{"report_id":"40613b65-48dc-4069-b848-85ca10bbd305","version":6,"status":"done","tags":[],"date":"2025-12-17T01:08:12Z","url":{"schema":"http","addr":"best-r3v3nue.com/?url=https://trk.offerroads.com/2JRNK2B/8CZ1J6L/?sub1=PNpWKrG8KmbnB5kqsxUeup\u0026source_id=3596_10281132\u0026sub2=PropellerAds1%20-%20noEnc\u0026sub3=3596","fqdn":"best-r3v3nue.com","domain":"best-r3v3nue.com","tld":"com"},"ip":{"addr":"104.21.88.217","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"title":"SHEIN","dom":{"size":342795,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22552)","md5":"fd5137925e4adb581fa2ed986399a1fb","sha1":"0c4d896c02b1f0bb3d5817caffb38183e57a44e4","sha256":"32751e2d3eb641f23836b65e4cf24ce3330448f079a637577619356f8e97a864","sha512":"a202910e799d3a971289409ac418e4445901ab4acfff0a131ecc7b01935d95419ae6dffa177915c3cfb61e0816f47207d843e31a480014a6ead3de1076b96d90","ssdeep":"3072:W3ZzPmvVLWw6kH5KqatwoTvoV8+06NU4pCSrrZ619+SSdZqe00zznjFDAopGO077:UPmvMnkH5KqapvoVJ0iptIxGS0vn9RM","tlshash":"ad748e4d5529743b1a7721b9b89b3d47b4a1a207d510c4d4f2ad8ee04bcce8f1722eba","dom_hash":"domhash6dc56af44417439787d48334a95f392c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"best-r3v3nue.com/?url=https://trk.offerroads.com/2JRNK2B/8CZ1J6L/?sub1=PNpWKrG8KmbnB5kqsxUeup\u0026source_id=3596_10281132\u0026sub2=PropellerAds1%20-%20noEnc\u0026sub3=3596","fqdn":"best-r3v3nue.com","domain":"best-r3v3nue.com","tld":"com"},"ip":{"addr":"104.21.88.217","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-21T01:08:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-17T01:07:34Z","timestamp":1765933654,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.14","port":41052,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-12-17T01:07:34.685214+0000\",\"flow_id\":499545537934494,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.14\",\"src_port\":41052,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-12-17T01:07:34.685214+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-17T01:07:36Z","timestamp":1765933656,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.14","port":53419,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-12-17T01:07:36.712843+0000\",\"flow_id\":1559367373086859,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.14\",\"src_port\":53419,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-12-17T01:07:36.712843+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"onelink.shein.com","ip":{"addr":"35.207.106.184","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"domain_registered":"1998-01-16","domain_rank":334115,"first_seen":"2021-11-10T10:51:55Z","last_seen":"2025-12-12T20:44:41.166222Z","alert_count":0,"request_count":2,"received_data":3626,"sent_data":1161,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"sc.ltwebstatic.com","ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2016-01-19","domain_rank":208935,"first_seen":"2025-01-24T15:39:05.923846Z","last_seen":"2025-12-16T16:47:49.198584Z","alert_count":0,"request_count":54,"received_data":2213318,"sent_data":25662,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"eur.shein.com","ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1998-01-16","domain_rank":117202,"first_seen":"2018-11-07T17:24:43Z","last_seen":"2025-12-16T16:47:49.963191Z","alert_count":0,"request_count":51,"received_data":1734890,"sent_data":94393,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Lodash","description":"Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm.","website":"https://www.lodash.com","common_platform_enumeration":"cpe:2.3:a:lodash:lodash:*:*:*:*:*:*:*:*","icon":"Lodash.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cinfo-v4.shein.com","ip":{"addr":"23.33.119.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1998-01-16","domain_rank":56023,"first_seen":"2024-11-06T16:35:29Z","last_seen":"2025-12-15T13:29:32.103638Z","alert_count":0,"request_count":1,"received_data":556,"sent_data":443,"comment":"","tags":null,"fingerprints":null},{"fqdn":"best-r3v3nue.com","ip":{"addr":"172.67.153.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-17","domain_rank":0,"first_seen":"2025-11-20T11:50:33.794826Z","last_seen":"2025-12-16T16:47:49.833204Z","alert_count":0,"request_count":2,"received_data":1155,"sent_data":1029,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"trk.offerroads.com","ip":{"addr":"54.196.173.211","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2024-03-28","domain_rank":0,"first_seen":"2025-12-12T09:42:40.12206Z","last_seen":"2025-12-12T09:42:40.12206Z","alert_count":0,"request_count":1,"received_data":3705,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.shein.com","ip":{"addr":"104.18.1.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1998-01-16","domain_rank":91231,"first_seen":"2015-05-22T08:43:56Z","last_seen":"2025-12-16T16:47:49.092445Z","alert_count":0,"request_count":1,"received_data":1144012,"sent_data":679,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"armor.ltwebstatic.com","ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2016-01-19","domain_rank":188739,"first_seen":"2025-01-24T15:39:08.876217Z","last_seen":"2025-12-12T20:44:41.431006Z","alert_count":0,"request_count":6,"received_data":1368094,"sent_data":2707,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"count.shein.com","ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1998-01-16","domain_rank":217132,"first_seen":"2017-03-22T09:34:21Z","last_seen":"2025-12-16T16:47:50.133862Z","alert_count":0,"request_count":1,"received_data":249,"sent_data":615,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sheinm.ltwebstatic.com","ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2016-01-19","domain_rank":278545,"first_seen":"2016-03-20T16:54:27Z","last_seen":"2025-12-16T16:47:50.145146Z","alert_count":0,"request_count":1,"received_data":48064,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.srmdata-eur.com","ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"domain_registered":"2022-02-16","domain_rank":89362,"first_seen":"2022-04-01T07:56:09Z","last_seen":"2025-12-12T17:55:11.950516Z","alert_count":0,"request_count":85,"received_data":50305,"sent_data":51743,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"img.ltwebstatic.com","ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-19","domain_rank":24006,"first_seen":"2017-06-06T10:44:53Z","last_seen":"2025-12-10T20:52:42.146597Z","alert_count":0,"request_count":57,"received_data":1614317,"sent_data":29007,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cinfo-v6.shein.com","ip":{"addr":"23.33.119.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1998-01-16","domain_rank":55988,"first_seen":"2024-11-06T16:35:29Z","last_seen":"2025-12-15T13:29:31.949812Z","alert_count":0,"request_count":2,"received_data":1048,"sent_data":886,"comment":"","tags":null,"fingerprints":null},{"fqdn":"recommender.scarabresearch.com","ip":{"addr":"18.197.44.10","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2008-03-06","domain_rank":64649,"first_seen":"2012-10-10T16:32:56Z","last_seen":"2025-12-09T19:05:00.709369Z","alert_count":0,"request_count":1,"received_data":98171,"sent_data":449,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sheinh5.ltwebstatic.com","ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2016-01-19","domain_rank":92829,"first_seen":"2020-04-12T13:32:18Z","last_seen":"2025-12-16T16:47:50.236366Z","alert_count":0,"request_count":29,"received_data":2515144,"sent_data":13716,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"zpnv-eur.shein.com","ip":{"addr":"23.33.119.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1998-01-16","domain_rank":926098,"first_seen":"2025-07-18T12:08:50.814051Z","last_seen":"2025-12-12T20:44:41.248762Z","alert_count":0,"request_count":5,"received_data":9773,"sent_data":5349,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"common.ltwebstatic.com","ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2016-01-19","domain_rank":156859,"first_seen":"2022-11-09T08:42:05Z","last_seen":"2025-12-15T13:29:32.07989Z","alert_count":0,"request_count":2,"received_data":367320,"sent_data":936,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"shein.ltwebstatic.com","ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2016-01-19","domain_rank":69794,"first_seen":"2016-01-24T05:34:36Z","last_seen":"2025-12-15T13:29:32.677667Z","alert_count":0,"request_count":6,"received_data":6907,"sent_data":2893,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"cjs.ltwebstatic.com","ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2016-01-19","domain_rank":178584,"first_seen":"2024-09-24T07:06:01Z","last_seen":"2025-12-16T16:47:49.266042Z","alert_count":0,"request_count":4,"received_data":268505,"sent_data":1955,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"eur.shein.com/iframe_login","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"de253c1cebd454dc05b6b7a54331239a","sha1":"344ca5f63b15f1c75c96d0022490e59a8c045506","sha256":"32ef0606a167ba0d6adc88eede25bf25451fb73f426ee97bafaa934d9c68f0ed","sha512":"080ca1c70454a4f4e0a05b931c8ef85bdec097c0a5d92ce3f0c1814824882ea42e668de6e8e4080c53bcb722ebb5f63470e93d5f1e3887b77c05d37b90d68fa4","ssdeep":"","tlshash":"73f07d60cefe3003505f3de4f557a4883cea45a21e999c319d8ee5e90390c6a8489dd5","size":633,"data":"","first_seen":"2024-02-06T00:53:59Z","last_seen":"2026-06-01T22:35:15.186073Z","times_seen":714,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"armor.ltwebstatic.com/she_dist/armor-libs/infp/infp.3.11.1.min.js","fqdn":"armor.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba71a30c9f65f46a20f936ad346ad4d1","sha1":"2bacd165657393080439f9a8fe9e2cb62e7c226d","sha256":"17dc904b7ae25d3eb7063aafbfbb2ad48e8fdc6469d92e68caa693ba2fb4ab4a","sha512":"074182b54fbe22dd4f3ecbbb90ad13eccce647e0ead754e8822dc9da1e05adc3141c0afa21829936b38f2b70df948cb702aa4e3e7fc531807465d8d241525313","ssdeep":"3072:KeoxugPZZ8eyCxgVs/avEgzAwYtU/HCQnPnNWJiXd1/NjaKcK9mqO/k2XSBb29gL:pSPn/10EGmcXw/k2XfnB+hf8WWq/X4Y","tlshash":"cd8482cc7bf0b26807ab50a5887f2496d7aa7c5af04ee040c51ad1c278e9f5d9d27e34","size":398761,"data":"","first_seen":"2025-10-29T19:12:39.357221Z","last_seen":"2026-06-01T22:35:14.801267Z","times_seen":754,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/15457.2e9d8ad3e43d8cf3.