
ac5d571ed4a6dea9525c3b05bb756a6898f6db086efa9e6f1012490559ec5b1d
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recyclebin~share~shortLink~~a6807c0b.fc45cce5.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:44 GMT
content-type: application/javascript
server: openresty
content-md5: 3vVR6H8zix7AT5ceSOCFoQ==
etag: W/"def551e87f338b1ec04f971e48e085a1"
expires: Thu, 30 Nov 2023 08:59:34 GMT
last-modified: Mon, 27 Nov 2023 03:06:49 GMT
x-bce-content-crc32: 109535015
x-bce-debug-id: U/iII4VPTwMwdzz9CGtX6vQbWJwGrdGmsKcrvSVreBfkkEQIWxe0X73eIwPdx0hO6o5gGBpK8HmIqWQ2/8iaLg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 0219edee-bfed-4f96-b5dc-8fce987c248d
x-bce-storage-class: STANDARD
x-ccdn-expires: 2548290
via: EU-GER-frankfurt-EDGE5-CACHE1[5],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[19],EU-GER-frankfurt-GLOBAL1-CACHE2[0,TCP_HIT,18]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 87123
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/general-conf/fk/dfxaf3-598bbed9.js
200 OK 56 kB URL GET HTTP/2 s2.teraboxcdn.com/general-conf/fk/dfxaf3-598bbed9.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type C source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Hash 74ae9f56db2046aa61626474b003c751
940550f898be3de2b35a1f798be5cada6e5cfcca
4356d6230a68521bc94f4956096e49a6993afc83301c3d59ff7e02bfe0c59fb3
GET /general-conf/fk/dfxaf3-598bbed9.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:44 GMT
content-type: text/javascript
server: openresty
content-md5: +fZxgdCHtOLq9IVUxQHgZQ==
etag: W/"f9f67181d087b4e2eaf48554c501e065"
expires: Fri, 03 Nov 2023 12:27:55 GMT
last-modified: Tue, 31 Oct 2023 12:25:48 GMT
x-bce-content-crc32: 3748294646
x-bce-debug-id: aGEi7xHbLdU53XfCnCB+gn9IMUFfdLw+Ug2cTW1Uu0gn8LTbfsIrGzew5yl6vbcMd2PUBbSod+OrM3Z56BBUNg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 8d78a03a-02bd-49e4-ba41-e617432a8b15
x-bce-storage-class: STANDARD
via: EU-GER-frankfurt-EDGE5-CACHE1[4],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[2],EU-GER-frankfurt-GLOBAL1-CACHE2[0,TCP_HIT,1]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 2408148
x-ccdn-expires: 2041684
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?isLogin=false&surl=-THXYz1wfrQ-mzlQrPx5Gw&downloadPullNewFlag=b&videoTrialPullNewFlag=a&isUserSelfLink=false&referrer=&channelSrc=&type=share_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163430989
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?isLogin=false&surl=-THXYz1wfrQ-mzlQrPx5Gw&downloadPullNewFlag=b&videoTrialPullNewFlag=a&isUserSelfLink=false&referrer=&channelSrc=&type=share_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163430989
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash e8dd24d63c512e312d6a44be15dabc3c
7c5f9fcfb2567945d69cba3d897db3aa7aa681c8
2992d4c49eeb93aa471d4cf0ebc87fce093b2caf3865f9c540cd28563056d1b5
GET /api/analytics?isLogin=false&surl=-THXYz1wfrQ-mzlQrPx5Gw&downloadPullNewFlag=b&videoTrialPullNewFlag=a&isUserSelfLink=false&referrer=&channelSrc=&type=share_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163430989 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:47 GMT
Flow-Level: 3
Logid: 8846557420806358662
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557420806358662
Yme: ZIGW+Ss3QE0WYysHT2ziq29Xvv4cVAP2oh5IxiqBmOqx
Content-Length: 44
www.1024tera.com/api/analytics?errno=-6&newno=&request_id=8846557350001861000&show_msg=&hasError=true¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fwebmaster%2Fcheck_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431030
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&newno=&request_id=8846557350001861000&show_msg=&hasError=true¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fwebmaster%2Fcheck_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431030
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash abd6267177bad71dcf8b25f9576b9669
b8aad54585a30a9678ddd1d50c2aa9c9a740f8e7
17c2fbc2533eb236727896deed384a066ed4ba639c15159131f9a755672cae65
GET /api/analytics?errno=-6&newno=&request_id=8846557350001861000&show_msg=&hasError=true¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fwebmaster%2Fcheck_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431030 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:47 GMT
Flow-Level: 3
Logid: 8846557436998521822
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557436998521822
Yme: ZIGW+Ss3QE0WaysHTWLiq29Xvv4cVAPxqR5NwyeJmu21TlI3
Content-Length: 44
www.1024tera.com/api/analytics?errno=-6&newno=&request_id=8846557352156509000&show_msg=&hasError=true¶ms=%7B%22page%22%3A1%2C%22cnt%22%3A20%7D&uk=0&type=%2Fshare%2Flinkpaylistpurchaseorder_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431132
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&newno=&request_id=8846557352156509000&show_msg=&hasError=true¶ms=%7B%22page%22%3A1%2C%22cnt%22%3A20%7D&uk=0&type=%2Fshare%2Flinkpaylistpurchaseorder_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431132
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash d5251c7ffd18366ddbb27310fa6a613d
28d754f2ba8d4a08480897b5ccd4b988b462040f
2078506773ac367511de62aae139ea6e24db0ad868501e154c30b83f14b7f723
GET /api/analytics?errno=-6&newno=&request_id=8846557352156509000&show_msg=&hasError=true¶ms=%7B%22page%22%3A1%2C%22cnt%22%3A20%7D&uk=0&type=%2Fshare%2Flinkpaylistpurchaseorder_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431132 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:47 GMT
Flow-Level: 3
Logid: 8846557460070927310
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557460070927310
Yme: ZIGW+Ss3QE0WYisNTnb+qnFLufkASwb2tAFIwiqBme+w
Content-Length: 44
www.1024tera.com/share/list?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030010&page=1&num=20&by=name&order=asc&site_referer=&scene=purchased_list&shorturl=-THXYz1wfrQ-mzlQrPx5Gw&root=1
200 OK 585 B URL GET HTTP/1.1 www.1024tera.com/share/list?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030010&page=1&num=20&by=name&order=asc&site_referer=&scene=purchased_list&shorturl=-THXYz1wfrQ-mzlQrPx5Gw&root=1
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (1909), with no line terminators
Hash 88cd9dfca2b1ce9ef744d16386e1287e
f2d72da64f9a4e3e7597ee1a7c62f6a60de8f218
49d4f816ff5c1c723f2f7449d11a386ceb85126883968351b49433cd3e12d759
GET /share/list?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030010&page=1&num=20&by=name&order=asc&site_referer=&scene=purchased_list&shorturl=-THXYz1wfrQ-mzlQrPx5Gw&root=1 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:47 GMT
Flow-Level: 3
Logid: 8846557421683568607
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557421683568607
Yme: ZIGW+Ss3QE0WaCsHTWniq29Xvv4cVAP2oh5IxiqBmOq4
Transfer-Encoding: chunked
www.1024tera.com/api/analytics?errno=-6&newno=&request_id=8846557418891967000&show_msg=&hasError=true¶ms=undefined&uk=0&type=%2Fapi%2Fad%2Fgetconfig_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431295
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&newno=&request_id=8846557418891967000&show_msg=&hasError=true¶ms=undefined&uk=0&type=%2Fapi%2Fad%2Fgetconfig_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431295
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 3894c5d11d389bdd443bf5381ea95ea7
dee3f72541105997bc31bc5978381c2be2068033
7e7c500d87754f23a7708534a9f24451a37c48967d343622643810f1687b58f7
GET /api/analytics?errno=-6&newno=&request_id=8846557418891967000&show_msg=&hasError=true¶ms=undefined&uk=0&type=%2Fapi%2Fad%2Fgetconfig_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431295 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:47 GMT
Flow-Level: 3
Logid: 8846557511529128526
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557511529128526
Yme: ZIGW+Ss3QE0WaSsESmriq29Xvv4cVAP2oh5OxSGJmu2ySkdETgUO4za5w18Y
Content-Length: 44
www.1024tera.com/api/analytics?time=3503&type=web_share_page_show_FP_SECOND&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163429818
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?time=3503&type=web_share_page_show_FP_SECOND&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163429818
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 88804622534049da869cbe8e6d5da27a
68d64261034f9bb3f978a53221d738b83d7ca7e9
ed17089cdd504d9bc6f51556510f7685640b475dd3b940851cb874cecea9c899
GET /api/analytics?time=3503&type=web_share_page_show_FP_SECOND&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163429818 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:47 GMT
Flow-Level: 3
Logid: 8846557518842877376
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557518842877376
Yme: ZIGW+Ss3QEsTdTEAUmr/tG1MvuUYQxz0owpNwyOAxqmsCxNyZHfwUEEw3A==
Content-Length: 44
www.1024tera.com/api/analytics?time=6862&type=web_share_page_show_FCP&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163429819
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?time=6862&type=web_share_page_show_FCP&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163429819
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash d79e7c32d9849e36b70b4d5018e3eecc
f43188c5ac30a874db7fa216bace2378204676ef
d6bde087ec66763b861d8715f5204be7610e7dd77b08bec40db4270fa7400a94
GET /api/analytics?time=6862&type=web_share_page_show_FCP&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163429819 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:47 GMT
Flow-Level: 3
Logid: 8846557518773507569
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557518773507569
Yme: ZIGW+Ss3QE0WaysMSHb+qnFLufkASwb3tAFIwSqBmOi3/sR9
Content-Length: 44
www.1024tera.com/api/analytics?errno=100003&error_code=100003&error_msg=Invalid%20Bduss&request_id=8846557419380876457&hasError=true¶ms=%7B%22client%22%3A%22web%22%2C%22pass_version%22%3A%222.8%22%2C%22lang%22%3A%22en%22%2C%22clientfrom%22%3A%22h5%22%2C%22pcftoken%22%3A%227399650f7cf31c14adf07189a23f3f51%22%2C%22method%22%3A%22query%22%2C%22membership_version%22%3A%221.0%22%7D&uk=0&type=%2Frest%2F2.0%2Fmembership%2Fproxy%2Fuser_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431334
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=100003&error_code=100003&error_msg=Invalid%20Bduss&request_id=8846557419380876457&hasError=true¶ms=%7B%22client%22%3A%22web%22%2C%22pass_version%22%3A%222.8%22%2C%22lang%22%3A%22en%22%2C%22clientfrom%22%3A%22h5%22%2C%22pcftoken%22%3A%227399650f7cf31c14adf07189a23f3f51%22%2C%22method%22%3A%22query%22%2C%22membership_version%22%3A%221.0%22%7D&uk=0&type=%2Frest%2F2.0%2Fmembership%2Fproxy%2Fuser_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431334
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash f614cb7a6d179a65bfa70677130c381a
5eb2b853cdf4cf1662c5f88f00e0ef76570d174f
67c72912634e005afd7b13b49c4bd8221d74f469fd31cce2678827678b040e57
GET /api/analytics?errno=100003&error_code=100003&error_msg=Invalid%20Bduss&request_id=8846557419380876457&hasError=true¶ms=%7B%22client%22%3A%22web%22%2C%22pass_version%22%3A%222.8%22%2C%22lang%22%3A%22en%22%2C%22clientfrom%22%3A%22h5%22%2C%22pcftoken%22%3A%227399650f7cf31c14adf07189a23f3f51%22%2C%22method%22%3A%22query%22%2C%22membership_version%22%3A%221.0%22%7D&uk=0&type=%2Frest%2F2.0%2Fmembership%2Fproxy%2Fuser_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431334 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:47 GMT
Flow-Level: 3
Logid: 8846557518824283742
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557518824283742
Yme: ZIGW+Ss3QE0WaSsESWriq29Xvv4cVAPxqR5OyiqBmeyz
Content-Length: 44
www.1024tera.com/share/querysurltransfer?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030011&bdstoken=
200 OK 85 B URL POST HTTP/1.1 www.1024tera.com/share/querysurltransfer?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030011&bdstoken=
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 6d337b4415f847e26657ae1725cbb0d5
79843b034bd91cf25607a7842613263e67f101a1
f27764e4340e2f49ccc5fdcbb1180011b9f302f302c39f5e862e664faf788e42
POST /share/querysurltransfer?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030011&bdstoken= HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 32
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:47 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8846557555908585176
Logid: 8846557555908585176
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8846557555908585176
Yme: ZIGW+Ss3QEobdTcBUmr/tG1MvuUZTxz3rQpNwyKBn+jxGg9kMidKEyp93A==
Content-Length: 85
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~copyright-feedback~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recycleb~fcf1883d.54946d2b.js
200 OK 9.2 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~copyright-feedback~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recycleb~fcf1883d.54946d2b.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash b1c0246976f77894304f9c9ba653bf0b
03ca784defeb1c38dac0db85c713a1c25952bbb9
80f95b454f7360d9714d526f028754fc4170bc45b2d92cb73929973135702f2d
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~copyright-feedback~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recycleb~fcf1883d.54946d2b.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:45 GMT
content-type: application/javascript
server: openresty
content-md5: TzIMBidie558Yw5wV87q8A==
etag: W/"4f320c0627627b9e7c630e7057ceeaf0"
expires: Thu, 30 Nov 2023 08:59:34 GMT
last-modified: Mon, 27 Nov 2023 03:06:49 GMT
x-bce-content-crc32: 4270220429
x-bce-debug-id: 7lgkaI9ORFpOxiD/EiikNYltJ4lsw3+O/nP4YRwK6fxx+oGFjUA37sB/QymDLBpulvJvieguQXNn6B1ZvQ3aKA==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 5c2e7fc9-a757-400b-ae5b-d7321717e578
x-bce-storage-class: STANDARD
x-ccdn-expires: 2548290
via: EU-GER-frankfurt-EDGE5-CACHE1[2],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE5[18],EU-GER-frankfurt-GLOBAL1-CACHE7[0,TCP_HIT,16]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 87124
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/logo.2a229dfa.svg
200 OK 1.7 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/logo.2a229dfa.svg
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1713), with no line terminators
Hash 2a229dfa55348fc84be678f926330616
96ad6e5765a9847fd3f202aad6a88bf95dd9caf1
78055ff5570a46c5904129bfdd26d9cc327feded52e4feca75feaa8e2f180d5b
GET /fe-opera-static/node-static-v4/fe-webv4-main/img/logo.2a229dfa.svg HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:47 GMT
content-type: image/svg+xml
content-length: 1713
server: openresty
content-md5: KiKd+lU0j8hL5nj5JjMGFg==
etag: "2a229dfa55348fc84be678f926330616"
expires: Sat, 24 Sep 2022 06:46:17 GMT
last-modified: Wed, 21 Sep 2022 05:03:27 GMT
x-bce-content-crc32: 1353669740
x-bce-debug-id: NAe6EO3wT96ak0qPNr/yE8+RuLbHz64z8I5FDCDIACxRHRvP8Rcs1CH0CzIO18cwCQo293KSx7/0Hh+Zyx0VZQ==
x-bce-request-id: 3ccd90bb-d04d-43f8-a561-47d04dd6edbb
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 1707650
via: EU-GER-frankfurt-EDGE5-CACHE1[2],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,2],EU-GER-frankfurt-GLOBAL1-CACHE4[19],EU-GER-frankfurt-GLOBAL1-CACHE14[0,TCP_HIT,17],EA-SGP-GLOBAL1-CACHE17[2],EA-SGP-GLOBAL1-CACHE26[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24213159
accept-ranges: bytes
access-control-allow-origin: *
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/ud-i18n-en.e44e7bde.js
200 OK 993 B URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/ud-i18n-en.e44e7bde.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 3f9c18c7b8aa40f5f3092b4aeeb9982d
550f73e79499013f3334601a59b9ae7a89fb8fbe
3f836946f3273f4162504e8fccbab44dd17119a5cbbe538b0d60a2f7e0fbae13
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/ud-i18n-en.e44e7bde.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:45 GMT
content-type: application/javascript
server: openresty
content-md5: DyUZIaD1cN4PN459aJhnNg==
etag: W/"0f251921a0f570de0f378e7d68986736"
expires: Fri, 12 May 2023 08:43:54 GMT
last-modified: Mon, 08 May 2023 12:32:48 GMT
x-bce-content-crc32: 2133490345
x-bce-debug-id: NSexvRTV0lZWQYtbdWLSgX+v6Hr/56aCZJ1ADylLSrA41ImIsmNUOALc2+imcrFlB95XXzUoxQ6mngOJKiIOKA==
x-bce-request-id: ebaa8284-e667-42db-a2f8-0aab2662e8dc
x-bce-storage-class: STANDARD
x-ccdn-expires: 712327
via: EU-GER-frankfurt-EDGE5-CACHE1[1],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE5[36],EU-GER-frankfurt-GLOBAL1-CACHE2[0,TCP_HIT,32]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 17541400
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?type=terabox_sharing_link_js_error&sessionId=773810&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&msg=%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&stack=%5B%7B%22columnNumber%22%3A2705%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22h%22%2C%22source%22%3A%22h%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A2705%22%7D%2C%7B%22columnNumber%22%3A3160%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%22%2C%22source%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A3160%22%7D%2C%7B%22columnNumber%22%3A30208%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22Kt%22%2C%22source%22%3A%22Kt%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A30208%22%7D%5D
