www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
200 OK 55 kB URL User Request GET HTTP/1.1 www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
IP
ASN #4713 NTT Communications Corporation
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (49557)
Hash 9afbf48d53832a4b0eb55f2c65137fd0
6d72fd4f316ed17bceb3b72eed6c53a5ff80cc46
c23a49a4bc055c7b39942f4b060a479353870770cfd5624bd85a5508763028da
GET /sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: text/html; charset=utf-8
Date: Tue, 28 Nov 2023 03:41:56 GMT
Flow-Level: 3
Logid: 8841051535249294369
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Set-Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; path=/
browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; path=/; max-age=5184000; expires=Sat, 27 Jan 2024 03:41:56 GMT; domain=.1024tera.com
lang=en; path=/; max-age=2592000; expires=Thu, 28 Dec 2023 03:41:56 GMT
TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; path=/; max-age=31536000; expires=Wed, 27 Nov 2024 03:41:56 GMT; domain=.1024tera.com
Strict-Transport-Security: max-age=172800
Vary: Accept-Encoding, Accept-Encoding
X-Conteneur-Nom: wrVQWx8KwoUWWlzCu8OWwpnDoxcyw5cwRXDDrsO9w6DDsyZww6PCvcOhw7bDhSPCk3HCg1onXMK7MELDq0xsKMKBJ8O1w6dbAU3DhMKh
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Flow-Level: 3
X-Frame-Options: SAMEORIGIN
X-Powered-By: TeraBox
X-Readtime: 267
X-Request-Id: 8841051535249294369
X-Xss-Protection: 1; mode=block
Yld: 8841051535249294369
Yme: ZIGW+Ss3QEsWdTEBUmr/tG1MvuUZThzxrwpHyyOCwq6xBhAyT2cYkScW3A==
Transfer-Encoding: chunked
www.1024tera.com/ndbs/nd_bundle_430546.js
200 OK 66 kB URL GET HTTP/1.1 www.1024tera.com/ndbs/nd_bundle_430546.js
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (36757)
Hash 2be70342e4695e6c13d04f9906e47635
6f4596c9cd37089ead6715fd3553c0845f1158d3
f731296cced4c20e1f9e24e3080faa044bd0fad2f8f64adf026a75038adecce8
GET /ndbs/nd_bundle_430546.js HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/x-javascript
Date: Tue, 28 Nov 2023 03:41:57 GMT
Flow-Level: 3
Last-Modified: Mon, 10 Jul 2023 02:21:26 GMT
Logid: 8841051831846368978
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 8841051831846368978
Yme: ZIGW+Ss3QE0WaisES2Liq29Xvv4cVAX3tAJGySKDnermGlcxMGIQS/KuEpAY
Transfer-Encoding: chunked
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/loading.e243875f.gif
200 OK 28 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/loading.e243875f.gif
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type GIF image data, version 89a, 70 x 54\012- data
Hash e243875f171c9aa136826db37e1d7669
a754f14d0f5c88b01f0662390d1e5c937cc64427
0750b5649d371e7fbbc69ffd0778f23406aedd8b9ce788b5f90f4ee110aacd20
GET /fe-opera-static/node-static-v4/fe-webv4-main/img/loading.e243875f.gif HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:41:59 GMT
content-type: image/gif
content-length: 28452
server: openresty
content-md5: 4kOHXxccmqE2gm2zfh12aQ==
etag: "e243875f171c9aa136826db37e1d7669"
expires: Sun, 12 Feb 2023 11:38:15 GMT
last-modified: Thu, 09 Feb 2023 08:51:31 GMT
x-bce-content-crc32: 801554289
x-bce-debug-id: /KINSlT6SlR+UmSxSbl8+UR36BHA1qVKyD42hR/uOwOvlMbyG16mwQlkTlc0iHDE9rM0Zyk9MA4hMUZIVL5hfw==
x-bce-request-id: 67f0317e-0fcd-4380-870c-0f5ab08c67f9
x-bce-storage-class: STANDARD
x-ccdn-expires: 1735343
via: EU-GER-frankfurt-EDGE5-CACHE2[19],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE7[4],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,3]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24191871
accept-ranges: bytes
access-control-allow-origin: *
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-vendors.0c91416b.js
200 OK 469 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-vendors.0c91416b.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Size 469 kB (469375 bytes)
Hash 3517e1b7eed3b8e6649a0ae309b3ae15
f9f30dd90d77da7f78ef7a579dbc1795ff345348
b505a8aebb87f3fb081f32597ce8f8827f6e962a0ab7bc88cf435ab0c10518f8
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-vendors.0c91416b.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:41:59 GMT
content-type: application/javascript
server: openresty
content-md5: a1l6Bl6z/WmUk5VRMLJRyw==
etag: W/"6b597a065eb3fd699493955130b251cb"
expires: Sat, 25 Nov 2023 10:39:04 GMT
last-modified: Wed, 22 Nov 2023 02:21:52 GMT
x-bce-content-crc32: 3304779663
x-bce-debug-id: qN0aN2KGmEnQNotbwTj5EO9MHr42l1O3a48iCP9ZQ1QdFJqG7umOmDl00uQpHIgJHgNjtdiGCMrsn+tYuWFRhg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 566c3b22-e053-4880-b154-222038dabd24
x-bce-storage-class: STANDARD
x-ccdn-expires: 2101321
via: EU-GER-frankfurt-EDGE5-CACHE2[17],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE1[22],EU-GER-frankfurt-GLOBAL1-CACHE9[0,TCP_HIT,20]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 493295
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/kakao.min.js
200 OK 42 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/kakao.min.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash aa8afbb505ff731013328637745cae69
17f6d7f6c7b059370b16b5f34c7703eac9dc6d78
bd7a768f7333deaad62979ebdab1755aa698105731041f6e42529929373510d4
GET /fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/kakao.min.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:41:59 GMT
content-type: application/javascript
server: openresty
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT
access-control-expose-headers: ETag, Content-Length, x-bce-next-append-offset, x-bce-object-type, x-bce-request-id
access-control-max-age: 1800
content-md5: Ng3YsEXIR8ylP6d+vhUKPw==
etag: W/"360dd8b045c847cca53fa77ebe150a3f"
expires: Sat, 24 Sep 2022 06:46:06 GMT
last-modified: Wed, 21 Sep 2022 05:03:33 GMT
x-bce-content-crc32: 3787281588
x-bce-debug-id: NdXOHvJhWdykwQRMkfwzkNsOZ5AZbm+dI56Adia+fvxzTQbCnAlm9HuK5oYXV0mvHXmPazsRbY1yj9LO6Ud5AQ==
x-bce-request-id: 95d5b42d-7d75-47b4-acd7-57e276abb336
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 1729907
via: EU-GER-frankfurt-EDGE5-CACHE2[4],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE4[3],EU-GER-frankfurt-GLOBAL1-CACHE9[0,TCP_HIT,2],EA-SGP-GLOBAL1-CACHE5[4],EA-SGP-GLOBAL1-CACHE7[0,TCP_HIT,3]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24192776
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/main.e2847943.js
200 OK 237 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/main.e2847943.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65031), with no line terminators
Size 237 kB (236638 bytes)
Hash f5c54e709f9fe02011093a4d8b947e70
0ac0a94daa680758648f994e8dac31bfab9d8bda
4edc3ccc389e1072a832fed110841262cc616aaebb089bc4778ab6c6fde89f28
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/main.e2847943.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:41:59 GMT
content-type: application/javascript
server: openresty
content-md5: pmUPGfFN1P8Hwd9DBANl9g==
etag: W/"a6650f19f14dd4ff07c1df43040365f6"
expires: Thu, 30 Nov 2023 08:59:34 GMT
last-modified: Mon, 27 Nov 2023 03:07:00 GMT
x-bce-content-crc32: 3413177399
x-bce-debug-id: j6YckP5/M2UvySO79tEdnqYB1hGDnUELMT0rINqpKTUnsE6bZkgWiWtlWF+FfdTz3J6lTlugxw6/0+3BjhR3Og==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 0459d39d-9871-438c-8173-fa5c60412e75
x-bce-storage-class: STANDARD
x-ccdn-expires: 2527998
via: EU-GER-frankfurt-EDGE5-CACHE2[3],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[25],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,24]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 66618
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
ymg-api.terabox.com/abdr?_o=https%3A%2F%2Fwww.1024tera.com
200 OK 181 B URL POST HTTP/1.1 ymg-api.terabox.com/abdr?_o=https%3A%2F%2Fwww.1024tera.com
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.terabox.com
Fingerprint4F:30:79:83:60:E0:58:E8:DA:05:09:38:E1:6D:CD:F9:46:33:D6:5F
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash e042517fb6be7e0b14ecd620007522d6
eeff68a743ea365d1211a411afa65537e97e5a4c
bdf2bd0249163ab657013432eaa6e09feb188868690ed8b6cdc0d9bf5763fc9f
POST /abdr?_o=https%3A%2F%2Fwww.1024tera.com HTTP/1.1
Host: ymg-api.terabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 3552
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 28 Nov 2023 03:42:00 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 8841052690535853965
Ab-Sr: 1.0.1_M2JjZjBlOGMzNmUwMWEwNjM1NTM4MmVjNDQ1MGI1OTI5NDNlOTE4NmQ0YjAzMTYwY2M5ZTNiZGI1ZGZiNGI1NDE2ZGNlYzg4NGYwYmFhNTQ1YTY4NTAxNjhhNmZjOGM4N2RlYWI0MzVkMzQ5N2JmZTRiYzkzYWQ5MDQyNWM3MTk1NTA2MWQ3ZjlhMmNjMmRhYzU1MTcwYzMxMGMxNWIzNQ==
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, Host, Content-Type, x-requested-with, X-Custom-Header
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Expose-Headers: Ab-sr, Authentication
Access-Control-Max-Age: 3600
Authentication: 34f1c7dceb7d4b8b5367bd73b197af0083cd50e13cc2b414
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QEsRdTEBUmr/tG1MvuUfSQrrqwdNySiEnuxS/RU=
Set-Cookie: ab_jid=60df9137d5aa06c90ec6056438746fff710f; Path=/; Domain=ymg-api.terabox.com; Max-Age=2147483647; HttpOnly; Secure; SameSite=None
ab_bid=60df9137d5aa06c90ec6056438746fff710f; Path=/; Domain=ymg-api.terabox.com; Max-Age=2147483647; HttpOnly; Secure; SameSite=None
ab_sr=1.0.1_M2JjZjBlOGMzNmUwMWEwNjM1NTM4MmVjNDQ1MGI1OTI5NDNlOTE4NmQ0YjAzMTYwY2M5ZTNiZGI1ZGZiNGI1NDE2ZGNlYzg4NGYwYmFhNTQ1YTY4NTAxNjhhNmZjOGM4N2RlYWI0MzVkMzQ5N2JmZTRiYzkzYWQ5MDQyNWM3MTk1NTA2MWQ3ZjlhMmNjMmRhYzU1MTcwYzMxMGMxNWIzNQ==; Path=/; Domain=terabox.com; Max-Age=7200; HttpOnly; Secure; SameSite=None
Server: nginx
logid: 8841052690535853965
Flow-level: 3
Content-Encoding: gzip
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/facebook.min.js
200 OK 14 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/facebook.min.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 15d96fdd0513b6eed911b2a065493420
10f9e236bc1475699c48b98ec4e92994e166efd8
64ea83a3dacc6a8c3302b33ed181c41974657a42e72d805cb97e37e34ffd634c
GET /fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/facebook.min.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:41:59 GMT
content-type: application/javascript
server: openresty
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT
access-control-expose-headers: ETag, Content-Length, x-bce-next-append-offset, x-bce-object-type, x-bce-request-id
access-control-max-age: 1800
content-md5: Aowl118tEMuXoOFINDERYw==
etag: W/"028c25d75f2d10cb97a0e14834311163"
expires: Sat, 24 Sep 2022 06:46:06 GMT
last-modified: Wed, 21 Sep 2022 05:03:33 GMT
x-bce-content-crc32: 3600293201
x-bce-debug-id: drF3pXV387iC2EyFCn4G8jIjxuuDcbNW6JT4jDmhDeNosKMTV4jVPaeR4QxYWsldtHHLV0pqg9KhEHfx+45FOQ==
x-bce-request-id: 1e1dfa93-d4b6-4000-b380-bdf1ecb59464
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 1729907
via: EU-GER-frankfurt-EDGE5-CACHE2[11],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE3[3],EU-GER-frankfurt-GLOBAL1-CACHE10[0,TCP_HIT,2],EA-SGP-GLOBAL1-CACHE9[4],EA-SGP-GLOBAL1-CACHE30[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24192776
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/loading-grey.0e512ce9.gif
200 OK 13 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/loading-grey.0e512ce9.gif
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type GIF image data, version 89a, 70 x 54\012- data
Hash 0e512ce91474d2c98f524fc9d479bca1
3e95fc024add69d9f13393a9dacbf625d2cf218c
48ed2dfe595001d90ea0bf9c572b15f446fcf49ae4bfa2cac84acc02aef04e17
GET /fe-opera-static/node-static-v4/fe-webv4-main/img/loading-grey.0e512ce9.gif HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:42:00 GMT
content-type: image/gif
content-length: 12746
server: openresty
content-md5: DlEs6RR00smPUk/J1Hm8oQ==
etag: "0e512ce91474d2c98f524fc9d479bca1"
expires: Sat, 24 Sep 2022 06:46:06 GMT
last-modified: Wed, 21 Sep 2022 05:03:27 GMT
x-bce-content-crc32: 1545165226
x-bce-debug-id: SVLAO6wp1e4OUGFHIRy8Y1IEAIpwP8YBdrzlRjHOGWEqe7/5zemw7PiCsrLuiBtk8Hkvkt7auD0iX4QbNYOajA==
x-bce-request-id: 911c9037-40e0-4339-a273-266bf634f105
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 1728103
via: EU-GER-frankfurt-EDGE5-CACHE2[2],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE8[3],EU-GER-frankfurt-GLOBAL1-CACHE4[0,TCP_HIT,2],EA-SGP-GLOBAL1-CACHE24[4],EA-SGP-GLOBAL1-CACHE25[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24192657
accept-ranges: bytes
access-control-allow-origin: *
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/fonts/iconfont.4f9f785d.woff
200 OK 26 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/fonts/iconfont.4f9f785d.woff
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type Web Open Font Format, TrueType, length 25804, version 1.0\012- data
Hash 4f9f785d98a8fa208e7f64023e124572
3e8714f56d480cfd66721447975613a1e56ca9e4
27f0ac9cff76f3925b4389a404d01e2fb525bae7b17cafb0c04e5e6bb20ca83b
GET /fe-opera-static/node-static-v4/fe-webv4-main/fonts/iconfont.4f9f785d.woff HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:42:00 GMT
content-type: application/x-font-woff
content-length: 25804
server: openresty
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Length, x-bce-next-append-offset, x-bce-object-type, x-bce-request-id
access-control-max-age: 1800
content-md5: T594XZio+iCOf2QCPhJFcg==
etag: "4f9f785d98a8fa208e7f64023e124572"
expires: Thu, 09 Feb 2023 02:34:52 GMT
last-modified: Thu, 02 Feb 2023 12:40:59 GMT
x-bce-content-crc32: 4229721389
x-bce-debug-id: 7WiMWIwBpNvCI1l2DEy41X6CYQbfBDD/53hHCbNUgg3chFP5F6R09q6Ha3n+sFI1w5hrFozk3M8ehG3s5jYsKw==
x-bce-request-id: 8ed250a7-98cd-4add-b067-4212e4c8ecd6
x-bce-storage-class: STANDARD
x-ccdn-expires: 1727339
via: EU-GER-frankfurt-EDGE5-CACHE2[2],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,1],EU-GER-frankfurt-GLOBAL1-CACHE11[3],EU-GER-frankfurt-GLOBAL1-CACHE3[0,TCP_HIT,1]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24192777
accept-ranges: bytes
X-Firefox-Spdy: h2
www.1024tera.com/rest/2.0/membership/proxy/user?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530002&client=web&pass_version=2.8&lang=en&clientfrom=h5&pcftoken=6e266f85617fbaa5ef7d384282d4d15c&method=query&membership_version=1.0
200 OK 96 B URL GET HTTP/1.1 www.1024tera.com/rest/2.0/membership/proxy/user?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530002&client=web&pass_version=2.8&lang=en&clientfrom=h5&pcftoken=6e266f85617fbaa5ef7d384282d4d15c&method=query&membership_version=1.0
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 88fc1ae1421406fe3de4d4ab9ecf9704
bb5e53bc60f4d51905b1c5acf69e5b7b1bb238b7
c43423fed72fae5f2984d282e303d56742d099e26ce40e2d86de69cfee4abe80
GET /rest/2.0/membership/proxy/user?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530002&client=web&pass_version=2.8&lang=en&clientfrom=h5&pcftoken=6e266f85617fbaa5ef7d384282d4d15c&method=query&membership_version=1.0 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:00 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8841052798159574610
Logid: 8841052798159574610
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8841052798159574610
Yme: ZIGW+Ss3QE0WYisMTHb+qnFLufkASwb2tAFIxyqBmO+wFR8yio57P0jpGjY=
Content-Length: 96
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/apple.min.js
200 OK 24 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/apple.min.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (55204)
Hash ec12f0a04165e9f0a871bf74fd8ae994
da66aa74e5794dda1936a08f9bab42ef9bc157e6
7432a1b6864c61bc0be2038522eb888731bdbcf5e89b78e427bf433ce377868f
GET /fe-opera-static/node-static-v4/fe-webv4-main/assets/libs/apple.min.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:41:59 GMT
content-type: application/javascript
server: openresty
content-md5: FF9mC4xH7SHLDq/gVBei9Q==
etag: W/"145f660b8c47ed21cb0eafe05417a2f5"
expires: Sun, 05 Feb 2023 11:19:03 GMT
last-modified: Thu, 02 Feb 2023 02:44:27 GMT
x-bce-content-crc32: 3041762371
x-bce-debug-id: GooNofUHCftVSaaHEC+AzAr4FYXPEZIzOsKJwWjn94XbPwUKv4MuSNK5CZJOH/HsmlldVHL9LxC5wuj+MNetYw==
x-bce-request-id: 96560a78-91ad-47e1-a285-8df2f8efcb9d
x-bce-storage-class: STANDARD
x-ccdn-expires: 1729907
via: EU-GER-frankfurt-EDGE5-CACHE2[4],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE6[3],EU-GER-frankfurt-GLOBAL1-CACHE2[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24192776
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?time=1686&type=web_share_page_show_FP_FIRST&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142924652
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?time=1686&type=web_share_page_show_FP_FIRST&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142924652
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 86521476f8dbb63ce482f1d01984b2d6
289357b3f20c97de26dfdb647f78786c7ebda264
0b79b6c94f9bc61db69c0ccf8bc69be92759123594c1fa008e2f5edbf77b1635
GET /api/analytics?time=1686&type=web_share_page_show_FP_FIRST&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142924652 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:01 GMT
Flow-Level: 3
Logid: 8841052820367170108
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841052820367170108
Yme: ZIGW+Ss3QEsTdTcGUmr/tG1MvuUZSBz3qwpNwiSL7p6ySFBERqfXp9/63A==
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/manifest.46f62028.js
200 OK 13 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/manifest.46f62028.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash d5ad82fda655766a5c58b9f0025514d9
b35703f0f5f640a2d388d4ce606b2d88f184658b
abc71329f3d3d5e38aaa20d250d8e4d3457adb0e956129d8f1f71a6a5d287b91
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/manifest.46f62028.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:41:59 GMT
content-type: application/javascript
server: openresty
content-md5: X0UBuDlEs2cT+/iWt9dowQ==
etag: W/"5f4501b83944b36713fbf896b7d768c1"
expires: Thu, 30 Nov 2023 08:59:33 GMT
last-modified: Mon, 27 Nov 2023 03:07:00 GMT
x-bce-content-crc32: 2051750269
x-bce-debug-id: Ev8l1GA83xhCDv4uh+405sNFBYAKhBlsu+uLgbmI7gATC+EP9qsAfuMbUaz+xfmxbNc+/iE2jUK9LWW+EAMbnQ==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: cd708941-8a9b-475b-951d-4df2ad160c59
x-bce-storage-class: STANDARD
x-ccdn-expires: 2527998
via: EU-GER-frankfurt-EDGE5-CACHE2[14],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE1[10],EU-GER-frankfurt-GLOBAL1-CACHE7[0,TCP_HIT,9]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 66618
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recyclebin~share~shortLink~~a6807c0b.fc45cce5.js
200 OK 181 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recyclebin~share~shortLink~~a6807c0b.fc45cce5.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Size 181 kB (180952 bytes)
Hash 065106579ad180e9730320ecb8643af4
e958de177a29f77e68039ecba3056db01faf0732
0ea86eb01ae19a32ccc2a0569757b40c88cb0275097687a8354b45fb0a30312a
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recyclebin~share~shortLink~~a6807c0b.fc45cce5.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:41:59 GMT
content-type: application/javascript
server: openresty
content-md5: 3vVR6H8zix7AT5ceSOCFoQ==
etag: W/"def551e87f338b1ec04f971e48e085a1"
expires: Thu, 30 Nov 2023 08:59:34 GMT
last-modified: Mon, 27 Nov 2023 03:06:49 GMT
x-bce-content-crc32: 109535015
x-bce-debug-id: U/iII4VPTwMwdzz9CGtX6vQbWJwGrdGmsKcrvSVreBfkkEQIWxe0X73eIwPdx0hO6o5gGBpK8HmIqWQ2/8iaLg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 0219edee-bfed-4f96-b5dc-8fce987c248d
x-bce-storage-class: STANDARD
x-ccdn-expires: 2548290
via: EU-GER-frankfurt-EDGE5-CACHE2[11],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[19],EU-GER-frankfurt-GLOBAL1-CACHE2[0,TCP_HIT,18]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 66618
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?errno=100003&error_code=100003&error_msg=Invalid%20Bduss&request_id=8841052798159574610&hasError=true¶ms=%7B%22client%22%3A%22web%22%2C%22pass_version%22%3A%222.8%22%2C%22lang%22%3A%22en%22%2C%22clientfrom%22%3A%22h5%22%2C%22pcftoken%22%3A%226e266f85617fbaa5ef7d384282d4d15c%22%2C%22method%22%3A%22query%22%2C%22membership_version%22%3A%221.0%22%7D&uk=0&type=%2Frest%2F2.0%2Fmembership%2Fproxy%2Fuser_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142924891