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6005eb330410fb2f42b7185a977ac171","sha1":"6d09ab2c82a33acc76001e48967d8c7c8f7db2d6","sha256":"afa85afb30db84804eede56e9856633608f5bd13f7a44511512852ca8953e033","sha512":"dc547ddba7c10e15496890955020d83bd840a983daa626b7581e7c3efed41af5826fb59641152e13c2548a24b14d9d8b93527d8d85afd893fc03a03c42ff24cf","ssdeep":"","tlshash":"f3e0f1a737d23d0e19d759cc2a8246d3083c08b3a83d8787ae115b400062f0da746c28","size":403,"data":"","first_seen":"2025-11-12T15:12:31.817895Z","last_seen":"2025-12-24T03:17:54.105672Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/iframe_login","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"e926152bd63c206321c37d30a3f5baa7","sha1":"90aba98950daaf9f44ca89eadac0677d02b4eaa5","sha256":"129260f47bb6abe1b17e6d4604c75b1f19ba563dfac0d40bcd004af423306cbc","sha512":"001f81970cc45cb2be5aa576479e001070b655e6a136ea1c3aa91a8e04ae8e6751c637ec7d5da158cf6b156ca81cb50b8e5d8294ff1891fbeeefbad1535660ab","ssdeep":"","tlshash":"85b02bc435f3d587927611d8467fbdc1d134cc30108c49502448e0153e2307844775d8","size":127,"data":"","first_seen":"2023-04-27T21:41:00Z","last_seen":"2026-06-03T06:21:04.512263Z","times_seen":6197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/iframe_login-dc777986ac0aa7bd.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"76f3827dec5bfb9d7dc350faa32f0a99","sha1":"b05287b10955c7b97f5eba6e0e8944a1a14c2b18","sha256":"7df82408445aadcf5af88e79d8086a8d1c8428452335ade2c9d3b3d12a77fe9a","sha512":"7c179dd3ff9c36da4e6827e1483819825753cf4fc10a2a275f25c1f64afd64da45781541d6b9ccf0e57d26f790edf415dff05be2b291645ba9a24acf5740cff5","ssdeep":"","tlshash":"5db092a124c7be34382f49c498b246a79c3401733cb4d1c6685a9cb710a2d181aa3ca5","size":117,"data":"","first_seen":"2025-07-26T09:54:21.566605Z","last_seen":"2026-06-01T22:35:15.049955Z","times_seen":753,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"95b9b1039f542555b0eedbf2a0352135","sha1":"532db7b0b3d0ee7942cc6dfd848b1a73dc94b887","sha256":"5c1178f1fac037b36242a372a35c0437035f910bf78fad84500d541532eddce0","sha512":"2eee9db50e9bc380998869e3072db9ec3d35cb0271c371268c19a5f4e17a5f8cbc265f2b0d020df97efd1be31e72d61e7d035e16fbcd791e68bf1e24cea0d8db","ssdeep":"","tlshash":"4ee0680479ba7ac74ef25292381f9e5e90658d20250cdd90222ee4402aeae32dab7489","size":360,"data":"","first_seen":"2023-07-11T23:34:04Z","last_seen":"2026-06-03T06:21:04.511229Z","times_seen":1284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/iframe_login","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"211efc0f974906c7b90bfba77fd4a381","sha1":"aadfa35a2ed1ad8a0d3836df440308ba8ecac746","sha256":"35e25f19ecea132ce2521030546735f1afbcf4165b4e41729bfa468236eb762d","sha512":"58618a776294337cecceb70ad407fb2c3160aacc3eb6306c0939a3cfc3d587fbde31ea7fd108cfb75745f9b4a5613a03601469eddde99ed25f37195f8782dcca","ssdeep":"","tlshash":"5ab02b8838e3b0c1523113d8550fad81b034c42010cc0940546980803e1203d01758dc","size":124,"data":"","first_seen":"2023-07-11T23:34:04Z","last_seen":"2026-06-03T06:21:04.522522Z","times_seen":1307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/event-center-37.059108a709f45339.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ac8d5404035c22f2436000b4a2b10c5","sha1":"c79afb17bdb3fffa95d6050265087a3e33fb6304","sha256":"de0d4586a53f4278c735bfcbedaa66d9fd1f8f49772d110bb22dcf110bcd4f6b","sha512":"21d2455fb2ef91482841b0e8ceb466284a01d4a6b2aa025378b0552cfccc2048459da8cfdf1ed0212e808c9609c805dfad068456b1c549895ce8b41a130dd1b3","ssdeep":"","tlshash":"ca415bdcf4ee28bb693d898d77a552950c78ce3a7acb05d00602cf8544ebfd872853a1","size":2366,"data":"","first_seen":"2025-07-24T23:38:29.653991Z","last_seen":"2026-01-20T19:05:52.76461Z","times_seen":1028,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recommender.scarabresearch.com/js/1C3C6FDBF34C5A79/scarab-v2.js","fqdn":"recommender.scarabresearch.com","domain":"scarabresearch.com","tld":"com"},"ip":{"addr":"18.197.44.10","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a897b0d5600777a895d6a9606a173afa","sha1":"bac76fc51bf637b19be3a3aa58c42e63be53d4e1","sha256":"65f9d55ca38ee2daf5e2ac34217c1589e6d5b7229a9fa16758f4788cbec19f99","sha512":"f1b879aee3693dd10a8c3172260ec37d20816a17b0c449ec03ec8a00f580d7bb68c77c6189b7d8fa8d591a6bf5f8cb5902760db26e1c7a7e7bd7e5db53da173b","ssdeep":"1536:UmGGaEDAlosxdgtN9gjIklhMzpJ0kI464apAn03DXpkfwROvOPI:pGHEDAloWd+qIklfRAn01iMI","tlshash":"c7a3524da9fb24279567703c9eaf60087a768047245cce14789ce3906fa497847fafec","size":97890,"data":"","first_seen":"2025-11-27T17:25:33.628529Z","last_seen":"2026-01-06T12:47:16.102526Z","times_seen":162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/84838.9b908adc0f7f3a83.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d77326d36a31589c3d429b373e519ca6","sha1":"e587549ecaf1bd1a947a9e08a593f94086787575","sha256":"da74ee503426dc5e29a74bc1f2d9b5f20ff91d0cf366bfad7a0d7ec0299d9df4","sha512":"b97469d48058de70e77c9f1fdb4d58946306d6f575dfab1a4d0d7af18f45f04b5021b6bdbd31e54b940b5c76a56347f599102cf5c2131e2c7f6c8677828ef6b0","ssdeep":"","tlshash":"ace0f1fb11a6be1e1b7324cd7a82575b9c3c00733c3896caa74495500193a09f183c7c","size":416,"data":"","first_seen":"2025-11-12T15:12:31.889071Z","last_seen":"2025-12-24T03:17:54.157815Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"d55d258a9f23bc709e94af3fa44fe67b","sha1":"56f3908bedaa5f3b3205aa6940d1f3ea5b824a20","sha256":"5b1d170f98ede757dc59e83a4ae32a38d8a347a1dd3430bb31949251c5b1600e","sha512":"cbd77651ecb9336d1d33cb293180de92221f2f2157600c6f0b2a7a90459184506f9d4681e2eea8fccf67f385918911a7dbb9eaa5d87d5c716c74ac18d1249c88","ssdeep":"","tlshash":"3dc002cd44c22e010552092a0a0f2600907a072399cb2c51bb1c51273f14b034dc9d5c","size":144,"data":"","first_seen":"2025-07-18T12:09:06.03449Z","last_seen":"2026-01-20T01:11:26.047344Z","times_seen":506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/lib-polyfill-28b7cdd5642e2323.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac4275068da60da240380fbb8b24ef4e","sha1":"b7cbbdfcde80a9bb6d09f162c5ca31cc346f7374","sha256":"97b85992488e4357b1d7d65cc7a16cb2140382c04469c03e14fbe3a0fc02b185","sha512":"c02aa3a4c6de57190c808b1d5ca4803bdd6bb95e310bcd12cdb2ca47ef97c163314b0add6eaf3bdafe3368b027b44ed6cd8ccb99a3a8791aa66011896e4d9bbf","ssdeep":"768:QRo3wy2ArVQCj1UzJMuSP4LBtWkdfNRf/:7RH+NzUQBtdff/","tlshash":"98339688b9d2f4f91bf299d4842f9843f12b2d24640da5e4dfe2d6819874d8f407be39","size":52327,"data":"","first_seen":"2025-03-25T20:02:22.196Z","last_seen":"2026-01-20T19:05:52.823437Z","times_seen":1118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/95644-04f01fe22c6be4d3.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b7aa540492a543da8d747aa8802a520","sha1":"e305d35008045c04b39d23a4e2385d9bd5ca94df","sha256":"1c78cfaec3df2015de2d6aaea9219d00bdeff66ed5407538ada98997a0238ad3","sha512":"5dc5aba139e53960680d5700c2e240e9905822b991ef4648649c375e55e6f24ae6d07cae63300ac825af60810c3cd824f8418c37f7d46b781b525a5e4e24b3b1","ssdeep":"384:hrCKb6irj3xTkChL9Bcxiy0Gvl7HJ+Ez+qirhm:hXG2j3xTkCyQy0Gvl7HJ+Ez+qirhm","tlshash":"705294cdb2c7f06353636531801f100be73e6996b41d4558e229e9e2b8b949ea337f78","size":13900,"data":"","first_seen":"2025-08-26T19:43:47.461224Z","last_seen":"2026-01-20T19:05:52.770589Z","times_seen":728,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/js/analysis/sdk_analysis.b502a4c.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c10504ca5825351f2fe72398af121d71","sha1":"569f7473ec2ac12b47005cd2238e1dc02eb0129e","sha256":"a15a60527e0a794a1328fd4ebe13ea075a4e63d05da2ad2d3824ba8eaadf4aa0","sha512":"d21ef05bcd28998a87ef10363b16cb0fa76d6ff0371435271a5917023b4b621fcb7d26353c71eb897b8a2f05ab8efee82d6cbcfb71ae9676be8f514183a91b95","ssdeep":"768:mCFbM/m9RRBdX2IeNebgTC/XQ1KKGqVH/w7L12ZNV:lM/g12RVgwKKdxeLI","tlshash":"0e133b9eb382b53506f3b169c83b15057a352606ac8c94b4fa35acc17db85df4263f3a","size":42606,"data":"","first_seen":"2025-06-07T05:05:06.585476Z","last_seen":"2025-12-17T05:54:39.224297Z","times_seen":1027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/tpm-sources-globals.5c06c861e4a85c6f.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcdb75f4f5aedadd440ddb4a13a27e6d","sha1":"b6f15663316a8708930d885454aaa55ddd20e2c0","sha256":"2df3ee7eb1b424d7ea54f6b88f4ffe450ce46641662e32d64c47b791e478941a","sha512":"14a011908a02bd5fc691d91d0bcdf5a7e1fd615f8622bace6a507cc62633433ab17a99a0d0f09db41afc1d13fd5020c0ef9393e4907b68292ccf319f57f3d0e6","ssdeep":"768:jK/1gvigVUGg8Juj4wLmBxeMyapXu0yyDy49q:jKrGdo49RDU/","tlshash":"1103f98977f9987136f680b8d5334603e17c3a91314ac0d4b2aeadc859a4bcfa651f7c","size":39932,"data":"","first_seen":"2025-11-12T15:12:31.737465Z","last_seen":"2026-01-20T19:05:52.620902Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"d9fb29984167482f62da39a7b70e64a0","sha1":"c24c691224187a9025ecf4b41876d3d3cab67118","sha256":"c00278f45ee31bd0b23f297772738eadeb416eec465c1f1bd16d2916a3834adb","sha512":"05c3c1c486a521feda51219e2d25c8e1262728c7fe966baac231dbccc87f7e0da9c046bbe925df740c1e5f8d1749955904b3b2c2916fa80572edafcfd2687f5d","ssdeep":"","tlshash":"d7b09b9875d3a191567221d8955fad8591348420208c1550545991557e6343d41768d8","size":119,"data":"","first_seen":"2023-04-27T21:40:59Z","last_seen":"2026-06-03T06:21:04.506032Z","times_seen":5653,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/schttp-chunk-1a3a6c9877621ea6.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"75dc68c2509df82a32b1dc3e63e1124d","sha1":"89cc88501c6faaf278169c224c6fdf463c0e5fa4","sha256":"fc07d7c963cb0d2eaddaf5752aac6139753f599fcce9aa5db009f4aa5705dfde","sha512":"299541e437d4e062fd129ef1ce429e3ad18aab90dc54d8d01bc10918e66165ca5705aa0592177ec3bc5b3c7e2b153ebb066ba6fffba29723b0e2c90dbdaeb84b","ssdeep":"768:8kY4vnZBQjcYhRUeTIf3awhWykC3CVLMYWffglljtENYiVGgDOqbfAek3SnF6eJY:zucYhRF0XQrdOD5M2K8QRW8c5KP","tlshash":"a6d2fbcbfeea944506f648b9c43b1432b03c7b5a2288d090e5537cd938d568ff652e7a","size":29758,"data":"","first_seen":"2025-12-09T15:42:57.597946Z","last_seen":"2025-12-24T03:17:54.180706Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/event-center-48.00034696f5c9bba1.