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=terabox_sharing_link_js_error&sessionId=773810&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&msg=%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&stack=%5B%7B%22columnNumber%22%3A2705%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22h%22%2C%22source%22%3A%22h%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A2705%22%7D%2C%7B%22columnNumber%22%3A3160%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%22%2C%22source%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A3160%22%7D%2C%7B%22columnNumber%22%3A30208%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22Kt%22%2C%22source%22%3A%22Kt%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A30208%22%7D%5D
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 06da3052028b0b8fd493db0e68ec67ad
86f9395faabed6acb4485b27a2d780e26753a1d6
24e9c06f40451288dec775ce20247538439df990673ec02f3766c938b9c8688e
GET /api/analytics?type=terabox_sharing_link_js_error&sessionId=773810&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&msg=%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&stack=%5B%7B%22columnNumber%22%3A2705%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22h%22%2C%22source%22%3A%22h%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A2705%22%7D%2C%7B%22columnNumber%22%3A3160%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%22%2C%22source%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A3160%22%7D%2C%7B%22columnNumber%22%3A30208%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22Kt%22%2C%22source%22%3A%22Kt%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A30208%22%7D%5D HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:47 GMT
Flow-Level: 3
Logid: 8846557595977248151
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557595977248151
Yme: ZIGW+Ss3QE0WaysHTW7iq29Xvv4cVAPxqB5GwiqBmOq2OD0pUiQQC1D4WK4Y
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/fonts/yunfont.44acf892.ttf
200 OK 23 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/fonts/yunfont.44acf892.ttf
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, yunfont \012- data
Hash 44acf8923466a31680d910d7cc4f0903
351d9f0d3e293ae4c4e4c28e67b09f5ab2a39983
cdec6bbf708df8fbb45cb6c8477254406972c90e28bf1bc7d265b9bd0a403cd9
GET /fe-opera-static/node-static-v4/fe-webv4-main/fonts/yunfont.44acf892.ttf HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:48 GMT
content-type: application/x-font-ttf
content-length: 23268
server: openresty
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Length, x-bce-next-append-offset, x-bce-object-type, x-bce-request-id
access-control-max-age: 1800
content-md5: RKz4kjRmoxaA2RDXzE8JAw==
etag: "44acf8923466a31680d910d7cc4f0903"
expires: Sat, 24 Sep 2022 06:46:06 GMT
last-modified: Wed, 21 Sep 2022 05:03:25 GMT
x-bce-content-crc32: 848321786
x-bce-debug-id: NAe6EO3wT96ak0qPNr/yE8+RuLbHz64z8I5FDCDIACz1r140/OGU/0+MbMDWT1zTJqrTz/6OyWkOTO54TO+RgQ==
x-bce-request-id: bdfcbbdf-effe-4bb4-b741-0cdb160927f7
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 971742
via: EU-GER-frankfurt-EDGE5-CACHE1[1],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[6],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,3],EA-SGP-GLOBAL1-CACHE11[3],EA-SGP-GLOBAL1-CACHE24[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 4212305
accept-ranges: bytes
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?value=8854&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431812
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?value=8854&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431812
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 05779cba5b2b8804b62ed7c2d395ec69
4538ce33f788989274c4a982aa3093c3c7fbc3a7
047f2d5ba336e70a1e612dc13013ea05885dd2ad17d0f490a55b090e83b6a54d
GET /api/analytics?value=8854&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431812 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:48 GMT
Flow-Level: 3
Logid: 8846557642959936654
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557642959936654
Yme: ZIGW+Ss3QE0WbysGTnb+qnFLufkASwH9tAFJxiqBmO+4FgRdYjhjq2CLxDY=
Content-Length: 44
www.1024tera.com/api/analytics?type=web_share_filelist_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431811
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_share_filelist_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431811
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 25807259f845383ba4e01023beda32db
1177582ccfa05b71b93d323156b83173f33fff17
99d91f1c61f434b8487e89e3aad6f0834dcd867916439c7b37b8ec35f383eab0
GET /api/analytics?type=web_share_filelist_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431811 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:48 GMT
Flow-Level: 3
Logid: 8846557642892711028
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557642892711028
Yme: ZIGW+Ss3QE0RYisESWriq29Xvv4cVAPxrB5MxiqBmOizdndhHCQ+Kyj/MykY
Content-Length: 44
www.1024tera.com/api/analytics?errno=-6&newno=&request_id=8846557555908585000&show_msg=&hasError=true&data=%7B%22sid%22%3A1141471613%2C%22suk%22%3A4400473838185%7D¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fquerysurltransfer_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431809
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&newno=&request_id=8846557555908585000&show_msg=&hasError=true&data=%7B%22sid%22%3A1141471613%2C%22suk%22%3A4400473838185%7D¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fquerysurltransfer_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431809
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b9e1461d61ede8eb967dc667380e745
363df501a2d7827d720d5ef6818247a0bf1eedd8
350fd509eef7df2600899748870500c35fc4aa0fe4ecaca5763a5a725f82a086
GET /api/analytics?errno=-6&newno=&request_id=8846557555908585000&show_msg=&hasError=true&data=%7B%22sid%22%3A1141471613%2C%22suk%22%3A4400473838185%7D¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fquerysurltransfer_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431809 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:48 GMT
Flow-Level: 3
Logid: 8846557642680220429
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557642680220429
Yme: ZIGW+Ss3QE0WaisGSHb+qnFLufkASwb3tAdIySKDnuu0S182MA==
Content-Length: 44
www.1024tera.com/api/analytics?type=play_video_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431873
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=play_video_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431873
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash c13873a349960f3f585fe5a9fbca731b
d0bf566d12ac51d8cec625caaf84022b1bd438cf
953e25750386de6a1405523599b0d30d672aa13c7197cd6a91786f8d2a4aff57
GET /api/analytics?type=play_video_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431873 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:48 GMT
Flow-Level: 3
Logid: 8846557660471242981
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557660471242981
Yme: ZIGW+Ss3QEsXdTQEUmr/tG1MvuUYQxzxqApNwyKBn+ngWRxnc9c+rM3/3A==
Content-Length: 44
www.1024tera.com/api/analytics?type=web_share_video_init_rate_1&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431873
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_share_video_init_rate_1&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431873
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 375246bc7ef8eb634d71356f947bdf04
e72dc221306f155f687720d19404a0b320e2fea4
3cabe75281fede6ac852f68198e83908a3cbd4e3b3f1f1c8a424d447116c80f1
GET /api/analytics?type=web_share_video_init_rate_1&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431873 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:48 GMT
Flow-Level: 3
Logid: 8846557661036316865
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557661036316865
Yme: ZIGW+Ss3QE0WaCsHTmviq29Xvv4cVAP2oh5NwSWJmu24Tg==
Content-Length: 44
www.1024tera.com/api/analytics?type=web_pause_close_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431872
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_pause_close_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431872
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 36d928e5fa9baa3c129bbfa509163b5c
aea3e8a53edb083f5d6381c1da07eb4cee8ddf97
70385fe4b485d40d3c0c458c5f24879bc27d3959facef6db178de248f96b1773
GET /api/analytics?type=web_pause_close_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431872 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:48 GMT
Flow-Level: 3
Logid: 8846557660772741434
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557660772741434
Yme: ZIGW+Ss3QEobdTQMUmr/tG1MvuUZTBz0rwpNwySE
Content-Length: 44
www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431872
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431872
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 4ecbc9386ec987337454b16c1e303f89
cb6d2370d0a5869f46de2a8784c88bd12d9a00e2
bc720788f5d70d411b05066250a400d945f97def8d46e58c76cc6e47f756ecc9
GET /api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431872 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:48 GMT
Flow-Level: 3
Logid: 8846557658827337563
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557658827337563
Yme: ZIGW+Ss3QEsRdTYFUmr/tG1MvuUYQxz3rwpNwySAtbLw
Content-Length: 44
www.1024tera.com/api/analytics?type=web_share_video_premium_activity_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431939
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_share_video_premium_activity_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431939
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash ab7590e7669cad8112fc8351fed77df0
6ad2a88b0a7a17d0dc46b7da0e17f7c79288161e
f3b9f4c375a66c90f5bec942d082c449aec71234c8b20063e9a6597a09c6e7f4
GET /api/analytics?type=web_share_video_premium_activity_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431939 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:48 GMT
Flow-Level: 3
Logid: 8846557676138597276
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557676138597276
Yme: ZIGW+Ss3QEoadTQMUmr/tG1MvuUZTxz0owpNwyKKzJVRP2wJiT9R20k83A==
Content-Length: 44
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030013&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en
200 OK 968 B URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030013&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (3720), with no line terminators
Hash f461882d813126a8255f66bbc43515b0
f70b65a52e9abd3677b5f50c5ec7facc6ad68ab2
763db34cd300fab0d66e666162b3ae77c2e1a0c6687eb3fc543165fb783bbada
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030013&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:48 GMT
Flow-Level: 3
Logid: 8846557677182748142
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 8846557677182748142
Yme: ZIGW+Ss3QE0RYysHT2ziq29Xvv4cVAPxqR5NwyGJmu20TM6Vfg==
Transfer-Encoding: chunked
www.1024tera.com/share/webmaster/getplan?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030015&suk=4400473838185
200 OK 103 B URL GET HTTP/1.1 www.1024tera.com/share/webmaster/getplan?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030015&suk=4400473838185
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash c13ac453382d75e0fd1e4e181016994f
67aad140848388615a8917f7c451fb16c022a051
11d666bc31403b79dc4601d8a13c2ca3a67eba248583b268095baeda3ef7a99e
GET /share/webmaster/getplan?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030015&suk=4400473838185 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:48 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8846557678994414560
Logid: 8846557678994414560
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8846557678994414560
Yme: ZIGW+Ss3QE0RYysGTHb+qnFLufkASwb2tAdOySKDm+s=
Content-Length: 103
www.1024tera.com/api/analytics?isHitCTR=false&type=web_share_CTR_config&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431947
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?isHitCTR=false&type=web_share_CTR_config&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431947
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash a0c593c0fdf2941608b7f889768abc98
96ffa1c99ebb307421dd984a809eaf9488b2e720
abb027742abffd9f7b2cff91d13dbc3f5814dc96e43ac5e608cbfba5d236be27
GET /api/analytics?isHitCTR=false&type=web_share_CTR_config&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163431947 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:48 GMT
Flow-Level: 3
Logid: 8846557746761681144
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557746761681144
Yme: ZIGW+Ss3QE0WaCsHT27iq29Xvv4cVAPxrh5OxiqBmOixDg==
Content-Length: 44
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030014&language_type=en&cfg_category_keys=%5B%5D&version=0
200 OK 15 kB URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030014&language_type=en&cfg_category_keys=%5B%5D&version=0
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 4a47770721583424ef988def55617c45
d3e072c5261935e1f2f52ffd0209047b29d1bc87
c55da14e1bc4e0d67bc893ab36fd92e2061d7cc51f29c27c2e157c0e97563dfd
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030014&language_type=en&cfg_category_keys=%5B%5D&version=0 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:48 GMT
Flow-Level: 3
Logid: 8846557743604209173
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 8846557743604209173
Yme: ZIGW+Ss3QE0WaisGSnb+qnFLufkASwbxtAFIySKDmeo=
Transfer-Encoding: chunked
www.1024tera.com/share/mediameta?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030016&uk=4400473838185&shareid=1141471613&fid=251388614689465×tamp=1701163431
200 OK 122 B URL GET HTTP/1.1 www.1024tera.com/share/mediameta?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030016&uk=4400473838185&shareid=1141471613&fid=251388614689465×tamp=1701163431
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 1482e4c5052a6bcd84803eab62ce171e
c3b16ef184ceb4faa7fa0d269d37310c5d71c0d9
bfcdb0e3cef9d5e9b4f1b7703354038344b6808093966a834246eefeaeec1bfb
GET /share/mediameta?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030016&uk=4400473838185&shareid=1141471613&fid=251388614689465×tamp=1701163431 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:48 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8846557745499411621
Logid: 8846557745499411621
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8846557745499411621
Yme: ZIGW+Ss3QE0RYisES2riq29Xvv4cVAPxqR5MwCqBmO60Kx9nLXcRs9kgfLEY
Content-Length: 122
www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=pause&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432278
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=pause&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432278
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 6a69a084a5d6636e1dcbc7fe8f5c4a94
38b67d2f6458a8dda87d1100d43120c839d8b803
12a3e5287775d9ddb91e84ea1680e0ab285c5218fbd8579475472b7a7b9332fa
GET /api/analytics?domId=adsterra&showType=1x2&country=NO&where=pause&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432278 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:48 GMT
Flow-Level: 3
Logid: 8846557767890304365
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557767890304365
Yme: ZIGW+Ss3QEoadTEDUmr/tG1MvuUYQhzxrwpNwyWHdWJbsBU=
Content-Length: 44
www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432288
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432288
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash cee1b611e7c4d3c7b60650d9fae0e9f9
68e629ab1d5b198cf7834e84986056fba1964f8c
83df0b29eac5a468bee4ce9a206b98a8f74d26681143d20a7b633384aaa2d716
GET /api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432288 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:48 GMT
Flow-Level: 3
Logid: 8846557770189785541
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557770189785541
Yme: ZIGW+Ss3QEsSdTQGUmr/tG1MvuUZTxz2rQpNwyCAz7PiEA5rbw==
Content-Length: 44
www.1024tera.com/api/analytics?type=web_skip_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432289
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_skip_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432289
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5238ed99c99e08d607daed6fe8b54f94
10f03a2cd19d3ce904a350b513521b8369274531
2d81c8e9c5bdee7b48e9831f4103c71813781cd4a9a50d69a8b30004114643d5
GET /api/analytics?type=web_skip_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432289 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:48 GMT
Flow-Level: 3
Logid: 8846557771047186504
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557771047186504
Yme: ZIGW+Ss3QEobdTcAUmr/tG1MvuUZSBz2qApNwyGH
Content-Length: 44
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030017&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en
200 OK 968 B URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030017&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (3720), with no line terminators
Hash dbfe7415ea44a963c798d4ad77121557
d4d46cefc919f93745a500a1fe87604f7593a8e4
e2570f6339a689bd738b01c4b824296005fbf896f891b72ff74e8b8e42dc3a25
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030017&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:48 GMT
Flow-Level: 3
Logid: 8846557770483410703
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 8846557770483410703
Yme: ZIGW+Ss3QE0WYisCTHb+qnFLufkASwH8tANOySKDm+rvREphaTZr+ppVcjY=