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=100003&error_code=100003&error_msg=Invalid%20Bduss&request_id=8841052798159574610&hasError=true¶ms=%7B%22client%22%3A%22web%22%2C%22pass_version%22%3A%222.8%22%2C%22lang%22%3A%22en%22%2C%22clientfrom%22%3A%22h5%22%2C%22pcftoken%22%3A%226e266f85617fbaa5ef7d384282d4d15c%22%2C%22method%22%3A%22query%22%2C%22membership_version%22%3A%221.0%22%7D&uk=0&type=%2Frest%2F2.0%2Fmembership%2Fproxy%2Fuser_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142924891
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 82456e4aa61e68038427632a31a62903
cc51cc6712c38ef64233d0d4b6afd5f75518ffd6
24f6fd5e184b79b7354bed26df05ef04afd5260505765ee52877379c28229eb1
GET /api/analytics?errno=100003&error_code=100003&error_msg=Invalid%20Bduss&request_id=8841052798159574610&hasError=true¶ms=%7B%22client%22%3A%22web%22%2C%22pass_version%22%3A%222.8%22%2C%22lang%22%3A%22en%22%2C%22clientfrom%22%3A%22h5%22%2C%22pcftoken%22%3A%226e266f85617fbaa5ef7d384282d4d15c%22%2C%22method%22%3A%22query%22%2C%22membership_version%22%3A%221.0%22%7D&uk=0&type=%2Frest%2F2.0%2Fmembership%2Fproxy%2Fuser_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142924891 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:01 GMT
Flow-Level: 3
Logid: 8841052874782340524
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841052874782340524
Yme: ZIGW+Ss3QEsVdTcEUmr/tG1MvuUZTxz0qQpNwyaB
Content-Length: 44
www.1024tera.com/api/analytics?errno=-6&newno=&request_id=8841052802906084000&show_msg=&hasError=true¶ms=undefined&uk=0&type=%2Fapi%2Fad%2Fgetconfig_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142924938
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&newno=&request_id=8841052802906084000&show_msg=&hasError=true¶ms=undefined&uk=0&type=%2Fapi%2Fad%2Fgetconfig_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142924938
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 35819ebc704c86aa7af1b1450865ebad
b584d20d15fac12570624724ceb5fb0f1debb48e
f0995608cdbf0fc36c3d047f1464ea68cd202a22313950f404aa44e866aeee54
GET /api/analytics?errno=-6&newno=&request_id=8841052802906084000&show_msg=&hasError=true¶ms=undefined&uk=0&type=%2Fapi%2Fad%2Fgetconfig_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142924938 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:01 GMT
Flow-Level: 3
Logid: 8841052887286812740
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841052887286812740
Yme: ZIGW+Ss3QE0WaisCTnb+qnFLufkASwH8tAFMySKDmuQ=
Content-Length: 44
www.1024tera.com/share/webmaster/check?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530007&bdstoken=
200 OK 85 B URL GET HTTP/1.1 www.1024tera.com/share/webmaster/check?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530007&bdstoken=
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 6fdd079e06c1caf287ce71822fb9bbb6
f626dec1ad091fbb9496d82340549999fc0c980b
9b52cbfadb76bb7472bb377b3b15c5e4e7f3d700937ad33e5f1b6922eb2c8cd1
GET /share/webmaster/check?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530007&bdstoken= HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:01 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8841052908931440446
Logid: 8841052908931440446
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8841052908931440446
Yme: ZIGW+Ss3QE0WaCsHT2niq29Xvv4cVAPxqB5LwiqBmOm06qRgfg==
Content-Length: 85
www.1024tera.com/passport/getpubkey?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530006
200 OK 406 B URL POST HTTP/1.1 www.1024tera.com/passport/getpubkey?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530006
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (466), with no line terminators
Hash 268bccf168aabc6ab225a884b55b1e69
89e2ff00536122c65cea44fb324706a0efa8eb16
9c771e7b9050b3b98bc69b34eee955086cc10418a0d7b302957c505269641e26
POST /passport/getpubkey?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530006 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 91
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/Json; charset=utf-8
Date: Tue, 28 Nov 2023 03:42:01 GMT
Flow-Level: 3
Logid: 8841052905448013678
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8841052905448013678
Yme: ZIGW+Ss3QE0WaCsESWPiq29Xvv4cVAPxrB5OwCqBmOWzT1oyMXoT+8l9PXUY
Content-Length: 406
sofire.terabox.com/edkey
200 OK 247 B IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.terabox.com
Fingerprint4F:30:79:83:60:E0:58:E8:DA:05:09:38:E1:6D:CD:F9:46:33:D6:5F
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (361), with no line terminators
Hash 4aebca9fccf6984e600baf63b95ae526
ef83ff8c48f55fb17b0ac26d9cb6d54822d185b2
4a608e7653f41a903e5e566a81813a00389c320d12a1489e61e21da8f3eb0622
POST /edkey HTTP/1.1
Host: sofire.terabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.1024tera.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 64
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 28 Nov 2023 03:42:01 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 8841052930743181824
Access-Control-Allow-Origin: *
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WaCsESW3iq29Xvv4cVAP2ox5OwySJkO25Tw==
logid: 8841052930743181824
Flow-level: 3
Content-Encoding: gzip
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530004&language_type=en&cfg_category_keys=%5B%5D&version=0
200 OK 15 kB URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530004&language_type=en&cfg_category_keys=%5B%5D&version=0
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 789bd2b78d30c39189068d9d2b3040c5
a0b67b8a230a332be40524d15f132de80e553c48
987f144618a241ccf5bf7d04b60f82e90235d17d1e89dbbd41ab801c98799e22
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530004&language_type=en&cfg_category_keys=%5B%5D&version=0 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:01 GMT
Flow-Level: 3
Logid: 8841052872767566015
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 8841052872767566015
Yme: ZIGW+Ss3QEsUdTEFUmr/tG1MvuUYQxz0rQpNwyCL
Transfer-Encoding: chunked
www.1024tera.com/share/linkpaylistpurchaseorder?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530008&page=1&cnt=20
200 OK 84 B URL GET HTTP/1.1 www.1024tera.com/share/linkpaylistpurchaseorder?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530008&page=1&cnt=20
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 4c3df78c7a946b04aa434ca11e5b6673
7f6d9a9065670669e4541d5618419c39791ea961
ea07d033554d5b1ffa7e10d0395351f2674cbb68a587f031f54f62b3fe21e1d8
GET /share/linkpaylistpurchaseorder?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530008&page=1&cnt=20 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:01 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8841052952961780636
Logid: 8841052952961780636
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8841052952961780636
Yme: ZIGW+Ss3QE0RYisES2riq29Xvv4cVAPwqh5OwyGJmu2xT0g4IQx/C0aPxCwY
Content-Length: 84
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530005&language_type=en&cfg_category_keys=%5B%5D&version=0
200 OK 15 kB URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530005&language_type=en&cfg_category_keys=%5B%5D&version=0
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 47df93cc83aaf19c5d68cea6d7884ae5
3b329191eb49b3853fe91f0e752261f5d7816954
246007cc200adfbf39b4ab6aab5025bae10019f82bfd52551f1fc023935d9bc7
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530005&language_type=en&cfg_category_keys=%5B%5D&version=0 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:01 GMT
Flow-Level: 3
Logid: 8841052873264773045
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 8841052873264773045
Yme: ZIGW+Ss3QE0XaysCSHb+qnFLufkASwbxtAFHySKDnOlm5D59
Transfer-Encoding: chunked
www.1024tera.com/rest/1.0/operation/pull?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530009&position=7&lang=en
200 OK 83 B URL GET HTTP/1.1 www.1024tera.com/rest/1.0/operation/pull?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530009&position=7&lang=en
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 917e4bbe3cc132313b22e387b35186ec
8b88ff66310129147c24ece693812d075743d4b3
d98441e09c6ce38c39184b6c07818a179c9ee6a1c30d02247614f86f6a47d7b6
GET /rest/1.0/operation/pull?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530009&position=7&lang=en HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: text/plain; charset=utf-8
Date: Tue, 28 Nov 2023 03:42:01 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8841052980710070016
Logid: 8841052980710070016
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8841052980710070016
Yme: ZIGW+Ss3QEsWdTcGUmr/tG1MvuUfTgDrqQlFwSCCkA==
Content-Length: 83
sofire.1024tera.com/h5/t
200 OK 587 B IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (697), with no line terminators
Hash a078e9ed258990b299ec9118e997af83
5c7b184abff77932df9e43f5eb2da06539aa467e
5ec1f1a97fbbdedf7e1ac5f56e8d44468885a320c02dec50e33f93b80b95005a
POST /h5/t HTTP/1.1
Host: sofire.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 3806
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 28 Nov 2023 03:42:01 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 8841052990360829927
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type,AccessToken,X-CSRF-Token,X-Bdh5-Pf,X-XSRF-TOKEN, Authorization
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Expose-Headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Content-Type
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QE0WYisERnb+qnFLufkASwH8tAFPxyqLmOWx
logid: 8841052990360829927
Flow-level: 3
Content-Encoding: gzip
www.1024tera.com/api/analytics?time=5728&type=web_share_page_show_FCP&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142924653
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?time=5728&type=web_share_page_show_FCP&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142924653
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 6ecd85d13fc27b87a7d542209c194582
323cfe9b66d59a2f2a6933e00d5d31e1644837e4
a3d2de3eea81e42c90be53ac2708be0cabe916a00b8209734f3e954a9f157a70
GET /api/analytics?time=5728&type=web_share_page_show_FCP&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142924653 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:01 GMT
Flow-Level: 3
Logid: 8841052992669189456
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841052992669189456
Yme: ZIGW+Ss3QEsWdTEBUmr/tG1MvuUZSBz2qApNwyGHxdDd2xU=
Content-Length: 44
www.1024tera.com/api/analytics?errno=-6&newno=&request_id=8841052908931441000&show_msg=&hasError=true¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fwebmaster%2Fcheck_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142925343
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&newno=&request_id=8841052908931441000&show_msg=&hasError=true¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fwebmaster%2Fcheck_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142925343
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 326557570b2ed694eecea25212c18582
9e857971ad87ebdf436c91a157418398b5b0e3c2
474a9a6b67563ae7cec0b5394540d5b3e8890b875745383e985ffb64a6cf5fe6
GET /api/analytics?errno=-6&newno=&request_id=8841052908931441000&show_msg=&hasError=true¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fwebmaster%2Fcheck_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142925343 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:01 GMT
Flow-Level: 3
Logid: 8841052995700949680
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841052995700949680
Yme: ZIGW+Ss3QE0WaisGSnb+qnFLufkASwb8tAdOySKDkO0=
Content-Length: 44
www.1024tera.com/api/analytics?type=terabox_sharing_link_js_error&sessionId=224070&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&msg=%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&stack=%5B%7B%22columnNumber%22%3A2705%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22h%22%2C%22source%22%3A%22h%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A2705%22%7D%2C%7B%22columnNumber%22%3A3160%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%22%2C%22source%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A3160%22%7D%2C%7B%22columnNumber%22%3A30208%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22Kt%22%2C%22source%22%3A%22Kt%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A30208%22%7D%5D
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=terabox_sharing_link_js_error&sessionId=224070&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&msg=%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&stack=%5B%7B%22columnNumber%22%3A2705%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22h%22%2C%22source%22%3A%22h%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A2705%22%7D%2C%7B%22columnNumber%22%3A3160%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%22%2C%22source%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A3160%22%7D%2C%7B%22columnNumber%22%3A30208%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22Kt%22%2C%22source%22%3A%22Kt%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A30208%22%7D%5D
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 9a8f11d510ef56ce7c91f65fbab03de5
364840ec6bc3f3ae5bd9de597e8219e508a1f06a
ad6a39952a0266756cb52bd33948aeacab1b8ccc97c754f4659bc3ebe511fa0d
GET /api/analytics?type=terabox_sharing_link_js_error&sessionId=224070&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&msg=%7B%22code%22%3A%22remoteconfig%2Fstorage-open%22%2C%22customData%22%3A%7B%22originalErrorMessage%22%3A%22A%20mutation%20operation%20was%20attempted%20on%20a%20database%20that%20did%20not%20allow%20mutations.%22%7D%2C%22name%22%3A%22FirebaseError%22%7D&stack=%5B%7B%22columnNumber%22%3A2705%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22h%22%2C%22source%22%3A%22h%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A2705%22%7D%2C%7B%22columnNumber%22%3A3160%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%22%2C%22source%22%3A%22e56e%2F%3C%2F%3C%2Fg.prototype.create%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A3160%22%7D%2C%7B%22columnNumber%22%3A30208%2C%22lineNumber%22%3A1%2C%22fileName%22%3A%22https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%22%2C%22functionName%22%3A%22Kt%22%2C%22source%22%3A%22Kt%40https%3A%2F%2Fs2.teraboxcdn.com%2Ffe-opera-static%2Fnode-static-v4%2Ffe-webv4-main%2Fjs%2Fchunk-2d225855.7faaefb6.js%3A1%3A30208%22%7D%5D HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:01 GMT
Flow-Level: 3
Logid: 8841053032259140643
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053032259140643
Yme: ZIGW+Ss3QEsUdTcEUmr/tG1MvuUZTBz0qQpNxyeBzav0Fg4/RadT4jdW3A==
Content-Length: 44
www.1024tera.com/api/analytics?time=5731&type=web_share_page_show_TTI&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142924656
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?time=5731&type=web_share_page_show_TTI&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142924656
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash d8bf56f19b9d12375cd3d91dfdab8ddd
05648aba3569552474c33b15b50b6aebfcfdbfa2
9024ad4786f9898cb7c731fa6ae27e1564169966b9cf3d92f41a157a2e5e1ce5
GET /api/analytics?time=5731&type=web_share_page_show_TTI&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142924656 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:01 GMT
Flow-Level: 3
Logid: 8841053030066600947
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053030066600947
Yme: ZIGW+Ss3QE0WaSsESG7iq29Xvv4cVAPxqB5NwSeJmu2yRh4kYCdNg9Zt2xcY
Content-Length: 44
www.1024tera.com/api/analytics?clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&type=web_i18n_collect_info&i18nInfoId=e4bc3402-7071-408a-a812-e77446a93b7e&i18nIndex=0&i18nInfo=%7B%22share%22%3A%7B%22shareInitPwdEmpty%22%3A%7B%7D%2C%22shareInitPwdError%22%3A%7B%7D%2C%22shareInitCaptchaEmpty%22%3A%7B%7D%2C%22shareInitCaptchaError%22%3A%7B%7D%7D%7D&t=1701142924477
200 OK 44 B URL POST HTTP/1.1 www.1024tera.com/api/analytics?clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&type=web_i18n_collect_info&i18nInfoId=e4bc3402-7071-408a-a812-e77446a93b7e&i18nIndex=0&i18nInfo=%7B%22share%22%3A%7B%22shareInitPwdEmpty%22%3A%7B%7D%2C%22shareInitPwdError%22%3A%7B%7D%2C%22shareInitCaptchaEmpty%22%3A%7B%7D%2C%22shareInitCaptchaError%22%3A%7B%7D%7D%7D&t=1701142924477
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 92f3e660c8488c4b0a7e2c6a0c36726d
1fa90496cd326cb0179c44b79a79f98eca72bd07
5e1b27df01ccfa04e05579b53c5c6876ce55e175dfe8fc2339a2554d48ba6604
POST /api/analytics?clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&type=web_i18n_collect_info&i18nInfoId=e4bc3402-7071-408a-a812-e77446a93b7e&i18nIndex=0&i18nInfo=%7B%22share%22%3A%7B%22shareInitPwdEmpty%22%3A%7B%7D%2C%22shareInitPwdError%22%3A%7B%7D%2C%22shareInitCaptchaEmpty%22%3A%7B%7D%2C%22shareInitCaptchaError%22%3A%7B%7D%7D%7D&t=1701142924477 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:01 GMT
Flow-Level: 3
Logid: 8841053037718263301
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053037718263301
Yme: ZIGW+Ss3QE0WaCsHTW7iq29Xvv4cVAPxqR5OxCGJmuyzTg==
Content-Length: 44
www.1024tera.com/api/analytics?isLogin=false&surl=S1LqlL6pC0U9XqR8bGfWEQ&downloadPullNewFlag=b&videoTrialPullNewFlag=a&isUserSelfLink=false&referrer=&channelSrc=&type=share_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142925653
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?isLogin=false&surl=S1LqlL6pC0U9XqR8bGfWEQ&downloadPullNewFlag=b&videoTrialPullNewFlag=a&isUserSelfLink=false&referrer=&channelSrc=&type=share_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142925653
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 9001433af6f3914715e5309e20b30379
bc4e4d5c49765b69c7c7ce29da2612088a0fcfe8
de6d0b2212e158455c4f6c1acbfd76c05161b606ceece5cafdddc66db619c8d6
GET /api/analytics?isLogin=false&surl=S1LqlL6pC0U9XqR8bGfWEQ&downloadPullNewFlag=b&videoTrialPullNewFlag=a&isUserSelfLink=false&referrer=&channelSrc=&type=share_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142925653 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:01 GMT
Flow-Level: 3
Logid: 8841053080494500220
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053080494500220
Yme: ZIGW+Ss3QE0WaCsET27iq29Xvv4cVAPxqB5GwiqBmOq2
Content-Length: 44
www.1024tera.com/api/analytics?errno=-6&errmsg=&data=null&logid=15376262962501983330&hasError=true¶ms=%7B%22position%22%3A7%2C%22lang%22%3A%22en%22%7D&uk=0&type=%2Frest%2F1.0%2Foperation%2Fpull_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142925669
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&errmsg=&data=null&logid=15376262962501983330&hasError=true¶ms=%7B%22position%22%3A7%2C%22lang%22%3A%22en%22%7D&uk=0&type=%2Frest%2F1.0%2Foperation%2Fpull_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142925669
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 6dda0698376465947fe9e03b65f17672
f9a61286bd1842569499a3ec3edbcc9f50c2c467
7cbc0baf028646492d99bf4c21c25f55feea730b510edd04259e6707a836b1bf
GET /api/analytics?errno=-6&errmsg=&data=null&logid=15376262962501983330&hasError=true¶ms=%7B%22position%22%3A7%2C%22lang%22%3A%22en%22%7D&uk=0&type=%2Frest%2F1.0%2Foperation%2Fpull_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142925669 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:01 GMT
Flow-Level: 3
Logid: 8841053084046098657
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053084046098657
Yme: ZIGW+Ss3QE0WaSsHTHb+qnFLufkASwb2tAFKySKDnu/oG1AiOW/7n+ca7jY=
Content-Length: 44
www.1024tera.com/api/analytics?errno=-6&newno=&request_id=8841052952961781000&show_msg=&hasError=true¶ms=%7B%22page%22%3A1%2C%22cnt%22%3A20%7D&uk=0&type=%2Fshare%2Flinkpaylistpurchaseorder_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142925657