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"573ed976d86c39b2661c5564890b1fe6","sha1":"1ffeafe18014294a5420874ace1615b939cfbb29","sha256":"22c9a28c3eaba56f50ebf93174a9996227b408b3909768171a78343a2a0adf80","sha512":"22665e223330f232169945a48cb3b68d1c45abf6455cef2e349815d6c8d30c834c4ebe73d1e5f3a7e2039fc46b42edc49691bdbf27e84f851b714421a0e6eafc","ssdeep":"","tlshash":"5441c0d8b4af247f2c6d4c8a72a29bc42c74df79b6c714c0869acfc504ded0ab0493a4","size":2232,"data":"","first_seen":"2025-05-19T19:51:55.864108Z","last_seen":"2026-01-20T19:05:52.656169Z","times_seen":1095,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"e926152bd63c206321c37d30a3f5baa7","sha1":"90aba98950daaf9f44ca89eadac0677d02b4eaa5","sha256":"129260f47bb6abe1b17e6d4604c75b1f19ba563dfac0d40bcd004af423306cbc","sha512":"001f81970cc45cb2be5aa576479e001070b655e6a136ea1c3aa91a8e04ae8e6751c637ec7d5da158cf6b156ca81cb50b8e5d8294ff1891fbeeefbad1535660ab","ssdeep":"","tlshash":"85b02bc435f3d587927611d8467fbdc1d134cc30108c49502448e0153e2307844775d8","size":127,"data":"","first_seen":"2023-04-27T21:41:00Z","last_seen":"2026-06-03T06:21:04.512263Z","times_seen":6197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/iframe_login","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"78ca009e0532b1af99e6a637cb269fa6","sha1":"a3bf95f9bcacaeb2c775072016ee8afa8b55ab04","sha256":"23de3e1c8e0eb2b04a3291ef1f40ac8ea5998b58002761704e7c9b3a3382f806","sha512":"80e24763fd6b795c9c7b27a0dceac9434583f0ae68cbe432e05dc6641c2e0efe5b06cb0e0e9afe60a1370b69b379296521dc8df407f68657a05ab2e6516bc213","ssdeep":"","tlshash":"e8f0a61c69e71214d2bbe32ebf3fb2003871e7676185c804798ca6a12f1503488f95ec","size":636,"data":"","first_seen":"2024-02-06T00:53:59Z","last_seen":"2026-05-24T09:03:19.151669Z","times_seen":697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/iframe_login","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"0cefb2e329b20e5578008f9542517a9f","sha1":"75c17b63292815a96a83a23b0c6c412cfae034c0","sha256":"a404562ecc8a87f557c8a49266ede9d40935024ee559498390b173d235a25fd1","sha512":"ebc4b160d476c4cad59e9399ecf4d5164ed6ecc983c447c6d71b9c9b55cc546de1b457b353f7d4733aabd4a96b35b814f8db3ab8aeb95e34102e98c298553e48","ssdeep":"192:4wvkA8mO7CpNr4IUh0b/FYSdwo41poCEqIcJ9ri+:nvf8dC3r4IUh07Vufk3qvJ7","tlshash":"69f1b58c71c6b0a11beb5068816f211bf17d9967589cc150e127e8e17db494f8273fae","size":7774,"data":"","first_seen":"2025-11-12T15:12:31.906468Z","last_seen":"2026-02-10T23:35:22.338583Z","times_seen":236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/iframe_login","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f2bcfeb22c25ecc5f620daf9d28b93e","sha1":"dde4b00e219dff1e18ed76b1824d0b6c812d3e26","sha256":"18fddd9747742a5bf8f629ff5f5571cfcac887ccf73e7a6f8e814b82b62b6a98","sha512":"787ae06ce0fbfdf57ce9287805e3b176c9fd5a05d44ec1fb36a1992e8ce84e9ebcaedd22c6159efa5fa87e41650d4ebef90b575c6eb7f557ea0ff70f7d35a8ca","ssdeep":"","tlshash":"2a900248a0920d00749400190600285500194326a8ab2441871950573e409050185c0d","size":46,"data":"","first_seen":"2024-04-23T18:18:09Z","last_seen":"2026-05-24T09:03:19.16969Z","times_seen":641,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"Function","is_inline":false,"md5":"468ffbae4b4885d5545303029dfb0fd5","sha1":"313cff34158cb4ff0ec1b605f05c31fd521ca4a0","sha256":"74b5916b327e96f418c1fbab766468b0483db38733811ca6d023720685f3a7d0","sha512":"074292e5570c86aecb5c34ae62d13903cadada903909d0c662e25ab80e9e06143ef0b6b5114e9520743d0e3775d97c5752e9f0dae4540d44cbd4d1efbcafab82","ssdeep":"","tlshash":"2b01f6d91de37121210fb02a174e5208b12b9567110ede40fc0c8761afe4a72d6f8be4","size":724,"data":"","first_seen":"2023-07-11T23:34:04Z","last_seen":"2026-06-03T06:21:04.497175Z","times_seen":1911,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"onelink.shein.com/13/4s0r28uoh4d8?url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1","fqdn":"onelink.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"35.207.106.184","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-17T01:07:29.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Thu, 20 Feb 2025 00:00:00 GMT","end":"Mon, 23 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F1:A9:45:8B:75:AE:6C:52:37:12:F9:5D:B4:3E:3C:F7:F7:DE:83:89","sha256":"B1:91:6F:FE:DF:A6:53:BE:ED:73:E3:FE:D2:FD:18:D3:98:98:A6:4A:0A:DB:6B:C6:CC:4A:58:E4:DE:87:EC:A2"}}},"request":{"raw":"GET /13/4s0r28uoh4d8?url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1 HTTP/1.1\r\nHost: onelink.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:30 GMT\r\ncontent-type: text/html;charset=UTF-8\r\ncontent-language: en-US\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":3035,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (628)","md5":"9b416d5e6063a5956ded2990c0b6d300","sha1":"5f8aa5740b5ada3e2e4b0a243c51176527c4a866","sha256":"9336e89849b15637560ab9b087f2c30742c2e007b25e97706d178adf714ac895","sha512":"0dd3cfbdbe8260bea184f13c4f51e06e1f84ca06814e8639fdaa60814787ba342ac8c55ecf6d79ec39aca2047d719d80679f9aed91955b711a29d0971a259966","ssdeep":"","tlshash":"015153f369b1450943a6840598f7f208d925c757fa549c61f9980eea1fc2da1c1f3f94","first_seen":"2025-12-17T01:08:42.91811Z","last_seen":"2025-12-17T01:08:42.91811Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1082,"timings":{"blocked":524,"dns":10,"connect":27,"send":0,"wait":34,"receive":0,"ssl":484},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/app-track/metric-info","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:34.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /app-track/metric-info HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nContent-Length: 1389\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1389,"data":"{\"data\":[{\"app_name\":\"shein\",\"timestamp\":\"1765933654123\",\"local_time\":\"12/17/2025, 1:07:34 AM\",\"session_id\":\"\",\"member_id\":\"\",\"sdk_version\":\"1.1.43\",\"network_type\":\"\",\"device_id\":\"\",\"device_level\":\"1\",\"device_type\":\"pc\",\"device_model\":\"\",\"device_brand\":\"\",\"browser_name\":\"\",\"browser_versions\":\"\",\"os_versions\":\"\",\"os_name\":\"\",\"language\":\"en\",\"sub_site\":\"eur\",\"money_type\":\"USD\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"referer\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"level\":\"INFO\",\"tag\":\"\",\"message\":\"monitorJsLoadTime\",\"params\":{\"name\":\"https://common.ltwebstatic.com/dist_bundle/xjqHR52UWJdjKJ0x6QrCsus66rNXR9/2.0.13/1/main.js\",\"entryType\":\"resource\",\"startTime\":\"1920\",\"duration\":\"40\",\"initiatorType\":\"script\",\"nextHopProtocol\":\"h2\",\"workerStart\":\"0\",\"redirectStart\":\"0\",\"redirectEnd\":\"0\",\"fetchStart\":\"1920\",\"domainLookupStart\":\"1920\",\"domainLookupEnd\":\"1920\",\"connectStart\":\"1920\",\"connectEnd\":\"1920\",\"secureConnectionStart\":\"1920\",\"requestStart\":\"1953\",\"responseStart\":\"1956\",\"responseEnd\":\"1960\",\"transferSize\":\"56224\",\"encodedBodySize\":\"55781\",\"decodedBodySize\":\"183214\",\"serverTiming\":\"[]\"},\"environment\":\"production\",\"value\":1,\"metric_name\":\"si_anti_spider_sdk_mjlt\",\"tags\":{\"type\":\"mjlt\",\"url\":\"https://common.ltwebstatic.com/dist_bundle/xjqHR52UWJdjKJ0x6QrCsus66rNXR9/2.0.13/1/main.js\",\"name\":\"main.js\",\"duration\":\"40\"}}]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/95644-04f01fe22c6be4d3.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/95644-04f01fe22c6be4d3.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Dec 2025 08:42:09 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 4813\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13900,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13837)","md5":"6b7aa540492a543da8d747aa8802a520","sha1":"e305d35008045c04b39d23a4e2385d9bd5ca94df","sha256":"1c78cfaec3df2015de2d6aaea9219d00bdeff66ed5407538ada98997a0238ad3","sha512":"5dc5aba139e53960680d5700c2e240e9905822b991ef4648649c375e55e6f24ae6d07cae63300ac825af60810c3cd824f8418c37f7d46b781b525a5e4e24b3b1","ssdeep":"384:hrCKb6irj3xTkChL9Bcxiy0Gvl7HJ+Ez+qirhm:hXG2j3xTkCyQy0Gvl7HJ+Ez+qirhm","tlshash":"705294cdb2c7f06353636531801f100be73e6996b41d4558e229e9e2b8b949ea337f78","first_seen":"2025-08-26T19:43:47.461224Z","last_seen":"2026-01-20T19:05:52.770589Z","times_seen":728,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:37.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nds-from-terminal: pc\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0X3wxNzY1OTMzNjU3ODgzfDdBQUZfMkNBMzZFMzQ3NUM3\r\nContent-Length: 2765\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:42.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: client-ugid,content-type,ds-access-site,ds-access-token,smdeviceid,x-oest\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:42 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"armor.ltwebstatic.com/she_dist/libs/devices/fpv2.7.js","fqdn":"armor.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/libs/devices/fpv2.7.js HTTP/1.1\r\nHost: armor.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Oct 2025 08:35:16 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 56380\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":187719,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"a6222336e47e7ce13ef938761425d2af","sha1":"45f97ba8ff1da61f2d648e782e219cc807ff78ea","sha256":"90382492624d42440cef1884ac3e3538755dbcd8dd399583a8fca2db6cdd4e06","sha512":"a713dfe73eb9289f066344c1ee903d2046c90fad1f9434c383b531ec66453a3927332ddc35132ffdd66a8d4bb8f1da08fc6a70adc4e338d1302c1258a23e387d","ssdeep":"3072:ggGC+CMjRnwttCxWhnqaW0iUZeINl+wJftXVmrSG80tDooRU4/:gTnwaE0FU5XVmrSG80tDooRUE","tlshash":"fd0471446bc2b88813878f7a375fb0d5fa5b1d9938850c4bc015fde0aad1a06faf2975","first_seen":"2024-12-14T16:14:52.256033Z","last_seen":"2026-06-03T06:21:04.40205Z","times_seen":1707,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_ccc/2024/08/13/79/17235601356fb0ec18862903576119d2d10f9b9666.png","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_ccc/2024/08/13/79/17235601356fb0ec18862903576119d2d10f9b9666.png HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 11569\r\ncf-ray: 9af28633a9eb569b-OSL\r\nlast-modified: Thu, 30 Oct 2025 11:09:42 GMT\r\netag: \"69034776-2d31\"\r\nexpires: Thu, 25 Dec 2025 01:07:33 GMT\r\ncache-control: public, max-age=691200\r\nedge-cache-tag: 2025110117\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 3557\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11569,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 494 x 104, 8-bit colormap, non-interlaced","md5":"4ca9626b7dd59e2e94f6817c4a55e035","sha1":"176b9f0383b0d0f8040fc711a5d3a9508023c9c8","sha256":"115de605319a44e1b03560239f7f640142ded7ab17acba33013080f324ba9fa4","sha512":"28d4efe5fd0fa2276025162e87025f46bdd4345e7b732b4157fca140190612d6be19b39695a7bee8c4b88be4874833edba3b156db8befb5a2bc2a175e3d9441b","ssdeep":"192:IiWszW3jhdvaCi4mhZyrR+SsrPjBUTpCBKJuh5lDrr8qVtX8A2Igr+A9f3Lo:IiWuWThdvazhy1+NrPFU8fhzrXVFl2Lc","tlshash":"f432cf8c48b90b3d986b91245db8bcbd6b1cc9ae8826a2c8619c3457e734f1e774b1d1","first_seen":"2025-07-31T13:40:14.670884Z","last_seen":"2026-06-01T22:35:14.813478Z","times_seen":814,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/ccc/nav/tab_cate?