Transfer-Encoding: chunked
www.1024tera.com/api/analytics?type=videoplayer_open&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432551
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=videoplayer_open&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432551
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash db423260bd76de6277da855f468e864d
2efd189005f318f777f32f8d4333aecbb104a09f
af57c254e91a220f60dfbff3b7e44add5a0c9c77921bcd3d4c763236abd6dcbd
GET /api/analytics?type=videoplayer_open&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432551 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:48 GMT
Flow-Level: 3
Logid: 8846557841222482345
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557841222482345
Yme: ZIGW+Ss3QEobdTcEUmr/tG1MvuUZShz3qQpNwiCCmOi1SVswNWf3gBnp3A==
Content-Length: 44
www.1024tera.com/api/analytics?from=shareLink&type=videoplayer_open_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432552
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?from=shareLink&type=videoplayer_open_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432552
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash a76ef857d569f6e54758056dcdcb2d59
c50eea24f1bf3dfae35eb4994d5d6db748d67ab4
caa4b37a5c887cd11681f9477e35ff45a7ceddd87622e04c63a03ab6f5a8af61
GET /api/analytics?from=shareLink&type=videoplayer_open_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432552 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:48 GMT
Flow-Level: 3
Logid: 8846557842272885837
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557842272885837
Yme: ZIGW+Ss3QEsSdTcBUmr/tG1MvuUZTBz3rgpNwyOEHgLaIhU=
Content-Length: 44
www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432641
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432641
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 9daf5ae8415c10fc681d6fa77f021064
8dc8e82371c3fb3a0709b64cc8d6f6ce0abd490c
b4d61db18ce5a75223342ce20c99c82a377807befd9cc494c2172d757bf2b1df
GET /api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432641 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:48 GMT
Flow-Level: 3
Logid: 8846557864426291814
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557864426291814
Yme: ZIGW+Ss3QE0WaCsESmjiq29Xvv4cVAPxqx5HwiqBmO6y
Content-Length: 44
pl18043214.highperformancecpmgate.com/5c8996e8e3cb5e10b7fd36115b800ac7/invoke.js
200 OK 9.3 kB URL GET HTTP/1.1 pl18043214.highperformancecpmgate.com/5c8996e8e3cb5e10b7fd36115b800ac7/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerLet's Encrypt
Subjecthighperformancecpmgate.com
FingerprintEC:5C:1C:3A:AB:08:18:CE:84:A7:E0:33:D8:44:0B:AF:12:12:CE:C4
ValiditySat, 28 Oct 2023 06:31:01 GMT - Fri, 26 Jan 2024 06:31:00 GMT
File type Unicode text, UTF-8 text, with very long lines (25118), with no line terminators
Hash ed4cf617e725c892d7572a3172367149
22170216c9dbd71942664eed419bf2ff2e1f4a4e
c150b248eb867c1717bae28f4bf30a7c1daa6529fdee52fb34fb2a6137c1896c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /5c8996e8e3cb5e10b7fd36115b800ac7/invoke.js HTTP/1.1
Host: pl18043214.highperformancecpmgate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 28 Nov 2023 09:23:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 597f2499aa8761b44589d0f1d9caa578
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.1024tera.com/api/analytics?type=web_share_video_carousel_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432783
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_share_video_carousel_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432783
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 8b9f697466f4662b46e70125233d9aef
879938a779608f1d2d53b0605273ba045ff44d66
3d786380438e3565df3f8bf725ec73ba9ad3d7f93b891c2f45f66dd020d006c0
GET /api/analytics?type=web_share_video_carousel_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432783 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:49 GMT
Flow-Level: 3
Logid: 8846557903178088387
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557903178088387
Yme: ZIGW+Ss3QEsTdTcHUmr/tG1MvuUYQxzxqApNwyKBx7roETVhbl/Y/e+O3A==
Content-Length: 44
www.1024tera.com/api/analytics?value=9828&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432785
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?value=9828&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432785
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 55384e2c1359035fc06225d4407e1754
99aa6d786ac607e0a2b7147a46a63221ad99d044
b0da1ed2423e0f8dc7f18b92e53978934039e4761d046788816836de691a63b8
GET /api/analytics?value=9828&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432785 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:49 GMT
Flow-Level: 3
Logid: 8846557903797216365
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557903797216365
Yme: ZIGW+Ss3QEsXdTEHUmr/tG1MvuUZTBz0rwpNwyWAzJVRP2wJiQ8UYxR43A==
Content-Length: 44
www.1024tera.com/api/analytics?type=videoplayer_play_btn_click&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432843
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=videoplayer_play_btn_click&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432843
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 33ef67e5f95a877e0c0e1ba276cba5b0
3658e4e796e5c0dc49f2e2da4ac0e9fe9e5c8d89
e76a62d7ff7fa868431b589bfdd4fd65a059bb1ffefb2714d623109ad3f0c4d8
GET /api/analytics?type=videoplayer_play_btn_click&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163432843 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:49 GMT
Flow-Level: 3
Logid: 8846557918897318414
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557918897318414
Yme: ZIGW+Ss3QEsUdTEBUmr/tG1MvuUYQhz0rQpNwyGA4Y0=
Content-Length: 44
www.1024tera.com/share/streaming?uk=4400473838185&shareid=1141471613&type=M3U8_FLV_264_480&fid=251388614689465&sign=f4812c15846f28f7977622572266d4542206321b×tamp=1701163431&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&esl=1&isplayer=1&ehps=1&clienttype=0&app_id=250528&web=1&channel=dubox
200 OK 2.7 kB URL GET HTTP/1.1 www.1024tera.com/share/streaming?uk=4400473838185&shareid=1141471613&type=M3U8_FLV_264_480&fid=251388614689465&sign=f4812c15846f28f7977622572266d4542206321b×tamp=1701163431&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&esl=1&isplayer=1&ehps=1&clienttype=0&app_id=250528&web=1&channel=dubox
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (864)
Hash 1821c7cdab16743162305b84651347ff
d2c03c97d823a26d3effc64e893dd2f32968e6bc
dae4f81378be3a001f67ca592073e8398bab5337b96e25b4f219ee585dd3c2dd
GET /share/streaming?uk=4400473838185&shareid=1141471613&type=M3U8_FLV_264_480&fid=251388614689465&sign=f4812c15846f28f7977622572266d4542206321b×tamp=1701163431&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&esl=1&isplayer=1&ehps=1&clienttype=0&app_id=250528&web=1&channel=dubox HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Type: application/x-mpegURL;charset=utf-8
Date: Tue, 28 Nov 2023 09:23:49 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8846557913876045296
Logid: 8846557913876045296
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Yld: 8846557913876045296
Yme: ZIGW+Ss3QEobdTcEUmr/tG1MvuUZTBz2qQpNwyGA95TSIDhHQJdzOM7k3A==
Transfer-Encoding: chunked
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash ab08b21b37480bf609deaf73dcbf1e34
4121333c3a37ff481b30918ce3a1aa643cf813c2
d8c99d9c9d12731615d29afd9aba86e213ce6c7dfb8938334de50d3edfd78fcd
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Tue, 28 Nov 2023 09:23:49 GMT
Last-Modified: Tue, 28 Nov 2023 08:04:36 GMT
Server: ECAcc (ska/F78F)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: rHC4aPHuZjx0mCczmWFLlMhAU5MRbv4U8ZzRjxkR3b4A-nWg93m39g==
Age: 4754
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5f0faf3d256a08931b9e4bd42b2b47fe
2d1b32aea71194ed99ff8a2333e2948ffa30e850
85e13b49e917af480a8c1cd54c36a1df80cf0cbbdde41cbddd91af11cf5ff3df
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:49 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.1024tera.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40:1:1; expires=Fri, 25 Nov 2033 09:23:49 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
pl18427035.highcpmrevenuenetwork.com/627e2f8a423975bc4bd7a76128c2d552/invoke.js
200 OK 9.3 kB URL GET HTTP/1.1 pl18427035.highcpmrevenuenetwork.com/627e2f8a423975bc4bd7a76128c2d552/invoke.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerLet's Encrypt
Subjecthighcpmrevenuenetwork.com
FingerprintEE:67:85:23:95:09:5B:1B:88:45:C2:65:23:64:81:DD:65:D4:15:14
ValidityThu, 19 Oct 2023 06:40:46 GMT - Wed, 17 Jan 2024 06:40:45 GMT
File type Unicode text, UTF-8 text, with very long lines (25118), with no line terminators
Hash d5c3bb05276d17256923e07a2b2ec6e6
04757bd87db3bb17bc4cf5f228472febdd75e277
948c14d7ee1c5a21b92c8cad1d16bcd8bdfed2eae1074e2e694827f0f6f8502a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /627e2f8a423975bc4bd7a76128c2d552/invoke.js HTTP/1.1
Host: pl18427035.highcpmrevenuenetwork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 09:23:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 572e217520f738490640647a0b274f04
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ymg-api.terabox.com/abdr?data=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%3D&_=0.23691665857802302
22 B URL GET ymg-api.terabox.com/abdr?data=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%3D&_=0.23691665857802302
IP
ASN #2516 KDDI CORPORATION
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.terabox.com
Fingerprint4F:30:79:83:60:E0:58:E8:DA:05:09:38:E1:6D:CD:F9:46:33:D6:5F
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 9d4568c009d203ab10e33ea9953a0264
dd29ecf524b030a65261e3059c48ab9e1ecb2585
12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126
GET /abdr?data=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%3D&_=0.23691665857802302 HTTP/1.1
Host: ymg-api.terabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: ab_jid=fa2d6043ffee98d1dbeb35f362dae1c6ce40; ab_bid=fa2d6043ffee98d1dbeb35f362dae1c6ce40; ab_sr=1.0.1_ZTViN2U4NmVkNzNhNzI0ZDg4ZTRlZjNhMTQ0NzI1Njc3NWVjZWMzMGMxMWJhYWJkODI1MmYxYjU5NzY0ODZmNGYzODUwYjM0MDNhNWUyNzBlNmY2NzAzYmFjZjgwNmNkMGFmYjYyNDNlM2VmZmIzY2UwY2MwOGM5ZTA1ZmM5OTJiZDQyZTdkYWI0YzA2OWU2NjUwYWJmY2I2MmQwNDVmZQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 28 Nov 2023 09:23:49 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 8846558009759780172
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, Host, Content-Type, x-requested-with, X-Custom-Header
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Max-Age: 3600
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QEsTdTQCUmr/tG1MvuUZThz3rQpHxCaC/ZPVID5bUd+Q4ZXu3A==
Server: nginx
logid: 8846558009759780172
Flow-level: 3
Content-Encoding: gzip
joblouder.com/1e/1b/bd/1e1bbdc937ccd35cd1897b4e58c7407b.js
200 OK 23 kB URL GET HTTP/1.1 joblouder.com/1e/1b/bd/1e1bbdc937ccd35cd1897b4e58c7407b.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerLet's Encrypt
Subjectjoblouder.com
Fingerprint30:FD:12:BB:38:60:1D:88:0D:67:03:0F:82:44:A4:FB:76:96:FD:83
ValiditySat, 25 Nov 2023 07:50:03 GMT - Fri, 23 Feb 2024 07:50:02 GMT
File type ASCII text, with very long lines (59632), with no line terminators
Hash 620d6c2369df96efcd2c85cddd0b7653
1b5b9d68556401cc32914b7c71bfd975144d1b19
55326059cc11d37ce7d2fff0975a60de0a80c96e23cf02562f966cd4013da318
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /1e/1b/bd/1e1bbdc937ccd35cd1897b4e58c7407b.js HTTP/1.1
Host: joblouder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 09:23:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a6931d4003aea80e665eb690dd43a75d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
joblouder.com/ntv.json?key=5c8996e8e3cb5e10b7fd36115b800ac7&vstc=1
200 OK 4.3 kB URL GET HTTP/1.1 joblouder.com/ntv.json?key=5c8996e8e3cb5e10b7fd36115b800ac7&vstc=1
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerLet's Encrypt
Subjectjoblouder.com
Fingerprint30:FD:12:BB:38:60:1D:88:0D:67:03:0F:82:44:A4:FB:76:96:FD:83
ValiditySat, 25 Nov 2023 07:50:03 GMT - Fri, 23 Feb 2024 07:50:02 GMT
File type JSON data\012- , ASCII text, with very long lines (4256), with no line terminators
Hash b8daccd02869ad0bff258e07c6f202d8
871b9b03a43fe2a1f71ad4776b9091df398abcfd
98abcf72f08d851ec031535f036596292fab7d938369ef462e5fc76b955f04ff
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ntv.json?key=5c8996e8e3cb5e10b7fd36115b800ac7&vstc=1 HTTP/1.1
Host: joblouder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 09:23:49 GMT
Content-Type: application/json
Content-Length: 4256
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.1024tera.com
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17942715; expires=Wed, 29 Nov 2023 09:23:49 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 29 Nov 2023 09:23:49 GMT; secure; SameSite=None
uncs=1; expires=Wed, 29 Nov 2023 09:23:49 GMT; secure; SameSite=None
pdhtkv49=true; expires=Wed, 29 Nov 2023 09:23:49 GMT; secure; SameSite=None
uncs49=1; expires=Wed, 29 Nov 2023 09:23:49 GMT; secure; SameSite=None
nlec5c8996e8e3cb5e10b7fd36115b800ac7=[2019380]; expires=Tue, 28 Nov 2023 09:23:54 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 14c60c55907c5ed37c8ba7701a967345
Strict-Transport-Security: max-age=0; includeSubdomains
joblouder.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSu3o0HVxB29eJF%2ByKoyKR7Zjoz4yKL6xoJxiTuruRcv3pSprqrqeqenuQUXJA9zt7UU%2BebZINuEHMWQSaCLgExc1lyMP%2BEsHiUSQZGH1S999X3Dt%2F3Xn21W5yTAAU9W%2FvUbCut6XxUC%2Fy31lUqTOn8lft%2BGNSCm%2F66SheaN%2F3%2B5LK998IgqgVv%2Bx9Lvmnm60EYBGEQ%2BovKytj05y9YqOywE9Y6Qa1Zr4VRE337f%2BwKD456EL1zcgNKjF%2FYeHoExUdIkx%2FvSLeZm%2Bzdj5JC09xY9MTB5%2BlmasoUyayMrYc4PZh2w7gxIV9fgUkPpg5gensTB2BqTLxnIVh6MJUJ1tu%2FVMo0ZAomXkLZG0HqERQdgZsHUOKUAFxgZRVp8njF2JJuXbJ0wo7J3PO%2FocoxmfvrVaTJD7e16vv3jC5yZVKHflxB9UdQ3RGy4hj5tgdVHoPnX0KJP8j882Wkyd6q0wZKVBfulRpBxSNoOQB1HorJUR6K2EOReUjEmU%2BjThwErZjFjUa7yTlvNDiP2gsiEo1mOw5Q8Im8AfJsAK4H4HYHmd3Bpnp0Gt2ALX6B26jghAeXj4n32Q56okIpCUpHUFKCUhGUOUHZq%2FaFdnVXPRbaFSyc5vo0N6qhybu7dN%2FkXZmS3eycXJ%2BMxrv%2B%2B0%2FYlGd%2BxNudzoJsywZnkQwD1opFYyEMI9YOAspbcKqCclcu3G6rMXmjfxWZGpMXW4dg9BhOH4Orq6BFCFoOW%2FUAdGPYbAfYTp%2Fk0lJm%2BjVuEghTIcvnkG95u%2FqcvHaxodf%2FbELyk1u%2FXXs%2FGz67Bm4rZLbCF%2BpXgq5%2BOLxrSrJ315SOHK1muUrUNp1s715Oc3n1%2B0%2FkVmmsWLrjBt99wCfEpDy8L12%2BTFOh0q4jT24rIaRdNJZL8vOSW5dsrXAbtwubFtny2oeLS0lmpXPKpCNQdbr6D7gak7k3X7n4ly%2BfvgNlR7BFhaQ4IdOAMsfg2Q5cNlPvDIHVsx6WeSiLamjrbPaoFYGWM0xZBfcfzGb1rnuIrvVA8wdIkwo9W6GnK1A9gCuuDfPMntx6%2Bs0kvgXT3pBp6%2B0xbfWjy9E6debLKA5iGdQlizssbtFAdOJmh9FOKFssoiFyN5byaP9fAAAA%2F%2F8BAAD%2F%2F2PCii9vBAAA
200 OK 7 B URL GET HTTP/1.1 joblouder.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSu3o0HVxB29eJF%2ByKoyKR7Zjoz4yKL6xoJxiTuruRcv3pSprqrqeqenuQUXJA9zt7UU%2BebZINuEHMWQSaCLgExc1lyMP%2BEsHiUSQZGH1S999X3Dt%2F3Xn21W5yTAAU9W%2FvUbCut6XxUC%2Fy31lUqTOn8lft%2BGNSCm%2F66SheaN%2F3%2B5LK998IgqgVv%2Bx9Lvmnm60EYBGEQ%2BovKytj05y9YqOywE9Y6Qa1Zr4VRE337f%2BwKD456EL1zcgNKjF%2FYeHoExUdIkx%2FvSLeZm%2Bzdj5JC09xY9MTB5%2BlmasoUyayMrYc4PZh2w7gxIV9fgUkPpg5gensTB2BqTLxnIVh6MJUJ1tu%2FVMo0ZAomXkLZG0HqERQdgZsHUOKUAFxgZRVp8njF2JJuXbJ0wo7J3PO%2FocoxmfvrVaTJD7e16vv3jC5yZVKHflxB9UdQ3RGy4hj5tgdVHoPnX0KJP8j882Wkyd6q0wZKVBfulRpBxSNoOQB1HorJUR6K2EOReUjEmU%2BjThwErZjFjUa7yTlvNDiP2gsiEo1mOw5Q8Im8AfJsAK4H4HYHmd3Bpnp0Gt2ALX6B26jghAeXj4n32Q56okIpCUpHUFKCUhGUOUHZq%2FaFdnVXPRbaFSyc5vo0N6qhybu7dN%2FkXZmS3eycXJ%2BMxrv%2B%2B0%2FYlGd%2BxNudzoJsywZnkQwD1opFYyEMI9YOAspbcKqCclcu3G6rMXmjfxWZGpMXW4dg9BhOH4Orq6BFCFoOW%2FUAdGPYbAfYTp%2Fk0lJm%2BjVuEghTIcvnkG95u%2FqcvHaxodf%2FbELyk1u%2FXXs%2FGz67Bm4rZLbCF%2BpXgq5%2BOLxrSrJ315SOHK1muUrUNp1s715Oc3n1%2B0%2FkVmmsWLrjBt99wCfEpDy8L12%2BTFOh0q4jT24rIaRdNJZL8vOSW5dsrXAbtwubFtny2oeLS0lmpXPKpCNQdbr6D7gak7k3X7n4ly%2BfvgNlR7BFhaQ4IdOAMsfg2Q5cNlPvDIHVsx6WeSiLamjrbPaoFYGWM0xZBfcfzGb1rnuIrvVA8wdIkwo9W6GnK1A9gCuuDfPMntx6%2Bs0kvgXT3pBp6%2B0xbfWjy9E6debLKA5iGdQlizssbtFAdOJmh9FOKFssoiFyN5byaP9fAAAA%2F%2F8BAAD%2F%2F2PCii9vBAAA
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerLet's Encrypt
Subjectjoblouder.com
Fingerprint30:FD:12:BB:38:60:1D:88:0D:67:03:0F:82:44:A4:FB:76:96:FD:83
ValiditySat, 25 Nov 2023 07:50:03 GMT - Fri, 23 Feb 2024 07:50:02 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSu3o0HVxB29eJF%2ByKoyKR7Zjoz4yKL6xoJxiTuruRcv3pSprqrqeqenuQUXJA9zt7UU%2BebZINuEHMWQSaCLgExc1lyMP%2BEsHiUSQZGH1S999X3Dt%2F3Xn21W5yTAAU9W%2FvUbCut6XxUC%2Fy31lUqTOn8lft%2BGNSCm%2F66SheaN%2F3%2B5LK998IgqgVv%2Bx9Lvmnm60EYBGEQ%2BovKytj05y9YqOywE9Y6Qa1Zr4VRE337f%2BwKD456EL1zcgNKjF%2FYeHoExUdIkx%2FvSLeZm%2Bzdj5JC09xY9MTB5%2BlmasoUyayMrYc4PZh2w7gxIV9fgUkPpg5gensTB2BqTLxnIVh6MJUJ1tu%2FVMo0ZAomXkLZG0HqERQdgZsHUOKUAFxgZRVp8njF2JJuXbJ0wo7J3PO%2FocoxmfvrVaTJD7e16vv3jC5yZVKHflxB9UdQ3RGy4hj5tgdVHoPnX0KJP8j882Wkyd6q0wZKVBfulRpBxSNoOQB1HorJUR6K2EOReUjEmU%2BjThwErZjFjUa7yTlvNDiP2gsiEo1mOw5Q8Im8AfJsAK4H4HYHmd3Bpnp0Gt2ALX6B26jghAeXj4n32Q56okIpCUpHUFKCUhGUOUHZq%2FaFdnVXPRbaFSyc5vo0N6qhybu7dN%2FkXZmS3eycXJ%2BMxrv%2B%2B0%2FYlGd%2BxNudzoJsywZnkQwD1opFYyEMI9YOAspbcKqCclcu3G6rMXmjfxWZGpMXW4dg9BhOH4Orq6BFCFoOW%2FUAdGPYbAfYTp%2Fk0lJm%2BjVuEghTIcvnkG95u%2FqcvHaxodf%2FbELyk1u%2FXXs%2FGz67Bm4rZLbCF%2BpXgq5%2BOLxrSrJ315SOHK1muUrUNp1s715Oc3n1%2B0%2FkVmmsWLrjBt99wCfEpDy8L12%2BTFOh0q4jT24rIaRdNJZL8vOSW5dsrXAbtwubFtny2oeLS0lmpXPKpCNQdbr6D7gak7k3X7n4ly%2BfvgNlR7BFhaQ4IdOAMsfg2Q5cNlPvDIHVsx6WeSiLamjrbPaoFYGWM0xZBfcfzGb1rnuIrvVA8wdIkwo9W6GnK1A9gCuuDfPMntx6%2Bs0kvgXT3pBp6%2B0xbfWjy9E6debLKA5iGdQlizssbtFAdOJmh9FOKFssoiFyN5byaP9fAAAA%2F%2F8BAAD%2F%2F2PCii9vBAAA HTTP/1.1