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&newno=&request_id=8841052952961781000&show_msg=&hasError=true¶ms=%7B%22page%22%3A1%2C%22cnt%22%3A20%7D&uk=0&type=%2Fshare%2Flinkpaylistpurchaseorder_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142925657
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash e963a4412618a6194fd2fffa002ffb7e
8c04cd43f81f9115aae9aef1d581c99ad9183497
55053c9cd5a6770c9e6210ac66b940178d6e9a6807369643485853ea81e42b00
GET /api/analytics?errno=-6&newno=&request_id=8841052952961781000&show_msg=&hasError=true¶ms=%7B%22page%22%3A1%2C%22cnt%22%3A20%7D&uk=0&type=%2Fshare%2Flinkpaylistpurchaseorder_web_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142925657 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:02 GMT
Flow-Level: 3
Logid: 8841053081187020592
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053081187020592
Yme: ZIGW+Ss3QE0WYisES27iq29Xvv4cVAPxrh5NxyqBmO62
Content-Length: 44
www.1024tera.com/share/list?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530010&page=1&num=20&by=name&order=asc&site_referer=&scene=purchased_list&shorturl=S1LqlL6pC0U9XqR8bGfWEQ&root=1
200 OK 597 B URL GET HTTP/1.1 www.1024tera.com/share/list?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530010&page=1&num=20&by=name&order=asc&site_referer=&scene=purchased_list&shorturl=S1LqlL6pC0U9XqR8bGfWEQ&root=1
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (1948), with no line terminators
Hash 4ed4bc811922c2d94577036c2462d59e
6942df5f51327599b374e8f5830876f749567b82
a047d59c57fc3aca64c8d6eee47589cb888a71f6f5a696d640fc01c074dda495
GET /share/list?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530010&page=1&num=20&by=name&order=asc&site_referer=&scene=purchased_list&shorturl=S1LqlL6pC0U9XqR8bGfWEQ&root=1 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:02 GMT
Flow-Level: 3
Logid: 8841053081052639346
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053081052639346
Yme: ZIGW+Ss3QE0WaisCSnb+qnFLufkASwb3tAJOwCqBmO65XyVJcmRu9funpPc=
Transfer-Encoding: chunked
firebase.googleapis.com/v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig
200 OK 0 B URL GET HTTP/2 firebase.googleapis.com/v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig HTTP/1.1
Host: firebase.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-goog-api-key
Referer: https://www.1024tera.com/
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.1024tera.com
vary: origin, referer, x-origin
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: x-goog-api-key
access-control-max-age: 3600
date: Tue, 28 Nov 2023 03:42:02 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
firebase.googleapis.com/v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig
200 OK 223 B URL GET HTTP/2 firebase.googleapis.com/v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text
Hash 54c11162d6ef3c32b787d4d8a6a292f8
f1e88b95b9addbd7a1e170daf6da450ab93bdecb
263070732f0c9d00ac3e625982ff38a8d08bc25a2ac03c3e3d524557b09f616f
GET /v1alpha/projects/-/apps/1:866794485532:web:b9c33b0f122f89758a6cd9/webConfig HTTP/1.1
Host: firebase.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.1024tera.com/
x-goog-api-key: AIzaSyCAt5j0_j4UDEm5Nb4bNvQknuGZoMK_XK8
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 28 Nov 2023 03:42:02 GMT
server: ESF
cache-control: private
content-length: 223
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.1024tera.com
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/gsi/client
200 OK 80 kB URL GET HTTP/2 accounts.google.com/gsi/client
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B
ValidityMon, 23 Oct 2023 11:25:04 GMT - Mon, 15 Jan 2024 11:25:03 GMT
File type gzip compressed data, max compression\012- data
Hash 1ce187dd2cd27784e98ea2a99668335c
c4b6c8030673006a15fe763be2fd354fe33c3352
195d7026e2c6abde8c9fefeecee438b2975f7ff44eddf83e56008ad721a1600c
GET /gsi/client HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
expires: Tue, 28 Nov 2023 03:42:02 GMT
date: Tue, 28 Nov 2023 03:42:02 GMT
cache-control: private, max-age=1800
content-security-policy: script-src 'nonce-h47eduFOJZbAsxTzb5cN5Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http
cross-origin-resource-policy: cross-origin
report-to: {"group":"coop_dd7de8473bddc59c6b748810a67a39b1","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_dd7de8473bddc59c6b748810a67a39b1"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.1024tera.com/fe-opera-static/box-static/disk-system/images/favicon.ico
200 OK 1.7 kB URL GET HTTP/1.1 www.1024tera.com/fe-opera-static/box-static/disk-system/images/favicon.ico
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash 85c3fafc35604bddb3171dee4c0aa6dc
4cb347df6fbedcf8b7e77c9b0673ff3667ed0266
fd68b8c59d5d564cb46519aaaf236ef2ffab9c79c4b1e3ea67a1a57a0120731e
GET /fe-opera-static/box-static/disk-system/images/favicon.ico HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Connection: keep-alive
Content-Type: image/x-icon
Date: Tue, 28 Nov 2023 03:42:02 GMT
Etag: "64783b7d-693"
Expires: Thu, 28 Dec 2023 03:42:02 GMT
Flow-Level: 3
Last-Modified: Thu, 01 Jun 2023 06:32:29 GMT
Logid: 8841053231403233413
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: TeraBox
Yld: 8841053231403233413
Yme: ZIGW+Ss3QEobdTEDUmr/tG1MvuUYQxz3qwpNwyeH5M3N/y5JCQ==
Transfer-Encoding: chunked
www.googletagmanager.com/gtag/js?l=dataLayer&id=G-06ZNKL8C2E
200 OK 85 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?l=dataLayer&id=G-06ZNKL8C2E
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type Unicode text, UTF-8 text, with very long lines (3034)
Hash ef0b3833427774c9a9a73fcb7b42d174
6cc8e4e10602ee13ee64dad6ee65e0dcdad9cf67
f82dd7f384343d2e604317e89e6a4d9c15e483c3633ad17a8157ae58f3048813
GET /gtag/js?l=dataLayer&id=G-06ZNKL8C2E HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 28 Nov 2023 03:42:02 GMT
expires: Tue, 28 Nov 2023 03:42:02 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 85361
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.1024tera.com/share/querysurltransfer?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530011&bdstoken=
200 OK 85 B URL POST HTTP/1.1 www.1024tera.com/share/querysurltransfer?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530011&bdstoken=
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash 1b45953403147fc64a8307ce86a7ffdb
7a07a3ece46a99c436de5e1485a8f3ca356ad9d8
6bccf3973142cfbe5f80cb735ab75b492385414de294dce7430c90063b0d12b5
POST /share/querysurltransfer?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530011&bdstoken= HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 31
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:02 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8841053235021521746
Logid: 8841053235021521746
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8841053235021521746
Yme: ZIGW+Ss3QEsRdTEDUmr/tG1MvuUZTRz0rQpNwyKE7zkWnRU=
Content-Length: 85
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/logo.2a229dfa.svg
200 OK 1.7 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/logo.2a229dfa.svg
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1713), with no line terminators
Hash 2a229dfa55348fc84be678f926330616
96ad6e5765a9847fd3f202aad6a88bf95dd9caf1
78055ff5570a46c5904129bfdd26d9cc327feded52e4feca75feaa8e2f180d5b
GET /fe-opera-static/node-static-v4/fe-webv4-main/img/logo.2a229dfa.svg HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:42:02 GMT
content-type: image/svg+xml
content-length: 1713
server: openresty
content-md5: KiKd+lU0j8hL5nj5JjMGFg==
etag: "2a229dfa55348fc84be678f926330616"
expires: Sat, 24 Sep 2022 06:46:17 GMT
last-modified: Wed, 21 Sep 2022 05:03:27 GMT
x-bce-content-crc32: 1353669740
x-bce-debug-id: NAe6EO3wT96ak0qPNr/yE8+RuLbHz64z8I5FDCDIACxRHRvP8Rcs1CH0CzIO18cwCQo293KSx7/0Hh+Zyx0VZQ==
x-bce-request-id: 3ccd90bb-d04d-43f8-a561-47d04dd6edbb
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 1728164
via: EU-GER-frankfurt-EDGE5-CACHE2[1],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE4[19],EU-GER-frankfurt-GLOBAL1-CACHE14[0,TCP_HIT,17],EA-SGP-GLOBAL1-CACHE17[2],EA-SGP-GLOBAL1-CACHE26[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24192654
accept-ranges: bytes
access-control-allow-origin: *
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/fonts/yunfont.44acf892.ttf
200 OK 23 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/fonts/yunfont.44acf892.ttf
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, yunfont \012- data
Hash 44acf8923466a31680d910d7cc4f0903
351d9f0d3e293ae4c4e4c28e67b09f5ab2a39983
cdec6bbf708df8fbb45cb6c8477254406972c90e28bf1bc7d265b9bd0a403cd9
GET /fe-opera-static/node-static-v4/fe-webv4-main/fonts/yunfont.44acf892.ttf HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:42:02 GMT
content-type: application/x-font-ttf
content-length: 23268
server: openresty
access-control-allow-credentials: true
access-control-allow-methods: GET, HEAD, POST, PUT
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Length, x-bce-next-append-offset, x-bce-object-type, x-bce-request-id
access-control-max-age: 1800
content-md5: RKz4kjRmoxaA2RDXzE8JAw==
etag: "44acf8923466a31680d910d7cc4f0903"
expires: Sat, 24 Sep 2022 06:46:06 GMT
last-modified: Wed, 21 Sep 2022 05:03:25 GMT
x-bce-content-crc32: 848321786
x-bce-debug-id: NAe6EO3wT96ak0qPNr/yE8+RuLbHz64z8I5FDCDIACz1r140/OGU/0+MbMDWT1zTJqrTz/6OyWkOTO54TO+RgQ==
x-bce-request-id: bdfcbbdf-effe-4bb4-b741-0cdb160927f7
x-bce-restore-cache: -
x-bce-restore-tier: -
x-bce-storage-class: STANDARD
x-ccdn-expires: 992300
via: EU-GER-frankfurt-EDGE5-CACHE2[2],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[6],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,3],EA-SGP-GLOBAL1-CACHE11[3],EA-SGP-GLOBAL1-CACHE24[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 4191799
accept-ranges: bytes
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?type=web_share_filelist_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926542
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_share_filelist_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926542
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash c0f96f9011ecfc7b82f859c552d3bdfb
1001b315f890ca90edf824d250be232c10a48c1c
e593422d5b5034ef1270aeff856b91b20515ec8f98547fdf4d3cb9f83390e99e
GET /api/analytics?type=web_share_filelist_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926542 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:02 GMT
Flow-Level: 3
Logid: 8841053319665512000
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053319665512000
Yme: ZIGW+Ss3QEsQdTcEUmr/tG1MvuUZThz3rgpNwyWF+5jTIDlHQp896RvK3A==
Content-Length: 44
www.1024tera.com/api/analytics?errno=-6&newno=&request_id=8841053235021522000&show_msg=&hasError=true&data=%7B%22sid%22%3A119342006%2C%22suk%22%3A4398913988060%7D¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fquerysurltransfer_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926539
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=-6&newno=&request_id=8841053235021522000&show_msg=&hasError=true&data=%7B%22sid%22%3A119342006%2C%22suk%22%3A4398913988060%7D¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fquerysurltransfer_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926539
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 3d6728f5a575b8d39a18bee7e33a893e
fcf240045aeec3760b9e2eb07e56e2bcfb449cc4
999d61b6a6d6c6c5d140795894e4ab524d997c6d8230a3d5cf9518a31081d7e9
GET /api/analytics?errno=-6&newno=&request_id=8841053235021522000&show_msg=&hasError=true&data=%7B%22sid%22%3A119342006%2C%22suk%22%3A4398913988060%7D¶ms=%7B%22bdstoken%22%3A%22%22%7D&uk=0&type=%2Fshare%2Fquerysurltransfer_interface_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926539 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:02 GMT
Flow-Level: 3
Logid: 8841053317835594412
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053317835594412
Yme: ZIGW+Ss3QE0WaSsMTnb+qnFLufkASwH9tAFIySKDmu0=
Content-Length: 44
www.1024tera.com/api/analytics?value=7617&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926543
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?value=7617&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926543
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 1369aa63cf244a77263413332ef6cf3f
46c023af75135f7729924c087c89e9b909255a1a
26a40b664337ef2b0ac01c74e10d80a6775ee2821c96fd41cdf51c1233b5b5cf
GET /api/analytics?value=7617&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926543 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:02 GMT
Flow-Level: 3
Logid: 8841053320510074719
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053320510074719
Yme: ZIGW+Ss3QE0WaysESGriq29Xvv4cVAP2oh5NwyeJmu2xTw==
Content-Length: 44
www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926627
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926627
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash aef1ebb4aa6a10fe2dd16ac3e83250cf
ea8206d75a4aa1eea5c53fca5641bb201f2a0820
5a92c4f39c7cd73663e9f62d49684f3bd40803514d5321e48d0463c20db0b00a
GET /api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926627 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:02 GMT
Flow-Level: 3
Logid: 8841053342263798783
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053342263798783
Yme: ZIGW+Ss3QE0WaisGSnb+qnFLufkASwbxtAFNySKDneWcD3dsHDCDipBFGTY=
Content-Length: 44
www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926626
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926626
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5e7f1232247fc66b6a2acce80bb31ef3
a29f11ca7241af5db082c646449847f1b054eabd
59a2b6adb679dd3ebeee480c6d3c51d2172c119d8d021ab832bb60269aa10843
GET /api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926626 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:02 GMT
Flow-Level: 3
Logid: 8841053342124349741
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053342124349741
Yme: ZIGW+Ss3QE0WaisMSnb+qnFLufkASwb8tAlGySKDmes=
Content-Length: 44
www.1024tera.com/api/analytics?type=web_share_video_init_rate_1&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926628
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_share_video_init_rate_1&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926628
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 9258ff08a179340590e84e9915752c96
ee7a229b046d79c2c60931993b3e0f1f9efa15eb
87717255f957b7d4636bc7caf57bcbe058d82835354ff8bad93df47a612c1ee3
GET /api/analytics?type=web_share_video_init_rate_1&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926628 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:02 GMT
Flow-Level: 3
Logid: 8841053344162753866
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053344162753866
Yme: ZIGW+Ss3QE0RYysETnb+qnFLufkASwbztAFOySKBnurlGw9kYGSLRnYiDzY=
Content-Length: 44
www.1024tera.com/api/analytics?type=play_video_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926628
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=play_video_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926628
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 25e6dc085c02523d162d7860a7d5191c
3d1ef2a12059083e9a54917f4cb8c097e5f050b4
044bca17a43a9275b94645c2ef788057a18ac124c749a5eab6d29a08c2bb0a61
GET /api/analytics?type=play_video_page_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926628 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:02 GMT
Flow-Level: 3
Logid: 8841053342250163310
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053342250163310
Yme: ZIGW+Ss3QEsSdTcGUmr/tG1MvuUZThzxqApNwyKEke2zTVEPC7cRmz4E3A==
Content-Length: 44
www.1024tera.com/api/analytics?type=web_pause_close_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926627
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_pause_close_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926627
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 23f81398b03da888b9b918ac31994022
d55466bb1f13b910f19af4219e7c42614595ec4e
2fb605952049d735adbaddbfa270359fd7b2671f1fc926049905dcdd4a63a4b1
GET /api/analytics?type=web_pause_close_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926627 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:02 GMT
Flow-Level: 3
Logid: 8841053343282280484
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053343282280484
Yme: ZIGW+Ss3QEsUdTcMUmr/tG1MvuUYQhzxrApNwyaK3Lz1Chk/MI+ACMnK3A==
Content-Length: 44
www.1024tera.com/api/analytics?type=web_share_video_premium_activity_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926699
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_share_video_premium_activity_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926699
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 32aea56c3dc389cd9aac13ec1c9547f6
476ddacc30dc7ef6c4746929abedec7e111be2a9
1b22a1855a64b28621ce1755ca3f50336690efdb8f861b3ab85b1fe3398861ed
GET /api/analytics?type=web_share_video_premium_activity_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926699 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:03 GMT
Flow-Level: 3
Logid: 8841053360535954555
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053360535954555
Yme: ZIGW+Ss3QEsSdTcDUmr/tG1MvuUZShz3ogpNwyOE
Content-Length: 44
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530013&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en
200 OK 967 B URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530013&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (3720), with no line terminators
Hash 4328d6908e1369a76c58b8a78cbc2e06
1bc6f9f05a16ad8e4073c2a7f0ccb93ed02d529e
556479f09fb5ff452fabcf18246f680e862f91bbb483748f88fb9b8a76e10dd5
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530013&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:03 GMT
Flow-Level: 3
Logid: 8841053420701979420
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 8841053420701979420
Yme: ZIGW+Ss3QE0WaisMSnb+qnFLufkASwb3tAJOxyqBmOi0TV07OW4LW9qDnjY=
Transfer-Encoding: chunked
www.1024tera.com/api/analytics?isHitCTR=false&type=web_share_CTR_config&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926716
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?isHitCTR=false&type=web_share_CTR_config&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926716
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 405dce4a1c360cf9c4c552249d9bbee6
bace7ad940fad0e55acb90fa4fcff97e952622b0
c563ada701e89bbb021f934f0901ee7d7b4810f024771873c66baf5ed1a3af9c
GET /api/analytics?isHitCTR=false&type=web_share_CTR_config&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142926716 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:03 GMT
Flow-Level: 3
Logid: 8841053428268408066
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053428268408066
Yme: ZIGW+Ss3QE0WbysES27iq29Xvv4cVAP2oh5NwSmJmu2yRg==
Content-Length: 44
www.1024tera.com/share/webmaster/getplan?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530015&suk=4398913988060
200 OK 103 B URL GET HTTP/1.1 www.1024tera.com/share/webmaster/getplan?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530015&suk=4398913988060
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash ac9dfa0159497ea56c14afb6187b4a40
512bbe411737926a371abd6b58290224503770fb
08edae331341de9839ed1ad5453932736152685684ba5b4ead8b0dd9ff7a6cc4
GET /share/webmaster/getplan?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530015&suk=4398913988060 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:03 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8841053424146422706
Logid: 8841053424146422706
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8841053424146422706
Yme: ZIGW+Ss3QE0RYysESWjiq29Xvv4cVAPxrh5MxiqBmO6zqQ==
Content-Length: 103
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530014&language_type=en&cfg_category_keys=%5B%5D&version=0