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /bff-api/ccc/nav/tab_cate?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\ntimezone: GMT+0\r\nbrand: shein\r\nchannel: pc\r\nappcurrency: EUR\r\napplanguage: en\r\ntoken: MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\r\nsiteuid: eur\r\ncurrency: EUR\r\nlanguage: en\r\nx-oest: RTBEMzU0QzBfOHwxNzY1OTMzNjUzMjAxfDEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: \r\nx-request-by: bridgeX\r\nuber-trace-id: ff57873a615fb842:ff57873a615fb842:0:0\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 2260\r\ncontent-encoding: br\r\noest: RTBEMzU0QzBfODEyN19GQjg0XzdBQXwxNzY1OTMzNjUzMjg1fEZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\npragma: no-cache\r\nlocal-cache-max-age: 604800000\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\nappcurrency: EUR\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-navigation\r\nx-gw-traceid: ff57873a615fb842\r\nserver-timing: g;dur=9\r\nvia-shein-gateway: c-shein-pc!bff-navigation\r\nheader-cmdb-name: bff_navigation_eucentral_prod_cluster3\r\nheader-cmdb-name-origin: bff-navigation-eucentral-prod-cluster3\r\nheader-cmdb-sname: bff-navigation-eucentral-prod-cluster3\r\nheader-cmdb-app-name: bff_navigation\r\nheader-cmdb-app-name-origin: bff-navigation\r\nheader-cmdb-app-sname: bff-navigation\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19398,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1e0b5f31d35a4643dea69b3fe8751ee6","sha1":"77b97f2298cdda3229d7f25001a331b0759854a7","sha256":"4b3fbf8fd89e04b84c657c26de9e8662583455ae6048633aba70a8dd0a66acc9","sha512":"6e5d6cbf271a48c6f72f6a78d6da9a4353f1458a68ea5ca318cc2fc85d6b3c2de2ba2426c2bac4c2a0aa364c22cd0435765e3d044572db7b1878b76543cc0496","ssdeep":"384:5myZHPeDAsGUdKEJwwyCGY4w4Wsb7yZjIoP:J0f5JwrYP","tlshash":"ec92fd3d716cddfa139aa68168ca3c3a13d51325c3c6bdcacd45de8ac6cda88015c72e","first_seen":"2025-12-16T18:12:41.217599Z","last_seen":"2025-12-17T01:38:51.844997Z","times_seen":3,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cinfo-v6.shein.com/","fqdn":"cinfo-v6.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cinfo-v6.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 207\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\naccess-control-allow-credentials: *\r\naccess-control-expose-headers: client-ipaddr-v6\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,PATCH\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":207,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e77edbf7060357fa1398a87d8b3ce002","sha1":"fa13a0b30a2043158f9393e83daa12800bff6c5f","sha256":"b1c9cfe4438206ce279f33ab1310e7d2271850921d2a3ae5fa5c0ed46012763d","sha512":"871ea50a4998a1eaf8873e64ba50e92591007d74d1882861ca1aed6a4b4d201dfe550da474c86f620841d6d88e5b94da902358ee625aed4c658416634598b37d","ssdeep":"","tlshash":"e9d022871082441a0075c3202fc5e15456ea6ee4aba248802fc3e19b2cdeb01c8ab198","first_seen":"2024-11-07T21:28:14.656832Z","last_seen":"2026-06-03T06:21:04.344024Z","times_seen":1637,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/99242.783e24ddcf0a33d7.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:36.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/99242.783e24ddcf0a33d7.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:37 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 484\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":630,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (579)","md5":"5e2193ee62aae9df5564c3750ca68f18","sha1":"85305b15d7a03e44e236d1f08e453221adf850b6","sha256":"0a5820164e899507321f6f0405cafc8079b2dd2d89d5613865f7d7332015a0f3","sha512":"6462cc22a846a4d4887c29b842ff481a9a65c9a51ed8305a640a466dc4565d52295d82dd433fb1f28e3b6198cea05c52bc5001f6ea0735d61eafe8d593510a59","ssdeep":"","tlshash":"e6f06823a5917a3b09a704c44d52776190384485b72e55c46a00ee955c53c49f987c0c","first_seen":"2025-12-09T15:42:57.656077Z","last_seen":"2025-12-24T03:17:54.203012Z","times_seen":40,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/event-center-318.65d3eb83d58593e1.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/event-center-318.65d3eb83d58593e1.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 24 Nov 2025 08:59:47 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 2395\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:35 GMT\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16126,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16064)","md5":"0994785c7df8493559197d0e4347e013","sha1":"7629a52a6704a3c651d8cb6f121b14cf9d89c52f","sha256":"c6690bdf38d57ebb609e3ea80fddbb6336a5c959e573be9d731d576634633a35","sha512":"fb2b391c27ebd0c1b9190454362a9ee7317747147d5550833f59a3d3b89811e6b03ec916630e8ce65824efd00ab4181248a49dfc848290dde652b30889adf884","ssdeep":"96:YLorE3rjZbtmQjHundhuiboTJMloh7a6lJsLO8TUHlZQE+ZzgzritaTeq:YLoUZkT+7qKv","tlshash":"f8729badb4de1cbb6c78869c7f6127d86d98ce6afacf00c446124f55088de95b1893f0","first_seen":"2025-10-29T19:12:39.412776Z","last_seen":"2025-12-24T03:17:54.211054Z","times_seen":315,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/54546.b1b049ddfe5dffa6.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:36.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/54546.b1b049ddfe5dffa6.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:37 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 847\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1423,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1372)","md5":"a0fb73c7350f3da1cd44c92c999408d0","sha1":"70c6688f37da1147e467039860302f0169ae7101","sha256":"3872fe0789949cbb5ffe42bf867e843538aae30ddbc75c2564f15121f83ddb0d","sha512":"bea6cf6c169bb2c108fc5fce3b076067a32d09ea000d4db2666d74d76412b8887acaae2aa0f49751d6a0d0bd47a8c39a6a049202fb908c5c3171a7a0828e3c95","ssdeep":"","tlshash":"0f21728781db685a26ea3cce42336378443ea444761eca91f5678de0040f58ff5d2ef8","first_seen":"2025-12-09T15:42:57.582641Z","last_seen":"2025-12-17T05:54:39.247539Z","times_seen":17,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token,ds-from-terminal,x-oest\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cinfo-v6.shein.com/","fqdn":"cinfo-v6.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:41.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cinfo-v6.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 207\r\ndate: Wed, 17 Dec 2025 01:07:41 GMT\r\naccess-control-allow-credentials: *\r\naccess-control-expose-headers: client-ipaddr-v6\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,PATCH\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":207,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e77edbf7060357fa1398a87d8b3ce002","sha1":"fa13a0b30a2043158f9393e83daa12800bff6c5f","sha256":"b1c9cfe4438206ce279f33ab1310e7d2271850921d2a3ae5fa5c0ed46012763d","sha512":"871ea50a4998a1eaf8873e64ba50e92591007d74d1882861ca1aed6a4b4d201dfe550da474c86f620841d6d88e5b94da902358ee625aed4c658416634598b37d","ssdeep":"","tlshash":"e9d022871082441a0075c3202fc5e15456ea6ee4aba248802fc3e19b2cdeb01c8ab198","first_seen":"2024-11-07T21:28:14.656832Z","last_seen":"2026-06-03T06:21:04.344024Z","times_seen":1637,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_ccc/2024/07/18/16/1721304257d07e13d4f95d6ace6f066d56785c34c1.png","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_ccc/2024/07/18/16/1721304257d07e13d4f95d6ace6f066d56785c34c1.png HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 4578\r\ncf-ray: 9af2863379d8569b-OSL\r\nlast-modified: Mon, 06 Oct 2025 01:07:24 GMT\r\netag: \"68e3164c-11e2\"\r\nexpires: Thu, 25 Dec 2025 01:07:33 GMT\r\ncache-control: public, max-age=691200\r\nedge-cache-tag: 2025100611\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 2399414\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4578,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 132 x 138, 8-bit colormap, non-interlaced","md5":"ba8a3707fcfa07180a15a7483314ac9e","sha1":"5817887a72ab09cb4bb000aea66fbf14495c3a4a","sha256":"366eee1dc3eb1c1ea8ba46ecc46f002cb542564ca98e5de1d069c54e45583112","sha512":"05558ad41e4e1bc47b648838ad14181b8230105159ae004cc940108de8c4081c157df539512f88f14cd25d9bad08e3da9b694aeded6437999de50b1b1a5ef611","ssdeep":"96:tw10SY5e68SxgoB0FiFRVKhtfJukSTvG8c6Kf8k:twKSYI6VgIFRVuhukSTdb08k","tlshash":"ef919e5b2b499f978f2f11c80c06dab5a42f3aedd436a2aec4c46813003e1bd91c5ed1","first_seen":"2025-07-31T13:40:14.728538Z","last_seen":"2026-06-01T22:35:14.951516Z","times_seen":819,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/libs/vue3.2.41,ejs.min.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/libs/vue3.2.41,ejs.min.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Oct 2025 08:35:17 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 53859\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":145300,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"748e9cc66d2eaf27bdc37fe1034f8d34","sha1":"8be0c5be3214f16196e28728f7cfec45af6b268a","sha256":"97bd97d671e0b99182cd2080b3437578a72793b842e1a4a75bbbc3c6ddbacf4a","sha512":"8d6595d80d22c150b0c0a706696a8a619b657bf022fee097c3a08a5fb08b7c58de2260f65d1f1066546b7a8647559ddd21a6ce3b12ae1354e042c16449bfb4b5","ssdeep":"3072:mha6YaaiQBq7rjZIZB40cj2PkqUMaX8qcBx+:mYDiQBq7rjZyBL5PkqMMqu8","tlshash":"f4e33ba93681b47263ea19e210bb0405f37918257c0d94e4f22cfddb3d3295952ebf6d","first_seen":"2024-07-01T01:42:08Z","last_seen":"2026-06-03T06:21:04.427695Z","times_seen":1725,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":18,"connect":28,"send":0,"wait":6,"receive":3,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recommender.scarabresearch.com/js/1C3C6FDBF34C5A79/scarab-v2.js","fqdn":"recommender.scarabresearch.com","domain":"scarabresearch.com","tld":"com"},"ip":{"addr":"18.197.44.10","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.scarabresearch.