Host: joblouder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=17942715; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec5c8996e8e3cb5e10b7fd36115b800ac7=[2019380]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 09:23:49 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a29ebf77558ae0df1e12665bc8fb4c3f
Strict-Transport-Security: max-age=0; includeSubdomains
v1.1024tera.com/video/netdisk-videotran-tky/86235422e5e4bf8cee9ee4b8adb82d9e_1138_13_ts/c14e3e612f9957f228aba94cbc3d3d71?ts_size=8524672&app_id=250528&ccn=NO&csl=0&dp-logid=8846557913876045296&fn=vid_480p.mp4&from_type=1&fsid=251388614689465&idc_c=1&isplayer=1&iv=2&logid=8846557913876045296&ouk=4400473838185&r=240050888&size=488151184&sta_cs=0&sta_dt=video&sta_dx=465&time=1701192229&to=any&tot=ctkwR&uo=any&uva=1499419338&vuk=&dtime=10&etag=c14e3e612f9957f228aba94cbc3d3d71&fid=7c7ac257a595d3fe79251f3bf02303d8-&len=182736&range=2826016-3008751®ion=tky&resv4=&sign=BOUTHNFI-F3530edecde9cd71b79378b290804a96-Y38rQvTJlWNjConXyh0S9cQ5QZo%253D&xcode=955f9cbee94461cc382902c19d56d75eb4849dae360920fb8592e031336b6b312a13130e10c5d6402f34d31b3fd7c148316128a2cdfcce4d&xv=6&need_suf=&pmk=1400c14e3e612f9957f228aba94cbc3d3d717d9d7446000000821380&by=my-streaming
200 OK 183 kB URL GET HTTP/2 v1.1024tera.com/video/netdisk-videotran-tky/86235422e5e4bf8cee9ee4b8adb82d9e_1138_13_ts/c14e3e612f9957f228aba94cbc3d3d71?ts_size=8524672&app_id=250528&ccn=NO&csl=0&dp-logid=8846557913876045296&fn=vid_480p.mp4&from_type=1&fsid=251388614689465&idc_c=1&isplayer=1&iv=2&logid=8846557913876045296&ouk=4400473838185&r=240050888&size=488151184&sta_cs=0&sta_dt=video&sta_dx=465&time=1701192229&to=any&tot=ctkwR&uo=any&uva=1499419338&vuk=&dtime=10&etag=c14e3e612f9957f228aba94cbc3d3d71&fid=7c7ac257a595d3fe79251f3bf02303d8-&len=182736&range=2826016-3008751®ion=tky&resv4=&sign=BOUTHNFI-F3530edecde9cd71b79378b290804a96-Y38rQvTJlWNjConXyh0S9cQ5QZo%253D&xcode=955f9cbee94461cc382902c19d56d75eb4849dae360920fb8592e031336b6b312a13130e10c5d6402f34d31b3fd7c148316128a2cdfcce4d&xv=6&need_suf=&pmk=1400c14e3e612f9957f228aba94cbc3d3d717d9d7446000000821380&by=my-streaming
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
Size 183 kB (182736 bytes)
Hash 8ae83c34502ebc541665ab2809ee9cc7
160bdb025856a4aa628a48ffc2b16f1686ef3e10
fd7282b451ccc7a310567e0525b401dde3b485748648ffcc54985707c3e9ca1b
GET /video/netdisk-videotran-tky/86235422e5e4bf8cee9ee4b8adb82d9e_1138_13_ts/c14e3e612f9957f228aba94cbc3d3d71?ts_size=8524672&app_id=250528&ccn=NO&csl=0&dp-logid=8846557913876045296&fn=vid_480p.mp4&from_type=1&fsid=251388614689465&idc_c=1&isplayer=1&iv=2&logid=8846557913876045296&ouk=4400473838185&r=240050888&size=488151184&sta_cs=0&sta_dt=video&sta_dx=465&time=1701192229&to=any&tot=ctkwR&uo=any&uva=1499419338&vuk=&dtime=10&etag=c14e3e612f9957f228aba94cbc3d3d71&fid=7c7ac257a595d3fe79251f3bf02303d8-&len=182736&range=2826016-3008751®ion=tky&resv4=&sign=BOUTHNFI-F3530edecde9cd71b79378b290804a96-Y38rQvTJlWNjConXyh0S9cQ5QZo%253D&xcode=955f9cbee94461cc382902c19d56d75eb4849dae360920fb8592e031336b6b312a13130e10c5d6402f34d31b3fd7c148316128a2cdfcce4d&xv=6&need_suf=&pmk=1400c14e3e612f9957f228aba94cbc3d3d717d9d7446000000821380&by=my-streaming HTTP/1.1
Host: v1.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Zen/2.7
date: Tue, 28 Nov 2023 09:23:49 GMT
content-type: application/octet-stream
content-length: 182736
strict-transport-security: max-age=31536000; preload
cache-control: max-age=259200
etag: c14e3e612f9957f228aba94cbc3d3d71
x-bs-client-ip: MTkwLjIzNy4xNzIuMTk3
x-bs-request-id: MTAuMjUyLjE0OS43OToyMDE2Ojc2NjIwMDY3OTI4OTQwOTU4NTk6MjAyMy0xMS0yNyAwODozOTo1OQ==
x-bs-file-size: 8524672
x-bs-meta-crc32: 2107470918
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length, ETag, x-bs-request-id
access-control-allow-origin: https://www.1024tera.com
last-modified: Mon, 06 Nov 2023 20:06:05 GMT
access-control-allow-credentials: true
access-control-allow-methods: HEAD, GET, OPTIONS, PUT, POST, DELETE
access-control-allow-headers: Range, Origin, Content-Type, Accept, Content-Length
content-md5: c14e3e612f9957f228aba94cbc3d3d71
superfile: 0
accept-ranges: bytes
age: 0
via: https/1.1 JP.TYO.837.P.230.85 (Cache-6.1.14), http/1.1 DE.FRA5.837.E.113.195 (Cache-6.1.15)
hittype: TCP_MISS
cache-server: ZenCache
X-Firefox-Spdy: h2
joblouder.com/f1/95/e5/f195e5fa577c23352666448243864c68.js
200 OK 15 kB URL GET HTTP/1.1 joblouder.com/f1/95/e5/f195e5fa577c23352666448243864c68.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerLet's Encrypt
Subjectjoblouder.com
Fingerprint30:FD:12:BB:38:60:1D:88:0D:67:03:0F:82:44:A4:FB:76:96:FD:83
ValiditySat, 25 Nov 2023 07:50:03 GMT - Fri, 23 Feb 2024 07:50:02 GMT
File type ASCII text, with very long lines (42771), with no line terminators
Hash b228cdce4a274b434d3d315c61a8069b
409bb9cb30bf5566a88568bb6746aadb0b309946
ccd5c1158b3cf90f8104e6faf8950201829fe41dd3fd19522f816813e9c2240d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /f1/95/e5/f195e5fa577c23352666448243864c68.js HTTP/1.1
Host: joblouder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 09:23:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b09ab86adf51316cd3a244bf2c37a99b
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
joblouder.com/ntv.json?key=627e2f8a423975bc4bd7a76128c2d552&vstc=2&uuid=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40%3A1%3A1&custom=%7B%22d37e3bc4%22%3A%22a%22%7D
200 OK 8.6 kB URL GET HTTP/1.1 joblouder.com/ntv.json?key=627e2f8a423975bc4bd7a76128c2d552&vstc=2&uuid=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40%3A1%3A1&custom=%7B%22d37e3bc4%22%3A%22a%22%7D
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerLet's Encrypt
Subjectjoblouder.com
Fingerprint30:FD:12:BB:38:60:1D:88:0D:67:03:0F:82:44:A4:FB:76:96:FD:83
ValiditySat, 25 Nov 2023 07:50:03 GMT - Fri, 23 Feb 2024 07:50:02 GMT
File type JSON data\012- , ASCII text, with very long lines (8611), with no line terminators
Hash 046206d13966630f4f52dd8f299fd64a
65b2c888c6b700c2129dc85e0cca4c1b2d45b9bf
0a92e6a7ff6793b47e2e07f4a5a1fba8590c1e2cfed78124e6993d8c32a50fdc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ntv.json?key=627e2f8a423975bc4bd7a76128c2d552&vstc=2&uuid=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40%3A1%3A1&custom=%7B%22d37e3bc4%22%3A%22a%22%7D HTTP/1.1
Host: joblouder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 09:23:50 GMT
Content-Type: application/json
Content-Length: 8611
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.1024tera.com
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=18326536; expires=Wed, 29 Nov 2023 09:23:49 GMT; secure; SameSite=None
uid_id2=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40:1:1; expires=Tue, 05 Dec 2023 09:23:49 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 29 Nov 2023 09:23:50 GMT; secure; SameSite=None
uncs=1; expires=Wed, 29 Nov 2023 09:23:50 GMT; secure; SameSite=None
pdhtkv49=true; expires=Wed, 29 Nov 2023 09:23:50 GMT; secure; SameSite=None
uncs49=1; expires=Wed, 29 Nov 2023 09:23:50 GMT; secure; SameSite=None
nlec627e2f8a423975bc4bd7a76128c2d552=[2229215,2229214]; expires=Tue, 28 Nov 2023 09:23:55 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 28020d1faf68f13d495b3b73f2d0aefc
Strict-Transport-Security: max-age=0; includeSubdomains
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/video-fail-bg.b77a1e8a.png
200 OK 105 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/video-fail-bg.b77a1e8a.png
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type PNG image data, 980 x 438, 4-bit colormap, non-interlaced\012- data
Size 105 kB (104817 bytes)
Hash b77a1e8a238d4e4191ff9e8a80d6d86d
30d6d726f8f3bfac5770d3ba9ac464f36b4c51b3
73af449450a319a9c3b28782e4bfa3ed17e6b5f7c04a834dba21f96dd0f28949
GET /fe-opera-static/node-static-v4/fe-webv4-main/img/video-fail-bg.b77a1e8a.png HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:50 GMT
content-type: image/png
content-length: 104817
server: openresty
content-md5: t3oeiiONTkGR/56KgNbYbQ==
etag: "b77a1e8a238d4e4191ff9e8a80d6d86d"
expires: Wed, 15 Feb 2023 22:47:56 GMT
last-modified: Fri, 10 Feb 2023 07:43:39 GMT
x-bce-content-crc32: 4025551842
x-bce-debug-id: GU0GXuuVmHD1E2Z4twTBIaO14v2edTIrZIjjemDK7yWOsY+HCIeciS9bgQOAOSIWMUxPucybY5m7VzvcBt1c3A==
x-bce-request-id: 47c77fdc-17bf-44d4-8c6d-c40c7548a183
x-bce-storage-class: STANDARD
x-ccdn-expires: 1719191
via: EU-GER-frankfurt-EDGE5-CACHE1[5],EU-GER-frankfurt-EDGE5-CACHE1[0,TCP_HIT,4],EU-GER-frankfurt-GLOBAL1-CACHE2[3],EU-GER-frankfurt-GLOBAL1-CACHE8[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24210125
accept-ranges: bytes
access-control-allow-origin: *
X-Firefox-Spdy: h2
joblouder.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzYsc1Rd9NZkf5KcbEwQRXbQiouD01Gf3tFkEY4wEYyYkkazfV80851W94r2qrsmsEgOahYvWlbqqPj3JaBzE%2FAGK9LgJQSG9kVk4rl0LwaV0p6H1Qt2POndxzrnv42F1RHxU9PDS%2B2ZHaU1Xk7bfeu2ayoWpXevi1Vbgt%2F1TrWsq78SnWtvTZPtvBn7S9l9vvSv5llkN%2FcD3Az9onVNWpmZ7dYZCFfu9oN3z23HYDpIY2%2Fa%2Fs6s8OOpB9I%2FISSgx%2Bd%2Fmg%2FtQfIw8%2B%2F6sdFulKd54J6s0LY1FX%2Bx9kG%2Flps6RLdrUekjzvfk2jJsQ8sUSTL43VwDT350qAFMT4v0WgOV7c5pg%2FTtPmDINmYOJp1H3x5B6DEXH4OYWlHhEAC5wcR15dveisTW9%2FgSlU3RClh%2F%2FBVVPyPLvzyLPvjuj1XbritFVqUzusJ02UNtjqI0xiuoA5Y4HVR%2BAlx9BiV%2FJ6uMLyLPddacNlDh8pdPtBdxP5EoYR%2BlKHLHOCg1ZZ6UjRIfziCYi9mcWKTWGSsfQcgDqPFTTT3moUg9V4SEThy2a9FLf76YsjaK1mHMeRZwnax2RiCheS31UfKphgLIYgOsBuL2Bwt78WkRdGTEeDym21GePkpOw1U9wmw2c8OBKgr5oUEuC2hHUlKBWBHVJUPebO0K70DV3hXYVC%2BY1nNeoGZlyY0jvmHJD5mRYHJETUxu953aPY0setjphV4bpGo3DqNdNGI%2BZ6NJuJwjXeCiSJIRTDZRbmoneURPy0gufolAT8v%2FuPhg9gNMH4OoEaBWA1qNu6INujuI1Hzv5fuCHcSktbXOTQZgGRbmM8ro31Efk%2Bdk5Xz72ByR%2FePrei%2FvHg1f%2FBLcNCtvgQ%2FUzwYa%2BPbpsarJ72dSO3F8vSpWpHTo99ZWSlvLYvffk9dpYcf6sG3zzFp8C03b%2FqnTlBZoLlW848u0ZJYS054zlkvxw3l2T7FLlNs9UNq%2BKC5fePnc%2BK6x0Tpl8DKoerf8NriZk%2BeaPs0f8zC%2BfQNkxbNUgqx6SeUCZA%2FDiBlyxYO8MgdWLHVZ4qKtmZEO2%2BKkVgZaLmbIG7l8zW%2FRDdxsbdgm0vIU8a9C3Dfq6AdUDuOqpUVnYh6cffDmNr8D00ohpu7TLtNWfz6ydpiM4ddiSSeqn0g8lS3ss7VJf9NK4x2gvkF2W0AClm0h5%2F%2B4%2FAAAA%2F%2F8BAAD%2F%2FyrUruyhBAAA
200 OK 7 B URL GET HTTP/1.1 joblouder.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzYsc1Rd9NZkf5KcbEwQRXbQiouD01Gf3tFkEY4wEYyYkkazfV80851W94r2qrsmsEgOahYvWlbqqPj3JaBzE%2FAGK9LgJQSG9kVk4rl0LwaV0p6H1Qt2POndxzrnv42F1RHxU9PDS%2B2ZHaU1Xk7bfeu2ayoWpXevi1Vbgt%2F1TrWsq78SnWtvTZPtvBn7S9l9vvSv5llkN%2FcD3Az9onVNWpmZ7dYZCFfu9oN3z23HYDpIY2%2Fa%2Fs6s8OOpB9I%2FISSgx%2Bd%2Fmg%2FtQfIw8%2B%2F6sdFulKd54J6s0LY1FX%2Bx9kG%2Flps6RLdrUekjzvfk2jJsQ8sUSTL43VwDT350qAFMT4v0WgOV7c5pg%2FTtPmDINmYOJp1H3x5B6DEXH4OYWlHhEAC5wcR15dveisTW9%2FgSlU3RClh%2F%2FBVVPyPLvzyLPvjuj1XbritFVqUzusJ02UNtjqI0xiuoA5Y4HVR%2BAlx9BiV%2FJ6uMLyLPddacNlDh8pdPtBdxP5EoYR%2BlKHLHOCg1ZZ6UjRIfziCYi9mcWKTWGSsfQcgDqPFTTT3moUg9V4SEThy2a9FLf76YsjaK1mHMeRZwnax2RiCheS31UfKphgLIYgOsBuL2Bwt78WkRdGTEeDym21GePkpOw1U9wmw2c8OBKgr5oUEuC2hHUlKBWBHVJUPebO0K70DV3hXYVC%2BY1nNeoGZlyY0jvmHJD5mRYHJETUxu953aPY0setjphV4bpGo3DqNdNGI%2BZ6NJuJwjXeCiSJIRTDZRbmoneURPy0gufolAT8v%2FuPhg9gNMH4OoEaBWA1qNu6INujuI1Hzv5fuCHcSktbXOTQZgGRbmM8ro31Efk%2Bdk5Xz72ByR%2FePrei%2FvHg1f%2FBLcNCtvgQ%2FUzwYa%2BPbpsarJ72dSO3F8vSpWpHTo99ZWSlvLYvffk9dpYcf6sG3zzFp8C03b%2FqnTlBZoLlW848u0ZJYS054zlkvxw3l2T7FLlNs9UNq%2BKC5fePnc%2BK6x0Tpl8DKoerf8NriZk%2BeaPs0f8zC%2BfQNkxbNUgqx6SeUCZA%2FDiBlyxYO8MgdWLHVZ4qKtmZEO2%2BKkVgZaLmbIG7l8zW%2FRDdxsbdgm0vIU8a9C3Dfq6AdUDuOqpUVnYh6cffDmNr8D00ohpu7TLtNWfz6ydpiM4ddiSSeqn0g8lS3ss7VJf9NK4x2gvkF2W0AClm0h5%2F%2B4%2FAAAA%2F%2F8BAAD%2F%2FyrUruyhBAAA
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerLet's Encrypt
Subjectjoblouder.com
Fingerprint30:FD:12:BB:38:60:1D:88:0D:67:03:0F:82:44:A4:FB:76:96:FD:83
ValiditySat, 25 Nov 2023 07:50:03 GMT - Fri, 23 Feb 2024 07:50:02 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSzYsc1Rd9NZkf5KcbEwQRXbQiouD01Gf3tFkEY4wEYyYkkazfV80851W94r2qrsmsEgOahYvWlbqqPj3JaBzE%2FAGK9LgJQSG9kVk4rl0LwaV0p6H1Qt2POndxzrnv42F1RHxU9PDS%2B2ZHaU1Xk7bfeu2ayoWpXevi1Vbgt%2F1TrWsq78SnWtvTZPtvBn7S9l9vvSv5llkN%2FcD3Az9onVNWpmZ7dYZCFfu9oN3z23HYDpIY2%2Fa%2Fs6s8OOpB9I%2FISSgx%2Bd%2Fmg%2FtQfIw8%2B%2F6sdFulKd54J6s0LY1FX%2Bx9kG%2Flps6RLdrUekjzvfk2jJsQ8sUSTL43VwDT350qAFMT4v0WgOV7c5pg%2FTtPmDINmYOJp1H3x5B6DEXH4OYWlHhEAC5wcR15dveisTW9%2FgSlU3RClh%2F%2FBVVPyPLvzyLPvjuj1XbritFVqUzusJ02UNtjqI0xiuoA5Y4HVR%2BAlx9BiV%2FJ6uMLyLPddacNlDh8pdPtBdxP5EoYR%2BlKHLHOCg1ZZ6UjRIfziCYi9mcWKTWGSsfQcgDqPFTTT3moUg9V4SEThy2a9FLf76YsjaK1mHMeRZwnax2RiCheS31UfKphgLIYgOsBuL2Bwt78WkRdGTEeDym21GePkpOw1U9wmw2c8OBKgr5oUEuC2hHUlKBWBHVJUPebO0K70DV3hXYVC%2BY1nNeoGZlyY0jvmHJD5mRYHJETUxu953aPY0setjphV4bpGo3DqNdNGI%2BZ6NJuJwjXeCiSJIRTDZRbmoneURPy0gufolAT8v%2FuPhg9gNMH4OoEaBWA1qNu6INujuI1Hzv5fuCHcSktbXOTQZgGRbmM8ro31Efk%2Bdk5Xz72ByR%2FePrei%2FvHg1f%2FBLcNCtvgQ%2FUzwYa%2BPbpsarJ72dSO3F8vSpWpHTo99ZWSlvLYvffk9dpYcf6sG3zzFp8C03b%2FqnTlBZoLlW848u0ZJYS054zlkvxw3l2T7FLlNs9UNq%2BKC5fePnc%2BK6x0Tpl8DKoerf8NriZk%2BeaPs0f8zC%2BfQNkxbNUgqx6SeUCZA%2FDiBlyxYO8MgdWLHVZ4qKtmZEO2%2BKkVgZaLmbIG7l8zW%2FRDdxsbdgm0vIU8a9C3Dfq6AdUDuOqpUVnYh6cffDmNr8D00ohpu7TLtNWfz6ydpiM4ddiSSeqn0g8lS3ss7VJf9NK4x2gvkF2W0AClm0h5%2F%2B4%2FAAAA%2F%2F8BAAD%2F%2FyrUruyhBAAA HTTP/1.1
Host: joblouder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=18326536; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; uid_id2=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40:1:1; nlec627e2f8a423975bc4bd7a76128c2d552=[2229215,2229214]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 09:23:50 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 49f8a35b63f117cbd8c7ce48eeecd3b1
Strict-Transport-Security: max-age=0; includeSubdomains
joblouder.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzYtcxRetN5kf5KcbEwQRXbQiouD0vM%2FuabMIxhgJxkxIIlnX15spp96rR9V7%2FTqzSgyELFy0rtTV69OTjMZBzB%2BgSI%2BbEBTSG5mF49q1EFxKTxpaL1Tde%2BvcxTnn1u1RdUh8VPTg0odmW2lNV5O233rjmsqFqV3r4tVW4Lf9U61rKu%2FEp1qD2WX7bwd%2B0vbfbL0v%2BZZZDf3A9wM%2FaJ1TVqZmsHqEQhV7vaDd89tx2A6SGAP7395VHhz1IPqH5CSUmP5v8%2BEDKD5Bnn1%2FVrqt0hRvvZdVmpbGoi92P8q3clPnyBZlaj2k%2Be58GsZNCfliCSbfnSuA6e%2FMFICpKfF%2BC8Dy3TlNsP7dp0yZhszBxLOo%2BxNIPYGiE3BzC0o8JgAXuLiOPLt30diaXn%2BK0hk6JctP%2FoKqp2T59%2BeRZ9%2Bd0WrQumJ0VSqTOwzSBmowgdqYoKj2UW57UPU%2BePkJlPiVrD65gDzbWXfaQImD1zrdXsD9RK6EcZSuxBHrrNCQdVY6QnQ4j2giYv%2FIIqUmUOkEWg5BnYdqdpSHKvVQFR4ycdCiSS%2F1%2FW7K0ihaiznnUcR5stYRiYjitdRHxWcahiiLIbgegtsbKOzNr0XUlRHj8YhiS332ODkJW%2F0Et9nACQ%2BuJOiLBrUkqB1BTQlqRVCXBHW%2FuSu0C11zT2hXsWCew3mOmrEpN0b0rik3ZE5GxSE5MbPRe2HnOLbkQasTdmWYrtE4jHrdhPGYiS7tdoJwjYciSUI41UC5pSPR22pKXnnpUxRqSv7f3QOj%2B3B6H1ydAK0C0HrcDX3QzXG85mM73wv8MC6lpW1uMgjToCiXUV73RvqQvHi0zlePHULyR6fvv7x3PHj9T3DboLANPlY%2FE2zoO%2BPLpiY7l03tyIP1olSZ2qazVV8paSmP3f9AXq%2BNFefPuuE37%2FAZMCv3rkpXXqC5UPmGI9%2BeUUJIe85YLskP5901yS5VbvNMZfOquHDp3XPns8JK55TJJ6Dq8frf4GpKlm%2F%2BePSJn%2FvlNpSdwFYNsuoRmQeU2QcvbsAVC%2FbOEFi9mGHFEuqqGduQLR61ItBy0VPWwP2rZ4t65O5gwy6BlreQZw36tkFfN6B6CFc9My4L%2B%2Bj0wy9n8RWYXhozbZd2mLb685m1fzz116mDlkxSP5V%2BKFnaY2mX%2BqKXxj1Ge4HssoQGKN1Uygf3%2FgEAAP%2F%2FAQAA%2F%2F%2BZJ%2BT7oQQAAA%3D%3D
200 OK 7 B URL GET HTTP/1.1 joblouder.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzYtcxRetN5kf5KcbEwQRXbQiouD0vM%2FuabMIxhgJxkxIIlnX15spp96rR9V7%2FTqzSgyELFy0rtTV69OTjMZBzB%2BgSI%2BbEBTSG5mF49q1EFxKTxpaL1Tde%2BvcxTnn1u1RdUh8VPTg0odmW2lNV5O233rjmsqFqV3r4tVW4Lf9U61rKu%2FEp1qD2WX7bwd%2B0vbfbL0v%2BZZZDf3A9wM%2FaJ1TVqZmsHqEQhV7vaDd89tx2A6SGAP7395VHhz1IPqH5CSUmP5v8%2BEDKD5Bnn1%2FVrqt0hRvvZdVmpbGoi92P8q3clPnyBZlaj2k%2Be58GsZNCfliCSbfnSuA6e%2FMFICpKfF%2BC8Dy3TlNsP7dp0yZhszBxLOo%2BxNIPYGiE3BzC0o8JgAXuLiOPLt30diaXn%2BK0hk6JctP%2FoKqp2T59%2BeRZ9%2Bd0WrQumJ0VSqTOwzSBmowgdqYoKj2UW57UPU%2BePkJlPiVrD65gDzbWXfaQImD1zrdXsD9RK6EcZSuxBHrrNCQdVY6QnQ4j2giYv%2FIIqUmUOkEWg5BnYdqdpSHKvVQFR4ycdCiSS%2F1%2FW7K0ihaiznnUcR5stYRiYjitdRHxWcahiiLIbgegtsbKOzNr0XUlRHj8YhiS332ODkJW%2F0Et9nACQ%2BuJOiLBrUkqB1BTQlqRVCXBHW%2FuSu0C11zT2hXsWCew3mOmrEpN0b0rik3ZE5GxSE5MbPRe2HnOLbkQasTdmWYrtE4jHrdhPGYiS7tdoJwjYciSUI41UC5pSPR22pKXnnpUxRqSv7f3QOj%2B3B6H1ydAK0C0HrcDX3QzXG85mM73wv8MC6lpW1uMgjToCiXUV73RvqQvHi0zlePHULyR6fvv7x3PHj9T3DboLANPlY%2FE2zoO%2BPLpiY7l03tyIP1olSZ2qazVV8paSmP3f9AXq%2BNFefPuuE37%2FAZMCv3rkpXXqC5UPmGI9%2BeUUJIe85YLskP5901yS5VbvNMZfOquHDp3XPns8JK55TJJ6Dq8frf4GpKlm%2F%2BePSJn%2FvlNpSdwFYNsuoRmQeU2QcvbsAVC%2FbOEFi9mGHFEuqqGduQLR61ItBy0VPWwP2rZ4t65O5gwy6BlreQZw36tkFfN6B6CFc9My4L%2B%2Bj0wy9n8RWYXhozbZd2mLb685m1fzz116mDlkxSP5V%2BKFnaY2mX%2BqKXxj1Ge4HssoQGKN1Uygf3%2FgEAAP%2F%2FAQAA%2F%2F%2BZJ%2BT7oQQAAA%3D%3D
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerLet's Encrypt
Subjectjoblouder.com
Fingerprint30:FD:12:BB:38:60:1D:88:0D:67:03:0F:82:44:A4:FB:76:96:FD:83