200 OK 15 kB URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530014&language_type=en&cfg_category_keys=%5B%5D&version=0
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash d2a4d1b63aee8b35dbce6ecdb06f7f93
2f2400697e973e9f43335bb92eaafcdc6156733f
f200eac5dbcf2ebbc941fad23806bd743e677bbd4998076950f863669f444a79
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530014&language_type=en&cfg_category_keys=%5B%5D&version=0 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:03 GMT
Flow-Level: 3
Logid: 8841053422929504757
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 8841053422929504757
Yme: ZIGW+Ss3QE0WaSsHTm7iq29Xvv4cVAPxqB5NwiWJmu20RgVrZQgSY++YvzwY
Transfer-Encoding: chunked
www.1024tera.com/share/mediameta?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530016&uk=4398913988060&shareid=119342006&fid=699711606673422×tamp=1701142926
200 OK 122 B URL GET HTTP/1.1 www.1024tera.com/share/mediameta?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530016&uk=4398913988060&shareid=119342006&fid=699711606673422×tamp=1701142926
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text
Hash c7cb367f87585b659a41b0bfb2749aed
cf0ddedf4877c36fd56bd3c84af0dcb1720df8b8
49f839f537d5d833c4edb32578111707a6562e2348e55314999881349734e721
GET /share/mediameta?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530016&uk=4398913988060&shareid=119342006&fid=699711606673422×tamp=1701142926 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:03 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8841053427819089671
Logid: 8841053427819089671
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8841053427819089671
Yme: ZIGW+Ss3QE0WYisESWziq29Xvv4cVAPxoh5NwSmJmu2xTw==
Content-Length: 122
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-b20230be.0a893307.js
200 OK 41 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-b20230be.0a893307.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (61528), with no line terminators
Hash 9645b1094ee6ced6d005ae4e46fd7145
d6c139afeaaa82cf7485f1dfabee22cbd1e5da85
436704b0ce7ceea7ddf66f801e090af74db30768d6a4a7408b745877e5a592f4
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-b20230be.0a893307.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:42:03 GMT
content-type: application/javascript
server: openresty
content-md5: lkWxCU7mztbQBa5ORv1xRQ==
etag: W/"9645b1094ee6ced6d005ae4e46fd7145"
expires: Thu, 07 Sep 2023 07:34:05 GMT
last-modified: Mon, 04 Sep 2023 04:39:49 GMT
x-bce-content-crc32: 860175862
x-bce-debug-id: YxKaPLFml5ovwtS++EvPw1ID/HiMt+Zhii4NCGGd5BA+u+1ccgAwlYXqpryUmBj7YqU863R0gVkKEFuqafmKAg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: aeea44c1-7e31-4002-a3ac-fcdfed6855de
x-bce-storage-class: STANDARD
x-ccdn-expires: 529868
via: EU-GER-frankfurt-EDGE5-CACHE2[16],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE5[14],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,13]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 7329610
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3b81v875375078&_p=1701142926410&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1503068942.1701142927&ul=en-us&sr=1280x1024&sid=1701142926&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&dt=Ilam_pen_pant_kayati_koothi_kanbikum%20vid.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=2&tfd=7985
204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3b81v875375078&_p=1701142926410&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1503068942.1701142927&ul=en-us&sr=1280x1024&sid=1701142926&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&dt=Ilam_pen_pant_kayati_koothi_kanbikum%20vid.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=2&tfd=7985
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3b81v875375078&_p=1701142926410&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1503068942.1701142927&ul=en-us&sr=1280x1024&sid=1701142926&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&dt=Ilam_pen_pant_kayati_koothi_kanbikum%20vid.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=2&tfd=7985 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2736
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://www.1024tera.com
date: Tue, 28 Nov 2023 03:42:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=pause&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927258
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=pause&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927258
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 90f68b9613fe466f26ebf4847dcff2e4
7c383de2566f06418699209d912ff5da3315dddf
23eaa6cedfaa0d172075d02f4659bae6db4a36632a900acc42d45b7afc6d7aa5
GET /api/analytics?domId=adsterra&showType=1x2&country=NO&where=pause&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927258 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207; _ga_06ZNKL8C2E=GS1.1.1701142926.1.0.1701142927.59.0.0; _ga=GA1.1.1503068942.1701142927
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:03 GMT
Flow-Level: 3
Logid: 8841053510652891428
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053510652891428
Yme: ZIGW+Ss3QE0WaSsCSnb+qnFLufkASwb2tANIySKDkOw=
Content-Length: 44
www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927274
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927274
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash cc45193bbddca64ae8bb106881e07b15
74984fefad915b9f7786ed25aad7dba70fc65799
b4a121de24e7a501146b6be23dade1c4aad68dda2a0d05996b671a2e2ab3098d
GET /api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927274 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207; _ga_06ZNKL8C2E=GS1.1.1701142926.1.0.1701142927.59.0.0; _ga=GA1.1.1503068942.1701142927
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:03 GMT
Flow-Level: 3
Logid: 8841053514427027617
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053514427027617
Yme: ZIGW+Ss3QEoadTcAUmr/tG1MvuUYQhz0rQpNwyCEmO2hMCFyMkcz
Content-Length: 44
www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927273
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927273
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 75bd70f21fa6105f9fca29817c7b8dbf
c1d6f87424cdbfe76f966fad264e03300b663681
1d51eb647a3e8124c9494583d37a820af888177b11feb99153ac1f8007864441
GET /api/analytics?type=web_no_ad_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927273 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207; _ga_06ZNKL8C2E=GS1.1.1701142926.1.0.1701142927.59.0.0; _ga=GA1.1.1503068942.1701142927
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:03 GMT
Flow-Level: 3
Logid: 8841053514795619654
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053514795619654
Yme: ZIGW+Ss3QE0WaisESGjiq29Xvv4cVAPxqB5GxCqBmO2x
Content-Length: 44
www.1024tera.com/api/analytics?type=web_skip_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927275
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_skip_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927275
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash b5e9e0fdc4a4db845f8b65e4d5e0b424
bf145f598b0191217e78d427a62029c4810302bb
7ff3957a0b508d709a13a09bb9b9b3d6cecfc762f443ca459a1968b41173aca1
GET /api/analytics?type=web_skip_share_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927275 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207; _ga_06ZNKL8C2E=GS1.1.1701142926.1.0.1701142927.59.0.0; _ga=GA1.1.1503068942.1701142927
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:03 GMT
Flow-Level: 3
Logid: 8841053515918281490
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053515918281490
Yme: ZIGW+Ss3QE0WaisESWLiq29Xvv4cVAPxqB5IwCqBmOq4
Content-Length: 44
www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530017&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en
200 OK 968 B URL GET HTTP/1.1 www.1024tera.com/api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530017&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (3720), with no line terminators
Hash 15dd2fe57b3b2c4471c19375285aa80f
1bf03c9b26bf6cb45b4cde9d99ba45995458f39a
820cbc1fd8df94efc057af225181116958f5edd38411e26b37c1b8c26a361bf9
GET /api/getsyscfg?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530017&cfg_category_keys=%5B%7B%22cfg_category_key%22%3A%22web_video_play_patch_ad_area%22%2C%22cfg_version%22%3A1%7D%2C%7B%22cfg_category_key%22%3A%22web_share_ads_adsterra_config%22%2C%22cfg_version%22%3A1%7D%5D&version=0&language_type=en HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207; _ga_06ZNKL8C2E=GS1.1.1701142926.1.0.1701142927.59.0.0; _ga=GA1.1.1503068942.1701142927
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:03 GMT
Flow-Level: 3
Logid: 8841053519661857828
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
X-Powered-By: DuboxServer
Yld: 8841053519661857828
Yme: ZIGW+Ss3QEsTdTEDUmr/tG1MvuUZTBzxqApNwyCH
Transfer-Encoding: chunked
www.1024tera.com/api/analytics?from=shareLink&type=videoplayer_open_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927318
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?from=shareLink&type=videoplayer_open_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927318
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7ad5ff5606cb5594590612e1d638da0d
b92f9f999d7cf066c9735068418fcb7c8e1ba679
01d1fe7d1aa8d8e210185e6faac4a1cef4ecde33a88fd01778f9c3c8373388e1
GET /api/analytics?from=shareLink&type=videoplayer_open_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927318 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207; _ga_06ZNKL8C2E=GS1.1.1701142926.1.0.1701142927.59.0.0; _ga=GA1.1.1503068942.1701142927
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:03 GMT
Flow-Level: 3
Logid: 8841053529034902656
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053529034902656
Yme: ZIGW+Ss3QEsXdTcCUmr/tG1MvuUZTxz0qQpNwyaB6YjVMDU2OR8ITGNm3A==
Content-Length: 44
www.1024tera.com/api/analytics?type=videoplayer_open&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927317
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=videoplayer_open&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927317
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 44c22271ba4f857ffd4a5e83eeeca89f
befceb7da2f78202c4e90c8c975c2746e9b56ab1
dfb8bd803a54b8de59a31555e66a5f9a21845fe199f725915ea9278e551377dc
GET /api/analytics?type=videoplayer_open&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927317 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207; _ga_06ZNKL8C2E=GS1.1.1701142926.1.0.1701142927.59.0.0; _ga=GA1.1.1503068942.1701142927
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:03 GMT
Flow-Level: 3
Logid: 8841053527678640461
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053527678640461
Yme: ZIGW+Ss3QEsSdTEHUmr/tG1MvuUZShz0rwpNwyCFhZHuGANm
Content-Length: 44
www.1024tera.com/api/analytics?type=web_share_video_carousel_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927576
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_share_video_carousel_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927576
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 18bc834908630b0f8fa05603c6f246c0
b6de8941b2b568bae668b668d047204c59603946
53f19a1cea81ee37741623825c3ad42e04e8519c9d2efa095dd397dab24c396b
GET /api/analytics?type=web_share_video_carousel_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927576 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207; _ga_06ZNKL8C2E=GS1.1.1701142926.1.0.1701142927.59.0.0; _ga=GA1.1.1503068942.1701142927
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:03 GMT
Flow-Level: 3
Logid: 8841053596689389769
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053596689389769
Yme: ZIGW+Ss3QE0WaCsHTWziq29Xvv4cVAP2oh5NwyOJmu22SMKRfg==
Content-Length: 44
www.1024tera.com/api/analytics?value=8653&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927578
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?value=8653&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927578
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 963905542ceb457f16602e22592088cc
ce66073ee7881fefa420eabbfb8597cb5cbb1f06
560d9a61deff4de2de3c4d9fde24e6aae0d881856ae218c903afd32394f67ada
GET /api/analytics?value=8653&type=web_sharing_link_tti&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927578 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207; _ga_06ZNKL8C2E=GS1.1.1701142926.1.0.1701142927.59.0.0; _ga=GA1.1.1503068942.1701142927
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:03 GMT
Flow-Level: 3
Logid: 8841053598714175566
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053598714175566
Yme: ZIGW+Ss3QEsUdTcEUmr/tG1MvuUZSxz3rgpNwyKEz9glORU=
Content-Length: 44
region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3b81v875375078&_p=1701142926410&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1503068942.1701142927&ul=en-us&sr=1280x1024&_eu=AEA&_s=3&sid=1701142926&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&dt=Ilam_pen_pant_kayati_koothi_kanbikum%20vid.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=scroll&ep.origin=firebase&epn.percent_scrolled=90&tfd=8337
204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3b81v875375078&_p=1701142926410&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1503068942.1701142927&ul=en-us&sr=1280x1024&_eu=AEA&_s=3&sid=1701142926&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&dt=Ilam_pen_pant_kayati_koothi_kanbikum%20vid.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=scroll&ep.origin=firebase&epn.percent_scrolled=90&tfd=8337
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3b81v875375078&_p=1701142926410&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1503068942.1701142927&ul=en-us&sr=1280x1024&_eu=AEA&_s=3&sid=1701142926&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&dt=Ilam_pen_pant_kayati_koothi_kanbikum%20vid.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=scroll&ep.origin=firebase&epn.percent_scrolled=90&tfd=8337 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://www.1024tera.com
date: Tue, 28 Nov 2023 03:42:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927644
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927644
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash b3a0fffeefc1107a6438ed14700ccb4d
ccf4ef3184181a8343b1a2c43a5c9d2fdaaef7b3
8233aba65325499920dd9f2bbe8acd8223430cad2a5b7aea4d0394292eb78568
GET /api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_show_has_document&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927644 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207; _ga_06ZNKL8C2E=GS1.1.1701142926.1.0.1701142927.59.0.0; _ga=GA1.1.1503068942.1701142927
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:03 GMT
Flow-Level: 3
Logid: 8841053615373548235
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053615373548235
Yme: ZIGW+Ss3QEsRdTQGUmr/tG1MvuUZSRz3rApNwyGL
Content-Length: 44
www.1024tera.com/share/streaming?uk=4398913988060&shareid=119342006&type=M3U8_FLV_264_480&fid=699711606673422&sign=a04623350af63aa3564496ec297757345889d0e1×tamp=1701142926&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&esl=1&isplayer=1&ehps=1&clienttype=0&app_id=250528&web=1&channel=dubox
200 OK 2.8 kB URL GET HTTP/1.1 www.1024tera.com/share/streaming?uk=4398913988060&shareid=119342006&type=M3U8_FLV_264_480&fid=699711606673422&sign=a04623350af63aa3564496ec297757345889d0e1×tamp=1701142926&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&esl=1&isplayer=1&ehps=1&clienttype=0&app_id=250528&web=1&channel=dubox
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type M3U playlist, ASCII text, with very long lines (886)
Hash 68e7e178cd1e8adcc84bdd22fa8b8196
66de082155e482b664c96bb7c5e74043f9c3e992
473de68d8882406c95124b4b8fbc5af9bbe5b8cb75fddde035ac66313e70967a
GET /share/streaming?uk=4398913988060&shareid=119342006&type=M3U8_FLV_264_480&fid=699711606673422&sign=a04623350af63aa3564496ec297757345889d0e1×tamp=1701142926&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&esl=1&isplayer=1&ehps=1&clienttype=0&app_id=250528&web=1&channel=dubox HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207; _ga_06ZNKL8C2E=GS1.1.1701142926.1.0.1701142927.59.0.0; _ga=GA1.1.1503068942.1701142927
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Type: application/x-mpegURL;charset=utf-8
Date: Tue, 28 Nov 2023 03:42:04 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8841053608632622586
Logid: 8841053608632622586
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Yld: 8841053608632622586
Yme: ZIGW+Ss3QEsSdTcAUmr/tG1MvuUZTxz0owpNwyGCGHCCGBU=
Transfer-Encoding: chunked
pl18043214.highperformancecpmgate.com/5c8996e8e3cb5e10b7fd36115b800ac7/invoke.js
200 OK 9.3 kB URL GET HTTP/1.1 pl18043214.highperformancecpmgate.com/5c8996e8e3cb5e10b7fd36115b800ac7/invoke.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerLet's Encrypt
Subjecthighperformancecpmgate.com
FingerprintEC:5C:1C:3A:AB:08:18:CE:84:A7:E0:33:D8:44:0B:AF:12:12:CE:C4
ValiditySat, 28 Oct 2023 06:31:01 GMT - Fri, 26 Jan 2024 06:31:00 GMT
File type Unicode text, UTF-8 text, with very long lines (25158), with no line terminators
Hash 513a1144874f786d93dd539b2e5d7cc9
49da229a04caecb76e5698872f58ac9b7d5576b6
2aa59ed3014aea843088ce0265859f5040b3e539d6d0e9c9cc2712c124e4693f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /5c8996e8e3cb5e10b7fd36115b800ac7/invoke.js HTTP/1.1
Host: pl18043214.highperformancecpmgate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 03:42:04 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5c4e4c68831eb1e08ca1798306664e9c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.1024tera.com/api/analytics?type=videoplayer_play_btn_click&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927664
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=videoplayer_play_btn_click&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927664
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7d7bbde813b3750d9cdeb19ccb3c0f63
ea578528b6200adab2024a911ee908c78bb273d8
42693b2d1e4dcf923345770ac0461f7c78060d699df0b7576fa19fb48fd95de2
GET /api/analytics?type=videoplayer_play_btn_click&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142927664 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207; _ga_06ZNKL8C2E=GS1.1.1701142926.1.0.1701142927.59.0.0; _ga=GA1.1.1503068942.1701142927
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:04 GMT
Flow-Level: 3
Logid: 8841053623840516513
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053623840516513
Yme: ZIGW+Ss3QE0WaCsESmniq29Xvv4cVAP2oh5NwSOJmu2zSw==
Content-Length: 44
ymg-api.terabox.com/abdr?data=eyJkYXRhIjoiYzFhZDgwYWEyOGFhMjE4YzE3N2RhNzg2OGU1NTU2NDc5NThhNDA1MWFkYjQ3NTMyNjhjYThiNWVkYzhmYjEzMWM5YjliNGNlYWI0OWRiZDVjYTliOGM1ODE1NDY5ZDBkZWM2ZmQ3MTE5ZWM2NDIwYjdhOTE3NjAxMGM2MjQwYjE1YWNhMTU3MWUxMGZkMDlhMDdkNjc1MmExZGMwZWY4YWVjMTY5OGMwYjk5ZmM3NDE0MzhmYzg0NjNhZGNjOGM2Yzg4NjVhZTQ0ZTg2ZmM2NzkzNTYzOWE2ZjI1NWNlNDkxODZjNjhmZGYxODIwZDYyMGViYmNlMjUyOTI0YjUyMjJiOWMzMThjOWNkZDFiYTExYWJmNGIzMzY4ODI5N2RjODkxNWEyMGJmODlhNmZjNzU4Y2YyNTMyNzBlMDczNDAzYTYwMjI5YzY1YWI0YjYxZTBhODJiYTZjYWFhYjc3MDQxNjlkNTcxMjAyNTdmN2Y3Yzk4YTk0ZjA5NGJlMzcwNGIxMTNmYjkwNThhNThmNGMxNzEyYjBhNjYzOWEyOGVkYzE4Yzg2MDE1M2M0N2M4ZDY3NGQ5MzVkMzI3NzVlYjljNjUyNjY5M2Y4MzdlNmU4Y2VhOWUwNzEyM2Q2Mzc2N2ZiZjZjMWEzMTEzZjg5MTk4N2U4NTc3NTUwNzE5OWIzZjM4N2RkMDY2N2Y5ZGJhMGM0NzM0MDk5Mjc4NzYwOTRiOTBmMmE5OWEwZjBhYzQxNThiYTA2OWZjNTFlMmVmYTRkYmYyMzRiM2VjNGQ4MjE2ZWNmMDkyMWYyMzlhZTU1YzhlZGU2ZjRhOWVlM2ZmMTQxNDI2YmJmMmNhNmIzMjY1M2NjNjU3YjkyZmYyMmY2OWMyOTM1OWQyMTQwMmNkMjExZGM1MjBhZmVjMDRhMTEyY2NhMTMyMTMyNWM4ODUiLCJrZXlfaWQiOiI0ZTM3NDRmZDdjNDg0Mzc3In0%3D&_=0.20323764054072813
22 B URL GET ymg-api.terabox.com/abdr?data=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%3D&_=0.20323764054072813
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.terabox.com
Fingerprint4F:30:79:83:60:E0:58:E8:DA:05:09:38:E1:6D:CD:F9:46:33:D6:5F
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 9d4568c009d203ab10e33ea9953a0264