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 18 Jun 2025 00:00:00 GMT","end":"Wed, 15 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:EF:7B:9C:5D:BE:06:29:41:57:AD:1F:A7:CB:5C:1F:5A:C0:FA:33","sha256":"B3:AB:37:F8:0F:C1:98:A5:B9:92:68:93:A2:0D:A2:B4:BF:02:6A:8C:A0:CD:29:C8:94:E0:B6:6F:D5:BC:D0:A5"}}},"request":{"raw":"GET /js/1C3C6FDBF34C5A79/scarab-v2.js HTTP/1.1\r\nHost: recommender.scarabresearch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\ncontent-type: application/javascript;charset=utf-8\r\ncache-control: max-age=3600,public\r\netag: \"b7da0c70d20e3c03d2133c38b6f5c866--gzip\"\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":97890,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (542)","md5":"a897b0d5600777a895d6a9606a173afa","sha1":"bac76fc51bf637b19be3a3aa58c42e63be53d4e1","sha256":"65f9d55ca38ee2daf5e2ac34217c1589e6d5b7229a9fa16758f4788cbec19f99","sha512":"f1b879aee3693dd10a8c3172260ec37d20816a17b0c449ec03ec8a00f580d7bb68c77c6189b7d8fa8d591a6bf5f8cb5902760db26e1c7a7e7bd7e5db53da173b","ssdeep":"1536:UmGGaEDAlosxdgtN9gjIklhMzpJ0kI464apAn03DXpkfwROvOPI:pGHEDAloWd+qIklfRAn01iMI","tlshash":"c7a3524da9fb24279567703c9eaf60087a768047245cce14789ce3906fa497847fafec","first_seen":"2025-11-27T17:25:33.628529Z","last_seen":"2026-01-06T12:47:16.102526Z","times_seen":162,"resource_available":true,"data":null}},"time_used":781,"timings":{"blocked":377,"dns":14,"connect":22,"send":0,"wait":26,"receive":0,"ssl":328},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/user-api/csrf/update?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /bff-api/user-api/csrf/update?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nSmDeviceId: \r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: HewaI0AR-isVikRSGpX30TnfiRycO7R9AxSI\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBfDE3NjU5MzM2NTUxNjZ8QUZfMkNBMzZFMzQ3NUM3\r\nwebVersion: 13.9.4\r\nx-ad-flag: 8FkZa3NuCnoO+IBsqSDbVbjbZFDPBy/Ccg7HPaagWd6Z0k+h6+rK67aH0c1E5efGgWYq61YJe9rvWC5xPj7ZVVYoP3i9GVpBfVkWfa8EsrsGa2KgaixOSZmJfGKy6YI874yU0pb2l85B3RSMhSMlbQ==\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nuber-trace-id: ffb52b8e792f1922:ffb52b8e792f1922:0:0\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933655183\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=CM2f7NzMxYzI1YWY4YzQxNGE3YTkwYmM3NDRhZDFiYTdlM2Y1ZTcwY2JkMzQ3MDZlMGM4Y2ZmNjg0NzFmOTMzM2U1Mg%3D%3D\r\nx-cs-random: sdk error\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 82\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEM3wxNzY1OTMzNjU1MzYyfDU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: ffb52b8e792f1922\r\nserver-timing: g;dur=2\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster2\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"2288e5491a297b216ed4e15dff634e4a","sha1":"521e150a1222fb45888edeac4b63936368f455d5","sha256":"f189305a4bc71e7d992b726127c6c3bffd3fb3bab1be5557fccab8fbbb7cc6a0","sha512":"784494a404ce5ca5c00c7d9a64e6d4e6a7c8ebae0fcc68ff2263d5651f7cc94835d471e753cca7b2a163cd2a8241ce737c45bcb68ebdaf026a706ace0032c3ce","ssdeep":"","tlshash":"2ba011a0003e2f0300238ca0acae2282a0ea2280000382082eac8a200aa2282080a02c","first_seen":"2025-12-17T01:08:42.937387Z","last_seen":"2025-12-17T01:08:42.937387Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/clientPerInfo","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:37.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /clientPerInfo HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nDS-ACCESS-TOKEN: 4bc3a2dd3549401b817438eede7e78da\r\nDS-ACCESS-SITE: shein\r\nContent-Length: 1176\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1176,"data":"{\"browser_versions\":\"134\",\"browser_name\":\"Firefox\",\"os_versions\":\"10\",\"os_name\":\"Windows\",\"device_name\":\"\",\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"visit_id\":\"mggzq4xmy0ao\",\"host\":\"eur.shein.com\",\"local_time\":1765933657859,\"timestamp\":1765933657859,\"client_url\":\"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\",\"url_path\":\"/ark/2812\",\"app_versions\":\"\",\"network_effectivetype_type\":\"unknow\",\"worker_init_type\":\"navigate\",\"cache_type\":\"unknow\",\"is_crawler\":0,\"device_type\":\"pc\",\"sub_site\":\"eur\",\"language\":\"en\",\"home_site\":\"shein\",\"page_name\":\"page_ark_production_918\",\"page_version\":\"2812\",\"page_from\":\"\",\"resource\":\"business_navtrack2812\",\"data\":[{\"key_path\":\"parsedSSR__businessScriptLoadStart\",\"values\":{\"num\":260}},{\"key_path\":\"businessScriptLoadStart__mainJSLoad\",\"values\":{\"num\":887}},{\"key_path\":\"mainJSLoad__runtimeMainJS\",\"values\":{\"num\":25}},{\"key_path\":\"runtimeMainJS__pageJS\",\"values\":{\"num\":222}}],\"id\":\"9c26ecf5-63d9-589a-a5de-55487193fe4c\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/44829-3c43e3fa1f3b9a22.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/44829-3c43e3fa1f3b9a22.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:39 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 90048\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":285576,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65450), with no line terminators, with escape sequences","md5":"b98447b77e90b48ad648dd2412be8ee8","sha1":"ea5e4df80dd2417e5ec91743c2a99bc45d64fb97","sha256":"bb98aac48c42fa0cb4148cd1c2f8375c3ea66cd4a3f7396ed46bc9b42a8f8898","sha512":"bb6cc89949db10faea49f29efe265761d48437b1922988039bbcae63128371e791e09a8356686ec844f7768c57696712fc3b09a12e519daa40ec3cfad393ec9e","ssdeep":"6144:aW9C+iI+VJJQcaFU08QE7ZftBaOrS/tfL1sRVDdT8ZhYV/T:aWt5E2U08QE7ZftBaOrS1fLaRVDdTv","tlshash":"27540ac872e6f06607e665e5802f5007f3396929784c94a0f265e8f17cb598fa237f39","first_seen":"2025-12-09T15:42:57.595289Z","last_seen":"2025-12-24T03:17:54.230199Z","times_seen":40,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:42.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nDS-ACCESS-TOKEN: 4bc3a2dd3549401b817438eede7e78da\r\nDS-ACCESS-SITE: shein\r\nSmDeviceId: WHJMrwNw1k/E6FWWr45huH0SHkq/FHZP1RiBdRWJwnugpcKfvQ3M3byyyMOZe0v4ZceX7Tyqo6/mmqa0+4YaY/SFq8F8CjtuOdCW1tldyDzmQI99+chXEimu23C9OY/lrYp5HxsF710w6FU/fzhj65gCHPPxycwCneu8bpbMPuOQ3v/uKv7fr2biq+/JtOAQVL1Zk3jUkmm7NtAKvckCXn1o1sVkOqGcHswC/75UCs431H7aqDLDtYA==1487582755342\r\nx-oest: RTBEMzU0QzBfODEyN19GfDE3NjU5MzM2NjE5OTl8Qjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nClient-Ugid: 240fv9wkwo\r\nContent-Length: 1957\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:42 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_ccc/2024/09/18/92/1726668709c6408f075e79bdc72f7d2e5b42ed848b.png","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_ccc/2024/09/18/92/1726668709c6408f075e79bdc72f7d2e5b42ed848b.png HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 187\r\ncf-ray: 9af28633e9fe569b-OSL\r\nlast-modified: Thu, 30 Oct 2025 04:57:28 GMT\r\netag: \"6902f038-bb\"\r\nexpires: Thu, 25 Dec 2025 01:07:33 GMT\r\ncache-control: public, max-age=691200\r\nage: 2315048\r\nedge-cache-tag: 2025110217\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 50, 2-bit colormap, non-interlaced","md5":"9a85b221d7a8299ce293d46a7c3a2962","sha1":"58d84ec676af2454e3ab4610a20e54c5b0714443","sha256":"aa94cc1ed84ca4e07b3a353ebde14a8363f9deffbb6133f6b7a1d88996d5b83f","sha512":"7c3b6b7de1c61c20b323482ad14d4d12a49c0dc18598fb62a36302feff5243f790555fadb7c2871f0d9529dbb74242411729a47995df77f3cfd2bd139b994d04","ssdeep":"","tlshash":"39c022b084929d2cc789a2a5422200119e20a01c263762130406ce77260768192117e6","first_seen":"2024-11-22T10:47:21.541083Z","last_seen":"2026-06-03T06:21:04.460653Z","times_seen":1387,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/runtime-7a1b9fff1fd89955.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/runtime-7a1b9fff1fd89955.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:39 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 22832\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46836,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (46783)","md5":"75a6e35e6d443fc4afdee9fbf16d7d89","sha1":"12acadbc4373928bd62aa5dab50618e7ac45e7f9","sha256":"a1ce22e97eb6be0af53bffb3522d3cbc04ee30fb4ff00bca3eb7aaebf9761596","sha512":"05eef8bdd239ffdab9e7c11d2afcd63716c21fc2a0a991258e486c2856888d47e01658a75ad606e4d81542ddcb5ac66b51f8dae2317fcabb982d50611a6d426d","ssdeep":"768:y+Wpv5mD/gydsPjMSfHXE2d6sOUuSlipiCf8/MjDGtLJfcrQEPh9k334i:y+Ehm7aoSfHX3CtSlUoMji3ftE5m","tlshash":"95231ade9e1a0ed518fb0e897e510390d63cf092ba5c08a8b1e57f7f08e2ee45192757","first_seen":"2025-12-09T15:42:57.555682Z","last_seen":"2025-12-17T05:54:39.335898Z","times_seen":17,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":103,"dns":55,"connect":1,"send":0,"wait":6,"receive":1,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/core-vendors-33f3d38194cfaae3.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/core-vendors-33f3d38194cfaae3.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 13 Nov 2025 09:30:19 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 31706\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91630,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"fc27563130905a0be1d773e1a6fb68b1","sha1":"706f5a3c762d5465f6c6879365e532d1eddf7444","sha256":"dc2c3830285f173b34dacf5b93bf99561e426ba6c60fbc555736ed988d14369c","sha512":"801ddb7bb3a4b064c153191b3fc14cce67b2b4b9af0cb07d3a0d2267eba55a748ed974cf992e2f0cc4fffc2d865909938e6f267dc4bf72455b59a64614aa0572","ssdeep":"1536:JPOBXAOzppEXqqCfMoMq0hJVXFbgTm3pgvlaNDfAzlgnUA2hSe:A1zppEaqCh6xU8WaNDIzl4je","tlshash":"57931ac5f1e2b07507e724f4807f150af23a9859344e94a4f269e8d26c3a98e907bf7d","first_seen":"2025-06-07T05:05:06.65978Z","last_seen":"2026-06-03T06:21:04.454187Z","times_seen":1496,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":131,"dns":57,"connect":1,"send":0,"wait":12,"receive":1,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/user-api/address/update_country?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /bff-api/user-api/address/update_country?