ValiditySat, 25 Nov 2023 07:50:03 GMT - Fri, 23 Feb 2024 07:50:02 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSzYtcxRetN5kf5KcbEwQRXbQiouD0vM%2FuabMIxhgJxkxIIlnX15spp96rR9V7%2FTqzSgyELFy0rtTV69OTjMZBzB%2BgSI%2BbEBTSG5mF49q1EFxKTxpaL1Tde%2BvcxTnn1u1RdUh8VPTg0odmW2lNV5O233rjmsqFqV3r4tVW4Lf9U61rKu%2FEp1qD2WX7bwd%2B0vbfbL0v%2BZZZDf3A9wM%2FaJ1TVqZmsHqEQhV7vaDd89tx2A6SGAP7395VHhz1IPqH5CSUmP5v8%2BEDKD5Bnn1%2FVrqt0hRvvZdVmpbGoi92P8q3clPnyBZlaj2k%2Be58GsZNCfliCSbfnSuA6e%2FMFICpKfF%2BC8Dy3TlNsP7dp0yZhszBxLOo%2BxNIPYGiE3BzC0o8JgAXuLiOPLt30diaXn%2BK0hk6JctP%2FoKqp2T59%2BeRZ9%2Bd0WrQumJ0VSqTOwzSBmowgdqYoKj2UW57UPU%2BePkJlPiVrD65gDzbWXfaQImD1zrdXsD9RK6EcZSuxBHrrNCQdVY6QnQ4j2giYv%2FIIqUmUOkEWg5BnYdqdpSHKvVQFR4ycdCiSS%2F1%2FW7K0ihaiznnUcR5stYRiYjitdRHxWcahiiLIbgegtsbKOzNr0XUlRHj8YhiS332ODkJW%2F0Et9nACQ%2BuJOiLBrUkqB1BTQlqRVCXBHW%2FuSu0C11zT2hXsWCew3mOmrEpN0b0rik3ZE5GxSE5MbPRe2HnOLbkQasTdmWYrtE4jHrdhPGYiS7tdoJwjYciSUI41UC5pSPR22pKXnnpUxRqSv7f3QOj%2B3B6H1ydAK0C0HrcDX3QzXG85mM73wv8MC6lpW1uMgjToCiXUV73RvqQvHi0zlePHULyR6fvv7x3PHj9T3DboLANPlY%2FE2zoO%2BPLpiY7l03tyIP1olSZ2qazVV8paSmP3f9AXq%2BNFefPuuE37%2FAZMCv3rkpXXqC5UPmGI9%2BeUUJIe85YLskP5901yS5VbvNMZfOquHDp3XPns8JK55TJJ6Dq8frf4GpKlm%2F%2BePSJn%2FvlNpSdwFYNsuoRmQeU2QcvbsAVC%2FbOEFi9mGHFEuqqGduQLR61ItBy0VPWwP2rZ4t65O5gwy6BlreQZw36tkFfN6B6CFc9My4L%2B%2Bj0wy9n8RWYXhozbZd2mLb685m1fzz116mDlkxSP5V%2BKFnaY2mX%2BqKXxj1Ge4HssoQGKN1Uygf3%2FgEAAP%2F%2FAQAA%2F%2F%2BZJ%2BT7oQQAAA%3D%3D HTTP/1.1
Host: joblouder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=18326536; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; uid_id2=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40:1:1; nlec627e2f8a423975bc4bd7a76128c2d552=[2229215,2229214]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 09:23:50 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8f803862c46fd001ce766e31468723a9
Strict-Transport-Security: max-age=0; includeSubdomains
friendshipmale.com/sfp.js
200 OK 27 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 924e967bca1d599992556a8d139b1c5a
222b09dbf164ddc03d39100fd0524a22018d28b2
ac84c2f8288b59f8e04ba77287ce696052bfeee0d462a566d94dc305df646c95
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:50 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 94477c2abbe38e290a6a7def36074a83
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 28 Nov 2023 09:23:49 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OtmqMWNWzClD4w2bXKWq%2BklG5HuqvFvqT45znnzc7gFjQ%2BOAHqxI9V1ok75lr8ei4xlktdJ0%2FJgmsOpbItW0JREKAo7zym7seIzJM4xk7kn%2BOZFD2c%2BzyqOQxN%2BB%2FKauaTP%2FSUI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d18decea3156aa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
joblouder.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzYscxRuu3uwP8tOLCYKIHkYRUXBn%2B3N6xhyCMUaCMRuSSM7VVdW75VZ3NVXd05M9JQY0Bw%2BjJ%2FXU88wmq3ER8wcoMuslBIXMRfbgevYsBI8yk4HRF%2Fr96Oc9PM%2Fz1sej6oi4qOjhpff1jlSKrkdtt%2FXaNZlzXdvWxastz227p1rXZN4JT7UGs2T6b3pu1HZfb70r2LZe913PdT3Xa52TRqR6sD5HIYv9ntfuue3Qb3tRiIH572wrB5Y64P0jchKST%2F%2B39eA%2BJJsgz74%2FK%2Bx2qYs33skqRUtt0Od7H%2BTbua5zZMs2NQ7SfG%2BxDW2nhHyxAp3vLRRA93dnCpDIKXF%2B85DkewuaSPp3njBNFESOhD%2BNuj%2BBUBNIOgHTtyD5IwIwjosbyLO7F7Wp6fUnKJ2hU7L6%2BC%2FIekpWf38WefbdGSUHrStaVaXUucUgbSAHE8jNCYrqAOWOA1kfgJUfQfJfyfrjC8iz3Q2rNCQ%2FfKUT9zzmRmLND4N0LQySzhr1k85ah%2FMOYwGNeOjOLZJyAplOoMQQ1DqoZp90UKUOqsJBxg9bNOqlrhunSRoE3ZAxFgSMRd0Oj3gQdlMXFZtpGKIshmBqCGZuoDA3v%2BZBLIKEhSOKbfnZo%2BgkTPUT7FYDyx3YkqDPG9SCoLYENSWoJUFdEtT95g5X1rfNXa5slXiL6i9q0Ix1uTmid3S5KXIyKo7IiZmNznO7x7EtDlsdPxZ%2B2qWhH%2FTiKGFhwmMadzy%2Fy3weRT6sbCDtylz0jpySl174FIWckv%2FH%2B0joAaw6AJMnQCsPtB7Hvgu6NQ67Lnbyfc%2F1w1IY2mY6A9cNinIV5XVnpI7I8%2FNzvnzsDwj28PS9F%2FePe6%2F%2BCWYaFKbBh%2FJngk11e3xZ12T3sq4tub9RlDKTO3R26islLcWxe%2B%2BJ67U2%2FPxZO%2FzmLTYDZu3%2BVWHLCzTnMt%2B05NszknNhzmnDBPnhvL0mkkuV3TpTmbwqLlx6%2B9z5rDDCWqnzCah8tPE3mJyS1Zs%2Fzh%2FxM798AmkmMFWDrHpIFgGpD8CKG7DFkr3VBEYtd5LCQV01Y%2BMny59KEiixnGnSwP5rTpb9yN7GplkBLW8hzxr0TYO%2BakDVELZ6alwW5uHpB1%2FO4iskamWcKLOymyijPp9bO0tHsPKwFXmh6CbdmHGeCMa92A%2B6gev6nIdxT3g9lHYqxP27%2FwAAAP%2F%2FAQAA%2F%2F8%2B3CAKoQQAAA%3D%3D
200 OK 7 B URL GET HTTP/1.1 joblouder.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzYscxRuu3uwP8tOLCYKIHkYRUXBn%2B3N6xhyCMUaCMRuSSM7VVdW75VZ3NVXd05M9JQY0Bw%2BjJ%2FXU88wmq3ER8wcoMuslBIXMRfbgevYsBI8yk4HRF%2Fr96Oc9PM%2Fz1sej6oi4qOjhpff1jlSKrkdtt%2FXaNZlzXdvWxastz227p1rXZN4JT7UGs2T6b3pu1HZfb70r2LZe913PdT3Xa52TRqR6sD5HIYv9ntfuue3Qb3tRiIH572wrB5Y64P0jchKST%2F%2B39eA%2BJJsgz74%2FK%2Bx2qYs33skqRUtt0Od7H%2BTbua5zZMs2NQ7SfG%2BxDW2nhHyxAp3vLRRA93dnCpDIKXF%2B85DkewuaSPp3njBNFESOhD%2BNuj%2BBUBNIOgHTtyD5IwIwjosbyLO7F7Wp6fUnKJ2hU7L6%2BC%2FIekpWf38WefbdGSUHrStaVaXUucUgbSAHE8jNCYrqAOWOA1kfgJUfQfJfyfrjC8iz3Q2rNCQ%2FfKUT9zzmRmLND4N0LQySzhr1k85ah%2FMOYwGNeOjOLZJyAplOoMQQ1DqoZp90UKUOqsJBxg9bNOqlrhunSRoE3ZAxFgSMRd0Oj3gQdlMXFZtpGKIshmBqCGZuoDA3v%2BZBLIKEhSOKbfnZo%2BgkTPUT7FYDyx3YkqDPG9SCoLYENSWoJUFdEtT95g5X1rfNXa5slXiL6i9q0Ix1uTmid3S5KXIyKo7IiZmNznO7x7EtDlsdPxZ%2B2qWhH%2FTiKGFhwmMadzy%2Fy3weRT6sbCDtylz0jpySl174FIWckv%2FH%2B0joAaw6AJMnQCsPtB7Hvgu6NQ67Lnbyfc%2F1w1IY2mY6A9cNinIV5XVnpI7I8%2FNzvnzsDwj28PS9F%2FePe6%2F%2BCWYaFKbBh%2FJngk11e3xZ12T3sq4tub9RlDKTO3R26islLcWxe%2B%2BJ67U2%2FPxZO%2FzmLTYDZu3%2BVWHLCzTnMt%2B05NszknNhzmnDBPnhvL0mkkuV3TpTmbwqLlx6%2B9z5rDDCWqnzCah8tPE3mJyS1Zs%2Fzh%2FxM798AmkmMFWDrHpIFgGpD8CKG7DFkr3VBEYtd5LCQV01Y%2BMny59KEiixnGnSwP5rTpb9yN7GplkBLW8hzxr0TYO%2BakDVELZ6alwW5uHpB1%2FO4iskamWcKLOymyijPp9bO0tHsPKwFXmh6CbdmHGeCMa92A%2B6gev6nIdxT3g9lHYqxP27%2FwAAAP%2F%2FAQAA%2F%2F8%2B3CAKoQQAAA%3D%3D
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerLet's Encrypt
Subjectjoblouder.com
Fingerprint30:FD:12:BB:38:60:1D:88:0D:67:03:0F:82:44:A4:FB:76:96:FD:83
ValiditySat, 25 Nov 2023 07:50:03 GMT - Fri, 23 Feb 2024 07:50:02 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSzYscxRuu3uwP8tOLCYKIHkYRUXBn%2B3N6xhyCMUaCMRuSSM7VVdW75VZ3NVXd05M9JQY0Bw%2BjJ%2FXU88wmq3ER8wcoMuslBIXMRfbgevYsBI8yk4HRF%2Fr96Oc9PM%2Fz1sej6oi4qOjhpff1jlSKrkdtt%2FXaNZlzXdvWxastz227p1rXZN4JT7UGs2T6b3pu1HZfb70r2LZe913PdT3Xa52TRqR6sD5HIYv9ntfuue3Qb3tRiIH572wrB5Y64P0jchKST%2F%2B39eA%2BJJsgz74%2FK%2Bx2qYs33skqRUtt0Od7H%2BTbua5zZMs2NQ7SfG%2BxDW2nhHyxAp3vLRRA93dnCpDIKXF%2B85DkewuaSPp3njBNFESOhD%2BNuj%2BBUBNIOgHTtyD5IwIwjosbyLO7F7Wp6fUnKJ2hU7L6%2BC%2FIekpWf38WefbdGSUHrStaVaXUucUgbSAHE8jNCYrqAOWOA1kfgJUfQfJfyfrjC8iz3Q2rNCQ%2FfKUT9zzmRmLND4N0LQySzhr1k85ah%2FMOYwGNeOjOLZJyAplOoMQQ1DqoZp90UKUOqsJBxg9bNOqlrhunSRoE3ZAxFgSMRd0Oj3gQdlMXFZtpGKIshmBqCGZuoDA3v%2BZBLIKEhSOKbfnZo%2BgkTPUT7FYDyx3YkqDPG9SCoLYENSWoJUFdEtT95g5X1rfNXa5slXiL6i9q0Ix1uTmid3S5KXIyKo7IiZmNznO7x7EtDlsdPxZ%2B2qWhH%2FTiKGFhwmMadzy%2Fy3weRT6sbCDtylz0jpySl174FIWckv%2FH%2B0joAaw6AJMnQCsPtB7Hvgu6NQ67Lnbyfc%2F1w1IY2mY6A9cNinIV5XVnpI7I8%2FNzvnzsDwj28PS9F%2FePe6%2F%2BCWYaFKbBh%2FJngk11e3xZ12T3sq4tub9RlDKTO3R26islLcWxe%2B%2BJ67U2%2FPxZO%2FzmLTYDZu3%2BVWHLCzTnMt%2B05NszknNhzmnDBPnhvL0mkkuV3TpTmbwqLlx6%2B9z5rDDCWqnzCah8tPE3mJyS1Zs%2Fzh%2FxM798AmkmMFWDrHpIFgGpD8CKG7DFkr3VBEYtd5LCQV01Y%2BMny59KEiixnGnSwP5rTpb9yN7GplkBLW8hzxr0TYO%2BakDVELZ6alwW5uHpB1%2FO4iskamWcKLOymyijPp9bO0tHsPKwFXmh6CbdmHGeCMa92A%2B6gev6nIdxT3g9lHYqxP27%2FwAAAP%2F%2FAQAA%2F%2F8%2B3CAKoQQAAA%3D%3D HTTP/1.1
Host: joblouder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=18326536; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; uid_id2=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40:1:1; nlec627e2f8a423975bc4bd7a76128c2d552=[2229215,2229214]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 09:23:50 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0f61e771e28b726bb243ac0eef969aaa
Strict-Transport-Security: max-age=0; includeSubdomains
proceedglad.com/pixel/purst?dl=0&th=0&sc=0&rs=10731&rd=10731&fd=536&bv=23.11.v.8&tmpl=136
200 OK 0 B URL GET HTTP/1.1 proceedglad.com/pixel/purst?dl=0&th=0&sc=0&rs=10731&rd=10731&fd=536&bv=23.11.v.8&tmpl=136
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerLet's Encrypt
Subjectproceedglad.com
FingerprintF9:04:D4:C5:64:56:F0:7B:9E:AE:0C:CB:EC:1A:5E:E9:8E:9E:86:E3
ValidityWed, 22 Nov 2023 07:26:18 GMT - Tue, 20 Feb 2024 07:26:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=10731&rd=10731&fd=536&bv=23.11.v.8&tmpl=136 HTTP/1.1
Host: proceedglad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 28 Nov 2023 09:23:50 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
data.1024tera.com/thumbnail/86235422e5e4bf8cee9ee4b8adb82d9e?fid=4400473838185-250528-251388614689465&time=1701162000&rt=sh&sign=FDTAER-DCb740ccc5511e5e8fedcff06b081203-PbC%2BxaDGJqi1pQBC0sHG6fUjo%2FI%3D&expires=8h&chkv=0&chkbd=0&chkpc=&dp-logid=8846557421683568607&dp-callid=0&size=c850_u580&quality=100&vuk=-&ft=video
200 OK 22 kB URL GET HTTP/1.1 data.1024tera.com/thumbnail/86235422e5e4bf8cee9ee4b8adb82d9e?fid=4400473838185-250528-251388614689465&time=1701162000&rt=sh&sign=FDTAER-DCb740ccc5511e5e8fedcff06b081203-PbC%2BxaDGJqi1pQBC0sHG6fUjo%2FI%3D&expires=8h&chkv=0&chkbd=0&chkpc=&dp-logid=8846557421683568607&dp-callid=0&size=c850_u580&quality=100&vuk=-&ft=video
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 70x70, segment length 16, baseline, precision 8, 850x354, components 3\012- data
Hash 6d838b0b2afb11aab4dfcaa852361acc
6ef2245b5cc38152545fa0e1016f60bfdc9f7d04
150407c83081a916c6bf3456a9e79877310953200845c5543b3a8de43a156a56
GET /thumbnail/86235422e5e4bf8cee9ee4b8adb82d9e?fid=4400473838185-250528-251388614689465&time=1701162000&rt=sh&sign=FDTAER-DCb740ccc5511e5e8fedcff06b081203-PbC%2BxaDGJqi1pQBC0sHG6fUjo%2FI%3D&expires=8h&chkv=0&chkbd=0&chkpc=&dp-logid=8846557421683568607&dp-callid=0&size=c850_u580&quality=100&vuk=-&ft=video HTTP/1.1
Host: data.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 28 Nov 2023 09:23:49 GMT
Content-Type: image/jpeg
Connection: keep-alive
x-bs-client-ip: OTEuOTAuNDIuMTU0
x-bs-request-id: MTAuMjUyLjE0NC4yMToyMDI1Ojg4NDY1NTc0MjE2ODM1Njg2MDc6MjAyMy0xMS0yOCAxNzoyMzo0OQ==
Content-Length: 22401
Server: TERABOX UI
cdn.cloudimagesb.com/cti/5d/60/ed/5d60edea793259cd719bfa3d19bcae3e/1628587069.jpg
200 OK 28 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/5d/60/ed/5d60edea793259cd719bfa3d19bcae3e/1628587069.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 321x240, components 3\012- data
Hash f4fabf64be47ce667e0cfc150667b36c
234d722efa06cbedfdad9c1bb497a942997741dd
272b7875492a55c6f53a4e4704e715cc5b3cc4e5093758cbfedd95441bfe98d8
GET /cti/5d/60/ed/5d60edea793259cd719bfa3d19bcae3e/1628587069.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:50 GMT
content-type: image/jpeg
content-length: 27606
server: nginx/1.21.6
last-modified: Tue, 10 Aug 2021 09:17:59 GMT
etag: "61124447-6bd6"
expires: Thu, 30 Nov 2023 09:23:50 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/4e/61/98/4e619871efbab123abb0e0121e08e11d/1628586907.jpg
200 OK 23 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/4e/61/98/4e619871efbab123abb0e0121e08e11d/1628586907.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash c6f19781c79ff746b99178f813cfbff2
5c307e43c63001535aa3a3683777dbb1a7f0775b
816b5a5d078f27271fa2d7c210d708f386a6f9fbd9242531b07f0b051382870d
GET /cti/4e/61/98/4e619871efbab123abb0e0121e08e11d/1628586907.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:50 GMT
content-type: image/jpeg
content-length: 22883
server: nginx/1.21.6
last-modified: Tue, 10 Aug 2021 09:15:16 GMT
etag: "611243a4-5963"
expires: Thu, 30 Nov 2023 09:23:50 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?errno=undefined&errormsg=Unable%20to%20connect%20to%20the%20Internet%2C%20please%20connect%20and%20try%20again&type=videoplayer_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163433995
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=undefined&errormsg=Unable%20to%20connect%20to%20the%20Internet%2C%20please%20connect%20and%20try%20again&type=videoplayer_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163433995
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 06825f13d37e7e1429c4a450a2c2c7ff
63ef3c6deefbb71b67f6e73b72808bb251a8dfbe
36ae0f92147ecc32c5fdc109c0716f38a19a38cf245f647ef1674328429f6434
GET /api/analytics?errno=undefined&errormsg=Unable%20to%20connect%20to%20the%20Internet%2C%20please%20connect%20and%20try%20again&type=videoplayer_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163433995 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207; dom3ic8zudi28v8lr6fgphwffqoz0j6c=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=joblouder.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:50 GMT
Flow-Level: 3
Logid: 8846558244401313039
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846558244401313039
Yme: ZIGW+Ss3QEsRdTEDUmr/tG1MvuUYQxz3rwpNwSCF
Content-Length: 44
www.1024tera.com/api/analytics?type=videoplayer_pause&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163434040
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=videoplayer_pause&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163434040
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 501d40cc0453b269cb6a14b95509393f
9117ccf32a9596d9a4bc18bf3accd3e9d628163d
eb6b505c664bdb2ae66e04a3a711128697251df87f4638b1591af18ac426caf2
GET /api/analytics?type=videoplayer_pause&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163434040 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207; dom3ic8zudi28v8lr6fgphwffqoz0j6c=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=joblouder.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:50 GMT
Flow-Level: 3
Logid: 8846558246853784812
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846558246853784812
Yme: ZIGW+Ss3QE0WYisESnb+qnFLufkASwbxtAFKySKDne3f2/p9
Content-Length: 44
www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163434053
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163434053
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash f5805768b98174cd841399c0b453aa44
62d48f77dbe50e827127d5c5e0a0074a435b2186
21ddf02faa0d25ce501eafaa4e515a081695c5e84a90c51dfb16715a47fee4e8
GET /api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163434053 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207; dom3ic8zudi28v8lr6fgphwffqoz0j6c=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=joblouder.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:50 GMT
Flow-Level: 3
Logid: 8846558253600775885
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846558253600775885
Yme: ZIGW+Ss3QEsXdTQCUmr/tG1MvuUZSBz0rwpNwyKC
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/kakao.min.js
200 OK 41 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/kakao.min.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 8e2efceba1bfc5bb58e05f6627a375c3
7f374e1ac72db56879da557be8e7e32fb0454278
555e618f0a36d6e27593950a65575d5341f3a7ff8966abea6efec64ed666714a
GET /fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/kakao.min.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:44 GMT
content-type: application/javascript
server: openresty
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT
access-control-expose-headers: ETag, Content-Length, x-bce-next-append-offset, x-bce-object-type, x-bce-request-id
access-control-max-age: 1800
content-md5: Ng3YsEXIR8ylP6d+vhUKPw==
etag: W/"360dd8b045c847cca53fa77ebe150a3f"
expires: Sat, 24 Sep 2022 06:46:06 GMT
last-modified: Wed, 21 Sep 2022 05:03:33 GMT
x-bce-content-crc32: 3787281588
x-bce-debug-id: NdXOHvJhWdykwQRMkfwzkNsOZ5AZbm+dI56Adia+fvxzTQbCnAlm9HuK5oYXV0mvHXmPazsRbY1yj9LO6Ud5AQ==
x-bce-request-id: 95d5b42d-7d75-47b4-acd7-57e276abb336
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 1729907
via: EU-GER-frankfurt-EDGE5-CACHE1[19],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE4[3],EU-GER-frankfurt-GLOBAL1-CACHE9[0,TCP_HIT,2],EA-SGP-GLOBAL1-CACHE5[4],EA-SGP-GLOBAL1-CACHE7[0,TCP_HIT,3]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24213281
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
firebase.googleapis.com/v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig
200 OK 0 B URL GET HTTP/2 firebase.googleapis.com/v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig HTTP/1.1
Host: firebase.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-goog-api-key
Referer: https://www.1024tera.com/
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.1024tera.com
vary: origin, referer, x-origin
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: x-goog-api-key
access-control-max-age: 3600
date: Tue, 28 Nov 2023 09:23:50 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
firebase.googleapis.com/v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig
200 OK 223 B URL GET HTTP/2 firebase.googleapis.com/v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text
Hash 54c11162d6ef3c32b787d4d8a6a292f8
f1e88b95b9addbd7a1e170daf6da450ab93bdecb
263070732f0c9d00ac3e625982ff38a8d08bc25a2ac03c3e3d524557b09f616f
GET /v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig HTTP/1.1
Host: firebase.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.1024tera.com/
x-goog-api-key: AIzaSyCAt5j0_j4UDEm5Nb4bNvQknuGZoMK_XK8
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 28 Nov 2023 09:23:50 GMT
server: ESF
cache-control: private
content-length: 223
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.1024tera.com
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/gsi/client
200 OK 80 kB URL GET HTTP/2 accounts.google.com/gsi/client
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B
ValidityMon, 23 Oct 2023 11:25:04 GMT - Mon, 15 Jan 2024 11:25:03 GMT
File type gzip compressed data, max compression\012- data
Hash 451e15c1bf549366aa8d710b04a3a091
d63d68a77ff301359523203c07f384fd15e7359b
14ce6028235b709aca8a16ddc0103ced3761db9c76a478c0213964e79620befe
GET /gsi/client HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
expires: Tue, 28 Nov 2023 09:23:50 GMT
date: Tue, 28 Nov 2023 09:23:50 GMT
cache-control: private, max-age=1800
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
cross-origin-resource-policy: cross-origin