dd29ecf524b030a65261e3059c48ab9e1ecb2585
12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126
GET /abdr?data=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%3D&_=0.20323764054072813 HTTP/1.1
Host: ymg-api.terabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: ab_jid=60df9137d5aa06c90ec6056438746fff710f; ab_bid=60df9137d5aa06c90ec6056438746fff710f; ab_sr=1.0.1_M2JjZjBlOGMzNmUwMWEwNjM1NTM4MmVjNDQ1MGI1OTI5NDNlOTE4NmQ0YjAzMTYwY2M5ZTNiZGI1ZGZiNGI1NDE2ZGNlYzg4NGYwYmFhNTQ1YTY4NTAxNjhhNmZjOGM4N2RlYWI0MzVkMzQ5N2JmZTRiYzkzYWQ5MDQyNWM3MTk1NTA2MWQ3ZjlhMmNjMmRhYzU1MTcwYzMxMGMxNWIzNQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 28 Nov 2023 03:42:04 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
yld: 8841053639326418308
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Origin, Host, Content-Type, x-requested-with, X-Custom-Header
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Max-Age: 3600
P3P: CP=" OTI DSP COR IVA OUR IND COM "
yme: ZIGW+Ss3QEsRdTEBUmr/tG1MvuUZThz3rQpHxCaC
Server: nginx
logid: 8841053639326418308
Flow-level: 3
Content-Encoding: gzip
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash ab08b21b37480bf609deaf73dcbf1e34
4121333c3a37ff481b30918ce3a1aa643cf813c2
d8c99d9c9d12731615d29afd9aba86e213ce6c7dfb8938334de50d3edfd78fcd
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Tue, 28 Nov 2023 03:42:04 GMT
Last-Modified: Tue, 28 Nov 2023 02:34:13 GMT
Server: ECAcc (ska/F775)
X-Cache: Miss from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: D_U3eCQgwCnb6BMGc4EL9qTV6_nw3LyVrgRIKno4jldlUql5nak7Xg==
Age: 4071
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 043110dec5dd4285f0c809156a59bd12
7e240adbd8e04032a7e914cde64b00e4e25d8523
782ebf6662c790e2aa1f56b573128c6ed928542bc906a6e427c1bb5f79d8ad1f
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:42:04 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.1024tera.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=43efb641-34ea-47d7-8590-f0e230b3d4cb:3:1; expires=Fri, 25 Nov 2033 03:42:04 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
pl18427035.highcpmrevenuenetwork.com/627e2f8a423975bc4bd7a76128c2d552/invoke.js
200 OK 9.3 kB URL GET HTTP/1.1 pl18427035.highcpmrevenuenetwork.com/627e2f8a423975bc4bd7a76128c2d552/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerLet's Encrypt
Subjecthighcpmrevenuenetwork.com
FingerprintEE:67:85:23:95:09:5B:1B:88:45:C2:65:23:64:81:DD:65:D4:15:14
ValidityThu, 19 Oct 2023 06:40:46 GMT - Wed, 17 Jan 2024 06:40:45 GMT
File type Unicode text, UTF-8 text, with very long lines (25198), with no line terminators
Hash c2749739f7e0526ec517dd201ade4a6d
a78b58ed040fdf6382435d2d3106ae8a4506f9c3
187f3488768727e0a98a70f35585834bc82c375fb812a73c7584580d1e4cbd76
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /627e2f8a423975bc4bd7a76128c2d552/invoke.js HTTP/1.1
Host: pl18427035.highcpmrevenuenetwork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 03:42:04 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e6a4f84119ac01a5c0df2ed8c48e05b6
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
displeaseddietstair.com/1e/1b/bd/1e1bbdc937ccd35cd1897b4e58c7407b.js
200 OK 25 kB URL GET HTTP/1.1 displeaseddietstair.com/1e/1b/bd/1e1bbdc937ccd35cd1897b4e58c7407b.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerLet's Encrypt
Subjectdispleaseddietstair.com
Fingerprint09:3D:95:76:F0:3E:68:B5:44:D5:BD:81:1D:67:75:85:F0:3D:8B:ED
ValidityTue, 07 Nov 2023 08:00:28 GMT - Mon, 05 Feb 2024 08:00:27 GMT
File type ASCII text, with very long lines (62428), with no line terminators
Hash 5270ec4c1ccef35a6deb0a95d2148d5c
1658152b6304ac8d5970a2ff9aa64043e03bedce
b3057412290b08a88e5d770196da55b168904f655fa0dcfdcee31dc787e7b4ef
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /1e/1b/bd/1e1bbdc937ccd35cd1897b4e58c7407b.js HTTP/1.1
Host: displeaseddietstair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 28 Nov 2023 03:42:04 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: eaab170ca2d798211423c89d781c5424
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
displeaseddietstair.com/ntv.json?key=5c8996e8e3cb5e10b7fd36115b800ac7&vstc=1
200 OK 4.2 kB URL GET HTTP/1.1 displeaseddietstair.com/ntv.json?key=5c8996e8e3cb5e10b7fd36115b800ac7&vstc=1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerLet's Encrypt
Subjectdispleaseddietstair.com
Fingerprint09:3D:95:76:F0:3E:68:B5:44:D5:BD:81:1D:67:75:85:F0:3D:8B:ED
ValidityTue, 07 Nov 2023 08:00:28 GMT - Mon, 05 Feb 2024 08:00:27 GMT
File type JSON data\012- , ASCII text, with very long lines (4228), with no line terminators
Hash 2fd6742c84205defe72831a3d8190c68
799ef9630c2062b1e3b9e26f5cb9648058b8b8a8
314937c3d306ea3156ec0746723c446e3902f9e23e8b7ed76bb48e5d62ac81a8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ntv.json?key=5c8996e8e3cb5e10b7fd36115b800ac7&vstc=1 HTTP/1.1
Host: displeaseddietstair.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Tue, 28 Nov 2023 03:42:04 GMT
Content-Type: application/json
Content-Length: 4228
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.1024tera.com
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17942715; expires=Wed, 29 Nov 2023 03:42:04 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 29 Nov 2023 03:42:04 GMT; secure; SameSite=None
uncs=1; expires=Wed, 29 Nov 2023 03:42:04 GMT; secure; SameSite=None
pdhtkv49=true; expires=Wed, 29 Nov 2023 03:42:04 GMT; secure; SameSite=None
uncs49=1; expires=Wed, 29 Nov 2023 03:42:04 GMT; secure; SameSite=None
nlec5c8996e8e3cb5e10b7fd36115b800ac7=[2229333]; expires=Tue, 28 Nov 2023 03:42:09 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: aa597cb8e75b986e28b81f00ae250135
Strict-Transport-Security: max-age=0; includeSubdomains
v1.1024tera.com/video/netdisk-videotran-tky/299eefe8cf5fc1c2c9ae9c4884d4a528_1074_1_ts/8a66273c9e6962af034a02b95e3bf6ad?ts_size=5804312&app_id=250528&ccn=NO&csl=0&dp-logid=8841053608632622586&fn=Ilam_pen_pant_kayati_koothi_kanbikum+vid.mp4&from_type=1&fsid=699711606673422&isplayer=1&iv=2&logid=8841053608632622586&ouk=4398913988060&r=146368435&size=7843277&sta_cs=0&sta_dt=video&sta_dx=7&time=1701171723&to=any&tot=ctkgi&uo=any&uva=1499419338&vuk=&dtime=10&etag=8a66273c9e6962af034a02b95e3bf6ad&fid=fa4c3f6c02845908bd08ca3e94ae1bcd-&len=275984&range=1733548-2009531®ion=tky&resv4=&sign=BOUTHNF-F3530edecde9cd71b79378b290804a96-EUUKY2l%252BUhtjzq9CWSptuT07Jko%253D&xcode=571402468e1f8121b38e75b4d2cd53c968fdbdc10d3dc7fc3ead2f9ef026638923bd312736f60bde2f34d31b3fd7c148316128a2cdfcce4d&xv=6&need_suf=&pmk=14008a66273c9e6962af034a02b95e3bf6adb220a056000000589118&by=my-streaming
200 OK 276 kB URL GET HTTP/2 v1.1024tera.com/video/netdisk-videotran-tky/299eefe8cf5fc1c2c9ae9c4884d4a528_1074_1_ts/8a66273c9e6962af034a02b95e3bf6ad?ts_size=5804312&app_id=250528&ccn=NO&csl=0&dp-logid=8841053608632622586&fn=Ilam_pen_pant_kayati_koothi_kanbikum+vid.mp4&from_type=1&fsid=699711606673422&isplayer=1&iv=2&logid=8841053608632622586&ouk=4398913988060&r=146368435&size=7843277&sta_cs=0&sta_dt=video&sta_dx=7&time=1701171723&to=any&tot=ctkgi&uo=any&uva=1499419338&vuk=&dtime=10&etag=8a66273c9e6962af034a02b95e3bf6ad&fid=fa4c3f6c02845908bd08ca3e94ae1bcd-&len=275984&range=1733548-2009531®ion=tky&resv4=&sign=BOUTHNF-F3530edecde9cd71b79378b290804a96-EUUKY2l%252BUhtjzq9CWSptuT07Jko%253D&xcode=571402468e1f8121b38e75b4d2cd53c968fdbdc10d3dc7fc3ead2f9ef026638923bd312736f60bde2f34d31b3fd7c148316128a2cdfcce4d&xv=6&need_suf=&pmk=14008a66273c9e6962af034a02b95e3bf6adb220a056000000589118&by=my-streaming
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
Size 276 kB (275984 bytes)
Hash c3bde2b9b389e5fe9674270f3b7e72f2
48d71ee17ba2b3076de2bda772cdc4c16d037142
bbfd71dfd64c0bdad6087800172c327ad4c7ca5ba0b2d67e8f953ca9e0ada517
GET /video/netdisk-videotran-tky/299eefe8cf5fc1c2c9ae9c4884d4a528_1074_1_ts/8a66273c9e6962af034a02b95e3bf6ad?ts_size=5804312&app_id=250528&ccn=NO&csl=0&dp-logid=8841053608632622586&fn=Ilam_pen_pant_kayati_koothi_kanbikum+vid.mp4&from_type=1&fsid=699711606673422&isplayer=1&iv=2&logid=8841053608632622586&ouk=4398913988060&r=146368435&size=7843277&sta_cs=0&sta_dt=video&sta_dx=7&time=1701171723&to=any&tot=ctkgi&uo=any&uva=1499419338&vuk=&dtime=10&etag=8a66273c9e6962af034a02b95e3bf6ad&fid=fa4c3f6c02845908bd08ca3e94ae1bcd-&len=275984&range=1733548-2009531®ion=tky&resv4=&sign=BOUTHNF-F3530edecde9cd71b79378b290804a96-EUUKY2l%252BUhtjzq9CWSptuT07Jko%253D&xcode=571402468e1f8121b38e75b4d2cd53c968fdbdc10d3dc7fc3ead2f9ef026638923bd312736f60bde2f34d31b3fd7c148316128a2cdfcce4d&xv=6&need_suf=&pmk=14008a66273c9e6962af034a02b95e3bf6adb220a056000000589118&by=my-streaming HTTP/1.1
Host: v1.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Zen/2.7
date: Tue, 28 Nov 2023 03:42:04 GMT
content-type: application/octet-stream
content-length: 275984
strict-transport-security: max-age=31536000; preload
x-bs-file-size: 5804312
x-bs-meta-crc32: 2988482646
cache-control: max-age=259200
etag: 8a66273c9e6962af034a02b95e3bf6ad
x-bs-client-ip: MTUyLjU4LjIxNS4yNTI=
x-bs-request-id: MTAuMjUyLjE0My4yMjY6MjAyOTo3NjYxMjQ0Mzg5NDkxNjI2MDczOjIwMjMtMTEtMjcgMDc6NTI6Mzk=
content-md5: 8a66273c9e6962af034a02b95e3bf6ad
superfile: 0
accept-ranges: bytes
last-modified: Sun, 26 Nov 2023 16:54:04 GMT
age: 0
via: https/1.1 JP.TYO.837.P.230.83 (Cache-6.1.14), http/1.1 DE.FRA1.837.E.113.106 (Cache-6.1.15)
hittype: TCP_MISS
cache-server: ZenCache
access-control-allow-origin: https://www.1024tera.com
X-Firefox-Spdy: h2
data.1024tera.com/thumbnail/299eefe8cf5fc1c2c9ae9c4884d4a528?fid=4398913988060-250528-699711606673422&time=1701140400&rt=sh&sign=FDTAER-DCb740ccc5511e5e8fedcff06b081203-YBbQ3GA1HcG97ws9Jl5nzLgBkkE%3D&expires=8h&chkv=0&chkbd=0&chkpc=&dp-logid=8841053081052639346&dp-callid=0&size=c850_u580&quality=100&vuk=-&ft=video
200 OK 24 kB URL GET HTTP/1.1 data.1024tera.com/thumbnail/299eefe8cf5fc1c2c9ae9c4884d4a528?fid=4398913988060-250528-699711606673422&time=1701140400&rt=sh&sign=FDTAER-DCb740ccc5511e5e8fedcff06b081203-YBbQ3GA1HcG97ws9Jl5nzLgBkkE%3D&expires=8h&chkv=0&chkbd=0&chkpc=&dp-logid=8841053081052639346&dp-callid=0&size=c850_u580&quality=100&vuk=-&ft=video
IP
ASN #2497 Internet Initiative Japan Inc.
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 70x70, segment length 16, baseline, precision 8, 640x360, components 3\012- data
Hash b187649f1feaf8dc6350598d54aeaa21
ea308add66cd79aabbb22b176c7585661783e0ea
4b395359069809d1a5b4fd552b84775b8fa5949bc7eb6fcab93fc9bccf06cec9
GET /thumbnail/299eefe8cf5fc1c2c9ae9c4884d4a528?fid=4398913988060-250528-699711606673422&time=1701140400&rt=sh&sign=FDTAER-DCb740ccc5511e5e8fedcff06b081203-YBbQ3GA1HcG97ws9Jl5nzLgBkkE%3D&expires=8h&chkv=0&chkbd=0&chkpc=&dp-logid=8841053081052639346&dp-callid=0&size=c850_u580&quality=100&vuk=-&ft=video HTTP/1.1
Host: data.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207; _ga_06ZNKL8C2E=GS1.1.1701142926.1.0.1701142927.59.0.0; _ga=GA1.1.1503068942.1701142927
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 28 Nov 2023 03:42:04 GMT
Content-Type: image/jpeg
Connection: keep-alive
x-bs-client-ip: OTEuOTAuNDIuMTU0
x-bs-request-id: MTAuMjUyLjE0MS4xOToyMDMwOjg4NDEwNTMwODEwNTI2MzkzNDY6MjAyMy0xMS0yOCAxMTo0MjowNA==
Content-Length: 24096
Server: TERABOX UI
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/video-fail-bg.b77a1e8a.png
200 OK 105 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/img/video-fail-bg.b77a1e8a.png
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type PNG image data, 980 x 438, 4-bit colormap, non-interlaced\012- data
Size 105 kB (104817 bytes)
Hash b77a1e8a238d4e4191ff9e8a80d6d86d
30d6d726f8f3bfac5770d3ba9ac464f36b4c51b3
73af449450a319a9c3b28782e4bfa3ed17e6b5f7c04a834dba21f96dd0f28949
GET /fe-opera-static/node-static-v4/fe-webv4-main/img/video-fail-bg.b77a1e8a.png HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:42:05 GMT
content-type: image/png
content-length: 104817
server: openresty
content-md5: t3oeiiONTkGR/56KgNbYbQ==
etag: "b77a1e8a238d4e4191ff9e8a80d6d86d"
expires: Wed, 15 Feb 2023 22:47:56 GMT
last-modified: Fri, 10 Feb 2023 07:43:39 GMT
x-bce-content-crc32: 4025551842
x-bce-debug-id: GU0GXuuVmHD1E2Z4twTBIaO14v2edTIrZIjjemDK7yWOsY+HCIeciS9bgQOAOSIWMUxPucybY5m7VzvcBt1c3A==
x-bce-request-id: 47c77fdc-17bf-44d4-8c6d-c40c7548a183
x-bce-storage-class: STANDARD
x-ccdn-expires: 1739705
via: EU-GER-frankfurt-EDGE5-CACHE2[2],EU-GER-frankfurt-EDGE5-CACHE1[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE2[3],EU-GER-frankfurt-GLOBAL1-CACHE8[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 24189620
accept-ranges: bytes
access-control-allow-origin: *
X-Firefox-Spdy: h2
rancorousnoncommittalsomewhat.com/f1/95/e5/f195e5fa577c23352666448243864c68.js
200 OK 15 kB URL GET HTTP/1.1 rancorousnoncommittalsomewhat.com/f1/95/e5/f195e5fa577c23352666448243864c68.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerLet's Encrypt
Subjectrancorousnoncommittalsomewhat.com
Fingerprint24:A0:FB:1E:11:0C:2F:A3:AB:1E:BD:0D:CC:3F:E0:C3:78:F0:78:15
ValidityTue, 07 Nov 2023 07:59:17 GMT - Mon, 05 Feb 2024 07:59:16 GMT
File type ASCII text, with very long lines (42845), with no line terminators
Hash 83e4466511541cf599975944baed3d23
0876d14072c92935fa64b3a5789067a157f027f8
7c9f8b91e9c323870b83992160ddf2fc90051d2155dfc2acd5f640815e009979
GET /f1/95/e5/f195e5fa577c23352666448243864c68.js HTTP/1.1
Host: rancorousnoncommittalsomewhat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 03:42:05 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d3de524bf8ae1d2314a7dcfe9410d710
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
rancorousnoncommittalsomewhat.com/ntv.json?key=627e2f8a423975bc4bd7a76128c2d552&vstc=2&uuid=43efb641-34ea-47d7-8590-f0e230b3d4cb%3A3%3A1&custom=%7B%22d37e3bc4%22%3A%22a%22%7D
200 OK 8.5 kB URL GET HTTP/1.1 rancorousnoncommittalsomewhat.com/ntv.json?key=627e2f8a423975bc4bd7a76128c2d552&vstc=2&uuid=43efb641-34ea-47d7-8590-f0e230b3d4cb%3A3%3A1&custom=%7B%22d37e3bc4%22%3A%22a%22%7D
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerLet's Encrypt
Subjectrancorousnoncommittalsomewhat.com
Fingerprint24:A0:FB:1E:11:0C:2F:A3:AB:1E:BD:0D:CC:3F:E0:C3:78:F0:78:15
ValidityTue, 07 Nov 2023 07:59:17 GMT - Mon, 05 Feb 2024 07:59:16 GMT
File type JSON data\012- , ASCII text, with very long lines (8542), with no line terminators
Hash dd4141917b9420339a00cd94d508f1a6
b624b68661843a8769ef6f1fe06137216806221d
6ab9725a7322aff6d6b8939211a71662f25a146a562b0fc45f66ba5430d9660a
GET /ntv.json?key=627e2f8a423975bc4bd7a76128c2d552&vstc=2&uuid=43efb641-34ea-47d7-8590-f0e230b3d4cb%3A3%3A1&custom=%7B%22d37e3bc4%22%3A%22a%22%7D HTTP/1.1
Host: rancorousnoncommittalsomewhat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 03:42:05 GMT
Content-Type: application/json
Content-Length: 8542
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.1024tera.com
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=18326536; expires=Wed, 29 Nov 2023 03:42:05 GMT; secure; SameSite=None
uid_id2=43efb641-34ea-47d7-8590-f0e230b3d4cb:3:1; expires=Tue, 05 Dec 2023 03:42:05 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 29 Nov 2023 03:42:05 GMT; secure; SameSite=None
uncs=1; expires=Wed, 29 Nov 2023 03:42:05 GMT; secure; SameSite=None
pdhtkv49=true; expires=Wed, 29 Nov 2023 03:42:05 GMT; secure; SameSite=None
uncs49=1; expires=Wed, 29 Nov 2023 03:42:05 GMT; secure; SameSite=None
nlec627e2f8a423975bc4bd7a76128c2d552=[2229214,2229213]; expires=Tue, 28 Nov 2023 03:42:10 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: da78f0c0f66c2253cd50b593e4e614dd
Strict-Transport-Security: max-age=0; includeSubdomains
banquetunarmedgrater.com/advertisers.js
200 OK 0 B URL GET HTTP/2 banquetunarmedgrater.com/advertisers.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerGoogle Trust Services LLC
Subjectbanquetunarmedgrater.com
Fingerprint92:8E:AD:72:AC:AD:3B:21:99:CD:21:A0:9F:BD:F2:AF:0D:98:D8:57
ValidityThu, 09 Nov 2023 11:40:15 GMT - Wed, 07 Feb 2024 11:40:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:42:05 GMT
content-type: application/javascript
content-length: 0
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=172800
x-request-id: e70317936fe210862c0293fdaa346633
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 28 Nov 2023 03:42:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KwzRizUjz99dCeLEXcYmbegJxaFea6gcZxwmSKDBYQLmLYixEetXNKqI%2BtvKwAoRNeWCb%2F6eUZSXYguG3x9DqfalnMcb5rFH5rGucuBG4gpaUG7wf8YK7H%2FKS7b7NR3JuKQubPPvnSp3MEM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82cf9952ba0d5694-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?errno=undefined&errormsg=Unable%20to%20connect%20to%20the%20Internet%2C%20please%20connect%20and%20try%20again&type=videoplayer_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142928867
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?errno=undefined&errormsg=Unable%20to%20connect%20to%20the%20Internet%2C%20please%20connect%20and%20try%20again&type=videoplayer_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142928867
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 58271e771f1f4572cb9283679c6fd554
c3dda1de97ecd08869aabc7580b18556e1318e74
c82770358382e7dec3eb5bdb01c4a9e8293bfd68609e8dacb69ae8900dea3a40
GET /api/analytics?errno=undefined&errormsg=Unable%20to%20connect%20to%20the%20Internet%2C%20please%20connect%20and%20try%20again&type=videoplayer_error&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142928867 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207; _ga_06ZNKL8C2E=GS1.1.1701142926.1.0.1701142927.59.0.0; _ga=GA1.1.1503068942.1701142927; dom3ic8zudi28v8lr6fgphwffqoz0j6c=43efb641-34ea-47d7-8590-f0e230b3d4cb%3A3%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=displeaseddietstair.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:05 GMT
Flow-Level: 3
Logid: 8841053942468667569
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053942468667569
Yme: ZIGW+Ss3QE0XaysCSHb+qnFLufkASwb3tAFIwSqBmOi3b1o7JyFL0l3S9zY=
Content-Length: 44
rancorousnoncommittalsomewhat.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2tcVRi9L41QdWOLIKKLUUQUzOT9zJuxi2KtlWJtSlvp%2Bv56yTX3vfu49715aVathdKFQnSlrl7OpI3WIPYPUGTiphSFzEayaPauheJSJh0Y%2FRbfj3u%2BxTnnu7e36kPio6YHlz42G0pruph0%2Fc5b11QhTOM6F692Ar%2Frn%2BpcU8VSfKqzPkl28G7gJ13%2F7c6Hkq%2BZxdAPfD%2Fwg845ZWVm1hePUKhytx90%2B343DrtBEmPd%2Fn92tQdHPYjBITkJJcbPrD58AMVHKPKfzkq3VpnynQ%2FyWtPKWAzEzifFWmGaAvmszayHrNiZbsO4MSFfz8EUO1MFMIPtiQIwNSbenwFYsTOlCTa4%2B5Qp05AFmHgezWAEqUdQdARubkGJfQJwgYvLKPJ7F41t6PWnKJ2gYzL%2F5G%2BoZkzmH7%2BIIv%2FxjFbrnStG15UyhcN61kKtj6BWRijrPVQbHlSzB159BiX%2BIItPLqDIt5edNlDi4I04khlbioOFKJZ0IU5FutBL%2Bv5C5ssw8lkkYs6OLFJqBJWNoOUmqDuG2nmolYc681CXHnJx0KFJP%2FP9NGNZFPViznkUcZ70lkQioriX%2Baj5RMMmqnITXG%2BC2xso7c3vRJTKiPF4i2JNfbmfnIStf4VbbeGEB1cRDESLRhI0jqChBI0iaCqCZtDeFdqFrr0ntKtZMK3htEbt0FQrW%2FSuqVZkQbbKQ3JiYqP30vZxrMmDzlKYyjDr0TiM%2BmnCeMxEStOlIOzxUCRJCKdaKDcH6jxsqDF57ZXPUaoxeTbdBaN7cHoPXJ0ArQPQZpiGPujqMO752Ch2Az%2BMK2lpl5scwrQoq3lU170tfUhePjrn68cOIfmj0%2Fdf3T0evPkXuG1R2hafqt8IVvSd4WXTkO3LpnHkwXJZqVxt0Mmpr1S0ksfufySvN8aK82fd5vfv8QkwaXevSlddoIVQxYojP5xRQkh7zlguyc%2Fn3TXJLtVu9Uxti7q8cOn9c%2Bfz0krnlClGoGp%2F%2BR9wNSbzN385%2BsQv%2FH4byo5g6xZ5%2FYhMA8rsgZc34MoZe2cIrJ7tsNJDU7dDG7LZo1YEWs5mylq4%2F8xs1m%2B5O1ixc6DVLRR5i4FtMdAtqN6Eq58bVqV9dPrhN5P4FkzPDZm2c9tMW%2F3VkbWT9BhOHXRkkvmZ9EPJsj7LUuqLfhb3Ge0HMmUJDVC5sZT0i38BAAD%2F%2FwEAAP%2F%2FnqNqwKEEAAA%3D