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\ntimezone: GMT+0\r\nbrand: shein\r\nchannel: pc\r\nappcurrency: EUR\r\napplanguage: en\r\ntoken: MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\r\nsiteuid: eur\r\ncurrency: EUR\r\nlanguage: en\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkN8MTc2NTkzMzY1NjE3OHxBMzZFMzQ3NUM3\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: \r\nx-request-by: bridgeX\r\nuber-trace-id: fff72d4b56c03c20:fff72d4b56c03c20:0:0\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933656182\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=DkbVIZDNmZjBhNTZkMjUxY2IzYjc3MjUxOGJiNjNjNmIwMjFkNjJkMWQzMzczZWU3N2Y0ZTI4ZTIyZTI1ZjMyNzY2Ng%3D%3D\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 94\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkN8MTc2NTkzMzY1NjIzOHxBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: fff72d4b56c03c20\r\nserver-timing: g;dur=2\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster3\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster3\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster3\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nset-cookie: sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; expires=Thu, 18-Dec-2025 13:07:36 GMT; max-age=129600; path=/; HttpOnly; secure\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"2afa9fd8207612569c54d2305a2daf1b","sha1":"3473829afe4137ba5df8cfc97b7b4ee25d881e09","sha256":"93b59dd90c73ab01af123601ba2022fa3f69b94ff99dcccca8528c0d40d7c47f","sha512":"024dab5a51c8b2d3dc3b653fe6673c01936be45e97bb6c926f1860c726ed8dc43404cb4993787a4fb1eb897d2418f038acd6f6bff1ea4164c1f78a7c1512556c","ssdeep":"","tlshash":"34b0125d500b1acfe823c3406ccf24000d097111c10391224c881b2286619da034052d","first_seen":"2024-12-27T16:00:36.522134Z","last_seen":"2026-06-03T06:21:04.459249Z","times_seen":1648,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/user-api/privacy-banner-api/query_user_latest_cookie","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:36.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /bff-api/user-api/privacy-banner-api/query_user_latest_cookie HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nSmDeviceId: \r\nContent-Type: application/json\r\nContent-Length: 112\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":112,"data":"{\"brand\":7,\"domain\":\"eur.shein.com\",\"siteUid\":\"eur\",\"language\":\"en\",\"sa\":\"8559629F_63D0_0FD4_B35E_ECBB733E13DA\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 35\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEfDE3NjU5MzM2NTY1MDV8MzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: 9c63aed65ecdccc6\r\nserver-timing: g;dur=5\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster2\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"21de3ad8bc063b987d83f9fc83d20cf9","sha1":"de8e7dfe7df9f65524034e52d76ab994436a9fb1","sha256":"971d912a68f46d166f77ad3a1930136af2998f735c9afb68e56a1460e2ef01ea","sha512":"631e0aa704174ed231a1e5309510b90cd05bbc2dbfbd94dcd6efed75b0e0c13a1a44239b67308eec597c61a022dd789e9878023f321e9d7a14b269d20e7dcf75","ssdeep":"","tlshash":"c5800080800f2c83008302088e8e0a8082ae22a280a2cb000e2c0f300aaa8e20830038","first_seen":"2025-04-13T23:15:28.789124Z","last_seen":"2026-06-03T06:21:04.476918Z","times_seen":1337,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/81206.3e8ce77bccbf6c25.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:36.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/81206.3e8ce77bccbf6c25.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:37 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 5582\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14271,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14142)","md5":"36e6796784a0206204008cb31ccc7080","sha1":"fbb12c77d11845f4189ae54b61393f8721c5dbb7","sha256":"09dede2f27a4637ad6e80750938af28600e0ff9d3615928f2bca5f3fd6afd6f2","sha512":"9233cde680ccfccf838db12269f57145601161ffbf7f6d107f0ef7528684e9d04d61242ab60418ff53250f03274df87fdc158df1a48423e6674fe84fd47f2b01","ssdeep":"192:3kfVKzbPRbFNMYBaOJuM7Uc6owDGJ7dp207ponjVzefpgB+hOmYqpqEYv/M+WITq:3kozbP1FexMjwDYr207pcmaJFa7vbAVI","tlshash":"fd52091ff805303335f30dfeead6ab797335ab8871615260b31091625e0fa4d82b8b69","first_seen":"2025-12-09T15:42:57.71904Z","last_seen":"2025-12-24T03:17:54.100632Z","times_seen":40,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/promotion/coupon/combine_coupon?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:37.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /bff-api/promotion/coupon/combine_coupon?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nSmDeviceId: WHJMrwNw1k/E6FWWr45huH0SHkq/FHZP1RiBdRWJwnugpcKfvQ3M3byyyMOZe0v4ZceX7Tyqo6/mmqa0+4YaY/SFq8F8CjtuOdCW1tldyDzmQI99+chXEimu23C9OY/lrYp5HxsF710w6FU/fzhj65gCHPPxycwCneu8bpbMPuOQ3v/uKv7fr2biq+/JtOAQVL1Zk3jUkmm7NtAKvckCXn1o1sVkOqGcHswC/75UCs431H7aqDLDtYA==1487582755342\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: nTohXdDF-15sWgce8ZNP6YreVwqzw-mJq1Po\r\nContent-Type: application/json\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZ8MTc2NTkzMzY1Njk4NnxfMkNBMzZFMzQ3NUM3\r\nwebVersion: 13.9.4\r\nx-ad-flag: 8FkZa3NuCnoO+IBsqSDbVYTFm6zUmft9Vh7q2yhidy/tjTBrwINMUj9QAPXBTqi1Z9m3aGmbBKDl19FMxbV7y+55HcmFRosSIRKGPivl8+LqhNSOT7goHRSBc8hQvaioiQrAI0RJ5sm4uEg1OBb9Ig==\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nuber-trace-id: fff1b97c20316105:fff1b97c20316105:0:0\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933656992\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=SsESMYWFjODY3MTM4OTA2OWI4OGUxOTU5ZTQzYWYxMDRhMzI0ODYwMmNmMjZhZjg4MGVmODUwY2Y4ZTk4ZDRhYmZhNQ%3D%3D\r\nx-cs-random: 03d0ed219071939e5c7a63f35f13847de83b7a9069f092bc76b76dbb156a064b9cef052485b80ab22d82ee8337c98aef6cae796f103ad3e7ec7b2bfbac943f53653dc56802b96\r\nContent-Length: 143\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":143,"data":"{\"firstPopup\":\"0\",\"blackBox\":\"\",\"version\":\"v2\",\"is_from_login\":0,\"advertise\":{\"url\":\"https%3A%2F%2Feur.shein.com%2Fiframe_login\",\"isLast\":\"1\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 2034\r\ncontent-encoding: br\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3fDE3NjU5MzM2NTcwNDd8NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-order\r\nx-gw-traceid: fff1b97c20316105\r\nserver-timing: g;dur=53\r\nvia-shein-gateway: c-shein-pc!bff-order\r\nheader-cmdb-name: bff_order_eucentral_prod_cluster2\r\nheader-cmdb-name-origin: bff-order-eucentral-prod-cluster2\r\nheader-cmdb-sname: bff-order-eucentral-prod-cluster2\r\nheader-cmdb-app-name: bff_order\r\nheader-cmdb-app-name-origin: bff-order\r\nheader-cmdb-app-sname: bff-order\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14800,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (14720), with no line terminators","md5":"90b5820acab8557cfeac82766bed2a27","sha1":"283702915c10d512fe3412578421ffc492b72a6f","sha256":"3a5cd8d4e15952d6496e2502c5f83fc6c2fff400aa4bd071bafe405128a5f468","sha512":"398cab473f084fbc3c93963b99fe582736cf93de01c1b1ec3fad9290e9142da1f74741279857d70fca828e08f5156094553a8eb8f72f145ee4e0ce93969c7d3c","ssdeep":"192:3maSo97Y5kF0IKiXJqOAw01Y4XBd0SvU0KjZKXOZXBf909t1Xb87My0LodXZRJvy:3N1jalMdfGdbpMs","tlshash":"df622314b43b4d69691b45e6ec8c7f2692ac1337d38d8e59a8d6cf2811ed5bd320031b","first_seen":"2025-12-17T01:08:42.9483Z","last_seen":"2025-12-17T01:08:42.9483Z","times_seen":1,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/mdmpUserLanding","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /mdmpUserLanding HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nds-from-terminal: pc\r\nx-oest: RTBEMzU0QzBfODEyN19GfDE3NjU5MzM2NTMyMTF8Qjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nContent-Length: 1448\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1448,"data":"{\"activity_name\":\"Landing\",\"activity_param\":\"{\\\"ad_activity_name\\\":\\\"newuserprice\\\",\\\"scene_id\\\":\\\"m_app\\\",\\\"platfrom_nm\\\":\\\"swift\\\",\\\"bu_department\\\":\\\"marketing\\\"}\",\"device_type\":\"pc\",\"home_site\":\"shein\",\"sub_site\":\"eur\",\"language\":\"en\",\"system_language\":\"en-US\",\"money_type\":\"\",\"device_country\":\"\",\"app_versions\":\"\",\"network_type\":\"\",\"ip\":\"\",\"screen_pixel\":\"1280*1024\",\"screen_size\":\"\",\"device_class\":\"1\",\"device_brand\":\"\",\"device_name\":\"\",\"device_model\":\"\",\"os_type\":\"1\",\"os_name\":\"Windows\",\"os_versions\":\"10\",\"browser_name\":\"Firefox\",\"browser_versions\":\"134.0\",\"session_id\":\"bi_1765933653037_61177\",\"channel\":\"affiliate_af_b_33_121_0\",\"origin_otherid\":\"\",\"traffic_source\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"market\":\"\",\"start_time\":\"1765933653032\",\"end_time\":\"\",\"environment\":\"production\",\"device_id\":\"\",\"device_idfa\":\"\",\"device_idfv\":\"\",\"device_aaid\":\"\",\"referer\":\"https%3A%2F%2Feur.shein.com%2Fark%2F2812%3Fonelink%3D13%2F4s0r28uoh4d8%26requestId%3Dolw-5ag0n5ca69ld%26url_from%3Daffiliate_af_b_33_121_0%26affiliateID%3Daf_b_sub_13300%26click_id%3Dd0e56b0a85344d81ae746ea548d5e9a1%26cdn_rsite%3Dcf%26ref%3Dwww%26rep%3Ddir%26ret%3Deur\",\"sdk_version\":\"1.1.15\",\"login\":\"0\",\"member_id\":\"\",\"ugid\":\"\",\"page_param\":{\"ad_activity_name\":\"newuserprice\",\"scene_id\":\"m_app\",\"platfrom_nm\":\"swift\"},\"tab_page_id\":\"page_ad_landing1765933653032\",\"page_id\":\"6342\",\"page_name\":\"page_ad_landing\",\"timestamp\":\"1765933653040\",\"local_time\":\"2025/12/17 01:07:33\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/app-track/metric-info","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:34.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /app-track/metric-info HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1410\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/52866-1b24f191be37b98e.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/52866-1b24f191be37b98e.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:39 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 18216\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":59020,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58827)","md5":"91969172f0450b236264bb6a4f0036e7","sha1":"c30f27470b76af0d6a9d327e5077e65c3db45403","sha256":"7925ddf4f7ef034e34fc484b6d1a2028fbce99fa8f56177241863c23052136d9","sha512":"116548d5597759497b9afe5642564434a72c98e3e07d1a7b6e08a3dd7b7332d74c10f48718228912675bfdee3fda2e527054819f33af577c4c599212858ea5b5","ssdeep":"1536:Rr9kFmn9QhZsHgFuK8hEoT/PtgGesNg3MUlK2nHLF:RBkqShZsHgsrEoT+GKxF","tlshash":"30432b87f3abe42209f944e594234512e2397a4535899088faaf5cc1391de8fb173f7e","first_seen":"2025-12-09T15:42:57.68207Z","last_seen":"2025-12-17T05:54:39.257322Z","times_seen":17,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/41250-36d8124982024b3a.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/41250-36d8124982024b3a.