content-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-hDTLU-Oki5Rh3MwavDGcGQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.1024tera.com/fe-opera-static/box-static/disk-system/images/favicon.ico
200 OK 1.7 kB URL GET HTTP/1.1 www.1024tera.com/fe-opera-static/box-static/disk-system/images/favicon.ico
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash 85c3fafc35604bddb3171dee4c0aa6dc
4cb347df6fbedcf8b7e77c9b0673ff3667ed0266
fd68b8c59d5d564cb46519aaaf236ef2ffab9c79c4b1e3ea67a1a57a0120731e
GET /fe-opera-static/box-static/disk-system/images/favicon.ico HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207; dom3ic8zudi28v8lr6fgphwffqoz0j6c=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=joblouder.com; pp_main_1e1bbdc937ccd35cd1897b4e58c7407b=1; pp_idelay_1e1bbdc937ccd35cd1897b4e58c7407b=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Connection: keep-alive
Content-Type: image/x-icon
Date: Tue, 28 Nov 2023 09:23:50 GMT
Etag: "64783b7d-693"
Expires: Thu, 28 Dec 2023 09:23:50 GMT
Flow-Level: 3
Last-Modified: Thu, 01 Jun 2023 06:32:29 GMT
Logid: 8846558341347199691
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: TeraBox
Yld: 8846558341347199691
Yme: ZIGW+Ss3QEsUdTcMUmr/tG1MvuUZSxzxrwpNwyeE
Transfer-Encoding: chunked
www.googletagmanager.com/gtag/js?l=dataLayer&id=G-06ZNKL8C2E
200 OK 85 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?l=dataLayer&id=G-06ZNKL8C2E
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type Unicode text, UTF-8 text, with very long lines (3034)
Hash 71bd252dbf443f0566edd1c388d4b980
38dbb95c0abd879669607eaffb51555355e1ad7c
4daa210b505e72a02582fb079924200badb6173ece5a687c93cc37af8acadf97
GET /gtag/js?l=dataLayer&id=G-06ZNKL8C2E HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 28 Nov 2023 09:23:50 GMT
expires: Tue, 28 Nov 2023 09:23:50 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 85357
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/facebook.min.js
200 OK 2.5 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/facebook.min.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 58374fd0f8c5171543b7221fb77ac904
56dd2182073312e7eff39c83191751be43448238
1e8ee33b804c599c8a3d198d4b7304e6ec8b796333d96c56f7e7ef7e962ee4c1
GET /fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/facebook.min.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:44 GMT
content-type: application/javascript
server: openresty
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT
access-control-expose-headers: ETag, Content-Length, x-bce-next-append-offset, x-bce-object-type, x-bce-request-id
access-control-max-age: 1800
content-md5: Aowl118tEMuXoOFINDERYw==
etag: W/"028c25d75f2d10cb97a0e14834311163"
expires: Sat, 24 Sep 2022 06:46:06 GMT
last-modified: Wed, 21 Sep 2022 05:03:33 GMT
x-bce-content-crc32: 3600293201
x-bce-debug-id: drF3pXV387iC2EyFCn4G8jIjxuuDcbNW6JT4jDmhDeNosKMTV4jVPaeR4QxYWsldtHHLV0pqg9KhEHfx+45FOQ==
x-bce-request-id: 1e1dfa93-d4b6-4000-b380-bdf1ecb59464
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 1729907
via: EU-GER-frankfurt-EDGE5-CACHE1[23],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE3[3],EU-GER-frankfurt-GLOBAL1-CACHE10[0,TCP_HIT,2],EA-SGP-GLOBAL1-CACHE9[4],EA-SGP-GLOBAL1-CACHE30[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24213281
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
sofire.bdstatic.com/js/fsec-hd.js
200 OK 102 kB URL GET HTTP/2 sofire.bdstatic.com/js/fsec-hd.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
File type Unicode text, UTF-8 text, with very long lines (49888), with NEL line terminators
Size 102 kB (102174 bytes)
Hash 834113d1867d8ec45fc41e3c692fdead
d292eeadefb195296a6daf8cb607a74753ed8864
a97cd69480a0a2aec421ab52af71fe820b469aa382412c99948766333b2c534d
GET /js/fsec-hd.js HTTP/1.1
Host: sofire.bdstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: JSP3/2.0.14
date: Tue, 28 Nov 2023 09:23:43 GMT
content-type: text/javascript
expires: Thu, 30 Nov 2023 03:12:08 GMT
last-modified: Fri, 30 Jun 2023 07:31:01 GMT
etag: "834113d1867d8ec45fc41e3c692fdead"
content-encoding: br
age: 97415
accept-ranges: bytes
content-md5: g0ET0YZ9jsRfxB48aS/erQ==
x-bce-content-crc32: 1744549445
x-bce-debug-id: pmwOPs6TwXuIuqgkHTlpEk/8vFw6h4RzBYfHbfmcyD2Cod3s4Ck2OGK0+cpSc/pvzUQd8yR5hAizocjuO8jv/w==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 2cfb6092-110f-439a-aca9-fa6132a89f36
x-bce-storage-class: STANDARD
ohc-global-saved-time: Mon, 27 Nov 2023 03:12:08 GMT
ohc-cache-hit: wz2ct55 [2], nb2ctcache78 [2]
ohc-response-time: 1 0 0 0 0 0
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-06ZNKL8C2E&cid=1235297465.1701163435>m=45je3b81v875375078&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=114142479
200 OK 42 B URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-06ZNKL8C2E&cid=1235297465.1701163435>m=45je3b81v875375078&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=114142479
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint6E:E4:BC:4A:67:5E:46:6A:B3:E4:CA:61:A7:C0:97:AB:14:F0:34:32
ValidityMon, 23 Oct 2023 11:27:27 GMT - Mon, 15 Jan 2024 11:27:26 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-06ZNKL8C2E&cid=1235297465.1701163435>m=45je3b81v875375078&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=114142479 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 28 Nov 2023 09:23:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
unseenreport.com/pxf.gif?uuid=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=1e1bbdc937ccd35cd1897b4e58c7407b&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=9
200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=1e1bbdc937ccd35cd1897b4e58c7407b&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=9
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14
ValidityWed, 22 Nov 2023 07:56:28 GMT - Tue, 20 Feb 2024 07:56:27 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=1e1bbdc937ccd35cd1897b4e58c7407b&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=9 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 28 Nov 2023 09:23:51 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5d946eae56d850ac73e35b440d01fe00
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=f195e5fa577c23352666448243864c68&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=9
200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=f195e5fa577c23352666448243864c68&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=9
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14
ValidityWed, 22 Nov 2023 07:56:28 GMT - Tue, 20 Feb 2024 07:56:27 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=f195e5fa577c23352666448243864c68&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=9 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 28 Nov 2023 09:23:51 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6afdf454b5af9f221c2939e9a2b56dcf
Strict-Transport-Security: max-age=0; includeSubdomains
region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3b81v875375078&_p=1701163434654&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1235297465.1701163435&ul=en-us&sr=1280x1024&_s=1&sid=1701163434&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&dt=vid_480p.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.origin=firebase&tfd=11984
204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3b81v875375078&_p=1701163434654&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1235297465.1701163435&ul=en-us&sr=1280x1024&_s=1&sid=1701163434&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&dt=vid_480p.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.origin=firebase&tfd=11984
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3b81v875375078&_p=1701163434654&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1235297465.1701163435&ul=en-us&sr=1280x1024&_s=1&sid=1701163434&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&dt=vid_480p.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.origin=firebase&tfd=11984 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.1024tera.com
date: Tue, 28 Nov 2023 09:23:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
proceedglad.com/sbar.json?key=f195e5fa577c23352666448243864c68&uuid=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40%3A1%3A1
2.5 kB URL proceedglad.com/sbar.json?key=f195e5fa577c23352666448243864c68&uuid=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40%3A1%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectproceedglad.com
FingerprintF9:04:D4:C5:64:56:F0:7B:9E:AE:0C:CB:EC:1A:5E:E9:8E:9E:86:E3
ValidityWed, 22 Nov 2023 07:26:18 GMT - Tue, 20 Feb 2024 07:26:17 GMT
File type JSON data\012- , ASCII text, with very long lines (6024), with no line terminators
Hash 8c0bd89b499a576c277c8d0b751b42da
6b6ab074535f9e80ad3bb981e60c3650a8f6d50a
4be8ecea2ba44af38073f2b72428b1dfb07db4080c6dfb993624283785886180
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sbar.json?key=f195e5fa577c23352666448243864c68&uuid=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40%3A1%3A1 HTTP/1.1
Host: proceedglad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 28 Nov 2023 09:23:55 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.1024tera.com
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=20651427; expires=Wed, 29 Nov 2023 09:23:55 GMT; secure; SameSite=None
uid_id2=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40:1:1; expires=Tue, 05 Dec 2023 09:23:55 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 29 Nov 2023 09:23:55 GMT; secure; SameSite=None
uncs=1; expires=Wed, 29 Nov 2023 09:23:55 GMT; secure; SameSite=None
pdhtkv29=true; expires=Wed, 29 Nov 2023 09:23:55 GMT; secure; SameSite=None
uncs29=1; expires=Wed, 29 Nov 2023 09:23:55 GMT; secure; SameSite=None
slecf195e5fa577c23352666448243864c68=[4766299]; expires=Tue, 28 Nov 2023 09:24:00 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c72f0e6de37568a1e60408042edebc0b
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
proceedglad.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRSuTuJBxENCLiKBETxEcGf7f2bMIRhjYjAmMT%2Fk4Km6qnq23Oqupqp7ejK5BAOSg4cJePDY%2B80mi2YJxqMgyKwXCQgZD7IHF8R7LkLOMpOB0QdV733vq8P7vldfblUHxEVF9698okdSKboetd3WyZsy57q2rUvXW57bdk%2B1bso8Dk%2B1hvPLDN7z3KjtvtM6L9imXvddz3U912udk0akeri%2BYCGL3Z7X7rnt0G97UYih%2BT%2B2lQNLHfDBATkGyWevbPz6BJJNkWffnxV2s9TFux9mlaKlNhjwnRv5Zq7rHNmqTI2DNN9Zvoa2M0K%2BOQSd7ywVQA%2B25wqQyBlx%2FvCQ5DvLMZEMHrycNFEQORL%2BGurBFEJNIekUTN%2BF5M8IwDguXUaePbykTU1vvWTpnJ2RIy%2F%2Bgaxn5Mifx5Fnj88oOWxd06oqpc4thmkDOZxC9qcoqj2UIwey3gMrv4Dkv5H1FxeRZ9uXrdKQfP%2FtuNPzmBuJNT8M0rUwSOI16ifxWsx5zFhAIx66C4uknEKmUygxBrUOqvmRDqrUQVU4yPh%2Bi0a91HU7aZIGQTdkjAUBY1E35hEPwm7qomJzDWOUxRhMjcHMHRTmDjbl%2FWfRMZjqZ9iNBpYfgi1nxPn0Nga8QS0IaktQU4JaEtQlQT1oHnBlfds85MpWibfM%2FjIHzUSX%2FS36QJd9kZOt4oAcnfvnnDoxwabYb6VeLxJRSqNOh%2FlBEPlxHIdh1w%2BDbhyyuAsrG0h7aKF2JGfkrTe%2FQiFn5NXOLhK6B6v2wORR0OoEaD3p%2BC7oxiTsuhjlu57rh6UwtM10Bq4bFOURlLecLXVA3ljs8aMfP4NgT09%2FPfrr%2FOPjt8FMg8I0%2BFz%2BQtBX9yZXdU22r%2BrakieXi1JmckTnO75W0lIc%2Fu5jcavWhl84a8ffvs%2FmxLzcvS5seZHmXOZ9Sx6dkZwLc04bJshPF%2BxNkVyp7MaZyuRVcfHKB%2BcuZIUR1kqdT0HljJDnP4DJGXn9uV3835M3%2FoY0U5iqQVY9JcuA1HtgxR3YYtWzmsCoFU4KB3XVTIyfrJpKEiixwjRpYP%2BDk1W9Ze%2BhbxzQ8i7yrMHANBioBlSNYavDk7IwT0%2F%2FHiwCiXImiTLOdqKMuv%2FSXCv3WyJK3VS4vkjSXpJ2qMt7adhLaM8TnSSiHko7E%2BLJo38BAAD%2F%2FwEAAP%2F%2FsNOgxZcEAAA%3D
7 B URL proceedglad.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRSuTuJBxENCLiKBETxEcGf7f2bMIRhjYjAmMT%2Fk4Km6qnq23Oqupqp7ejK5BAOSg4cJePDY%2B80mi2YJxqMgyKwXCQgZD7IHF8R7LkLOMpOB0QdV733vq8P7vldfblUHxEVF9698okdSKboetd3WyZsy57q2rUvXW57bdk%2B1bso8Dk%2B1hvPLDN7z3KjtvtM6L9imXvddz3U912udk0akeri%2BYCGL3Z7X7rnt0G97UYih%2BT%2B2lQNLHfDBATkGyWevbPz6BJJNkWffnxV2s9TFux9mlaKlNhjwnRv5Zq7rHNmqTI2DNN9Zvoa2M0K%2BOQSd7ywVQA%2B25wqQyBlx%2FvCQ5DvLMZEMHrycNFEQORL%2BGurBFEJNIekUTN%2BF5M8IwDguXUaePbykTU1vvWTpnJ2RIy%2F%2Bgaxn5Mifx5Fnj88oOWxd06oqpc4thmkDOZxC9qcoqj2UIwey3gMrv4Dkv5H1FxeRZ9uXrdKQfP%2FtuNPzmBuJNT8M0rUwSOI16ifxWsx5zFhAIx66C4uknEKmUygxBrUOqvmRDqrUQVU4yPh%2Bi0a91HU7aZIGQTdkjAUBY1E35hEPwm7qomJzDWOUxRhMjcHMHRTmDjbl%2FWfRMZjqZ9iNBpYfgi1nxPn0Nga8QS0IaktQU4JaEtQlQT1oHnBlfds85MpWibfM%2FjIHzUSX%2FS36QJd9kZOt4oAcnfvnnDoxwabYb6VeLxJRSqNOh%2FlBEPlxHIdh1w%2BDbhyyuAsrG0h7aKF2JGfkrTe%2FQiFn5NXOLhK6B6v2wORR0OoEaD3p%2BC7oxiTsuhjlu57rh6UwtM10Bq4bFOURlLecLXVA3ljs8aMfP4NgT09%2FPfrr%2FOPjt8FMg8I0%2BFz%2BQtBX9yZXdU22r%2BrakieXi1JmckTnO75W0lIc%2Fu5jcavWhl84a8ffvs%2FmxLzcvS5seZHmXOZ9Sx6dkZwLc04bJshPF%2BxNkVyp7MaZyuRVcfHKB%2BcuZIUR1kqdT0HljJDnP4DJGXn9uV3835M3%2FoY0U5iqQVY9JcuA1HtgxR3YYtWzmsCoFU4KB3XVTIyfrJpKEiixwjRpYP%2BDk1W9Ze%2BhbxzQ8i7yrMHANBioBlSNYavDk7IwT0%2F%2FHiwCiXImiTLOdqKMuv%2FSXCv3WyJK3VS4vkjSXpJ2qMt7adhLaM8TnSSiHko7E%2BLJo38BAAD%2F%2FwEAAP%2F%2FsNOgxZcEAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectproceedglad.com
FingerprintF9:04:D4:C5:64:56:F0:7B:9E:AE:0C:CB:EC:1A:5E:E9:8E:9E:86:E3
ValidityWed, 22 Nov 2023 07:26:18 GMT - Tue, 20 Feb 2024 07:26:17 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRSuTuJBxENCLiKBETxEcGf7f2bMIRhjYjAmMT%2Fk4Km6qnq23Oqupqp7ejK5BAOSg4cJePDY%2B80mi2YJxqMgyKwXCQgZD7IHF8R7LkLOMpOB0QdV733vq8P7vldfblUHxEVF9698okdSKboetd3WyZsy57q2rUvXW57bdk%2B1bso8Dk%2B1hvPLDN7z3KjtvtM6L9imXvddz3U912udk0akeri%2BYCGL3Z7X7rnt0G97UYih%2BT%2B2lQNLHfDBATkGyWevbPz6BJJNkWffnxV2s9TFux9mlaKlNhjwnRv5Zq7rHNmqTI2DNN9Zvoa2M0K%2BOQSd7ywVQA%2B25wqQyBlx%2FvCQ5DvLMZEMHrycNFEQORL%2BGurBFEJNIekUTN%2BF5M8IwDguXUaePbykTU1vvWTpnJ2RIy%2F%2Bgaxn5Mifx5Fnj88oOWxd06oqpc4thmkDOZxC9qcoqj2UIwey3gMrv4Dkv5H1FxeRZ9uXrdKQfP%2FtuNPzmBuJNT8M0rUwSOI16ifxWsx5zFhAIx66C4uknEKmUygxBrUOqvmRDqrUQVU4yPh%2Bi0a91HU7aZIGQTdkjAUBY1E35hEPwm7qomJzDWOUxRhMjcHMHRTmDjbl%2FWfRMZjqZ9iNBpYfgi1nxPn0Nga8QS0IaktQU4JaEtQlQT1oHnBlfds85MpWibfM%2FjIHzUSX%2FS36QJd9kZOt4oAcnfvnnDoxwabYb6VeLxJRSqNOh%2FlBEPlxHIdh1w%2BDbhyyuAsrG0h7aKF2JGfkrTe%2FQiFn5NXOLhK6B6v2wORR0OoEaD3p%2BC7oxiTsuhjlu57rh6UwtM10Bq4bFOURlLecLXVA3ljs8aMfP4NgT09%2FPfrr%2FOPjt8FMg8I0%2BFz%2BQtBX9yZXdU22r%2BrakieXi1JmckTnO75W0lIc%2Fu5jcavWhl84a8ffvs%2FmxLzcvS5seZHmXOZ9Sx6dkZwLc04bJshPF%2BxNkVyp7MaZyuRVcfHKB%2BcuZIUR1kqdT0HljJDnP4DJGXn9uV3835M3%2FoY0U5iqQVY9JcuA1HtgxR3YYtWzmsCoFU4KB3XVTIyfrJpKEiixwjRpYP%2BDk1W9Ze%2BhbxzQ8i7yrMHANBioBlSNYavDk7IwT0%2F%2FHiwCiXImiTLOdqKMuv%2FSXCv3WyJK3VS4vkjSXpJ2qMt7adhLaM8TnSSiHko7E%2BLJo38BAAD%2F%2FwEAAP%2F%2FsNOgxZcEAAA%3D HTTP/1.1
Host: proceedglad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=20651427; uid_id2=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slecf195e5fa577c23352666448243864c68=[4766299]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 28 Nov 2023 09:23:55 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1b2194f1bc2191e2debd51f50770836b
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.cloudimagesb.com/si/98/58/2f/98582fa31e3a411721a1f890fd22419a/1700491903.png
9.0 kB URL cdn.cloudimagesb.com/si/98/58/2f/98582fa31e3a411721a1f890fd22419a/1700491903.png
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash a56f06ca83ee06488a213b352e00bd90
aec437b74eb6f1143683872fb2d664286da4a664
7144c526762a9d91bdde1939194c2835f2cb1afe0ebac298bbdf1e9239b539ec
GET /si/98/58/2f/98582fa31e3a411721a1f890fd22419a/1700491903.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:55 GMT
content-type: image/png
content-length: 9016
server: nginx/1.21.6
last-modified: Mon, 20 Nov 2023 14:51:52 GMT
etag: "655b7288-2338"
expires: Thu, 30 Nov 2023 09:23:55 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/3c/d5/62/3cd562dd264800ee586ac2da770e9a65/1700491951.png
20 kB URL cdn.cloudimagesb.com/si/3c/d5/62/3cd562dd264800ee586ac2da770e9a65/1700491951.png
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type PNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash ea31001ce8fa95eb2ac1617515105332
d505ca04808c25cfa33a555c96886f421ddbbde7
0267f5cd21fe5609405724c20d6f021b8932a696ada766b8e86e42c670000ab3
GET /si/3c/d5/62/3cd562dd264800ee586ac2da770e9a65/1700491951.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:55 GMT
content-type: image/png
content-length: 20001
server: nginx/1.21.6
last-modified: Mon, 20 Nov 2023 14:52:40 GMT
etag: "655b72b8-4e21"
expires: Thu, 30 Nov 2023 09:23:55 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/img/close.png
591 B URL cdn.creative-bars1.com/sb/ssp/vpn/classic-push/big1/img/close.png
IP
File type PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 9fd5bcb6103d86e317bd1eb019bcbe71
6b5a52ea669dcb74946f2bed4bdd7ec985026113
0ddd3be104ac7945fb062096df62034a6a24ecc76ba92493c35c62c3c25982ae
GET /sb/ssp/vpn/classic-push/big1/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:55 GMT
content-type: image/png
content-length: 591
last-modified: Mon, 21 Feb 2022 10:06:44 GMT
etag: "62136434-24f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 2434648
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Mw9BfhuU7qCnrJ22qIm0EjdHaCPJ3KMGEdwPKtt%2FULAloFk3nYxsLKLzqcccLWANEfCjl%2BbImJ73f7KyZFTWtuNtk3i1lkht%2FCPgAd8601dvWqWoLwRXfRAQ2aqjLJxAT9z4v0n0BhT5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d18e1189906716-AMS
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.barscreative1.com/sb/au/48/48/eb/4848ebd6f7295875a5d388ec2488aba3/1648542421.html
21 kB URL cdn.barscreative1.com/sb/au/48/48/eb/4848ebd6f7295875a5d388ec2488aba3/1648542421.html
IP
ASN #39572 DataWeb Global Group B.V.