200 OK 7 B URL GET HTTP/1.1 rancorousnoncommittalsomewhat.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2tcVRi9L41QdWOLIKKLUUQUzOT9zJuxi2KtlWJtSlvp%2Bv56yTX3vfu49715aVathdKFQnSlrl7OpI3WIPYPUGTiphSFzEayaPauheJSJh0Y%2FRbfj3u%2BxTnnu7e36kPio6YHlz42G0pruph0%2Fc5b11QhTOM6F692Ar%2Frn%2BpcU8VSfKqzPkl28G7gJ13%2F7c6Hkq%2BZxdAPfD%2Fwg845ZWVm1hePUKhytx90%2B343DrtBEmPd%2Fn92tQdHPYjBITkJJcbPrD58AMVHKPKfzkq3VpnynQ%2FyWtPKWAzEzifFWmGaAvmszayHrNiZbsO4MSFfz8EUO1MFMIPtiQIwNSbenwFYsTOlCTa4%2B5Qp05AFmHgezWAEqUdQdARubkGJfQJwgYvLKPJ7F41t6PWnKJ2gYzL%2F5G%2BoZkzmH7%2BIIv%2FxjFbrnStG15UyhcN61kKtj6BWRijrPVQbHlSzB159BiX%2BIItPLqDIt5edNlDi4I04khlbioOFKJZ0IU5FutBL%2Bv5C5ssw8lkkYs6OLFJqBJWNoOUmqDuG2nmolYc681CXHnJx0KFJP%2FP9NGNZFPViznkUcZ70lkQioriX%2Baj5RMMmqnITXG%2BC2xso7c3vRJTKiPF4i2JNfbmfnIStf4VbbeGEB1cRDESLRhI0jqChBI0iaCqCZtDeFdqFrr0ntKtZMK3htEbt0FQrW%2FSuqVZkQbbKQ3JiYqP30vZxrMmDzlKYyjDr0TiM%2BmnCeMxEStOlIOzxUCRJCKdaKDcH6jxsqDF57ZXPUaoxeTbdBaN7cHoPXJ0ArQPQZpiGPujqMO752Ch2Az%2BMK2lpl5scwrQoq3lU170tfUhePjrn68cOIfmj0%2Fdf3T0evPkXuG1R2hafqt8IVvSd4WXTkO3LpnHkwXJZqVxt0Mmpr1S0ksfufySvN8aK82fd5vfv8QkwaXevSlddoIVQxYojP5xRQkh7zlguyc%2Fn3TXJLtVu9Uxti7q8cOn9c%2Bfz0krnlClGoGp%2F%2BR9wNSbzN385%2BsQv%2FH4byo5g6xZ5%2FYhMA8rsgZc34MoZe2cIrJ7tsNJDU7dDG7LZo1YEWs5mylq4%2F8xs1m%2B5O1ixc6DVLRR5i4FtMdAtqN6Eq58bVqV9dPrhN5P4FkzPDZm2c9tMW%2F3VkbWT9BhOHXRkkvmZ9EPJsj7LUuqLfhb3Ge0HMmUJDVC5sZT0i38BAAD%2F%2FwEAAP%2F%2FnqNqwKEEAAA%3D
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerLet's Encrypt
Subjectrancorousnoncommittalsomewhat.com
Fingerprint24:A0:FB:1E:11:0C:2F:A3:AB:1E:BD:0D:CC:3F:E0:C3:78:F0:78:15
ValidityTue, 07 Nov 2023 07:59:17 GMT - Mon, 05 Feb 2024 07:59:16 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2tcVRi9L41QdWOLIKKLUUQUzOT9zJuxi2KtlWJtSlvp%2Bv56yTX3vfu49715aVathdKFQnSlrl7OpI3WIPYPUGTiphSFzEayaPauheJSJh0Y%2FRbfj3u%2BxTnnu7e36kPio6YHlz42G0pruph0%2Fc5b11QhTOM6F692Ar%2Frn%2BpcU8VSfKqzPkl28G7gJ13%2F7c6Hkq%2BZxdAPfD%2Fwg845ZWVm1hePUKhytx90%2B343DrtBEmPd%2Fn92tQdHPYjBITkJJcbPrD58AMVHKPKfzkq3VpnynQ%2FyWtPKWAzEzifFWmGaAvmszayHrNiZbsO4MSFfz8EUO1MFMIPtiQIwNSbenwFYsTOlCTa4%2B5Qp05AFmHgezWAEqUdQdARubkGJfQJwgYvLKPJ7F41t6PWnKJ2gYzL%2F5G%2BoZkzmH7%2BIIv%2FxjFbrnStG15UyhcN61kKtj6BWRijrPVQbHlSzB159BiX%2BIItPLqDIt5edNlDi4I04khlbioOFKJZ0IU5FutBL%2Bv5C5ssw8lkkYs6OLFJqBJWNoOUmqDuG2nmolYc681CXHnJx0KFJP%2FP9NGNZFPViznkUcZ70lkQioriX%2Baj5RMMmqnITXG%2BC2xso7c3vRJTKiPF4i2JNfbmfnIStf4VbbeGEB1cRDESLRhI0jqChBI0iaCqCZtDeFdqFrr0ntKtZMK3htEbt0FQrW%2FSuqVZkQbbKQ3JiYqP30vZxrMmDzlKYyjDr0TiM%2BmnCeMxEStOlIOzxUCRJCKdaKDcH6jxsqDF57ZXPUaoxeTbdBaN7cHoPXJ0ArQPQZpiGPujqMO752Ch2Az%2BMK2lpl5scwrQoq3lU170tfUhePjrn68cOIfmj0%2Fdf3T0evPkXuG1R2hafqt8IVvSd4WXTkO3LpnHkwXJZqVxt0Mmpr1S0ksfufySvN8aK82fd5vfv8QkwaXevSlddoIVQxYojP5xRQkh7zlguyc%2Fn3TXJLtVu9Uxti7q8cOn9c%2Bfz0krnlClGoGp%2F%2BR9wNSbzN385%2BsQv%2FH4byo5g6xZ5%2FYhMA8rsgZc34MoZe2cIrJ7tsNJDU7dDG7LZo1YEWs5mylq4%2F8xs1m%2B5O1ixc6DVLRR5i4FtMdAtqN6Eq58bVqV9dPrhN5P4FkzPDZm2c9tMW%2F3VkbWT9BhOHXRkkvmZ9EPJsj7LUuqLfhb3Ge0HMmUJDVC5sZT0i38BAAD%2F%2FwEAAP%2F%2FnqNqwKEEAAA%3D HTTP/1.1
Host: rancorousnoncommittalsomewhat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=18326536; uid_id2=43efb641-34ea-47d7-8590-f0e230b3d4cb:3:1; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec627e2f8a423975bc4bd7a76128c2d552=[2229214,2229213]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 03:42:05 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f98459175b91ba89126f886158f074b9
Strict-Transport-Security: max-age=0; includeSubdomains
rancorousnoncommittalsomewhat.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2sdVRi9k0aourFFENHFU0QUzMv8zLxnF8VaK8XalLbS9f01yTV35g73zrxJs2otShcK0ZW6mpyXNlqD2D9AkRc3pSj0bSSLZu9aKC7lJQ%2Befov5vjPnW5xzvvvZVn1AfNR0%2F9KHZkNpTReTrt9545oqhGlc5%2BLVTuB3%2FVOda6pYik911icfO3g78JOu%2F2bnfcnXzGLoB74f%2BEHnnLIyM%2BuLhyxUudsPun2%2FG4fdIImxbv%2BPXe3BUQ9icEBOQonxU6sP7kPxEYr8p7PSrVWmfOu9vNa0MhYDsfNRsVaYpkA%2BGzPrISt2ptswbkzI13Mwxc7UAcxge%2BIATI2J92cAVuxMZYIN7hwpZRqyABPPohmMIPUIio7AzS0o8YgAXODiMor87kVjG3r9iKUTdkzmn%2FwN1YzJ%2FOPnUeQ%2FntFqvXPF6LpSpnBYz1qo9RHUyghlvYdqw4Nq9sCrT6DEH2TxyQUU%2Bfay0wZK7L8WRzJjS3GwEMWSLsSpSBd6Sd9fyHwZRj6LRMzZYURKjaCyEbTcBHXHUDsPtfJQZx7q0kMu9js06We%2Bn2Ysi6JezDmPIs6T3pJIRBT3Mh81n3jYRFVugutNcHsDpb35nYhSGTEeb1GsqS8fJSdh61%2FhVls44cFVBAPRopEEjSNoKEGjCJqKoBm0d4R2oWvvCu1qFkx7OO1ROzTVyha9Y6oVWZCt8oCcmMTovbB9HGtyv7MUpjLMejQOo36aMB4zkdJ0KQh7PBRJEsKpFsrNgToPG2pMXnnpc5RqTJ5Od8HoHpzeA1cnQOsAtBmmoQ%2B6Oox7PjaK3cAP40pa2uUmhzAtymoe1XVvSx%2BQFw%2FP%2Beqxx5D84el7L%2B8eD17%2FC9y2KG2Lj9VvBCv69vCyacj2ZdM4cn%2B5rFSuNujk1FcqWslj9z6Q1xtjxfmzbvP7d%2FiEmIy7V6WrLtBCqGLFkR%2FOKCGkPWcsl%2BTn8%2B6aZJdqt3qmtkVdXrj07rnzeWmlc8oUI1D1aPkfcDUm8zd%2FOXzEz%2F3%2BKZQdwdYt8vohmRaU2QMvb8CVM%2FXOEFg922HlHJq6HdqQzX5qRaDlDFPWwv0Hs9m85W5jxc6BVrdQ5C0GtsVAt6B6E65%2BZliV9uHpB99M6lswPTdk2s5tM231V5NoD47ydWq%2FI5PMz6QfSpb1WZZSX%2FSzuM9oP5ApS2iAyo2lpF%2F8CwAA%2F%2F8BAAD%2F%2F8QQnf6hBAAA
200 OK 7 B URL GET HTTP/1.1 rancorousnoncommittalsomewhat.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2sdVRi9k0aourFFENHFU0QUzMv8zLxnF8VaK8XalLbS9f01yTV35g73zrxJs2otShcK0ZW6mpyXNlqD2D9AkRc3pSj0bSSLZu9aKC7lJQ%2Befov5vjPnW5xzvvvZVn1AfNR0%2F9KHZkNpTReTrt9545oqhGlc5%2BLVTuB3%2FVOda6pYik911icfO3g78JOu%2F2bnfcnXzGLoB74f%2BEHnnLIyM%2BuLhyxUudsPun2%2FG4fdIImxbv%2BPXe3BUQ9icEBOQonxU6sP7kPxEYr8p7PSrVWmfOu9vNa0MhYDsfNRsVaYpkA%2BGzPrISt2ptswbkzI13Mwxc7UAcxge%2BIATI2J92cAVuxMZYIN7hwpZRqyABPPohmMIPUIio7AzS0o8YgAXODiMor87kVjG3r9iKUTdkzmn%2FwN1YzJ%2FOPnUeQ%2FntFqvXPF6LpSpnBYz1qo9RHUyghlvYdqw4Nq9sCrT6DEH2TxyQUU%2Bfay0wZK7L8WRzJjS3GwEMWSLsSpSBd6Sd9fyHwZRj6LRMzZYURKjaCyEbTcBHXHUDsPtfJQZx7q0kMu9js06We%2Bn2Ysi6JezDmPIs6T3pJIRBT3Mh81n3jYRFVugutNcHsDpb35nYhSGTEeb1GsqS8fJSdh61%2FhVls44cFVBAPRopEEjSNoKEGjCJqKoBm0d4R2oWvvCu1qFkx7OO1ROzTVyha9Y6oVWZCt8oCcmMTovbB9HGtyv7MUpjLMejQOo36aMB4zkdJ0KQh7PBRJEsKpFsrNgToPG2pMXnnpc5RqTJ5Od8HoHpzeA1cnQOsAtBmmoQ%2B6Oox7PjaK3cAP40pa2uUmhzAtymoe1XVvSx%2BQFw%2FP%2Beqxx5D84el7L%2B8eD17%2FC9y2KG2Lj9VvBCv69vCyacj2ZdM4cn%2B5rFSuNujk1FcqWslj9z6Q1xtjxfmzbvP7d%2FiEmIy7V6WrLtBCqGLFkR%2FOKCGkPWcsl%2BTn8%2B6aZJdqt3qmtkVdXrj07rnzeWmlc8oUI1D1aPkfcDUm8zd%2FOXzEz%2F3%2BKZQdwdYt8vohmRaU2QMvb8CVM%2FXOEFg922HlHJq6HdqQzX5qRaDlDFPWwv0Hs9m85W5jxc6BVrdQ5C0GtsVAt6B6E65%2BZliV9uHpB99M6lswPTdk2s5tM231V5NoD47ydWq%2FI5PMz6QfSpb1WZZSX%2FSzuM9oP5ApS2iAyo2lpF%2F8CwAA%2F%2F8BAAD%2F%2F8QQnf6hBAAA
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerLet's Encrypt
Subjectrancorousnoncommittalsomewhat.com
Fingerprint24:A0:FB:1E:11:0C:2F:A3:AB:1E:BD:0D:CC:3F:E0:C3:78:F0:78:15
ValidityTue, 07 Nov 2023 07:59:17 GMT - Mon, 05 Feb 2024 07:59:16 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2sdVRi9k0aourFFENHFU0QUzMv8zLxnF8VaK8XalLbS9f01yTV35g73zrxJs2otShcK0ZW6mpyXNlqD2D9AkRc3pSj0bSSLZu9aKC7lJQ%2Befov5vjPnW5xzvvvZVn1AfNR0%2F9KHZkNpTReTrt9545oqhGlc5%2BLVTuB3%2FVOda6pYik911icfO3g78JOu%2F2bnfcnXzGLoB74f%2BEHnnLIyM%2BuLhyxUudsPun2%2FG4fdIImxbv%2BPXe3BUQ9icEBOQonxU6sP7kPxEYr8p7PSrVWmfOu9vNa0MhYDsfNRsVaYpkA%2BGzPrISt2ptswbkzI13Mwxc7UAcxge%2BIATI2J92cAVuxMZYIN7hwpZRqyABPPohmMIPUIio7AzS0o8YgAXODiMor87kVjG3r9iKUTdkzmn%2FwN1YzJ%2FOPnUeQ%2FntFqvXPF6LpSpnBYz1qo9RHUyghlvYdqw4Nq9sCrT6DEH2TxyQUU%2Bfay0wZK7L8WRzJjS3GwEMWSLsSpSBd6Sd9fyHwZRj6LRMzZYURKjaCyEbTcBHXHUDsPtfJQZx7q0kMu9js06We%2Bn2Ysi6JezDmPIs6T3pJIRBT3Mh81n3jYRFVugutNcHsDpb35nYhSGTEeb1GsqS8fJSdh61%2FhVls44cFVBAPRopEEjSNoKEGjCJqKoBm0d4R2oWvvCu1qFkx7OO1ROzTVyha9Y6oVWZCt8oCcmMTovbB9HGtyv7MUpjLMejQOo36aMB4zkdJ0KQh7PBRJEsKpFsrNgToPG2pMXnnpc5RqTJ5Od8HoHpzeA1cnQOsAtBmmoQ%2B6Oox7PjaK3cAP40pa2uUmhzAtymoe1XVvSx%2BQFw%2FP%2Beqxx5D84el7L%2B8eD17%2FC9y2KG2Lj9VvBCv69vCyacj2ZdM4cn%2B5rFSuNujk1FcqWslj9z6Q1xtjxfmzbvP7d%2FiEmIy7V6WrLtBCqGLFkR%2FOKCGkPWcsl%2BTn8%2B6aZJdqt3qmtkVdXrj07rnzeWmlc8oUI1D1aPkfcDUm8zd%2FOXzEz%2F3%2BKZQdwdYt8vohmRaU2QMvb8CVM%2FXOEFg922HlHJq6HdqQzX5qRaDlDFPWwv0Hs9m85W5jxc6BVrdQ5C0GtsVAt6B6E65%2BZliV9uHpB99M6lswPTdk2s5tM231V5NoD47ydWq%2FI5PMz6QfSpb1WZZSX%2FSzuM9oP5ApS2iAyo2lpF%2F8CwAA%2F%2F8BAAD%2F%2F8QQnf6hBAAA HTTP/1.1
Host: rancorousnoncommittalsomewhat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=18326536; uid_id2=43efb641-34ea-47d7-8590-f0e230b3d4cb:3:1; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec627e2f8a423975bc4bd7a76128c2d552=[2229214,2229213]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 03:42:05 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: decf039ccc2d9d81019f880295529ec1
Strict-Transport-Security: max-age=0; includeSubdomains
coloniststarter.com/pixel/purst?dl=0&th=0&sc=0&rs=9740&rd=9740&fd=598&bv=23.11.v.8&tmpl=136
200 OK 0 B URL GET HTTP/1.1 coloniststarter.com/pixel/purst?dl=0&th=0&sc=0&rs=9740&rd=9740&fd=598&bv=23.11.v.8&tmpl=136
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerLet's Encrypt
Subjectcoloniststarter.com
Fingerprint6F:3E:96:A3:7E:3E:AE:BB:08:38:94:92:67:EE:6B:CC:47:54:B3:E0
ValiditySat, 25 Nov 2023 08:18:46 GMT - Fri, 23 Feb 2024 08:18:45 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=9740&rd=9740&fd=598&bv=23.11.v.8&tmpl=136 HTTP/1.1
Host: coloniststarter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 03:42:05 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
rancorousnoncommittalsomewhat.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSu3o0H14u7evFkIwgKMumemc7MuMjiukaCMYn7g5zrV0%2FKVHc1Vd3Tk5yCC7IHD7M39dT5JtmgG8Q9iyATQZegkLksOZg%2FwYuweJRJBkYfVL331fcO3%2FdefbFbnJEABT1d%2B8RsK63pfFQL%2FLfWVSpM6fyVu34Y1ILr%2FrpKF5rX%2Ff7ksr13wyCqBW%2F7H0m%2BaebrQRgEYRD6i8rK2PTnz1mo7LAT1jpBrVmvhVETfft%2F7AoPjnoQvTNyDUqMX9h4%2BgSKj5AmP9ySbjM32TsfJoWmubHoiYN76WZqyhTJrIythzg9mHbDuDEhX12CSQ%2BmDmB6exMHYGpMvGchWHowlQnW279QyjRkCiZeQtkbQeoRFB2Bm%2FtQ4oQAXGBlFWnyaMXYkm5dsHTCjsnc87%2BhyjGZ%2B%2FNVpMn3N7Xq%2B3eMLnJlUod%2BXEH1R1DdEbLiCPm2B1UegeefQ4k%2FyPzzZaTJ3qrTBkpU5%2B6VGkHFI2g5AHUeislRHorYQ5F5SMSpT6NOHAStmMWNRrvJOW80OI%2FaCyISjWY7DlDwibwB8mwArgfgdgeZ3cGmengSXYMtfobbqOCEB5ePiffpDnqiQikJSkdQUoJSEZQ5Qdmr9oV2dVc9EtoVLJzm%2BjQ3qqHJu7t03%2BRdmZLd7IxcnYzGu%2Frbj9iUp37E253OgmzLBmeRDAPWikVjIQwj1g4CyltwqoJyl87dbqsxeb1%2FGZkakxdbh2D0CE4fgavLoEUIWg5b9QB0Y9hsB9hOH%2BfSUmb6NW4SCFMhy%2BeQb3m7%2Boy8dr6hN%2BbuQfLjG79eeS8bPrsCbitktsJn6heCrn4wvG1KsnfblI48Wc1ylahtOtnenZzm8vJ3H8ut0lixdMsNvn2fT4hJeXhXunyZpkKlXUce31RCSLtoLJfkpyW3Ltla4TZuFjYtsuW1DxaXksxK55RJR6DqZPUfcDUmc2%2B%2Bcv4vX%2F79Lyg7gi0qJMUxmQaUOQLPduCymXpnCKye9bDMQ1lUQ1tns0etCLScYcoquP9gNqt33QN0rQea30eaVOjZCj1dgeoBXHFlmGf2%2BMbTryfxDZj2hkxbb49pqx9ejNapU19GcRDLoC5Z3GFxiwaiEzc7jHZC2WIRDZG7sZT0y38BAAD%2F%2FwEAAP%2F%2FoJIGj28EAAA%3D
200 OK 7 B URL GET HTTP/1.1 rancorousnoncommittalsomewhat.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSu3o0H14u7evFkIwgKMumemc7MuMjiukaCMYn7g5zrV0%2FKVHc1Vd3Tk5yCC7IHD7M39dT5JtmgG8Q9iyATQZegkLksOZg%2FwYuweJRJBkYfVL331fcO3%2FdefbFbnJEABT1d%2B8RsK63pfFQL%2FLfWVSpM6fyVu34Y1ILr%2FrpKF5rX%2Ff7ksr13wyCqBW%2F7H0m%2BaebrQRgEYRD6i8rK2PTnz1mo7LAT1jpBrVmvhVETfft%2F7AoPjnoQvTNyDUqMX9h4%2BgSKj5AmP9ySbjM32TsfJoWmubHoiYN76WZqyhTJrIythzg9mHbDuDEhX12CSQ%2BmDmB6exMHYGpMvGchWHowlQnW279QyjRkCiZeQtkbQeoRFB2Bm%2FtQ4oQAXGBlFWnyaMXYkm5dsHTCjsnc87%2BhyjGZ%2B%2FNVpMn3N7Xq%2B3eMLnJlUod%2BXEH1R1DdEbLiCPm2B1UegeefQ4k%2FyPzzZaTJ3qrTBkpU5%2B6VGkHFI2g5AHUeislRHorYQ5F5SMSpT6NOHAStmMWNRrvJOW80OI%2FaCyISjWY7DlDwibwB8mwArgfgdgeZ3cGmengSXYMtfobbqOCEB5ePiffpDnqiQikJSkdQUoJSEZQ5Qdmr9oV2dVc9EtoVLJzm%2BjQ3qqHJu7t03%2BRdmZLd7IxcnYzGu%2Frbj9iUp37E253OgmzLBmeRDAPWikVjIQwj1g4CyltwqoJyl87dbqsxeb1%2FGZkakxdbh2D0CE4fgavLoEUIWg5b9QB0Y9hsB9hOH%2BfSUmb6NW4SCFMhy%2BeQb3m7%2Boy8dr6hN%2BbuQfLjG79eeS8bPrsCbitktsJn6heCrn4wvG1KsnfblI48Wc1ylahtOtnenZzm8vJ3H8ut0lixdMsNvn2fT4hJeXhXunyZpkKlXUce31RCSLtoLJfkpyW3Ltla4TZuFjYtsuW1DxaXksxK55RJR6DqZPUfcDUmc2%2B%2Bcv4vX%2F79Lyg7gi0qJMUxmQaUOQLPduCymXpnCKye9bDMQ1lUQ1tns0etCLScYcoquP9gNqt33QN0rQea30eaVOjZCj1dgeoBXHFlmGf2%2BMbTryfxDZj2hkxbb49pqx9ejNapU19GcRDLoC5Z3GFxiwaiEzc7jHZC2WIRDZG7sZT0y38BAAD%2F%2FwEAAP%2F%2FoJIGj28EAAA%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerLet's Encrypt
Subjectrancorousnoncommittalsomewhat.com
Fingerprint24:A0:FB:1E:11:0C:2F:A3:AB:1E:BD:0D:CC:3F:E0:C3:78:F0:78:15
ValidityTue, 07 Nov 2023 07:59:17 GMT - Mon, 05 Feb 2024 07:59:16 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSu3o0H14u7evFkIwgKMumemc7MuMjiukaCMYn7g5zrV0%2FKVHc1Vd3Tk5yCC7IHD7M39dT5JtmgG8Q9iyATQZegkLksOZg%2FwYuweJRJBkYfVL331fcO3%2FdefbFbnJEABT1d%2B8RsK63pfFQL%2FLfWVSpM6fyVu34Y1ILr%2FrpKF5rX%2Ff7ksr13wyCqBW%2F7H0m%2BaebrQRgEYRD6i8rK2PTnz1mo7LAT1jpBrVmvhVETfft%2F7AoPjnoQvTNyDUqMX9h4%2BgSKj5AmP9ySbjM32TsfJoWmubHoiYN76WZqyhTJrIythzg9mHbDuDEhX12CSQ%2BmDmB6exMHYGpMvGchWHowlQnW279QyjRkCiZeQtkbQeoRFB2Bm%2FtQ4oQAXGBlFWnyaMXYkm5dsHTCjsnc87%2BhyjGZ%2B%2FNVpMn3N7Xq%2B3eMLnJlUod%2BXEH1R1DdEbLiCPm2B1UegeefQ4k%2FyPzzZaTJ3qrTBkpU5%2B6VGkHFI2g5AHUeislRHorYQ5F5SMSpT6NOHAStmMWNRrvJOW80OI%2FaCyISjWY7DlDwibwB8mwArgfgdgeZ3cGmengSXYMtfobbqOCEB5ePiffpDnqiQikJSkdQUoJSEZQ5Qdmr9oV2dVc9EtoVLJzm%2BjQ3qqHJu7t03%2BRdmZLd7IxcnYzGu%2Frbj9iUp37E253OgmzLBmeRDAPWikVjIQwj1g4CyltwqoJyl87dbqsxeb1%2FGZkakxdbh2D0CE4fgavLoEUIWg5b9QB0Y9hsB9hOH%2BfSUmb6NW4SCFMhy%2BeQb3m7%2Boy8dr6hN%2BbuQfLjG79eeS8bPrsCbitktsJn6heCrn4wvG1KsnfblI48Wc1ylahtOtnenZzm8vJ3H8ut0lixdMsNvn2fT4hJeXhXunyZpkKlXUce31RCSLtoLJfkpyW3Ltla4TZuFjYtsuW1DxaXksxK55RJR6DqZPUfcDUmc2%2B%2Bcv4vX%2F79Lyg7gi0qJMUxmQaUOQLPduCymXpnCKye9bDMQ1lUQ1tns0etCLScYcoquP9gNqt33QN0rQea30eaVOjZCj1dgeoBXHFlmGf2%2BMbTryfxDZj2hkxbb49pqx9ejNapU19GcRDLoC5Z3GFxiwaiEzc7jHZC2WIRDZG7sZT0y38BAAD%2F%2FwEAAP%2F%2FoJIGj28EAAA%3D HTTP/1.1
Host: rancorousnoncommittalsomewhat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 03:42:05 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4cfa2f9fb5005681b348d1c593283bbb
Strict-Transport-Security: max-age=0; includeSubdomains
friendshipmale.com/sfp.js
200 OK 28 kB URL GET HTTP/3 friendshipmale.com/sfp.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 924e967bca1d599992556a8d139b1c5a
222b09dbf164ddc03d39100fd0524a22018d28b2
ac84c2f8288b59f8e04ba77287ce696052bfeee0d462a566d94dc305df646c95
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:42:05 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 5180ba313231a5f20e733c070ea6c2c1
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 28 Nov 2023 03:42:04 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aSNFE5KmjHPO6MTEBG679okhUrRDUja7FRCSWvlViXRlPzThbrCoBIy0EodgMhXbokiIl%2FJvB88movCl9jsjuNwIMKev1fyj7dRKQ%2BYy9i%2BN40%2F2lbIYyh6wAWOeqocmB6zNNXI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82cf99513bf963e1-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
rancorousnoncommittalsomewhat.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2sdVRi9k0aourFFENHFU0QUzMv8zLxnF8VaK8XalLbS9f01yTV35g73zrxJs2otShcK0ZW6mpyXNlqD2D9AkRc3pSj0bSSLZu9aKC7lJQ%2Befov5vjPnW5xzvvvZVn1AfNR0%2F9KHZkNpTReTrt9545oqhGlc5%2BLVTuB3%2FVOda6pYik911icfO3g78JOu%2F2bnfcnXzGLoB74f%2BEHnnLIyM%2BuLhyxUudsPun2%2FG4fdIImxbv%2BPXe3BUQ9icEBOQonxU6sP7kPxEYr8p7PSrVWmfOu9vNa0MhYDsfNRsVaYpkA%2BGzPrISt2ptswbkzI13Mwxc7UAcxge%2BIATI2J92cAVuxMZYIN7hwpZRqyABPPohmMIPUIio7AzS0o8YgAXODiMor87kVjG3r9iKUTdkzmn%2FwN1YzJ%2FOPnUeQ%2FntFqvXPF6LpSpnBYz1qo9RHUyghlvYdqw4Nq9sCrT6DEH2TxyQUU%2Bfay0wZK7L8WRzJjS3GwEMWSLsSpSBd6Sd9fyHwZRj6LRMzZYURKjaCyEbTcBHXHUDsPtfJQZx7q0kMu9js06We%2Bn2Ysi6JezDmPIs6T3pJIRBT3Mh81n3jYRFVugutNcHsDpb35nYhSGTEeb1GsqS8fJSdh61%2FhVls44cFVBAPRopEEjSNoKEGjCJqKoBm0d4R2oWvvCu1qFkx7OO1ROzTVyha9Y6oVWZCt8oCcmMTovbB9HGtyv7MUpjLMejQOo36aMB4zkdJ0KQh7PBRJEsKpFsrNgToPG2pMXnnpc5RqTJ5Od8HoHpzeA1cnQOsAtBmmoQ%2B6Oox7PjaK3cAP40pa2uUmhzAtymoe1XVvSx%2BQFw%2FP%2Beqxx5D84el7L%2B8eD17%2FC9y2KG2Lj9VvBCv69vCyacj2ZdM4cn%2B5rFSuNujk1FcqWslj9z6Q1xtjxfmzbvP7d%2FiEmIy7V6WrLtBCqGLFkR%2FOKCGkPWcsl%2BTn8%2B6aZJdqt3qmtkVdXrj07rnzeWmlc8oUI1D1aPkfcDUm8zd%2FOXzEz%2F3%2BKZQdwdYt8vohmRaU2QMvb8CVM%2FXOEFg922HlHJq6HdqQzX5qRaDlDFPWwv0Hs9m85W5jxc6BVrdQ5C0GtsVAt6B6E65%2BZliV9uHpB99M6lswPTdk2s5tM231V5NoD47ydWq%2FkwSx7LFeyoVgkosgDaNe5PuhEHHal0EflRtLSb%2F4FwAA%2F%2F8BAAD%2F%2F9AYExihBAAA
200 OK 7 B URL GET HTTP/1.1 rancorousnoncommittalsomewhat.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2sdVRi9k0aourFFENHFU0QUzMv8zLxnF8VaK8XalLbS9f01yTV35g73zrxJs2otShcK0ZW6mpyXNlqD2D9AkRc3pSj0bSSLZu9aKC7lJQ%2Befov5vjPnW5xzvvvZVn1AfNR0%2F9KHZkNpTReTrt9545oqhGlc5%2BLVTuB3%2FVOda6pYik911icfO3g78JOu%2F2bnfcnXzGLoB74f%2BEHnnLIyM%2BuLhyxUudsPun2%2FG4fdIImxbv%2BPXe3BUQ9icEBOQonxU6sP7kPxEYr8p7PSrVWmfOu9vNa0MhYDsfNRsVaYpkA%2BGzPrISt2ptswbkzI13Mwxc7UAcxge%2BIATI2J92cAVuxMZYIN7hwpZRqyABPPohmMIPUIio7AzS0o8YgAXODiMor87kVjG3r9iKUTdkzmn%2FwN1YzJ%2FOPnUeQ%2FntFqvXPF6LpSpnBYz1qo9RHUyghlvYdqw4Nq9sCrT6DEH2TxyQUU%2Bfay0wZK7L8WRzJjS3GwEMWSLsSpSBd6Sd9fyHwZRj6LRMzZYURKjaCyEbTcBHXHUDsPtfJQZx7q0kMu9js06We%2Bn2Ysi6JezDmPIs6T3pJIRBT3Mh81n3jYRFVugutNcHsDpb35nYhSGTEeb1GsqS8fJSdh61%2FhVls44cFVBAPRopEEjSNoKEGjCJqKoBm0d4R2oWvvCu1qFkx7OO1ROzTVyha9Y6oVWZCt8oCcmMTovbB9HGtyv7MUpjLMejQOo36aMB4zkdJ0KQh7PBRJEsKpFsrNgToPG2pMXnnpc5RqTJ5Od8HoHpzeA1cnQOsAtBmmoQ%2B6Oox7PjaK3cAP40pa2uUmhzAtymoe1XVvSx%2BQFw%2FP%2Beqxx5D84el7L%2B8eD17%2FC9y2KG2Lj9VvBCv69vCyacj2ZdM4cn%2B5rFSuNujk1FcqWslj9z6Q1xtjxfmzbvP7d%2FiEmIy7V6WrLtBCqGLFkR%2FOKCGkPWcsl%2BTn8%2B6aZJdqt3qmtkVdXrj07rnzeWmlc8oUI1D1aPkfcDUm8zd%2FOXzEz%2F3%2BKZQdwdYt8vohmRaU2QMvb8CVM%2FXOEFg922HlHJq6HdqQzX5qRaDlDFPWwv0Hs9m85W5jxc6BVrdQ5C0GtsVAt6B6E65%2BZliV9uHpB99M6lswPTdk2s5tM231V5NoD47ydWq%2FkwSx7LFeyoVgkosgDaNe5PuhEHHal0EflRtLSb%2F4FwAA%2F%2F8BAAD%2F%2F9AYExihBAAA
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerLet's Encrypt
Subjectrancorousnoncommittalsomewhat.com
Fingerprint24:A0:FB:1E:11:0C:2F:A3:AB:1E:BD:0D:CC:3F:E0:C3:78:F0:78:15
ValidityTue, 07 Nov 2023 07:59:17 GMT - Mon, 05 Feb 2024 07:59:16 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz2sdVRi9k0aourFFENHFU0QUzMv8zLxnF8VaK8XalLbS9f01yTV35g73zrxJs2otShcK0ZW6mpyXNlqD2D9AkRc3pSj0bSSLZu9aKC7lJQ%2Befov5vjPnW5xzvvvZVn1AfNR0%2F9KHZkNpTReTrt9545oqhGlc5%2BLVTuB3%2FVOda6pYik911icfO3g78JOu%2F2bnfcnXzGLoB74f%2BEHnnLIyM%2BuLhyxUudsPun2%2FG4fdIImxbv%2BPXe3BUQ9icEBOQonxU6sP7kPxEYr8p7PSrVWmfOu9vNa0MhYDsfNRsVaYpkA%2BGzPrISt2ptswbkzI13Mwxc7UAcxge%2BIATI2J92cAVuxMZYIN7hwpZRqyABPPohmMIPUIio7AzS0o8YgAXODiMor87kVjG3r9iKUTdkzmn%2FwN1YzJ%2FOPnUeQ%2FntFqvXPF6LpSpnBYz1qo9RHUyghlvYdqw4Nq9sCrT6DEH2TxyQUU%2Bfay0wZK7L8WRzJjS3GwEMWSLsSpSBd6Sd9fyHwZRj6LRMzZYURKjaCyEbTcBHXHUDsPtfJQZx7q0kMu9js06We%2Bn2Ysi6JezDmPIs6T3pJIRBT3Mh81n3jYRFVugutNcHsDpb35nYhSGTEeb1GsqS8fJSdh61%2FhVls44cFVBAPRopEEjSNoKEGjCJqKoBm0d4R2oWvvCu1qFkx7OO1ROzTVyha9Y6oVWZCt8oCcmMTovbB9HGtyv7MUpjLMejQOo36aMB4zkdJ0KQh7PBRJEsKpFsrNgToPG2pMXnnpc5RqTJ5Od8HoHpzeA1cnQOsAtBmmoQ%2B6Oox7PjaK3cAP40pa2uUmhzAtymoe1XVvSx%2BQFw%2FP%2Beqxx5D84el7L%2B8eD17%2FC9y2KG2Lj9VvBCv69vCyacj2ZdM4cn%2B5rFSuNujk1FcqWslj9z6Q1xtjxfmzbvP7d%2FiEmIy7V6WrLtBCqGLFkR%2FOKCGkPWcsl%2BTn8%2B6aZJdqt3qmtkVdXrj07rnzeWmlc8oUI1D1aPkfcDUm8zd%2FOXzEz%2F3%2BKZQdwdYt8vohmRaU2QMvb8CVM%2FXOEFg922HlHJq6HdqQzX5qRaDlDFPWwv0Hs9m85W5jxc6BVrdQ5C0GtsVAt6B6E65%2BZliV9uHpB99M6lswPTdk2s5tM231V5NoD47ydWq%2FkwSx7LFeyoVgkosgDaNe5PuhEHHal0EflRtLSb%2F4FwAA%2F%2F8BAAD%2F%2F9AYExihBAAA HTTP/1.1
Host: rancorousnoncommittalsomewhat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=18326536; uid_id2=43efb641-34ea-47d7-8590-f0e230b3d4cb:3:1; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec627e2f8a423975bc4bd7a76128c2d552=[2229214,2229213]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 03:42:05 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 62eed7d4ba30f59249d9f11f53216968
Strict-Transport-Security: max-age=0; includeSubdomains
rancorousnoncommittalsomewhat.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2tcVRi9L41QdWOLIKKLUUQUzOT9zJuxi2KtlWJtSlvp%2Bv56yTX3vfu49715aVathdKFQnSlrl7OpI3WIPYPUGTiphSFzEayaPauheJSJh0Y%2FRbfj3u%2BxTnnu7e36kPio6YHlz42G0pruph0%2Fc5b11QhTOM6F692Ar%2Frn%2BpcU8VSfKqzPkl28G7gJ13%2F7c6Hkq%2BZxdAPfD%2Fwg845ZWVm1hePUKhytx90%2B343DrtBEmPd%2Fn92tQdHPYjBITkJJcbPrD58AMVHKPKfzkq3VpnynQ%2FyWtPKWAzEzifFWmGaAvmszayHrNiZbsO4MSFfz8EUO1MFMIPtiQIwNSbenwFYsTOlCTa4%2B5Qp05AFmHgezWAEqUdQdARubkGJfQJwgYvLKPJ7F41t6PWnKJ2gYzL%2F5G%2BoZkzmH7%2BIIv%2FxjFbrnStG15UyhcN61kKtj6BWRijrPVQbHlSzB159BiX%2BIItPLqDIt5edNlDi4I04khlbioOFKJZ0IU5FutBL%2Bv5C5ssw8lkkYs6OLFJqBJWNoOUmqDuG2nmolYc681CXHnJx0KFJP%2FP9NGNZFPViznkUcZ70lkQioriX%2Baj5RMMmqnITXG%2BC2xso7c3vRJTKiPF4i2JNfbmfnIStf4VbbeGEB1cRDESLRhI0jqChBI0iaCqCZtDeFdqFrr0ntKtZMK3htEbt0FQrW%2FSuqVZkQbbKQ3JiYqP30vZxrMmDzlKYyjDr0TiM%2BmnCeMxEStOlIOzxUCRJCKdaKDcH6jxsqDF57ZXPUaoxeTbdBaN7cHoPXJ0ArQPQZpiGPujqMO752Ch2Az%2BMK2lpl5scwrQoq3lU170tfUhePjrn68cOIfmj0%2Fdf3T0evPkXuG1R2hafqt8IVvSd4WXTkO3LpnHkwXJZqVxt0Mmpr1S0ksfufySvN8aK82fd5vfv8QkwaXevSlddoIVQxYojP5xRQkh7zlguyc%2Fn3TXJLtVu9Uxti7q8cOn9c%2Bfz0krnlClGoGp%2F%2BR9wNSbzN385%2BsQv%2FH4byo5g6xZ5%2FYhMA8rsgZc34MoZe2cIrJ7tsNJDU7dDG7LZo1YEWs5mylq4%2F8xs1m%2B5O1ixc6DVLRR5i4FtMdAtqN6Eq58bVqV9dPrhN5P4FkzPDZm2c9tMW%2F3VkbWT9BhOHXSSIJY91ku5EExyEaRh1It8PxQiTvsy6KNyYynpF%2F8CAAD%2F%2FwEAAP%2F%2FiqvkJqEEAAA%3D