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:39 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 41999\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":135598,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65278), with no line terminators","md5":"0219fb2896b1da69a1bb91fe9d8762a1","sha1":"5a14fe3e5a99a377c945b3065f62ea19c59b876b","sha256":"beb48c0d1e1f0d79e8425919a2072f417626f37081e2d5958a7599f285ff90f4","sha512":"c20640fb3f75fa83f6c64598c89c76162859f63efa9f7ed884e5d3102d86547d560d3a3804e4fb558c437548930e7b65af28110999aff7b7052fd7d9c19b7331","ssdeep":"3072:bvRfMAFQTXDeN2NzSGSEB6zMWSoNEdIS9c05cR5SiaspSpq1:NfcMM5BqMWS+as51","tlshash":"cbd36d86d3abf05201f944e9f4371611a1387b193548c858b36e9cd93d4da8fb2b2f7a","first_seen":"2025-12-09T15:42:57.556518Z","last_seen":"2025-12-17T05:54:39.334609Z","times_seen":17,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/app-track/metric-info","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /app-track/metric-info HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:37.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nds-from-terminal: pc\r\nx-oest: RTBEMzU0QzBfODEyN19GQjh8MTc2NTkzMzY1Nzg4MHw0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nContent-Length: 2138\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/js/275.23a4820.chunk.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/js/275.23a4820.chunk.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 31 Oct 2025 13:22:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 10996\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41245,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41096)","md5":"c13375ec8954275c93725cea182e4dd1","sha1":"b4d5ba5d9be4fc1051a14036313c429173661bd8","sha256":"4d80f38622f2441413022fd4276e52aefb9d6090c75f5156f871988f470ce3a4","sha512":"b1ddce03ee32c07bdac5dd007727e9af4b019f63c71b75406a1b873cd06f5446e301162f91a738e1d36cd47a9f914827e361eab6b48aec0c9e184a4c8cbbaa96","ssdeep":"384:dHr2IbYn68WaGkC1CaYLFsAvUIP9jyUX88Bo41T++XIANkuC3PqtHY77bTsLlrOl:dL2CYt8CaKFsCBo41TxNM/qZSw3GUfjA","tlshash":"860319ccb1c07c3887839264521f2605527e7d9d26694cd8b3fae5e06db86dcb326b39","first_seen":"2025-11-01T03:09:47.592335Z","last_seen":"2026-03-23T01:37:21.093628Z","times_seen":604,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token,ds-from-terminal,x-oest\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nds-from-terminal: pc\r\nx-oest: RTBEMzU0Q3wxNzY1OTMzNjU3OTMzfDBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nContent-Length: 2144\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2144,"data":"{\"activity_name\":\"expose_navigation_menu\",\"activity_param\":{\"first_menu_content\":\"Underwear \u0026 Sleepwear\",\"first_menu_hole\":\"8\",\"second_menu_content\":\"Underwear \u0026 Sleepwear\",\"second_menu_hole\":\"8\",\"second_node_id\":\"110000037\",\"src_identifier\":\"fc=Underwear \u0026 Sleepwear`sc=Underwear \u0026 Sleepwear`tc=0`oc=0`ps=tab08navbar08`jc=itemPicking_017172965\",\"second_content_list\":\"/RecommendSelection/Underwear-Sleepwear-sc-017172965.html?ici=eur_tab08navbar08\u0026src_module=topcat\u0026src_identifier=fc%3DUnderwear%20%26%20Sleepwear%60sc%3DUnderwear%20%26%20Sleepwear%60tc%3D0%60oc%3D0%60ps%3Dtab08navbar08%60jc%3DitemPicking_017172965\u0026adp=\u0026src_tab_page_id=page_ad_landing1765933653032\",\"is_slidebar\":false,\"third_menu_content\":\"\",\"third_menu_hole\":\"\",\"fourth_menu_content\":\"\",\"fourth_menu_hole\":\"\",\"src_module\":\"topcat\"},\"device_type\":\"pc\",\"home_site\":\"shein\",\"sub_site\":\"eur\",\"language\":\"en\",\"system_language\":\"en-US\",\"money_type\":\"\",\"device_country\":\"\",\"app_versions\":\"\",\"network_type\":\"\",\"ip\":\"\",\"screen_pixel\":\"1280*1024\",\"screen_size\":\"\",\"device_class\":\"1\",\"device_brand\":\"\",\"device_name\":\"\",\"device_model\":\"\",\"os_type\":\"1\",\"os_name\":\"Windows\",\"os_versions\":\"10\",\"browser_name\":\"Firefox\",\"browser_versions\":\"134.0\",\"session_id\":\"bi_1765933653037_61177\",\"channel\":\"affiliate_af_b_33_121_0\",\"origin_otherid\":\"\",\"traffic_source\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"market\":\"\",\"start_time\":\"1765933653032\",\"end_time\":\"\",\"environment\":\"production\",\"device_id\":\"\",\"device_idfa\":\"\",\"device_idfv\":\"\",\"device_aaid\":\"\",\"referer\":\"https%3A%2F%2Feur.shein.com%2Fark%2F2812%3Fonelink%3D13%2F4s0r28uoh4d8%26requestId%3Dolw-5ag0n5ca69ld%26url_from%3Daffiliate_af_b_33_121_0%26affiliateID%3Daf_b_sub_13300%26click_id%3Dd0e56b0a85344d81ae746ea548d5e9a1%26cdn_rsite%3Dcf%26ref%3Dwww%26rep%3Ddir%26ret%3Deur\",\"sdk_version\":\"1.1.15\",\"login\":\"0\",\"member_id\":\"\",\"ugid\":\"\",\"page_param\":{\"ad_activity_name\":\"newuserprice\",\"scene_id\":\"m_app\",\"platfrom_nm\":\"swift\"},\"tab_page_id\":\"page_ad_landing1765933653032\",\"page_id\":\"6342\",\"page_name\":\"page_ad_landing\",\"log_id\":\"380ec230-6129-4784-a886-a253efe27b21\",\"seq\":\"13\",\"timestamp\":\"1765933657923\",\"local_time\":\"2025/12/17 01:07:37\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_spmp/2024/10/23/38/1729678656723d2e8074ab57ec85e5bef565c59678_thumbnail_336x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_spmp/2024/10/23/38/1729678656723d2e8074ab57ec85e5bef565c59678_thumbnail_336x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13718\r\ncf-ray: 9af286297d7c569b-OSL\r\nlast-modified: Sat, 06 Dec 2025 00:19:01 GMT\r\netag: \"69337675-3596\"\r\nexpires: Wed, 24 Dec 2025 01:07:31 GMT\r\ncache-control: public, max-age=604800\r\nage: 788828\r\nedge-cache-tag: 2025120806\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13718,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 336x447, components 3","md5":"4beb980126ecc593b9385b024bb66445","sha1":"c45f37bf3dbd4e02ebc4224d176e9b0587ad5c9e","sha256":"01257fe01db8671b0a0c2167bebdea89a2eca816d588681d43df58cfecbdb016","sha512":"702933a32bc54116903c9dce64c019ccf80a7a46174e35b6a9c079f98ec389675f9f44c0fad3f08813a48cf47a0117e0e9a2af82564bdb72c4d09547dbfa907e","ssdeep":"192:L0/7HmPJYYiMS1xODGvvz/54LmITC9+T1/Dm3MIwGgs4u3SPfkFlHCJAJGP4aWu9:embkXjWLmIm9+tm3aGpiPfkFJCPzbXZ","tlshash":"0f52af9acca90180c9618cecfc708fb57a191b108756858bd7ed0269fa34fcd9dd8e75","first_seen":"2025-12-06T14:39:18.537035Z","last_seen":"2026-05-16T21:33:14.95635Z","times_seen":113,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":12,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token,ds-from-terminal,x-oest\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"count.shein.com/none.css?server=eur","fqdn":"count.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /none.css?server=eur HTTP/1.1\r\nHost: count.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: text/css\r\ncontent-length: 0\r\nlast-modified: Thu, 27 Oct 2022 14:31:17 GMT\r\netag: \"635a9635-0\"\r\ncache-control: no-store\r\naccept-ranges: bytes\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":46,"connect":4,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/event-center-21.15f971b2ad443f0c.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/event-center-21.15f971b2ad443f0c.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 05 Dec 2025 06:08:31 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 354\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:35 GMT\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":476,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (415)","md5":"3568fb5678371fcdec3826b535552c7e","sha1":"086a0f7817a469b51740259dd9c26c9baa2b70ff","sha256":"763b1be1537b13493896ba4624b60edef5c5f035312c81d571409feee6fd863b","sha512":"583f5177a054f27d94a1f33861ded9d6960911d5aa8a90bed32815c652becbed659ced6de05671b8c1275527db0cc25a3b75491384452a0d7db5e7d25ce64f97","ssdeep":"","tlshash":"60f0dcc9b4d339b43e3b0ac9b6b2976a88388437b07560d133840e4248dec5a15c67b8","first_seen":"2025-05-19T19:51:55.883111Z","last_seen":"2026-01-20T19:05:52.619982Z","times_seen":1097,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-17T01:07:30.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://onelink.shein.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: text/html; charset=utf-8\r\nx-dns-prefetch-control: on\r\nx-xss-protection: 1; mode=block\r\nx-download-options: noopen\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=7776000000; includeSubDomains\r\nx-frame-options: ALLOW-FROM https://www.messenger.com\r\nx-anti: RTBEMzU0QzBfODEyN19GQjg0X3wxNzY1OTMzNjUwOTM2fDdBQUZfMkNBMzZFMzQ3NUM3\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nx-gw-traceid: a28b976c06d9124d\r\nserver-timing: g;dur=265\r\nvia-shein-gateway: c-swift-ssr-service\r\nheader-cmdb-sname: swift-ssr-service-eucentral-prod-eu\r\nheader-cmdb-app-name: swift_ssr_service\r\nheader-cmdb-app-name-origin: swift-ssr-service\r\nheader-cmdb-app-sname: swift-ssr-service\r\nheader-cmdb-name: swift_ssr_service_eucentral_prod_eucentral\r\nheader-cmdb-name-origin: swift-ssr-service-eucentral-prod-eucentral\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-length: 162389\r\nset-cookie: armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; expires=Thu, 21-Jan-2027 01:07:30 GMT; max-age=34560000; path=/; domain=shein.com\nlanguage=eur; expires=Wed, 24-Dec-2025 01:07:30 GMT; max-age=604800; path=/; domain=shein.com\nsessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; expires=Thu, 18-Dec-2025 13:07:30 GMT; max-age=129600; path=/; HttpOnly; secure\nAT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; path=/\nsessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; expires=Thu, 18 Dec 2025 01:07:31 GMT; path=/; HttpOnly; secure\nsessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM; expires=Thu, 18 Dec 2025 01:07:31 GMT; path=/; HttpOnly; secure\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":1143387,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23706)","md5":"cd5ffd2a0031715b3d3c2b06ec7eff8e","sha1":"5cb78c74ca87c097834bd72c1e95c45de9ec7939","sha256":"c51898f9507f8def1203729a755dceb055a15065e9fbed816022b5ba8b426c46","sha512":"4454dd0c20f333dcbb20aad8d4d1bb5320ca792f05e2f8e74e0f79a5039da9041ed469cbb55b2b6156c2dd32a06f8dab34283c70997c311793a579b39d7c2480","ssdeep":"6144:RbJBEg7q2T4LoRNbaPSfybwfRb7NSTZdGGt+:Rbr7q2T4LuNbaPSfybwfR9STZDo","tlshash":"f7254a24e0645838a577d575f8817a5470ec9113d21b4bacfeeeab644bca9af363033c","first_seen":"2025-12-17T01:08:42.955706Z","last_seen":"2025-12-17T01:08:42.955706Z","times_seen":1,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":70,"dns":50,"connect":1,"send":0,"wait":349,"receive":11,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/libs/devices/fpv2.7.