File type gzip compressed data, from Unix\012- data
Hash 170ca098dc31e7c30d3439c01f9a2d31
a5cdf0846a0cd5f6ac4659fc722eea00a37e516a
0b66abab2bcd311b33922c10e11af8bb24d3b48a5b1f97371b242f7a1b2b52d7
GET /sb/au/48/48/eb/4848ebd6f7295875a5d388ec2488aba3/1648542421.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:55 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Tue, 29 Mar 2022 08:27:10 GMT
etag: W/"6242c2de-602"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Tue, 28 Nov 2023 10:23:55 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
16 kB URL fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 04:57:34 GMT
expires: Fri, 22 Nov 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 447982
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
proceedglad.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRSuTuJBxENCLiKBETxEcGf7f2bMIRhjYjAmMT%2Fk4Km6qnq23Oqupqp7ejK5BAOSg4cJePDY%2B80mi2YJxqMgyKwXCQgZD7IHF8R7LkLOMpOB0QdV733vq8P7vldfblUHxEVF9698okdSKboetd3WyZsy57q2rUvXW57bdk%2B1bso8Dk%2B1hvPLDN7z3KjtvtM6L9imXvddz3U912udk0akeri%2BYCGL3Z7X7rnt0G97UYih%2BT%2B2lQNLHfDBATkGyWevbPz6BJJNkWffnxV2s9TFux9mlaKlNhjwnRv5Zq7rHNmqTI2DNN9Zvoa2M0K%2BOQSd7ywVQA%2B25wqQyBlx%2FvCQ5DvLMZEMHrycNFEQORL%2BGurBFEJNIekUTN%2BF5M8IwDguXUaePbykTU1vvWTpnJ2RIy%2F%2Bgaxn5Mifx5Fnj88oOWxd06oqpc4thmkDOZxC9qcoqj2UIwey3gMrv4Dkv5H1FxeRZ9uXrdKQfP%2FtuNPzmBuJNT8M0rUwSOI16ifxWsx5zFhAIx66C4uknEKmUygxBrUOqvmRDqrUQVU4yPh%2Bi0a91HU7aZIGQTdkjAUBY1E35hEPwm7qomJzDWOUxRhMjcHMHRTmDjbl%2FWfRMZjqZ9iNBpYfgi1nxPn0Nga8QS0IaktQU4JaEtQlQT1oHnBlfds85MpWibfM%2FjIHzUSX%2FS36QJd9kZOt4oAcnfvnnDoxwabYb6VeLxJRSqNOh%2FlBEPlxHIdh1w%2BDbhyyuAsrG0h7aKF2JGfkrTe%2FQiFn5NXOLhK6B6v2wORR0OoEaD3p%2BC7oxiTsuhjlu57rh6UwtM10Bq4bFOURlLecLXVA3ljs8aMfP4NgT09%2FPfrr%2FOPjt8FMg8I0%2BFz%2BQtBX9yZXdU22r%2BrakieXi1JmckTnO75W0lIc%2Fu5jcavWhl84a8ffvs%2FmxLzcvS5seZHmXOZ9Sx6dkZwLc04bJshPF%2BxNkVyp7MaZyuRVcfHKB%2BcuZIUR1kqdT0HljJDnP4DJGXn9uV3835M3%2FoY0U5iqQVY9JcuA1HtgxR3YYtWzmsCoFU4KB3XVTIyfrJpKEiixwjRpYP%2BDk1W9Ze%2BhbxzQ8i7yrMHANBioBlSNYavDk7IwT0%2F%2FHiwCiXImiTLOdqKMuv%2FSXCv3W5EXim7S7TDOE8G41%2FGDbuC6Pudhpye8Hko7E%2BLJo38BAAD%2F%2FwEAAP%2F%2FpNsuI5cEAAA%3D
7 B URL proceedglad.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRSuTuJBxENCLiKBETxEcGf7f2bMIRhjYjAmMT%2Fk4Km6qnq23Oqupqp7ejK5BAOSg4cJePDY%2B80mi2YJxqMgyKwXCQgZD7IHF8R7LkLOMpOB0QdV733vq8P7vldfblUHxEVF9698okdSKboetd3WyZsy57q2rUvXW57bdk%2B1bso8Dk%2B1hvPLDN7z3KjtvtM6L9imXvddz3U912udk0akeri%2BYCGL3Z7X7rnt0G97UYih%2BT%2B2lQNLHfDBATkGyWevbPz6BJJNkWffnxV2s9TFux9mlaKlNhjwnRv5Zq7rHNmqTI2DNN9Zvoa2M0K%2BOQSd7ywVQA%2B25wqQyBlx%2FvCQ5DvLMZEMHrycNFEQORL%2BGurBFEJNIekUTN%2BF5M8IwDguXUaePbykTU1vvWTpnJ2RIy%2F%2Bgaxn5Mifx5Fnj88oOWxd06oqpc4thmkDOZxC9qcoqj2UIwey3gMrv4Dkv5H1FxeRZ9uXrdKQfP%2FtuNPzmBuJNT8M0rUwSOI16ifxWsx5zFhAIx66C4uknEKmUygxBrUOqvmRDqrUQVU4yPh%2Bi0a91HU7aZIGQTdkjAUBY1E35hEPwm7qomJzDWOUxRhMjcHMHRTmDjbl%2FWfRMZjqZ9iNBpYfgi1nxPn0Nga8QS0IaktQU4JaEtQlQT1oHnBlfds85MpWibfM%2FjIHzUSX%2FS36QJd9kZOt4oAcnfvnnDoxwabYb6VeLxJRSqNOh%2FlBEPlxHIdh1w%2BDbhyyuAsrG0h7aKF2JGfkrTe%2FQiFn5NXOLhK6B6v2wORR0OoEaD3p%2BC7oxiTsuhjlu57rh6UwtM10Bq4bFOURlLecLXVA3ljs8aMfP4NgT09%2FPfrr%2FOPjt8FMg8I0%2BFz%2BQtBX9yZXdU22r%2BrakieXi1JmckTnO75W0lIc%2Fu5jcavWhl84a8ffvs%2FmxLzcvS5seZHmXOZ9Sx6dkZwLc04bJshPF%2BxNkVyp7MaZyuRVcfHKB%2BcuZIUR1kqdT0HljJDnP4DJGXn9uV3835M3%2FoY0U5iqQVY9JcuA1HtgxR3YYtWzmsCoFU4KB3XVTIyfrJpKEiixwjRpYP%2BDk1W9Ze%2BhbxzQ8i7yrMHANBioBlSNYavDk7IwT0%2F%2FHiwCiXImiTLOdqKMuv%2FSXCv3W5EXim7S7TDOE8G41%2FGDbuC6Pudhpye8Hko7E%2BLJo38BAAD%2F%2FwEAAP%2F%2FpNsuI5cEAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectproceedglad.com
FingerprintF9:04:D4:C5:64:56:F0:7B:9E:AE:0C:CB:EC:1A:5E:E9:8E:9E:86:E3
ValidityWed, 22 Nov 2023 07:26:18 GMT - Tue, 20 Feb 2024 07:26:17 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRSuTuJBxENCLiKBETxEcGf7f2bMIRhjYjAmMT%2Fk4Km6qnq23Oqupqp7ejK5BAOSg4cJePDY%2B80mi2YJxqMgyKwXCQgZD7IHF8R7LkLOMpOB0QdV733vq8P7vldfblUHxEVF9698okdSKboetd3WyZsy57q2rUvXW57bdk%2B1bso8Dk%2B1hvPLDN7z3KjtvtM6L9imXvddz3U912udk0akeri%2BYCGL3Z7X7rnt0G97UYih%2BT%2B2lQNLHfDBATkGyWevbPz6BJJNkWffnxV2s9TFux9mlaKlNhjwnRv5Zq7rHNmqTI2DNN9Zvoa2M0K%2BOQSd7ywVQA%2B25wqQyBlx%2FvCQ5DvLMZEMHrycNFEQORL%2BGurBFEJNIekUTN%2BF5M8IwDguXUaePbykTU1vvWTpnJ2RIy%2F%2Bgaxn5Mifx5Fnj88oOWxd06oqpc4thmkDOZxC9qcoqj2UIwey3gMrv4Dkv5H1FxeRZ9uXrdKQfP%2FtuNPzmBuJNT8M0rUwSOI16ifxWsx5zFhAIx66C4uknEKmUygxBrUOqvmRDqrUQVU4yPh%2Bi0a91HU7aZIGQTdkjAUBY1E35hEPwm7qomJzDWOUxRhMjcHMHRTmDjbl%2FWfRMZjqZ9iNBpYfgi1nxPn0Nga8QS0IaktQU4JaEtQlQT1oHnBlfds85MpWibfM%2FjIHzUSX%2FS36QJd9kZOt4oAcnfvnnDoxwabYb6VeLxJRSqNOh%2FlBEPlxHIdh1w%2BDbhyyuAsrG0h7aKF2JGfkrTe%2FQiFn5NXOLhK6B6v2wORR0OoEaD3p%2BC7oxiTsuhjlu57rh6UwtM10Bq4bFOURlLecLXVA3ljs8aMfP4NgT09%2FPfrr%2FOPjt8FMg8I0%2BFz%2BQtBX9yZXdU22r%2BrakieXi1JmckTnO75W0lIc%2Fu5jcavWhl84a8ffvs%2FmxLzcvS5seZHmXOZ9Sx6dkZwLc04bJshPF%2BxNkVyp7MaZyuRVcfHKB%2BcuZIUR1kqdT0HljJDnP4DJGXn9uV3835M3%2FoY0U5iqQVY9JcuA1HtgxR3YYtWzmsCoFU4KB3XVTIyfrJpKEiixwjRpYP%2BDk1W9Ze%2BhbxzQ8i7yrMHANBioBlSNYavDk7IwT0%2F%2FHiwCiXImiTLOdqKMuv%2FSXCv3W5EXim7S7TDOE8G41%2FGDbuC6Pudhpye8Hko7E%2BLJo38BAAD%2F%2FwEAAP%2F%2FpNsuI5cEAAA%3D HTTP/1.1
Host: proceedglad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=20651427; uid_id2=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 28 Nov 2023 09:23:56 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f1cb122a9288abdcd83a814e3ac9334c
Strict-Transport-Security: max-age=0; includeSubdomains
proceedglad.com/pixel/sbs?c=1
0 B URL proceedglad.com/pixel/sbs?c=1
IP
Certificate IssuerLet's Encrypt
Subjectproceedglad.com
FingerprintF9:04:D4:C5:64:56:F0:7B:9E:AE:0C:CB:EC:1A:5E:E9:8E:9E:86:E3
ValidityWed, 22 Nov 2023 07:26:18 GMT - Tue, 20 Feb 2024 07:26:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: proceedglad.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=20651427; uid_id2=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 09:23:56 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3b81v875375078&_p=1701163434654&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1235297465.1701163435&ul=en-us&sr=1280x1024&sid=1701163434&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&dt=vid_480p.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=2&tfd=16991
0 B URL region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3b81v875375078&_p=1701163434654&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1235297465.1701163435&ul=en-us&sr=1280x1024&sid=1701163434&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&dt=vid_480p.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=2&tfd=16991
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3b81v875375078&_p=1701163434654&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1235297465.1701163435&ul=en-us&sr=1280x1024&sid=1701163434&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&dt=vid_480p.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=2&tfd=16991 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2961
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://www.1024tera.com
date: Tue, 28 Nov 2023 09:23:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-94864b88.e650f8c9.js
200 OK 42 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-94864b88.e650f8c9.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (42360), with no line terminators
Hash b01f195e94b0848122ac3314f5395721
b87bc53a44a6234f7c089f3119066f9647d21903
09ae6d6c48f2c2b47426e8c362471444673201e2583c5525b442133a8b5c80cb
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-94864b88.e650f8c9.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:45 GMT
content-type: application/javascript
server: openresty
content-md5: sB8ZXpSwhIEirDMU9TlXIQ==
etag: W/"b01f195e94b0848122ac3314f5395721"
expires: Mon, 22 May 2023 08:06:09 GMT
last-modified: Fri, 19 May 2023 06:11:01 GMT
x-bce-content-crc32: 1763380652
x-bce-debug-id: 6/t1aZ0T4wIW5Mpdrs6rwONcVe50LnzXyMl/KxoZOSjgTHz/QchFlwkYo5YFdGxYjuFFLRMdxpL02NaFeSWQqg==
x-bce-request-id: 3b4dea47-19f8-48e2-a389-1652fd45a67a
x-bce-storage-class: STANDARD
via: EU-GER-frankfurt-EDGE5-CACHE1[1],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[1059],EU-GER-frankfurt-GLOBAL1-CACHE12[774,TCP_MISS,1057]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 16679855
x-ccdn-expires: 1741617
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?domain=www.1024tera.com&type=web_domain_heart_beat&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163429820
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domain=www.1024tera.com&type=web_domain_heart_beat&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163429820
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 85094787196f3b104653b468792071eb
2aa086434e04514f3d9e46388cf7370aafe2bcf4
bdf30ded11e826fe8d45a6dffe67941c31a4c3b18b92ab778a2fb6e164534912
GET /api/analytics?domain=www.1024tera.com&type=web_domain_heart_beat&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163429820 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:47 GMT
Flow-Level: 3
Logid: 8846557539911932014
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557539911932014
Yme: ZIGW+Ss3QEsWdTcGUmr/tG1MvuUYQxz3rwpNwySAne+wTl4wR6d5io1/3A==
Content-Length: 44
www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163434052
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163434052
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash a653fb9caa0e951f79cd1348ba0b5e98
d3affd1c257df5800ab5a5f663677bef7ebdb220
8a71900d4e6ed57182400af409e5e2ad318cd000d65ccec560d714f30131777c
GET /api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163434052 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207; dom3ic8zudi28v8lr6fgphwffqoz0j6c=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40%3A1%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=joblouder.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:50 GMT
Flow-Level: 3
Logid: 8846558253179860832
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846558253179860832
Yme: ZIGW+Ss3QE0WYysHTWriq29Xvv4cVAP2oh5NwymJmu25TA==
Content-Length: 44
www.1024tera.com/passport/getpubkey?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030003
200 OK 466 B URL POST HTTP/1.1 www.1024tera.com/passport/getpubkey?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030003
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (492), with no line terminators
Hash 5dd107f64b2547583202f377a46e7c4a
ec57b230f2a9326be35ab3958ef3b5997414d585
695546b32778ec55b9440f83ccd6b39d36257e9c60c308be2b3d841f78f371a7
POST /passport/getpubkey?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030003 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 91
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/Json; charset=utf-8
Date: Tue, 28 Nov 2023 09:23:47 GMT
Flow-Level: 3
Logid: 8846557352906478960
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8846557352906478960
Yme: ZIGW+Ss3QE0WaSsESmriq29Xvv4cVAPxox5IwiqBmOq5kjYUfg==
Content-Length: 405
www.1024tera.com/api/analytics?time=6865&type=web_share_page_show_TTI&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163429822
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?time=6865&type=web_share_page_show_TTI&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163429822
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 4facff36b8bef2b149387f2f4518ec36
1ec2c1c99747b3fe7ab46316774ed9dd5cb457e1
7f6fdc444b74c9917e339aba13a7595497246fd8557263c886f30fe09ea6c9ea
GET /api/analytics?time=6865&type=web_share_page_show_TTI&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163429822 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:47 GMT
Flow-Level: 3
Logid: 8846557552894918127
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557552894918127
Yme: ZIGW+Ss3QEsRdTEDUmr/tG1MvuUYQxz0owpNwyOAy77uCgR2Xk/NMiip3A==
Content-Length: 44
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030002&language_type=en&cfg_category_keys=%5B%5D&version=0
200 OK 68 kB URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030002&language_type=en&cfg_category_keys=%5B%5D&version=0
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash a5c001b310d924066c79fde246ff9473
0d75a5481e4edb32c6ca50915f9e0487d3668a21
76297545a92d4803ce2ad0e22de4301f7acb6ea0e23b18b0629369fad72a96c4
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030002&language_type=en&cfg_category_keys=%5B%5D&version=0 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:46 GMT
Flow-Level: 3
Logid: 8846557347943380444
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 8846557347943380444
Yme: ZIGW+Ss3QEsSdTcAUmr/tG1MvuUZTBz3qQpNwyeL
Transfer-Encoding: chunked
www.1024tera.com/api/ad/getconfig?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030008
200 OK 70 B URL GET HTTP/1.1 www.1024tera.com/api/ad/getconfig?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030008
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash b490d593f9421bd8853de711b9271a6b
67f453dfdf17297f397f9f69ba2dab6ec8254241
bcd63a64b8c159807ec52c151207452927b0471344fb9fcc7c95917da200b699
GET /api/ad/getconfig?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030008 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:47 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8846557418891967628
Logid: 8846557418891967628
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8846557418891967628
Yme: ZIGW+Ss3QE0WaSsHTmniq29Xvv4cVAP2ox5OxSmJmu2xR0QzMXkQS3QK5bAY
Content-Length: 85
s2.teraboxcdn.com/general-conf/ymg/2068/abclite-2068-s.js?v=0.8689402131963933
200 OK 100 kB URL GET HTTP/2 s2.teraboxcdn.com/general-conf/ymg/2068/abclite-2068-s.js?v=0.8689402131963933
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 100 kB (100051 bytes)
Hash 46ea1ae23faf5ae71c0045843eb433e9
16888edbe3dd7626386b04d43e37a89427f0aea8
dd8c44b26db60a31584a292ad74cd2325799a19c1c8e1d567d32c3dada94fb55
GET /general-conf/ymg/2068/abclite-2068-s.js?v=0.8689402131963933 HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:44 GMT
content-type: application/javascript
server: openresty
content-md5: Ruoa4j+vWuccAEWEPrQz6Q==
etag: W/"46ea1ae23faf5ae71c0045843eb433e9"
expires: Fri, 07 Apr 2023 22:40:39 GMT
last-modified: Tue, 14 Mar 2023 06:06:12 GMT
x-bce-content-crc32: 1662135932
x-bce-debug-id: Jz1KOcGPkhU4n3Zck8uoB7CbklPytTa0SgCVaS0EGpxL61wnts4jWik6aFmIBGaCydmzElR8tezYRsKZD0KeZg==
x-bce-request-id: 7297b527-d932-4266-b90c-9962c07f4e61
x-bce-storage-class: STANDARD
x-ccdn-expires: 2592000
via: EU-GER-frankfurt-EDGE5-CACHE1[20],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[2],EU-GER-frankfurt-GLOBAL1-CACHE4[0,TCP_HIT,1]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 19029274
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/apple.min.js
200 OK 42 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/apple.min.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/apple.min.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:44 GMT
content-type: application/javascript
server: openresty
content-md5: FF9mC4xH7SHLDq/gVBei9Q==
etag: W/"145f660b8c47ed21cb0eafe05417a2f5"
expires: Sun, 05 Feb 2023 11:19:03 GMT
last-modified: Thu, 02 Feb 2023 02:44:27 GMT
x-bce-content-crc32: 3041762371
x-bce-debug-id: GooNofUHCftVSaaHEC+AzAr4FYXPEZIzOsKJwWjn94XbPwUKv4MuSNK5CZJOH/HsmlldVHL9LxC5wuj+MNetYw==
x-bce-request-id: 96560a78-91ad-47e1-a285-8df2f8efcb9d
x-bce-storage-class: STANDARD
x-ccdn-expires: 1729907
via: EU-GER-frankfurt-EDGE5-CACHE1[4],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE6[3],EU-GER-frankfurt-GLOBAL1-CACHE2[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24213281
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-b20230be.0a893307.js