200 OK 7 B URL GET HTTP/1.1 rancorousnoncommittalsomewhat.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2tcVRi9L41QdWOLIKKLUUQUzOT9zJuxi2KtlWJtSlvp%2Bv56yTX3vfu49715aVathdKFQnSlrl7OpI3WIPYPUGTiphSFzEayaPauheJSJh0Y%2FRbfj3u%2BxTnnu7e36kPio6YHlz42G0pruph0%2Fc5b11QhTOM6F692Ar%2Frn%2BpcU8VSfKqzPkl28G7gJ13%2F7c6Hkq%2BZxdAPfD%2Fwg845ZWVm1hePUKhytx90%2B343DrtBEmPd%2Fn92tQdHPYjBITkJJcbPrD58AMVHKPKfzkq3VpnynQ%2FyWtPKWAzEzifFWmGaAvmszayHrNiZbsO4MSFfz8EUO1MFMIPtiQIwNSbenwFYsTOlCTa4%2B5Qp05AFmHgezWAEqUdQdARubkGJfQJwgYvLKPJ7F41t6PWnKJ2gYzL%2F5G%2BoZkzmH7%2BIIv%2FxjFbrnStG15UyhcN61kKtj6BWRijrPVQbHlSzB159BiX%2BIItPLqDIt5edNlDi4I04khlbioOFKJZ0IU5FutBL%2Bv5C5ssw8lkkYs6OLFJqBJWNoOUmqDuG2nmolYc681CXHnJx0KFJP%2FP9NGNZFPViznkUcZ70lkQioriX%2Baj5RMMmqnITXG%2BC2xso7c3vRJTKiPF4i2JNfbmfnIStf4VbbeGEB1cRDESLRhI0jqChBI0iaCqCZtDeFdqFrr0ntKtZMK3htEbt0FQrW%2FSuqVZkQbbKQ3JiYqP30vZxrMmDzlKYyjDr0TiM%2BmnCeMxEStOlIOzxUCRJCKdaKDcH6jxsqDF57ZXPUaoxeTbdBaN7cHoPXJ0ArQPQZpiGPujqMO752Ch2Az%2BMK2lpl5scwrQoq3lU170tfUhePjrn68cOIfmj0%2Fdf3T0evPkXuG1R2hafqt8IVvSd4WXTkO3LpnHkwXJZqVxt0Mmpr1S0ksfufySvN8aK82fd5vfv8QkwaXevSlddoIVQxYojP5xRQkh7zlguyc%2Fn3TXJLtVu9Uxti7q8cOn9c%2Bfz0krnlClGoGp%2F%2BR9wNSbzN385%2BsQv%2FH4byo5g6xZ5%2FYhMA8rsgZc34MoZe2cIrJ7tsNJDU7dDG7LZo1YEWs5mylq4%2F8xs1m%2B5O1ixc6DVLRR5i4FtMdAtqN6Eq58bVqV9dPrhN5P4FkzPDZm2c9tMW%2F3VkbWT9BhOHXSSIJY91ku5EExyEaRh1It8PxQiTvsy6KNyYynpF%2F8CAAD%2F%2FwEAAP%2F%2FiqvkJqEEAAA%3D
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerLet's Encrypt
Subjectrancorousnoncommittalsomewhat.com
Fingerprint24:A0:FB:1E:11:0C:2F:A3:AB:1E:BD:0D:CC:3F:E0:C3:78:F0:78:15
ValidityTue, 07 Nov 2023 07:59:17 GMT - Mon, 05 Feb 2024 07:59:16 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz2tcVRi9L41QdWOLIKKLUUQUzOT9zJuxi2KtlWJtSlvp%2Bv56yTX3vfu49715aVathdKFQnSlrl7OpI3WIPYPUGTiphSFzEayaPauheJSJh0Y%2FRbfj3u%2BxTnnu7e36kPio6YHlz42G0pruph0%2Fc5b11QhTOM6F692Ar%2Frn%2BpcU8VSfKqzPkl28G7gJ13%2F7c6Hkq%2BZxdAPfD%2Fwg845ZWVm1hePUKhytx90%2B343DrtBEmPd%2Fn92tQdHPYjBITkJJcbPrD58AMVHKPKfzkq3VpnynQ%2FyWtPKWAzEzifFWmGaAvmszayHrNiZbsO4MSFfz8EUO1MFMIPtiQIwNSbenwFYsTOlCTa4%2B5Qp05AFmHgezWAEqUdQdARubkGJfQJwgYvLKPJ7F41t6PWnKJ2gYzL%2F5G%2BoZkzmH7%2BIIv%2FxjFbrnStG15UyhcN61kKtj6BWRijrPVQbHlSzB159BiX%2BIItPLqDIt5edNlDi4I04khlbioOFKJZ0IU5FutBL%2Bv5C5ssw8lkkYs6OLFJqBJWNoOUmqDuG2nmolYc681CXHnJx0KFJP%2FP9NGNZFPViznkUcZ70lkQioriX%2Baj5RMMmqnITXG%2BC2xso7c3vRJTKiPF4i2JNfbmfnIStf4VbbeGEB1cRDESLRhI0jqChBI0iaCqCZtDeFdqFrr0ntKtZMK3htEbt0FQrW%2FSuqVZkQbbKQ3JiYqP30vZxrMmDzlKYyjDr0TiM%2BmnCeMxEStOlIOzxUCRJCKdaKDcH6jxsqDF57ZXPUaoxeTbdBaN7cHoPXJ0ArQPQZpiGPujqMO752Ch2Az%2BMK2lpl5scwrQoq3lU170tfUhePjrn68cOIfmj0%2Fdf3T0evPkXuG1R2hafqt8IVvSd4WXTkO3LpnHkwXJZqVxt0Mmpr1S0ksfufySvN8aK82fd5vfv8QkwaXevSlddoIVQxYojP5xRQkh7zlguyc%2Fn3TXJLtVu9Uxti7q8cOn9c%2Bfz0krnlClGoGp%2F%2BR9wNSbzN385%2BsQv%2FH4byo5g6xZ5%2FYhMA8rsgZc34MoZe2cIrJ7tsNJDU7dDG7LZo1YEWs5mylq4%2F8xs1m%2B5O1ixc6DVLRR5i4FtMdAtqN6Eq58bVqV9dPrhN5P4FkzPDZm2c9tMW%2F3VkbWT9BhOHXSSIJY91ku5EExyEaRh1It8PxQiTvsy6KNyYynpF%2F8CAAD%2F%2FwEAAP%2F%2FiqvkJqEEAAA%3D HTTP/1.1
Host: rancorousnoncommittalsomewhat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=18326536; uid_id2=43efb641-34ea-47d7-8590-f0e230b3d4cb:3:1; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec627e2f8a423975bc4bd7a76128c2d552=[2229214,2229213]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 03:42:05 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e412015b83233b6d523c842f4f60bd3f
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.cloudimagesb.com/cti/5d/60/ed/5d60edea793259cd719bfa3d19bcae3e/1628587069.jpg
200 OK 28 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/5d/60/ed/5d60edea793259cd719bfa3d19bcae3e/1628587069.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 321x240, components 3\012- data
Hash f4fabf64be47ce667e0cfc150667b36c
234d722efa06cbedfdad9c1bb497a942997741dd
272b7875492a55c6f53a4e4704e715cc5b3cc4e5093758cbfedd95441bfe98d8
GET /cti/5d/60/ed/5d60edea793259cd719bfa3d19bcae3e/1628587069.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:42:05 GMT
content-type: image/jpeg
content-length: 27606
server: nginx/1.21.6
last-modified: Tue, 10 Aug 2021 09:17:59 GMT
etag: "61124447-6bd6"
expires: Thu, 30 Nov 2023 03:42:05 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?type=videoplayer_pause&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142928941
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=videoplayer_pause&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142928941
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash aa52f394f6ec7ca1a094a5b2198f1081
243346d389ee08bda8bb15419259f48af13cfe58
167e73d24b01da1a7c62182c8887dbf4c8d843c0bfde18e3e627ed87a3833f9e
GET /api/analytics?type=videoplayer_pause&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142928941 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207; _ga_06ZNKL8C2E=GS1.1.1701142926.1.0.1701142928.58.0.0; _ga=GA1.1.1503068942.1701142927; dom3ic8zudi28v8lr6fgphwffqoz0j6c=43efb641-34ea-47d7-8590-f0e230b3d4cb%3A3%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=displeaseddietstair.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:05 GMT
Flow-Level: 3
Logid: 8841053988789826598
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841053988789826598
Yme: ZIGW+Ss3QEsUdTcEUmr/tG1MvuUZThz3qQpNwyGK2Li8CANkaAdPpTNW3A==
Content-Length: 44
cdn.cloudimagesb.com/cti/29/eb/08/29eb08c32bad57ff8c8e14af3a16e9c1/1628586955.jpg
200 OK 23 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/29/eb/08/29eb08c32bad57ff8c8e14af3a16e9c1/1628586955.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash 4452445afb73fab8af9ff308eb667024
130401c47d822426e1cce9981c30d775cba1b576
923b0ac505decd181f473f1fa460f21590777993c3581723f127b032d8c45bdd
GET /cti/29/eb/08/29eb08c32bad57ff8c8e14af3a16e9c1/1628586955.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:42:05 GMT
content-type: image/jpeg
content-length: 22987
server: nginx/1.21.6
last-modified: Tue, 10 Aug 2021 09:16:05 GMT
etag: "611243d5-59cb"
expires: Thu, 30 Nov 2023 03:42:05 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142929114
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142929114
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 4fa874829fec088459c7421b4075c881
0b04e3b715400d82c368c06e66cb8d6a77c7a514
bf9d2bd0779ddbd30e6a2f542e3af3c1995565a3cd8c9d8c20c702381469ddf3
GET /api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142929114 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207; _ga_06ZNKL8C2E=GS1.1.1701142926.1.0.1701142929.57.0.0; _ga=GA1.1.1503068942.1701142927; dom3ic8zudi28v8lr6fgphwffqoz0j6c=43efb641-34ea-47d7-8590-f0e230b3d4cb%3A3%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=rancorousnoncommittalsomewhat.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:05 GMT
Flow-Level: 3
Logid: 8841054014962450374
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841054014962450374
Yme: ZIGW+Ss3QE0WaysESWziq29Xvv4cVAP2oh5GwCqBmOSzHAVmaDlEo6dTvZsY
Content-Length: 44
www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142929114
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142929114
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5fb2f5558a4e63d31a7e586e7d0089f0
0b35310936380cb893a2518ffe0014a00fcb8d44
ba6f25be26ad8fef9979cb1b20b7325ed784c8d3bc925437ff3bf53501bcfd40
GET /api/analytics?domId=adsterra&showType=1x2&country=NO&where=head&type=web_video_ad_adsterra_success_show_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142929114 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207; _ga_06ZNKL8C2E=GS1.1.1701142926.1.0.1701142929.57.0.0; _ga=GA1.1.1503068942.1701142927; dom3ic8zudi28v8lr6fgphwffqoz0j6c=43efb641-34ea-47d7-8590-f0e230b3d4cb%3A3%3A1; m5a4xojbcp2nx3gptmm633qal3gzmadn=rancorousnoncommittalsomewhat.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:05 GMT
Flow-Level: 3
Logid: 8841054017298339298
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841054017298339298
Yme: ZIGW+Ss3QEsVdTcEUmr/tG1MvuUZThz3qApNwCaDyb7qGgRmXj8sngjS3A==
Content-Length: 44
friendshipmale.com/sfp.js
200 OK 28 kB URL GET HTTP/3 friendshipmale.com/sfp.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 924e967bca1d599992556a8d139b1c5a
222b09dbf164ddc03d39100fd0524a22018d28b2
ac84c2f8288b59f8e04ba77287ce696052bfeee0d462a566d94dc305df646c95
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Nov 2023 03:42:05 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: b3804a36ec6c3a4f3ba0ef9848054192
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Tue, 28 Nov 2023 03:42:05 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D3FMwOtWcvXivTi%2F2fpdNXXKHQ1DIu8kqGi8Mn%2BZ9ujwyk2Ynqbqutj63YpZtPMMa1TSqjuxq2UJEIrqSX5S92xrT1FsAMJNbo8T4nsmrYxk%2BIvXeAjZ9yJzg0ne%2BC%2BdNOpuR5w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82cf9952f9d463b0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-06ZNKL8C2E&cid=1503068942.1701142927>m=45je3b81v875375078&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=39121670
200 OK 42 B URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-06ZNKL8C2E&cid=1503068942.1701142927>m=45je3b81v875375078&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=39121670
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint6E:E4:BC:4A:67:5E:46:6A:B3:E4:CA:61:A7:C0:97:AB:14:F0:34:32
ValidityMon, 23 Oct 2023 11:27:27 GMT - Mon, 15 Jan 2024 11:27:26 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-06ZNKL8C2E&cid=1503068942.1701142927>m=45je3b81v875375078&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=39121670 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 28 Nov 2023 03:42:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3b81v875375078&_p=1701142926410&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1503068942.1701142927&ul=en-us&sr=1280x1024&sid=1701142926&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&dt=Ilam_pen_pant_kayati_koothi_kanbikum%20vid.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=4&tfd=13338
204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3b81v875375078&_p=1701142926410&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1503068942.1701142927&ul=en-us&sr=1280x1024&sid=1701142926&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&dt=Ilam_pen_pant_kayati_koothi_kanbikum%20vid.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=4&tfd=13338
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3b81v875375078&_p=1701142926410&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1503068942.1701142927&ul=en-us&sr=1280x1024&sid=1701142926&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&dt=Ilam_pen_pant_kayati_koothi_kanbikum%20vid.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&_s=4&tfd=13338 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 999
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://www.1024tera.com
date: Tue, 28 Nov 2023 03:42:09 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
reluctantconfuse.com/sbar.json?key=f195e5fa577c23352666448243864c68&uuid=43efb641-34ea-47d7-8590-f0e230b3d4cb%3A3%3A1
5.0 kB URL reluctantconfuse.com/sbar.json?key=f195e5fa577c23352666448243864c68&uuid=43efb641-34ea-47d7-8590-f0e230b3d4cb%3A3%3A1
IP
File type JSON data\012- , ASCII text, with very long lines (6848), with no line terminators
Hash fcb7fc9f6419ae5c1c5d742c546e6d94
cf2b4503217f093a427d1eeba94446a5708a8ecb
491ebb5deb61261dfbbc6a72125b4e3042ec6818d3bcf04aaa0ac71e0b61cfef
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sbar.json?key=f195e5fa577c23352666448243864c68&uuid=43efb641-34ea-47d7-8590-f0e230b3d4cb%3A3%3A1 HTTP/1.1
Host: reluctantconfuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 03:42:10 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.1024tera.com
Access-Control-Allow-Origin: https://www.1024tera.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=20651427; expires=Wed, 29 Nov 2023 03:42:10 GMT; secure; SameSite=None
uid_id2=43efb641-34ea-47d7-8590-f0e230b3d4cb:3:1; expires=Tue, 05 Dec 2023 03:42:10 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 29 Nov 2023 03:42:10 GMT; secure; SameSite=None
uncs=1; expires=Wed, 29 Nov 2023 03:42:10 GMT; secure; SameSite=None
pdhtkv29=true; expires=Wed, 29 Nov 2023 03:42:10 GMT; secure; SameSite=None
uncs29=1; expires=Wed, 29 Nov 2023 03:42:10 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7c805eb35f179a6e733bfcd87d19ce1c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
reluctantconfuse.com/ren.gif?sid=H4sIAAAAAAAC%2F4RS32scVRS%2Bk9YHKSItBSlSmLIiCmZ3Zmdmf7RKSNMkXbtNYrJSig%2Flztw72evemTvcO7Oz2b4UC9IHH1IRFHyZnE0aqqG14JMgyMYXiVS6grKCAfFPEOpLQdkkEH%2BAnoc55%2FAN557vO9%2B7a8kuMiDBw4XLoss4xwUnb%2BgvXWEhEanS5xq6aeSNc%2FoVFpbsc3pn9JHts6bh5I2X9VnqtUShaJiGYRqmPsMk9UWnsIcCi7aqZr5q5O1i3nRs6Mi%2F9yrRQGENSHsXnQBGBk81v3kAzOtDGHx2gapWLKJXpoOE41hIaJPNN8NWKNIQgsPSlxr44ebB3yDUAKGPxkCEmwcMQLTXRwzAZQOk%2FWiCG24erAlue2N%2FU5cDDcElxyBt94HyPjDcB0%2FcBEYeIQCPwNw8hMGdOSFTvLKP4hE6QEcf%2FwYsHaCjP5%2BEMLh3nrOOviR4EjMRKuj4GbBOH9hyH6JkG%2BKuBizdBi9%2BBxh5iAqP6xAG6%2FOKC2Bk%2BIJtUd8t2ea4ZVM8bpdJebziVI1x36BFy3AtYnvunkSM9YH5feB0FbA6AonSIGEaJL4GSaRBQIY6dqq%2BYZR917esiu15nmV5nlMpEYdYdsU3IPFGHFYhjlbB46vgyRsQyRvQYrcfOSdAJl%2BBamagyBioeIC0N65Dm2SQUgSpQpBiBClDkMYI0na2QbgqquwO4SpxzYNcPMhW1hPx8hreEPEyDdFatIuOj%2FTTzp3uQYsOdd%2BsOtTxsVMue0XLcoqlUsm2K0XbqpRsr1QBxTJgagyw0qDLBujM8%2B9BxAbo6fIWuHgbFN8Gjx0HnJwGnPbKRQNws2dXDOiGW6ZRtGMqcd4TARCRQRQfhXhFW%2BO76NTeHV%2F97glQb2fi441fl35%2F%2BBN4MoNIZvA2%2BxrBMr%2FVWxQpWl8UqUIP5qOYBayLRzdeinFM0SeX6EoqJKldUKt3J70RMCq3GlTFdRwSFi4r9Ol5RgiVM0J6FH1ZU1eou5Co5vlEhklUX5iaqQWRpEoxEfYBj%2Fw61gSPDdCxU8%2Fs%2BVffeQJMboNMhmYzjqOzhUIn4ONtO59SN6BExu6IYMHjzGtNsNcuJbz8en3qam0yvWZAkOxMfG%2FtBTDRBy%2B6eT%2BXq08uzk5fq12enJ3O5YbOf42Nm0nghpjxf46%2Bm8s1ao36aMCLDRYpvSH0y7hF9asikfpFzKQ%2BK0Wq11mL6lMSd1fu53IXppemFmsLjdr8XC73%2BQwLiT7DOG0KFSv9IpX0DKhoBx0EKIFA8sPejTRI%2F0eHiHXov5btyaK7M%2FHch99W%2F%2FjhWeBsgC5%2B8RZwujPxQfeX2XsnrwN2M1D0L08d1mvqFixLDXB8E8Igg7bMoM0zwHwVVHKkF0fyUGSXaz2XS23d5ZLf3reYYkOdOr7hU6NIXb%2Fq%2BmVskKpvV11cNWnZdbAJsRpQit%2F%2FEwAA%2F%2F8BAAD%2F%2F4tLLLmdBQAA
7 B URL GET reluctantconfuse.com/ren.gif?sid=H4sIAAAAAAAC%2F4RS32scVRS%2Bk9YHKSItBSlSmLIiCmZ3Zmdmf7RKSNMkXbtNYrJSig%2Flztw72evemTvcO7Oz2b4UC9IHH1IRFHyZnE0aqqG14JMgyMYXiVS6grKCAfFPEOpLQdkkEH%2BAnoc55%2FAN557vO9%2B7a8kuMiDBw4XLoss4xwUnb%2BgvXWEhEanS5xq6aeSNc%2FoVFpbsc3pn9JHts6bh5I2X9VnqtUShaJiGYRqmPsMk9UWnsIcCi7aqZr5q5O1i3nRs6Mi%2F9yrRQGENSHsXnQBGBk81v3kAzOtDGHx2gapWLKJXpoOE41hIaJPNN8NWKNIQgsPSlxr44ebB3yDUAKGPxkCEmwcMQLTXRwzAZQOk%2FWiCG24erAlue2N%2FU5cDDcElxyBt94HyPjDcB0%2FcBEYeIQCPwNw8hMGdOSFTvLKP4hE6QEcf%2FwYsHaCjP5%2BEMLh3nrOOviR4EjMRKuj4GbBOH9hyH6JkG%2BKuBizdBi9%2BBxh5iAqP6xAG6%2FOKC2Bk%2BIJtUd8t2ea4ZVM8bpdJebziVI1x36BFy3AtYnvunkSM9YH5feB0FbA6AonSIGEaJL4GSaRBQIY6dqq%2BYZR917esiu15nmV5nlMpEYdYdsU3IPFGHFYhjlbB46vgyRsQyRvQYrcfOSdAJl%2BBamagyBioeIC0N65Dm2SQUgSpQpBiBClDkMYI0na2QbgqquwO4SpxzYNcPMhW1hPx8hreEPEyDdFatIuOj%2FTTzp3uQYsOdd%2BsOtTxsVMue0XLcoqlUsm2K0XbqpRsr1QBxTJgagyw0qDLBujM8%2B9BxAbo6fIWuHgbFN8Gjx0HnJwGnPbKRQNws2dXDOiGW6ZRtGMqcd4TARCRQRQfhXhFW%2BO76NTeHV%2F97glQb2fi441fl35%2F%2BBN4MoNIZvA2%2BxrBMr%2FVWxQpWl8UqUIP5qOYBayLRzdeinFM0SeX6EoqJKldUKt3J70RMCq3GlTFdRwSFi4r9Ol5RgiVM0J6FH1ZU1eou5Co5vlEhklUX5iaqQWRpEoxEfYBj%2Fw61gSPDdCxU8%2Fs%2BVffeQJMboNMhmYzjqOzhUIn4ONtO59SN6BExu6IYMHjzGtNsNcuJbz8en3qam0yvWZAkOxMfG%2FtBTDRBy%2B6eT%2BXq08uzk5fq12enJ3O5YbOf42Nm0nghpjxf46%2Bm8s1ao36aMCLDRYpvSH0y7hF9asikfpFzKQ%2BK0Wq11mL6lMSd1fu53IXppemFmsLjdr8XC73%2BQwLiT7DOG0KFSv9IpX0DKhoBx0EKIFA8sPejTRI%2F0eHiHXov5btyaK7M%2FHch99W%2F%2FjhWeBsgC5%2B8RZwujPxQfeX2XsnrwN2M1D0L08d1mvqFixLDXB8E8Igg7bMoM0zwHwVVHKkF0fyUGSXaz2XS23d5ZLf3reYYkOdOr7hU6NIXb%2Fq%2BmVskKpvV11cNWnZdbAJsRpQit%2F%2FEwAA%2F%2F8BAAD%2F%2F4tLLLmdBQAA
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerLet's Encrypt
Subjectreluctantconfuse.com
FingerprintD9:BA:D7:B0:00:BD:A7:71:8D:C4:B7:11:24:3D:A8:D1:F3:5D:0A:7B
ValiditySat, 25 Nov 2023 07:52:23 GMT - Fri, 23 Feb 2024 07:52:22 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F4RS32scVRS%2Bk9YHKSItBSlSmLIiCmZ3Zmdmf7RKSNMkXbtNYrJSig%2Flztw72evemTvcO7Oz2b4UC9IHH1IRFHyZnE0aqqG14JMgyMYXiVS6grKCAfFPEOpLQdkkEH%2BAnoc55%2FAN557vO9%2B7a8kuMiDBw4XLoss4xwUnb%2BgvXWEhEanS5xq6aeSNc%2FoVFpbsc3pn9JHts6bh5I2X9VnqtUShaJiGYRqmPsMk9UWnsIcCi7aqZr5q5O1i3nRs6Mi%2F9yrRQGENSHsXnQBGBk81v3kAzOtDGHx2gapWLKJXpoOE41hIaJPNN8NWKNIQgsPSlxr44ebB3yDUAKGPxkCEmwcMQLTXRwzAZQOk%2FWiCG24erAlue2N%2FU5cDDcElxyBt94HyPjDcB0%2FcBEYeIQCPwNw8hMGdOSFTvLKP4hE6QEcf%2FwYsHaCjP5%2BEMLh3nrOOviR4EjMRKuj4GbBOH9hyH6JkG%2BKuBizdBi9%2BBxh5iAqP6xAG6%2FOKC2Bk%2BIJtUd8t2ea4ZVM8bpdJebziVI1x36BFy3AtYnvunkSM9YH5feB0FbA6AonSIGEaJL4GSaRBQIY6dqq%2BYZR917esiu15nmV5nlMpEYdYdsU3IPFGHFYhjlbB46vgyRsQyRvQYrcfOSdAJl%2BBamagyBioeIC0N65Dm2SQUgSpQpBiBClDkMYI0na2QbgqquwO4SpxzYNcPMhW1hPx8hreEPEyDdFatIuOj%2FTTzp3uQYsOdd%2BsOtTxsVMue0XLcoqlUsm2K0XbqpRsr1QBxTJgagyw0qDLBujM8%2B9BxAbo6fIWuHgbFN8Gjx0HnJwGnPbKRQNws2dXDOiGW6ZRtGMqcd4TARCRQRQfhXhFW%2BO76NTeHV%2F97glQb2fi441fl35%2F%2BBN4MoNIZvA2%2BxrBMr%2FVWxQpWl8UqUIP5qOYBayLRzdeinFM0SeX6EoqJKldUKt3J70RMCq3GlTFdRwSFi4r9Ol5RgiVM0J6FH1ZU1eou5Co5vlEhklUX5iaqQWRpEoxEfYBj%2Fw61gSPDdCxU8%2Fs%2BVffeQJMboNMhmYzjqOzhUIn4ONtO59SN6BExu6IYMHjzGtNsNcuJbz8en3qam0yvWZAkOxMfG%2FtBTDRBy%2B6eT%2BXq08uzk5fq12enJ3O5YbOf42Nm0nghpjxf46%2Bm8s1ao36aMCLDRYpvSH0y7hF9asikfpFzKQ%2BK0Wq11mL6lMSd1fu53IXppemFmsLjdr8XC73%2BQwLiT7DOG0KFSv9IpX0DKhoBx0EKIFA8sPejTRI%2F0eHiHXov5btyaK7M%2FHch99W%2F%2FjhWeBsgC5%2B8RZwujPxQfeX2XsnrwN2M1D0L08d1mvqFixLDXB8E8Igg7bMoM0zwHwVVHKkF0fyUGSXaz2XS23d5ZLf3reYYkOdOr7hU6NIXb%2Fq%2BmVskKpvV11cNWnZdbAJsRpQit%2F%2FEwAA%2F%2F8BAAD%2F%2F4tLLLmdBQAA HTTP/1.1
Host: reluctantconfuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=20651427; uid_id2=43efb641-34ea-47d7-8590-f0e230b3d4cb:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 03:42:11 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f12cc67f6cf4c51de31d9b9869c6ffc4
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.creative-bars1.com/sb/notifications/rtb/mac/2/img/close.png
6.0 kB URL cdn.creative-bars1.com/sb/notifications/rtb/mac/2/img/close.png
IP
File type PNG image data, 522 x 391, 8-bit/color RGBA, non-interlaced\012- data
Hash c489ce2c491a22ee37a55e26a92dfd73
2fa588ab09e94dd902e5bd24b48f98ad1949c9d6
1eed147c7d5de6291c25fbc5274830c12d5549262fb144271576d4e15966e5bd
GET /sb/notifications/rtb/mac/2/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:42:11 GMT
content-type: image/png
content-length: 5982
last-modified: Mon, 17 May 2021 12:14:41 GMT
etag: "60a25e31-175e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1379441
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Oj1LFpi4DPKTZiMLvvHnS9cEdwpFU%2Fueaw1Q9s46eRG8HhWGY81i7c8dSlsiLYsS0lorLfAA%2BAdVE3xUa2S91ekegtZwXF04jJJfBdOp7%2ByLFQfT8GYCcubD%2FqlB15QbTFS7k4BTx3ua"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82cf99791b3b71bc-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/rtb/mac/2/js/script.js
649 B URL cdn.creative-bars1.com/sb/notifications/rtb/mac/2/js/script.js
IP
Hash 6325b79d4d99fef731815edb75b001fb
39e12236b659ac6b168acd6d36d6f03d381abf91
d3f390f0e5ee797dbba93ea6c3b74c2a4d0ccfc52687a2b37db6929993501eb4
GET /sb/notifications/rtb/mac/2/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:42:11 GMT
content-type: application/javascript
last-modified: Mon, 17 May 2021 12:14:43 GMT
etag: W/"60a25e33-175"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 2412295
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bYCbZkt4YjeEVf975BqPzgdzdMUjHQp01svXfpcVVJA1j2tNDbQekL74MCP31pPuBNN9DHRUjBX3xUgG2F0UC5%2FoM2i6JONyCwHYB45gOZsmy0G4MPKF5g0YcpWFkeMf9hWEfyuijs1S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82cf9978be0f53a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.barscreative1.com/sb/notifications/rtb/mac/2/index.html
1.6 kB URL cdn.barscreative1.com/sb/notifications/rtb/mac/2/index.html
IP
ASN #39572 DataWeb Global Group B.V.