200 OK 106 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-b20230be.0a893307.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Size 106 kB (106327 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-b20230be.0a893307.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:48 GMT
content-type: application/javascript
server: openresty
content-md5: lkWxCU7mztbQBa5ORv1xRQ==
etag: W/"9645b1094ee6ced6d005ae4e46fd7145"
expires: Thu, 07 Sep 2023 07:34:05 GMT
last-modified: Mon, 04 Sep 2023 04:39:49 GMT
x-bce-content-crc32: 860175862
x-bce-debug-id: YxKaPLFml5ovwtS++EvPw1ID/HiMt+Zhii4NCGGd5BA+u+1ccgAwlYXqpryUmBj7YqU863R0gVkKEFuqafmKAg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: aeea44c1-7e31-4002-a3ac-fcdfed6855de
x-bce-storage-class: STANDARD
x-ccdn-expires: 529868
via: EU-GER-frankfurt-EDGE5-CACHE1[9],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE5[14],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,13]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 7350115
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-3c39bfc4.baa0ab5e.js
200 OK 547 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-3c39bfc4.baa0ab5e.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Size 547 kB (547317 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-3c39bfc4.baa0ab5e.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:48 GMT
content-type: application/javascript
server: openresty
content-md5: J2TcvyWm6gv2Eaqsv2udoA==
etag: W/"2764dcbf25a6ea0bf611aaacbf6b9da0"
expires: Sat, 04 Nov 2023 08:02:39 GMT
last-modified: Wed, 01 Nov 2023 07:11:44 GMT
x-bce-content-crc32: 568789530
x-bce-debug-id: xbaDKK50jlBZJ18L45fu3bSp+fDzE/r7QhsyaypWutuc/ChXmeJlm9RANAVDEiI6LAFEIbdQCthtn8HiVncnMQ==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 45ec87e7-f8da-4b01-bf46-6d2b8c70cc37
x-bce-storage-class: STANDARD
x-ccdn-expires: 273453
via: EU-GER-frankfurt-EDGE5-CACHE1[2],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE6[31],EU-GER-frankfurt-GLOBAL1-CACHE14[0,TCP_HIT,29]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 2337290
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-fdedac32.68a159c0.js
200 OK 66 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-fdedac32.68a159c0.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (65473), with no line terminators
Hash 7ef31ee9994bb8ea5f0546db9d84f5a2
96677ba8663e1a15b90a28b317a621c44288d4b4
a127c7a05c4834b7ccccedbb750031e366b1494bbb719a2f082c92eac19a9d50
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-fdedac32.68a159c0.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:48 GMT
content-type: application/javascript
server: openresty
content-md5: fvMe6ZlLuOpfBUbbnYT1og==
etag: W/"7ef31ee9994bb8ea5f0546db9d84f5a2"
expires: Thu, 17 Aug 2023 11:01:40 GMT
last-modified: Mon, 14 Aug 2023 05:25:49 GMT
x-bce-content-crc32: 3183863461
x-bce-debug-id: AQBq72xN1KX+ruW3aqp1xkmekXXaYh0i39b8sd2sQtmjC5dG590ZtpaEFSUwE16V73TOukcLyO6ly/sQLIZ4bg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: b4d412dc-3e8c-456b-bf34-9d06ca0b4fd9
x-bce-storage-class: STANDARD
via: EU-GER-frankfurt-EDGE5-CACHE1[4],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE6[1934],EU-GER-frankfurt-GLOBAL1-CACHE14[953,TCP_MISS,1933]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 9152527
x-ccdn-expires: 1471038
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
static.line-scdn.net/liff/edge/2/sdk.js
200 OK 109 kB URL GET HTTP/2 static.line-scdn.net/liff/edge/2/sdk.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerAmazon
Subject*.line.me
Fingerprint39:A2:77:6F:2B:9D:03:28:CA:16:D8:21:EB:C7:7C:67:F8:C4:FB:AA
ValidityThu, 13 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Size 109 kB (109202 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /liff/edge/2/sdk.js HTTP/1.1
Host: static.line-scdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
server: VOS
last-modified: Mon, 02 Oct 2023 01:12:33 GMT
x-amz-version-id: vfFBS0jnaCra6zWupTgNTjV5SswxqQe
x-amz-expiration: expiry-date="Sat, 02 Dec 2023 00:00:00 GMT", rule-id="bucket_lifecycle"
x-rgw-object-type: Normal
strict-transport-security: max-age=15768000
content-encoding: br
date: Tue, 28 Nov 2023 01:12:09 GMT
cache-control: max-age=86400
etag: W/"b141d3521b6ef34b704efec9753109fa"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: yw5QBLukmQg4zme-LJSLILyTZf7cMPU0hTYoCq1qTe8N8P-a82sVZQ==
age: 29503
X-Firefox-Spdy: h2
www.1024tera.com/rest/2.0/membership/proxy/user?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030007&client=web&pass_version=2.8&lang=en&clientfrom=h5&pcftoken=7399650f7cf31c14adf07189a23f3f51&method=query&membership_version=1.0
200 OK 84 B URL GET HTTP/1.1 www.1024tera.com/rest/2.0/membership/proxy/user?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030007&client=web&pass_version=2.8&lang=en&clientfrom=h5&pcftoken=7399650f7cf31c14adf07189a23f3f51&method=query&membership_version=1.0
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 0ca5a9bd26a3cfc67deb4afe0b9cf5c9
8d5686aa66ea895793a26dfe88c50d53d413d9c0
d6b37a0342ee7636b6b87a3a62df25cded6ceca9cfebae50b7ba58fa5682c559
GET /rest/2.0/membership/proxy/user?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030007&client=web&pass_version=2.8&lang=en&clientfrom=h5&pcftoken=7399650f7cf31c14adf07189a23f3f51&method=query&membership_version=1.0 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:47 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8846557419380876457
Logid: 8846557419380876457
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8846557419380876457
Yme: ZIGW+Ss3QE0WaCsHTWniq29Xvv4cVAPxqB5OxiOJmu20Tg==
Content-Length: 96
www.1024tera.com/api/analytics?time=3090&type=web_share_page_show_FP_FIRST&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163429818
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?time=3090&type=web_share_page_show_FP_FIRST&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163429818
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash c013a333421cb4f5b0c6e3c1066a4260
b9b7135a1c4b17cdb25749f1231bcc3a76e000f9
64a6dfd93b719fe47c42a094685d55a1ffde4dd2c26ba5ada5fc4f1b026c3190
GET /api/analytics?time=3090&type=web_share_page_show_FP_FIRST&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3D-THXYz1wfrQ-mzlQrPx5Gw&client=web&t=1701163429818 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:46 GMT
Flow-Level: 3
Logid: 8846557107599630471
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8846557107599630471
Yme: ZIGW+Ss3QE0RYysCRnb+qnFLufkASwH9tAJPxiqBmOu2M+pGSl9zjOK09zY=
Content-Length: 44
www.1024tera.com/rest/1.0/operation/pull?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030006&position=7&lang=en
200 OK 67 B URL GET HTTP/1.1 www.1024tera.com/rest/1.0/operation/pull?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030006&position=7&lang=en
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 22663184ff6f0f5e07300b406c6824fa
b7c7f2ff001edd9b073b99b6922e699a330744b9
011735889498cef62410ef050d7e2ada78ab45c105094c72f047576aa5c6f300
GET /rest/1.0/operation/pull?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030006&position=7&lang=en HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: text/plain; charset=utf-8
Date: Tue, 28 Nov 2023 09:23:46 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8846557187714564990
Logid: 8846557187714564990
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8846557187714564990
Yme: ZIGW+Ss3QE0RYisESWriq29Xvv4cVAPxqR5HwiqBmO6x
Content-Length: 83
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030001&language_type=en&cfg_category_keys=%5B%5D&version=0
200 OK 68 kB URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030001&language_type=en&cfg_category_keys=%5B%5D&version=0
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 89b7121f563bd8a9c62e66cbb076dada
b6e844edbb61d8fb18bdf0a61f8fe23d2878a542
be611cc373ba350b7dcea555c1dc08c3387c070b5015e3fa3bf5a00f75bcdfb3
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030001&language_type=en&cfg_category_keys=%5B%5D&version=0 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:46 GMT
Flow-Level: 3
Logid: 8846557156188949999
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 8846557156188949999
Yme: ZIGW+Ss3QE0WaCsHTWriq29Xvv4cVAPxrh5OxCqBmO+wPiZMQBpm4yHUEyUY
Transfer-Encoding: chunked
www.1024tera.com/share/linkpaylistpurchaseorder?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030005&page=1&cnt=20
200 OK 71 B URL GET HTTP/1.1 www.1024tera.com/share/linkpaylistpurchaseorder?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030005&page=1&cnt=20
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 6f60f31f21dd18796e09a00700358a80
8b2494e41349a7231162b73e2fee07e585486743
8d8965c1dbbed2164f5c82c0c9d83e82fae45862b277616953ccd7e28ffe75bf
GET /share/linkpaylistpurchaseorder?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=62B1D7090D2E8A8C5AD89CFC4CA5E08D1DC60DEAABFFB1FF8B5238AAE8F7987C7C0371F585A1FB7EA6A8600045B1CF5F92E9C8E27DCDAECB26B7862CEF6E05C788E45AD316399E1242BB36976331F08D5024A5825732AF3979494FD66186A140&dp-logid=77381000403827030005&page=1&cnt=20 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Cookie: csrfToken=ean57PldyVW87bWGo3vbYfF9; browserid=GAx8LyXm2fCeAueTxs7ZNmbXhGC2MJeIoUeXajZqs6oXpSLLL8dmAd5Gapk=; lang=en; TSID=PsLqXeOIl45s6CCIBHx733rmXm4Q2IOj; __bid_n=18c153decb47a181dd4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 09:23:47 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8846557352156508755
Logid: 8846557352156508755
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8846557352156508755
Yme: ZIGW+Ss3QE0WaSsMTnb+qnFLufkASwb8tANIySKDmuXkNyJyUHvzAzdnzzY=
Content-Length: 86
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-5e25226a.54e0bcd6.js
200 OK 26 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-5e25226a.54e0bcd6.js
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-5e25226a.54e0bcd6.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 09:23:45 GMT
content-type: application/javascript
server: openresty
content-md5: xC9jHcTnsHHf7cEqVH+buQ==
etag: W/"c42f631dc4e7b071dfedc12a547f9bb9"
expires: Thu, 30 Nov 2023 08:59:34 GMT
last-modified: Mon, 27 Nov 2023 03:06:50 GMT
x-bce-content-crc32: 92452786
x-bce-debug-id: K2X9lIphgkqRGFiI7g2dxoflLasFhxFan7a9znE54WJIwSZLJZXggPZuat+M+km5R80v2P3AL+YMFSIyxxF/4A==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 6c1014ef-9775-4a4e-9e48-35c5e3c172b1
x-bce-storage-class: STANDARD
x-ccdn-expires: 2548290
via: EU-GER-frankfurt-EDGE5-CACHE1[2],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE8[3],EU-GER-frankfurt-GLOBAL1-CACHE6[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 87123
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
joblouder.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRuu3uwH%2BfRigiCih1FEFNzZ%2Fjk9Yw7BGCPBmA1JJOfqqurZcqu7mqru6cmeEgMhBw%2BjJ%2FXU88wmq3ER8wcoMuslBIXMRfbgevYsBI8ym4HRF6re963nPTzP89btcXVIXFT04NKHelsqRdejttt645rMua5t6%2BLVlue23VOtazLvhKdaw%2FllBm97btR232y9L9iWXvddz3U912udk0akerh%2BhEIWez2v3XPbod%2F2ohBD89%2FeVg4sdcAHh%2BQkJJ%2F9b%2FPhA0g2RZ59f1bYrVIXb72XVYqW2mDAdz%2FKt3Jd58iWZWocpPnuYhrazgj5YgU6310ogB7szBUgkTPi%2FOYhyXcXNJEM7j5lmiiIHAl%2FFvVgCqGmkHQKpm9B8scEYBwXN5Bn9y5qU9PrT1E6R2dk9clfkPWMrP7%2BPPLsuzNKDltXtKpKqXOLYdpADqeQ%2FSmKah%2FltgNZ74OVn0DyX8n6kwvIs50NqzQkP3itE%2Fc85kZizQ%2BDdC0Mks4a9ZPOWofzDmMBjXjoHlkk5RQynUKJEah1UM2PdFClDqrCQcYPWjTqpa4bp0kaBN2QMRYEjEXdDo94EHZTFxWbaxihLEZgagRmbqAwN7%2FmQSyChIVjii352ePoJEz1E%2BxmA8sd2JJgwBvUgqC2BDUlqCVBXRLUg%2BYuV9a3zT2ubJV4i%2BwvctBMdNkf07u67IucjItDcmJuo%2FPCznFsiYNWx4%2BFn3Zp6Ae9OEpYmPCYxh3P7zKfR5EPKxtIu3IkelvOyCsvfYpCzsj%2F4z0kdB9W7YPJE6CVB1pPYt8F3ZyEXRfb%2BZ7n%2BmEpDG0znYHrBkW5ivK6M1aH5MWjdb567BCCPTp9%2F%2BW9497rf4KZBoVp8LH8maCv7kwu65rsXNa1JQ82ilJmcpvOV32lpKU4dv8Dcb3Whp8%2Fa0ffvMPmwLzcuypseYHmXOZ9S749IzkX5pw2TJAfzttrIrlU2c0zlcmr4sKld8%2BdzwojrJU6n4LKxxt%2Fg8kZWb3549Enfu6X25BmClM1yKpHZBGQeh%2BsuAFbLNlbTWDUciYpVlBXzcT4yfJRSQIllj1NGth%2F9cmyHts76JsV0PIW8qzBwDQYqAZUjWCrZyZlYR6dfvjlPL5ColYmiTIrO4ky6vO5tX889dfKg1bkhaKbdGPGeSIY92I%2F6Aau63Mexj3h9VDamRAP7v0DAAD%2F%2FwEAAP%2F%2FjS9qHaEEAAA%3D
200 OK 0 B URL GET HTTP/1.1 joblouder.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRuu3uwH%2BfRigiCih1FEFNzZ%2Fjk9Yw7BGCPBmA1JJOfqqurZcqu7mqru6cmeEgMhBw%2BjJ%2FXU88wmq3ER8wcoMuslBIXMRfbgevYsBI8ym4HRF6re963nPTzP89btcXVIXFT04NKHelsqRdejttt645rMua5t6%2BLVlue23VOtazLvhKdaw%2FllBm97btR232y9L9iWXvddz3U912udk0akerh%2BhEIWez2v3XPbod%2F2ohBD89%2FeVg4sdcAHh%2BQkJJ%2F9b%2FPhA0g2RZ59f1bYrVIXb72XVYqW2mDAdz%2FKt3Jd58iWZWocpPnuYhrazgj5YgU6310ogB7szBUgkTPi%2FOYhyXcXNJEM7j5lmiiIHAl%2FFvVgCqGmkHQKpm9B8scEYBwXN5Bn9y5qU9PrT1E6R2dk9clfkPWMrP7%2BPPLsuzNKDltXtKpKqXOLYdpADqeQ%2FSmKah%2FltgNZ74OVn0DyX8n6kwvIs50NqzQkP3itE%2Fc85kZizQ%2BDdC0Mks4a9ZPOWofzDmMBjXjoHlkk5RQynUKJEah1UM2PdFClDqrCQcYPWjTqpa4bp0kaBN2QMRYEjEXdDo94EHZTFxWbaxihLEZgagRmbqAwN7%2FmQSyChIVjii352ePoJEz1E%2BxmA8sd2JJgwBvUgqC2BDUlqCVBXRLUg%2BYuV9a3zT2ubJV4i%2BwvctBMdNkf07u67IucjItDcmJuo%2FPCznFsiYNWx4%2BFn3Zp6Ae9OEpYmPCYxh3P7zKfR5EPKxtIu3IkelvOyCsvfYpCzsj%2F4z0kdB9W7YPJE6CVB1pPYt8F3ZyEXRfb%2BZ7n%2BmEpDG0znYHrBkW5ivK6M1aH5MWjdb567BCCPTp9%2F%2BW9497rf4KZBoVp8LH8maCv7kwu65rsXNa1JQ82ilJmcpvOV32lpKU4dv8Dcb3Whp8%2Fa0ffvMPmwLzcuypseYHmXOZ9S749IzkX5pw2TJAfzttrIrlU2c0zlcmr4sKld8%2BdzwojrJU6n4LKxxt%2Fg8kZWb3549Enfu6X25BmClM1yKpHZBGQeh%2BsuAFbLNlbTWDUciYpVlBXzcT4yfJRSQIllj1NGth%2F9cmyHts76JsV0PIW8qzBwDQYqAZUjWCrZyZlYR6dfvjlPL5ColYmiTIrO4ky6vO5tX889dfKg1bkhaKbdGPGeSIY92I%2F6Aau63Mexj3h9VDamRAP7v0DAAD%2F%2FwEAAP%2F%2FjS9qHaEEAAA%3D
IP
Requested by https://www.1024tera.com/sharing/link?surl=-THXYz1wfrQ-mzlQrPx5Gw
Certificate IssuerLet's Encrypt
Subjectjoblouder.com
Fingerprint30:FD:12:BB:38:60:1D:88:0D:67:03:0F:82:44:A4:FB:76:96:FD:83
ValiditySat, 25 Nov 2023 07:50:03 GMT - Fri, 23 Feb 2024 07:50:02 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRuu3uwH%2BfRigiCih1FEFNzZ%2Fjk9Yw7BGCPBmA1JJOfqqurZcqu7mqru6cmeEgMhBw%2BjJ%2FXU88wmq3ER8wcoMuslBIXMRfbgevYsBI8ym4HRF6re963nPTzP89btcXVIXFT04NKHelsqRdejttt645rMua5t6%2BLVlue23VOtazLvhKdaw%2FllBm97btR232y9L9iWXvddz3U912udk0akerh%2BhEIWez2v3XPbod%2F2ohBD89%2FeVg4sdcAHh%2BQkJJ%2F9b%2FPhA0g2RZ59f1bYrVIXb72XVYqW2mDAdz%2FKt3Jd58iWZWocpPnuYhrazgj5YgU6310ogB7szBUgkTPi%2FOYhyXcXNJEM7j5lmiiIHAl%2FFvVgCqGmkHQKpm9B8scEYBwXN5Bn9y5qU9PrT1E6R2dk9clfkPWMrP7%2BPPLsuzNKDltXtKpKqXOLYdpADqeQ%2FSmKah%2FltgNZ74OVn0DyX8n6kwvIs50NqzQkP3itE%2Fc85kZizQ%2BDdC0Mks4a9ZPOWofzDmMBjXjoHlkk5RQynUKJEah1UM2PdFClDqrCQcYPWjTqpa4bp0kaBN2QMRYEjEXdDo94EHZTFxWbaxihLEZgagRmbqAwN7%2FmQSyChIVjii352ePoJEz1E%2BxmA8sd2JJgwBvUgqC2BDUlqCVBXRLUg%2BYuV9a3zT2ubJV4i%2BwvctBMdNkf07u67IucjItDcmJuo%2FPCznFsiYNWx4%2BFn3Zp6Ae9OEpYmPCYxh3P7zKfR5EPKxtIu3IkelvOyCsvfYpCzsj%2F4z0kdB9W7YPJE6CVB1pPYt8F3ZyEXRfb%2BZ7n%2BmEpDG0znYHrBkW5ivK6M1aH5MWjdb567BCCPTp9%2F%2BW9497rf4KZBoVp8LH8maCv7kwu65rsXNa1JQ82ilJmcpvOV32lpKU4dv8Dcb3Whp8%2Fa0ffvMPmwLzcuypseYHmXOZ9S749IzkX5pw2TJAfzttrIrlU2c0zlcmr4sKld8%2BdzwojrJU6n4LKxxt%2Fg8kZWb3549Enfu6X25BmClM1yKpHZBGQeh%2BsuAFbLNlbTWDUciYpVlBXzcT4yfJRSQIllj1NGth%2F9cmyHts76JsV0PIW8qzBwDQYqAZUjWCrZyZlYR6dfvjlPL5ColYmiTIrO4ky6vO5tX889dfKg1bkhaKbdGPGeSIY92I%2F6Aau63Mexj3h9VDamRAP7v0DAAD%2F%2FwEAAP%2F%2FjS9qHaEEAAA%3D HTTP/1.1
Host: joblouder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=18326536; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; uid_id2=6791c05e-243f-43b6-a2b6-6dd6cc3a5d40:1:1; nlec627e2f8a423975bc4bd7a76128c2d552=[2229215,2229214]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 09:23:50 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a7304ac18c5d331869d25828df66fb1f
Strict-Transport-Security: max-age=0; includeSubdomains
210.148.85.41
192.243.59.13
18.185.201.157
104.21.234.33
185.207.113.194
60.190.116.48
90.84.161.19
0.0.0.0