File type gzip compressed data, from Unix\012- data
Hash d6093ca2513c8a5305d56c00bac32f6b
98006b5d7aa2ab6fee22aa7a5432a3a739aa2de9
59557c65f7fcd1a64fdf94e898865c5a340be0348ddb3a816f674f2eb055a049
GET /sb/notifications/rtb/mac/2/index.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:42:11 GMT
content-type: text/html; charset=utf-8
server: nginx/1.21.6
last-modified: Sat, 07 May 2022 03:21:27 GMT
etag: W/"6275e5b7-4e7"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Tue, 28 Nov 2023 04:42:11 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
16 kB URL fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 04:53:27 GMT
expires: Fri, 22 Nov 2024 04:53:27 GMT
cache-control: public, max-age=31536000
age: 427724
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-5e25226a.54e0bcd6.js
200 OK 23 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-5e25226a.54e0bcd6.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 32890977196764620593eb8042abfb8e
bb732e0efbe9595621c2ebd570cee4a39539a33f
dcea1c5c7798d735d936ff4ae7fb0bae2f324013488f957d50f727335847ec2b
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-5e25226a.54e0bcd6.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:42:00 GMT
content-type: application/javascript
server: openresty
content-md5: xC9jHcTnsHHf7cEqVH+buQ==
etag: W/"c42f631dc4e7b071dfedc12a547f9bb9"
expires: Thu, 30 Nov 2023 08:59:34 GMT
last-modified: Mon, 27 Nov 2023 03:06:50 GMT
x-bce-content-crc32: 92452786
x-bce-debug-id: K2X9lIphgkqRGFiI7g2dxoflLasFhxFan7a9znE54WJIwSZLJZXggPZuat+M+km5R80v2P3AL+YMFSIyxxF/4A==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 6c1014ef-9775-4a4e-9e48-35c5e3c172b1
x-bce-storage-class: STANDARD
x-ccdn-expires: 2548290
via: EU-GER-frankfurt-EDGE5-CACHE2[2],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE8[3],EU-GER-frankfurt-GLOBAL1-CACHE6[0,TCP_HIT,2]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 66618
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
reluctantconfuse.com/pixel/sbs?c=1
0 B URL reluctantconfuse.com/pixel/sbs?c=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: reluctantconfuse.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Cookie: u_pl=20651427; uid_id2=43efb641-34ea-47d7-8590-f0e230b3d4cb:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 28 Nov 2023 03:42:12 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/share.fe18f530.js
200 OK 1.1 MB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/share.fe18f530.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Size 1.1 MB (1053282 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/share.fe18f530.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:41:59 GMT
content-type: application/javascript
server: openresty
content-md5: rdWS6ofs8OpmcmYSiGnOhg==
etag: W/"add592ea87ecf0ea667266128869ce86"
expires: Thu, 30 Nov 2023 08:59:35 GMT
last-modified: Mon, 27 Nov 2023 03:07:00 GMT
x-bce-content-crc32: 2351142310
x-bce-debug-id: Euh2TOBZCzLFdtEsMdWSrmbSkF9sbDOwY8VdofX9HAZ3X8rsCZvQrVlOmDj8VEi/NLcP/QhSeYa0dgerGwdj1w==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: dfde89f1-160f-472f-a72c-786ef119905c
x-bce-storage-class: STANDARD
x-ccdn-expires: 2525841
via: EU-GER-frankfurt-EDGE5-CACHE2[15],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE7[19],EU-GER-frankfurt-GLOBAL1-CACHE4[0,TCP_HIT,16]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 66612
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-94864b88.e650f8c9.js
200 OK 42 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-94864b88.e650f8c9.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (42360), with no line terminators
Hash b01f195e94b0848122ac3314f5395721
b87bc53a44a6234f7c089f3119066f9647d21903
09ae6d6c48f2c2b47426e8c362471444673201e2583c5525b442133a8b5c80cb
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-94864b88.e650f8c9.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:41:59 GMT
content-type: application/javascript
server: openresty
content-md5: sB8ZXpSwhIEirDMU9TlXIQ==
etag: W/"b01f195e94b0848122ac3314f5395721"
expires: Mon, 22 May 2023 08:06:09 GMT
last-modified: Fri, 19 May 2023 06:11:01 GMT
x-bce-content-crc32: 1763380652
x-bce-debug-id: 6/t1aZ0T4wIW5Mpdrs6rwONcVe50LnzXyMl/KxoZOSjgTHz/QchFlwkYo5YFdGxYjuFFLRMdxpL02NaFeSWQqg==
x-bce-request-id: 3b4dea47-19f8-48e2-a389-1652fd45a67a
x-bce-storage-class: STANDARD
via: EU-GER-frankfurt-EDGE5-CACHE2[13],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[1059],EU-GER-frankfurt-GLOBAL1-CACHE12[774,TCP_MISS,1057]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 16659349
x-ccdn-expires: 1741617
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/general-conf/ymg/2068/abclite-2068-s.js?v=0.8560737055830491
200 OK 100 kB URL GET HTTP/2 s2.teraboxcdn.com/general-conf/ymg/2068/abclite-2068-s.js?v=0.8560737055830491
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 100 kB (100051 bytes)
Hash 46ea1ae23faf5ae71c0045843eb433e9
16888edbe3dd7626386b04d43e37a89427f0aea8
dd8c44b26db60a31584a292ad74cd2325799a19c1c8e1d567d32c3dada94fb55
GET /general-conf/ymg/2068/abclite-2068-s.js?v=0.8560737055830491 HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:41:59 GMT
content-type: application/javascript
server: openresty
content-md5: Ruoa4j+vWuccAEWEPrQz6Q==
etag: W/"46ea1ae23faf5ae71c0045843eb433e9"
expires: Fri, 07 Apr 2023 22:40:39 GMT
last-modified: Tue, 14 Mar 2023 06:06:12 GMT
x-bce-content-crc32: 1662135932
x-bce-debug-id: Jz1KOcGPkhU4n3Zck8uoB7CbklPytTa0SgCVaS0EGpxL61wnts4jWik6aFmIBGaCydmzElR8tezYRsKZD0KeZg==
x-bce-request-id: 7297b527-d932-4266-b90c-9962c07f4e61
x-bce-storage-class: STANDARD
x-ccdn-expires: 2592000
via: EU-GER-frankfurt-EDGE5-CACHE2[8],EU-GER-frankfurt-EDGE5-CACHE4[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[2],EU-GER-frankfurt-GLOBAL1-CACHE4[0,TCP_HIT,1]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 19008769
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-3c39bfc4.baa0ab5e.js
200 OK 547 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-3c39bfc4.baa0ab5e.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Size 547 kB (547317 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-3c39bfc4.baa0ab5e.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:42:03 GMT
content-type: application/javascript
server: openresty
content-md5: J2TcvyWm6gv2Eaqsv2udoA==
etag: W/"2764dcbf25a6ea0bf611aaacbf6b9da0"
expires: Sat, 04 Nov 2023 08:02:39 GMT
last-modified: Wed, 01 Nov 2023 07:11:44 GMT
x-bce-content-crc32: 568789530
x-bce-debug-id: xbaDKK50jlBZJ18L45fu3bSp+fDzE/r7QhsyaypWutuc/ChXmeJlm9RANAVDEiI6LAFEIbdQCthtn8HiVncnMQ==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 45ec87e7-f8da-4b01-bf46-6d2b8c70cc37
x-bce-storage-class: STANDARD
x-ccdn-expires: 532145
via: EU-GER-frankfurt-EDGE5-CACHE2[2],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE6[31],EU-GER-frankfurt-GLOBAL1-CACHE14[0,TCP_HIT,29]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 2316785
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?time=2157&type=web_share_page_show_FP_SECOND&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142924653
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?time=2157&type=web_share_page_show_FP_SECOND&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142924653
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 8ee650261ad15d9d8e325257ff639755
627a98ec8a9ab2374f1a9e24330761cc63bdc8d7
71bccb664c054d86cfe6ad88efaa1c282b1e367121b2825a5ae44fc90f37376f
GET /api/analytics?time=2157&type=web_share_page_show_FP_SECOND&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142924653 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/link?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:01 GMT
Flow-Level: 3
Logid: 8841052821131566002
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841052821131566002
Yme: ZIGW+Ss3QE0WaCsHTGniq29Xvv4cVAP2oh5NwyGJmu21SloyOSdGo2vW75gY
Content-Length: 44
region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3b81v875375078&_p=1701142926410&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1503068942.1701142927&ul=en-us&sr=1280x1024&_s=1&sid=1701142926&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&dt=Ilam_pen_pant_kayati_koothi_kanbikum%20vid.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.origin=firebase&tfd=7879
204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3b81v875375078&_p=1701142926410&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1503068942.1701142927&ul=en-us&sr=1280x1024&_s=1&sid=1701142926&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&dt=Ilam_pen_pant_kayati_koothi_kanbikum%20vid.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.origin=firebase&tfd=7879
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-06ZNKL8C2E>m=45je3b81v875375078&_p=1701142926410&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1503068942.1701142927&ul=en-us&sr=1280x1024&_s=1&sid=1701142926&sct=1&seg=0&dl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Flink%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&dt=Ilam_pen_pant_kayati_koothi_kanbikum%20vid.mp4%20-%20Share%20Files%20Online%20%26%20Send%20Larges%20Files%20with%20TeraBox&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.origin=firebase&tfd=7879 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.1024tera.com
date: Tue, 28 Nov 2023 03:42:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/ud-i18n-en.e44e7bde.js
200 OK 1.9 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/ud-i18n-en.e44e7bde.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (2106), with no line terminators
Hash 06240b1a3219761cfc4ffe585ac34e48
128bc2aef718748c147232d35cce5fe70443d653
ea008c5e63b36af9dd66e6be5f8d8f3e1c86d005e981cfced09cc1964517907d
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/ud-i18n-en.e44e7bde.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:41:59 GMT
content-type: application/javascript
server: openresty
content-md5: DyUZIaD1cN4PN459aJhnNg==
etag: W/"0f251921a0f570de0f378e7d68986736"
expires: Fri, 12 May 2023 08:43:54 GMT
last-modified: Mon, 08 May 2023 12:32:48 GMT
x-bce-content-crc32: 2133490345
x-bce-debug-id: NSexvRTV0lZWQYtbdWLSgX+v6Hr/56aCZJ1ADylLSrA41ImIsmNUOALc2+imcrFlB95XXzUoxQ6mngOJKiIOKA==
x-bce-request-id: ebaa8284-e667-42db-a2f8-0aab2662e8dc
x-bce-storage-class: STANDARD
x-ccdn-expires: 712327
via: EU-GER-frankfurt-EDGE5-CACHE2[5],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE5[36],EU-GER-frankfurt-GLOBAL1-CACHE2[0,TCP_HIT,32]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 17520894
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
static.line-scdn.net/liff/edge/2/sdk.js
200 OK 109 kB URL GET HTTP/2 static.line-scdn.net/liff/edge/2/sdk.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerAmazon
Subject*.line.me
Fingerprint39:A2:77:6F:2B:9D:03:28:CA:16:D8:21:EB:C7:7C:67:F8:C4:FB:AA
ValidityThu, 13 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
Size 109 kB (109202 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /liff/edge/2/sdk.js HTTP/1.1
Host: static.line-scdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
server: VOS
last-modified: Mon, 02 Oct 2023 01:12:33 GMT
x-amz-version-id: vfFBS0jnaCra6zWupTgNTjV5SswxqQe
x-amz-expiration: expiry-date="Sat, 02 Dec 2023 00:00:00 GMT", rule-id="bucket_lifecycle"
x-rgw-object-type: Normal
strict-transport-security: max-age=15768000
content-encoding: br
date: Tue, 28 Nov 2023 01:12:09 GMT
cache-control: max-age=86400
etag: W/"b141d3521b6ef34b704efec9753109fa"
vary: Accept-Encoding,Origin
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: KzCqzfe4-vRcJS_ahnZYWuBtRzrpY5VHnrwLIhVSnY7nqJoT6Tae4A==
age: 8998
X-Firefox-Spdy: h2
www.1024tera.com/api/shorturlinfo?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530001&shorturl=1S1LqlL6pC0U9XqR8bGfWEQ&root=1&scene=purchased_list
200 OK 2.3 kB URL GET HTTP/1.1 www.1024tera.com/api/shorturlinfo?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530001&shorturl=1S1LqlL6pC0U9XqR8bGfWEQ&root=1&scene=purchased_list
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (2501), with no line terminators
Hash 9b4d2075eba2258007e7dcdc97a6529d
8f930ccec84288192e160af81a5de49fc4e7679a
836569d52acd6215dfca2682bda28d65e3b8c72f7a495ee0845c58940267ff18
GET /api/shorturlinfo?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530001&shorturl=1S1LqlL6pC0U9XqR8bGfWEQ&root=1&scene=purchased_list HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:00 GMT
Flow-Level: 3
Logid: 8841052579554217187
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841052579554217187
Yme: ZIGW+Ss3QEsQdTYHUmr/tG1MvuUZSxz3qQpNwiCChuyw
Transfer-Encoding: chunked
www.1024tera.com/api/analytics?type=terabox_sharing_init_js_error_p2&sessionId=224070&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&msg=%7B%7D&stack=%5B%7B%22columnNumber%22%3A18998%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22webGlInfo%22%2C%22source%22%3A%22webGlInfo%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A18998%22%7D%2C%7B%22columnNumber%22%3A21970%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22source%22%3A%22%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A21970%22%7D%2C%7B%22columnNumber%22%3A20619%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22promise%20callback*%22%2C%22source%22%3A%22promise%20callback*%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A20619%22%7D%5D
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=terabox_sharing_init_js_error_p2&sessionId=224070&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&msg=%7B%7D&stack=%5B%7B%22columnNumber%22%3A18998%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22webGlInfo%22%2C%22source%22%3A%22webGlInfo%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A18998%22%7D%2C%7B%22columnNumber%22%3A21970%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22source%22%3A%22%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A21970%22%7D%2C%7B%22columnNumber%22%3A20619%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22promise%20callback*%22%2C%22source%22%3A%22promise%20callback*%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A20619%22%7D%5D
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 950eb149b3d55f3e67435a4fb6ccc1b4
1ede5c4ef66883392a81a2b9edce74120ca8b5b3
32c56e6f6b64d26f810b1d84f6b71d239b4cf1b6d96790a646c1e784907d8b4e
GET /api/analytics?type=terabox_sharing_init_js_error_p2&sessionId=224070&productId=100810&clienttype=999&navigator=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&title=unhandledrejection%3A%7B%7D&from=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&msg=%7B%7D&stack=%5B%7B%22columnNumber%22%3A18998%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22webGlInfo%22%2C%22source%22%3A%22webGlInfo%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A18998%22%7D%2C%7B%22columnNumber%22%3A21970%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22source%22%3A%22%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A21970%22%7D%2C%7B%22columnNumber%22%3A20619%2C%22lineNumber%22%3A10%2C%22fileName%22%3A%22https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%22%2C%22functionName%22%3A%22promise%20callback*%22%2C%22source%22%3A%22promise%20callback*%40https%3A%2F%2Fwww.1024tera.com%2Fndbs%2Fnd_bundle_430546.js%3A10%3A20619%22%7D%5D HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:00 GMT
Flow-Level: 3
Logid: 8841052722940769763
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841052722940769763
Yme: ZIGW+Ss3QEsRdTQGUmr/tG1MvuUYQhz0owpNwyGAaYJjGhU=
Content-Length: 44
www.1024tera.com/api/analytics?domain=www.1024tera.com&type=web_domain_heart_beat&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142923714
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?domain=www.1024tera.com&type=web_domain_heart_beat&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142923714
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash d9e890bfe534e4a8ac2daa7c24c44af7
efd5684ba460bf8929417e7924722444fe17737c
2ad382830166662aab772a72f0c425b7e0a6c9d7d093ae32159869f5b625526a
GET /api/analytics?domain=www.1024tera.com&type=web_domain_heart_beat&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142923714 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:01 GMT
Flow-Level: 3
Logid: 8841052808555995589
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841052808555995589
Yme: ZIGW+Ss3QEsWdTQGUmr/tG1MvuUYQhz0rQpNwyGEtA==
Content-Length: 44
s2.teraboxcdn.com/general-conf/fk/dfxaf3-598bbed9.js
200 OK 98 kB URL GET HTTP/2 s2.teraboxcdn.com/general-conf/fk/dfxaf3-598bbed9.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /general-conf/fk/dfxaf3-598bbed9.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:41:59 GMT
content-type: text/javascript
server: openresty
content-md5: +fZxgdCHtOLq9IVUxQHgZQ==
etag: W/"f9f67181d087b4e2eaf48554c501e065"
expires: Fri, 03 Nov 2023 12:27:55 GMT
last-modified: Tue, 31 Oct 2023 12:25:48 GMT
x-bce-content-crc32: 3748294646
x-bce-debug-id: aGEi7xHbLdU53XfCnCB+gn9IMUFfdLw+Ug2cTW1Uu0gn8LTbfsIrGzew5yl6vbcMd2PUBbSod+OrM3Z56BBUNg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 8d78a03a-02bd-49e4-ba41-e617432a8b15
x-bce-storage-class: STANDARD
via: EU-GER-frankfurt-EDGE5-CACHE2[2],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[2],EU-GER-frankfurt-GLOBAL1-CACHE2[0,TCP_HIT,1]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 2387643
x-ccdn-expires: 2041684
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
sofire.bdstatic.com/js/fsec-hd.js
200 OK 295 kB URL GET HTTP/2 sofire.bdstatic.com/js/fsec-hd.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerGlobalSign nv-sa
Subjectbaidu.com
Fingerprint97:42:D5:98:27:D6:22:88:CF:59:C3:FF:75:86:8D:D5:D3:12:A0:AF
ValidityThu, 06 Jul 2023 01:51:06 GMT - Tue, 06 Aug 2024 01:51:05 GMT
Size 295 kB (295197 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/fsec-hd.js HTTP/1.1
Host: sofire.bdstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: JSP3/2.0.14
date: Tue, 28 Nov 2023 03:41:59 GMT
content-type: text/javascript
expires: Thu, 30 Nov 2023 03:12:08 GMT
last-modified: Fri, 30 Jun 2023 07:31:01 GMT
etag: "834113d1867d8ec45fc41e3c692fdead"
content-encoding: br
age: 77342
accept-ranges: bytes
content-md5: g0ET0YZ9jsRfxB48aS/erQ==
x-bce-content-crc32: 1744549445
x-bce-debug-id: B0YP6snf7gfy3TBmSqWPYDjno6/fL/WBzhgJjJOVy0sGzu98cHsnMH9Nsd8MwMeQHchkAUB4P5cT+FDNI0Wiog==
x-bce-request-id: 0a8cafd2-51d6-4787-ab1d-4a9da11fdac2
x-bce-storage-class: STANDARD
ohc-global-saved-time: Mon, 27 Nov 2023 03:12:08 GMT
ohc-cache-hit: wz2ct51 [2], nb2ctcache78 [2]
ohc-response-time: 1 0 0 0 0 0
X-Firefox-Spdy: h2
www.1024tera.com/api/ad/getconfig?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530003
200 OK 70 B URL GET HTTP/1.1 www.1024tera.com/api/ad/getconfig?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530003
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash e97d1f05301aa57564b67ab9cd9757a0
a403c3b50b96f12d29643cf8a711d0a63614d5bb
e61d79cd20fa1b27a8b8152853566a24d23d372701571c80315906acc445b2ec
GET /api/ad/getconfig?app_id=250528&web=1&channel=dubox&clienttype=0&jsToken=81886A6ACAE80E60E01F1FB7F3EAC249CBFDF68FEE469E8A6BD743A7791D0B820F76B6636B1FF05AD0E5C817C586EBF663E554758BE26B558D326260AE6DB65F939211BEE893621986515A17F54245AAB17DE32387D860162E6CEC14F190FEBD&dp-logid=22407000752229530003 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: application/json; charset=UTF-8
Date: Tue, 28 Nov 2023 03:42:00 GMT
Flow-Level: 3
Http-X-Isis-Logid: 8841052802906083923
Logid: 8841052802906083923
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
Vary: Accept-Encoding
Yld: 8841052802906083923
Yme: ZIGW+Ss3QE0WbysESWziq29Xvv4cVAP2ox5OxymJmu2zTg==
Content-Length: 85
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~copyright-feedback~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recycleb~fcf1883d.54946d2b.js
200 OK 19 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~copyright-feedback~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recycleb~fcf1883d.54946d2b.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/cashier~copyright-feedback~failPay~goldCenter~landing~login~membership~oneAnniversary~other~recycleb~fcf1883d.54946d2b.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:41:59 GMT
content-type: application/javascript
server: openresty
content-md5: TzIMBidie558Yw5wV87q8A==
etag: W/"4f320c0627627b9e7c630e7057ceeaf0"
expires: Thu, 30 Nov 2023 08:59:34 GMT
last-modified: Mon, 27 Nov 2023 03:06:49 GMT
x-bce-content-crc32: 4270220429
x-bce-debug-id: 7lgkaI9ORFpOxiD/EiikNYltJ4lsw3+O/nP4YRwK6fxx+oGFjUA37sB/QymDLBpulvJvieguQXNn6B1ZvQ3aKA==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: 5c2e7fc9-a757-400b-ae5b-d7321717e578
x-bce-storage-class: STANDARD
x-ccdn-expires: 2548290
via: EU-GER-frankfurt-EDGE5-CACHE2[9],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE5[18],EU-GER-frankfurt-GLOBAL1-CACHE7[0,TCP_HIT,16]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 66618
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-2d225855.7faaefb6.js
200 OK 37 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-2d225855.7faaefb6.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (36937), with no line terminators
Hash 8b0f7f0b1d3875e84b572a4b8da14d5a
78079f8d4d5512d24244b0e2a3ba6a2880af5bc1
e635ce270e45d33ae75ee0b14f4598cfcd5c20c93abfd0bf562e952b95a35198
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-2d225855.7faaefb6.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:42:00 GMT
content-type: application/javascript
server: openresty
content-md5: iw9/Cx04dehLVypLjaFNWg==
etag: W/"8b0f7f0b1d3875e84b572a4b8da14d5a"
expires: Fri, 12 May 2023 08:44:00 GMT
last-modified: Mon, 08 May 2023 12:32:41 GMT
x-bce-content-crc32: 2125762108
x-bce-debug-id: iB6onZAdB5cwEu/eon/SnJwxjW+yEqUyso3lZkAtI8tqGqTqF5hKti5HQUqq4Il08RRUnC4QmZj/Wzs2YTkdMg==
x-bce-request-id: 6c4f78e6-e6e6-495c-8abe-dec67424c79d
x-bce-storage-class: STANDARD
x-ccdn-expires: 880105
via: EU-GER-frankfurt-EDGE5-CACHE2[1],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE3[22],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,20]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 17520859
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/rtb/mac/2/css/magic.css
200 OK 45 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/rtb/mac/2/css/magic.css
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
Hash 029740c783c67f45e29fac4d40eea355
f40e2ec9b7c753e662a8de0fb163f7dfb2aedcb1
0ddb584ebcf704e97ce3c4b9f6114512cbefb9bb09d3de91143ee70920328ddd
GET /sb/notifications/rtb/mac/2/css/magic.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.1024tera.com
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:42:11 GMT
content-type: text/css
last-modified: Mon, 17 May 2021 12:30:23 GMT
etag: W/"60a261df-b0c2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1727410
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lScFNvef3ZzpZeTz3XBmbaI3Y1wa%2B7ozVBBdjtpP8JWy1HBXIfhH9aBX7Ju5s1%2BdOxRe8ubMyj0Y3EOQv5SkloV4melwSzALHlmUYb4BU26dGchXNP4qAu9KJ%2FiKFBxiS2MbVgJ2ZYly"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82cf9978ae0453a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-fdedac32.68a159c0.js
200 OK 66 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-fdedac32.68a159c0.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (65473), with no line terminators
Hash 7ef31ee9994bb8ea5f0546db9d84f5a2
96677ba8663e1a15b90a28b317a621c44288d4b4
a127c7a05c4834b7ccccedbb750031e366b1494bbb719a2f082c92eac19a9d50
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-fdedac32.68a159c0.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:42:03 GMT
content-type: application/javascript
server: openresty
content-md5: fvMe6ZlLuOpfBUbbnYT1og==
etag: W/"7ef31ee9994bb8ea5f0546db9d84f5a2"
expires: Thu, 17 Aug 2023 11:01:40 GMT
last-modified: Mon, 14 Aug 2023 05:25:49 GMT
x-bce-content-crc32: 3183863461
x-bce-debug-id: AQBq72xN1KX+ruW3aqp1xkmekXXaYh0i39b8sd2sQtmjC5dG590ZtpaEFSUwE16V73TOukcLyO6ly/sQLIZ4bg==
x-bce-flow-control-type: -1
x-bce-is-transition: false
x-bce-request-id: b4d412dc-3e8c-456b-bf34-9d06ca0b4fd9
x-bce-storage-class: STANDARD
via: EU-GER-frankfurt-EDGE5-CACHE2[2],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE6[1934],EU-GER-frankfurt-GLOBAL1-CACHE14[953,TCP_MISS,1933]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 9132022
x-ccdn-expires: 1471038
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
www.1024tera.com/api/analytics?type=web_firebase_init_success_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142923486
200 OK 44 B URL GET HTTP/1.1 www.1024tera.com/api/analytics?type=web_firebase_init_success_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142923486
IP
ASN #4713 NTT Communications Corporation
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert, Inc.
Subject*.1024tera.com
Fingerprint9E:0F:BF:36:D3:08:81:C2:8D:06:5F:95:19:D2:19:F6:1D:B7:E8:AA
ValidityFri, 13 Jan 2023 00:00:00 GMT - Fri, 12 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5308ae7f75b769e289eebfce3db2bada
5a733484660dea4b3b7d7760586d4a225e233d8c
d4bb2df5fe47cd96a832e4929487aa3dcde8721c7df7768ce37ab537c542102d
GET /api/analytics?type=web_firebase_init_success_key_way&clienttype=0&version=v5¤tUrl=https%3A%2F%2Fwww.1024tera.com%2Fsharing%2Finit%3Fsurl%3DS1LqlL6pC0U9XqR8bGfWEQ&client=web&t=1701142923486 HTTP/1.1
Host: www.1024tera.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Cookie: csrfToken=NgCtVK5GuZosukRJA6V4u_aF; browserid=lIREWTju8sa5KGuOLlxXvRd_Vy8sglk6seBqsJAfTXrXboGtvUEUhMotwQY=; lang=en; TSID=7BZOeSlGWhmeZYpzqNW5MZi5cfd2fLfw; __bid_n=18c1405085452126ee4207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: no-cache
Connection: keep-alive
Content-Type: image/jpeg; charset=UTF-8
Date: Tue, 28 Nov 2023 03:41:59 GMT
Flow-Level: 3
Logid: 8841052497128199303
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: nginx
X-Powered-By: DuboxServer
Yld: 8841052497128199303
Yme: ZIGW+Ss3QEsUdTcAUmr/tG1MvuUZTxzxqApNwySA
Content-Length: 44
s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-1dcd7f8a.2b42216f.js
200 OK 16 kB URL GET HTTP/2 s2.teraboxcdn.com/fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-1dcd7f8a.2b42216f.js
IP
Requested by https://www.1024tera.com/sharing/init?surl=S1LqlL6pC0U9XqR8bGfWEQ
Certificate IssuerDigiCert Inc
Subject*.teraboxcdn.com
Fingerprint4C:36:32:B9:A0:68:F6:C2:A7:95:E4:E6:DA:DA:D7:AF:7A:C3:41:44
ValidityTue, 28 Mar 2023 00:00:00 GMT - Wed, 27 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (16064), with no line terminators
Hash 8334b653e31ffd870836904fa540f9ce
5b1fc5423940bd27d5df9f215ad9d4db6c666668
a6899ed227f04b484d74815a564fda0bc224c9c74fa35a6cd8febb416c7fced8
GET /fe-opera-static/node-static-v4/fe-webv4-main/js/chunk-1dcd7f8a.2b42216f.js HTTP/1.1
Host: s2.teraboxcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.1024tera.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 03:41:59 GMT
content-type: application/javascript
server: openresty
content-md5: gzS2U+Mf/YcINpBPpUD5zg==
etag: W/"8334b653e31ffd870836904fa540f9ce"
expires: Fri, 12 May 2023 08:43:54 GMT
last-modified: Mon, 08 May 2023 12:32:40 GMT
x-bce-content-crc32: 4120287129
x-bce-debug-id: Teo3loV3wqW/js/c3F+flnexjxNYfbmQInRoUF9QRAMJ7CFnw1D4NuX6sDdmfzinUfOqZghCnAt7txHYBz0myw==
x-bce-request-id: afcc4a4d-fd1a-4520-9662-3523bce519be
x-bce-storage-class: STANDARD
x-ccdn-expires: 861170
via: EU-GER-frankfurt-EDGE5-CACHE2[16],EU-GER-frankfurt-EDGE5-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE2[17],EU-GER-frankfurt-GLOBAL1-CACHE8[0,TCP_HIT,15]
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
nginx-hit: 1
age: 17520793
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
210.232.36.152
192.243.61.227
60.190.116.48
18.185.201.157
185.207.113.109
90.84.161.15
104.21.86.121
0.0.0.0