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/libs/devices/fpv2.7.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 05 Dec 2025 06:07:16 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 56380\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:35 GMT\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":187719,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"a6222336e47e7ce13ef938761425d2af","sha1":"45f97ba8ff1da61f2d648e782e219cc807ff78ea","sha256":"90382492624d42440cef1884ac3e3538755dbcd8dd399583a8fca2db6cdd4e06","sha512":"a713dfe73eb9289f066344c1ee903d2046c90fad1f9434c383b531ec66453a3927332ddc35132ffdd66a8d4bb8f1da08fc6a70adc4e338d1302c1258a23e387d","ssdeep":"3072:ggGC+CMjRnwttCxWhnqaW0iUZeINl+wJftXVmrSG80tDooRU4/:gTnwaE0FU5XVmrSG80tDooRUE","tlshash":"fd0471446bc2b88813878f7a375fb0d5fa5b1d9938850c4bc015fde0aad1a06faf2975","first_seen":"2024-12-14T16:14:52.256033Z","last_seen":"2026-06-03T06:21:04.40205Z","times_seen":1707,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/51144-972a3f06c3863acf.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/51144-972a3f06c3863acf.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 13 Nov 2025 09:30:19 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 2292\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:35 GMT\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5378,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5327)","md5":"6150943db2c8f685560acb0f96d31078","sha1":"a6d85debd5d2eb42fd502c4b967281da2d4601d1","sha256":"5a49374ea14b4e6bf9d929f16f1e8bf11542b2a6aac749dda00e582d8c23d239","sha512":"1d3518721f88a797bb40a78a8fa08294e678ffa04432820a27f6f325fed1811fa5809ff6015b2ed71806c3741f9adeb6da52ba9b61c7f1416d7ac3eeafd3f161","ssdeep":"96:+H1zf/AM8wBPj/kb+DQ9y+zPTgXS4IvFM3pwRY4XCcO+Luj20gwA:0f/AoPYKDkEi4ItM3pmEcOQuzxA","tlshash":"e3b17586f1dab41213e27010193fa05bf163742a256e8565f179d4f9bcf8a4ee222dfc","first_seen":"2025-03-16T01:45:37.098526Z","last_seen":"2026-03-17T02:07:05.865159Z","times_seen":1440,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shein.ltwebstatic.com/svgicons/icons/sh_pc_sui_icon_more_right_16px_2.svg","fqdn":"shein.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /svgicons/icons/sh_pc_sui_icon_more_right_16px_2.svg HTTP/1.1\r\nHost: shein.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 13 Nov 2025 03:39:13 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 209\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:36 GMT\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":275,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57a00f83b34f8cb071f50819e298f0ec","sha1":"f10201b70ea0534bca1a3503fbe9648a1aa70347","sha256":"999e5212453395f59d2a18d14a92808c31b95eabd94599adb5f74dfbeae60677","sha512":"5dfbcd03621ce7cbcdff7ca82ab55a6bf8aa56b98e1b18230efac2cf8fd8a5233bdf4cf90b07a29c6cf3974b69c623e2c671d9fa728729bef4b288f430ef5320","ssdeep":"","tlshash":"16d02bf6a078ed8584074970d73c55ce14e744ee120c01bee5d13445f4129f25c5cdda","first_seen":"2024-12-06T00:00:08.459886Z","last_seen":"2026-06-03T06:21:04.400978Z","times_seen":1429,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/system/configs/multi_language?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /bff-api/system/configs/multi_language?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\nContent-Type: application/json\r\ntimezone: GMT+0\r\nbrand: shein\r\nchannel: pc\r\nappcurrency: EUR\r\napplanguage: en\r\ntoken: MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\r\nsiteuid: eur\r\ncurrency: EUR\r\nlanguage: en\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3fDE3NjU5MzM2NTYxOTl8NUM3\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: \r\nx-request-by: bridgeX\r\nuber-trace-id: ff4036530ce53710:ff4036530ce53710:0:0\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933656201\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=TXv0VYTI3MzVkOTk1M2I2NzQxNzEyZjVmODY0MjQyMmNlNzZjMGM2NmFhNjk0ZmZlNDE0NWNlZTFiNDZhZTYwMTVlYw%3D%3D\r\nContent-Length: 690\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":690,"data":"{\"languageKeys\":[\"SHEIN_KEY_PC_31563\",\"SHEIN_KEY_PC_17955\",\"SHEIN_KEY_PC_27119\",\"SHEIN_KEY_PC_15738\",\"SHEIN_KEY_PC_15737\",\"SHEIN_KEY_PC_27125\",\"SHEIN_KEY_PC_27387\",\"SHEIN_KEY_PC_15745\",\"SHEIN_KEY_PC_28787\",\"SHEIN_KEY_PC_16381\",\"SHEIN_KEY_PC_31421\",\"SHEIN_KEY_PC_14572\",\"SHEIN_KEY_PC_14569\",\"SHEIN_KEY_PC_14570\",\"SHEIN_KEY_PC_14571\",\"SHEIN_KEY_PC_14484\",\"SHEIN_KEY_PC_14540\",\"SHEIN_KEY_PC_15743\",\"SHEIN_KEY_PC_30886\",\"SHEIN_KEY_PC_24840\",\"SHEIN_KEY_PC_17111\",\"SHEIN_KEY_PC_17212\",\"SHEIN_KEY_PC_15173\",\"SHEIN_KEY_PC_16032\",\"SHEIN_KEY_PC_16033\",\"SHEIN_KEY_PC_15966\",\"SHEIN_KEY_PC_16035\",\"SHEIN_KEY_PC_21623\",\"SHEIN_KEY_PC_15215\",\"SHEIN_KEY_PC_15969\",\"SHEIN_KEY_PC_15968\",\"SHEIN_KEY_PC_36343\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 613\r\ncontent-encoding: br\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfODEyN198MTc2NTkzMzY1NjI0OHxGQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-navigation\r\nx-gw-traceid: ff4036530ce53710\r\nserver-timing: g;dur=4\r\nvia-shein-gateway: c-shein-pc!bff-navigation\r\nheader-cmdb-name: bff_navigation_eucentral_prod_cluster2\r\nheader-cmdb-name-origin: bff-navigation-eucentral-prod-cluster2\r\nheader-cmdb-sname: bff-navigation-eucentral-prod-cluster2\r\nheader-cmdb-app-name: bff_navigation\r\nheader-cmdb-app-name-origin: bff-navigation\r\nheader-cmdb-app-sname: bff-navigation\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1431,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b07340b10b2dd265c0653505a77fc8da","sha1":"daa1c20ef4d269b0a801149308046d4261069dec","sha256":"819e4a05ed13d44d51d44d2e800b2403159d5016c0f2362e7c2726fb958fec50","sha512":"e7dd2f96bbe728d6c0bf424361e78ef592b8dd111112c1c078fb2b56460a128333e13cd00d05a15633a3a222fb2dd1d4a1d7b728d7a213adb81cc2477edf21b8","ssdeep":"","tlshash":"4e21a5ce32333b1f04c0999a35a3a9641eba33dbbd358005c4684c3a0a386075fdb71c","first_seen":"2025-09-11T12:37:22.243454Z","last_seen":"2026-06-01T22:35:14.957133Z","times_seen":786,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_pi/2025/01/15/80/1736927982be5ae8f3c28e817edcc2a3889bb2f125_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_pi/2025/01/15/80/1736927982be5ae8f3c28e817edcc2a3889bb2f125_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18092\r\ncf-ray: 9af286487b3b569b-OSL\r\nlast-modified: Fri, 12 Dec 2025 01:36:24 GMT\r\netag: \"693b7198-46ac\"\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ncache-control: public, max-age=604800\r\nedge-cache-tag: 2025121301\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 30029\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18092,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"58324bcb3910a68b51059437a06a1d6e","sha1":"7a0a2f52c7b2ecb1906741c69a3bfb816460fa83","sha256":"e246e33219b400241904cc8532e5b599366ff7e9960fea65762b71e1f321dd72","sha512":"ea5e9446cbf286d94b7cd6a64e504edb10b3820061e14b20c226ea3757c5d481d510010c847d91c5f3fc0f2cdc8f4897937d74b932a18d37640d70f336a32530","ssdeep":"384:rYNg7S8ok6U2QKNeodudmoEKBLJ9Qq/UHXdhpCAkHu:rYyGrkN9KIGSmoEQLh/U33","tlshash":"5e82cf76d90af563f9a6fa704a9e5f15a3d3f63d8350768ed4313a23170c208168a1fa","first_seen":"2025-11-19T19:13:12.023733Z","last_seen":"2025-12-20T15:27:25.515042Z","times_seen":12,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token,ds-from-terminal,x-oest\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nds-from-terminal: pc\r\nx-oest: RTBEMzU0QzBfODF8MTc2NTkzMzY1NzkzM3wyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nContent-Length: 2075\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2075,"data":"{\"activity_name\":\"expose_navigation_menu\",\"activity_param\":{\"first_menu_content\":\"Men Clothing\",\"first_menu_hole\":\"6\",\"second_menu_content\":\"Men Clothing\",\"second_menu_hole\":\"6\",\"second_node_id\":\"110000035\",\"src_identifier\":\"fc=Men Clothing`sc=Men Clothing`tc=0`oc=0`ps=tab06navbar06`jc=itemPicking_017172963\",\"second_content_list\":\"/RecommendSelection/Men-Clothing-sc-017172963.html?ici=eur_tab06navbar06\u0026src_module=topcat\u0026src_identifier=fc%3DMen%20Clothing%60sc%3DMen%20Clothing%60tc%3D0%60oc%3D0%60ps%3Dtab06navbar06%60jc%3DitemPicking_017172963\u0026adp=\u0026src_tab_page_id=page_ad_landing1765933653032\",\"is_slidebar\":false,\"third_menu_content\":\"\",\"third_menu_hole\":\"\",\"fourth_menu_content\":\"\",\"fourth_menu_hole\":\"\",\"src_module\":\"topcat\"},\"device_type\":\"pc\",\"home_site\":\"shein\",\"sub_site\":\"eur\",\"language\":\"en\",\"system_language\":\"en-US\",\"money_type\":\"\",\"device_country\":\"\",\"app_versions\":\"\",\"network_type\":\"\",\"ip\":\"\",\"screen_pixel\":\"1280*1024\",\"screen_size\":\"\",\"device_class\":\"1\",\"device_brand\":\"\",\"device_name\":\"\",\"device_model\":\"\",\"os_type\":\"1\",\"os_name\":\"Windows\",\"os_versions\":\"10\",\"browser_name\":\"Firefox\",\"browser_versions\":\"134.0\",\"session_id\":\"bi_1765933653037_61177\",\"channel\":\"affiliate_af_b_33_121_0\",\"origin_otherid\":\"\",\"traffic_source\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"market\":\"\",\"start_time\":\"1765933653032\",\"end_time\":\"\",\"environment\":\"production\",\"device_id\":\"\",\"device_idfa\":\"\",\"device_idfv\":\"\",\"device_aaid\":\"\",\"referer\":\"https%3A%2F%2Feur.shein.com%2Fark%2F2812%3Fonelink%3D13%2F4s0r28uoh4d8%26requestId%3Dolw-5ag0n5ca69ld%26url_from%3Daffiliate_af_b_33_121_0%26affiliateID%3Daf_b_sub_13300%26click_id%3Dd0e56b0a85344d81ae746ea548d5e9a1%26cdn_rsite%3Dcf%26ref%3Dwww%26rep%3Ddir%26ret%3Deur\",\"sdk_version\":\"1.1.15\",\"login\":\"0\",\"member_id\":\"\",\"ugid\":\"\",\"page_param\":{\"ad_activity_name\":\"newuserprice\",\"scene_id\":\"m_app\",\"platfrom_nm\":\"swift\"},\"tab_page_id\":\"page_ad_landing1765933653032\",\"page_id\":\"6342\",\"page_name\":\"page_ad_landing\",\"log_id\":\"8eea8ba4-8102-4c94-90d9-bd588304254d\",\"seq\":\"11\",\"timestamp\":\"1765933657921\",\"local_time\":\"2025/12/17 01:07:37\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/user-api/setting/get_sample_config?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /bff-api/user-api/setting/get_sample_config?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nSmDeviceId: \r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: HewaI0AR-isVikRSGpX30TnfiRycO7R9AxSI\r\nx-oest: RTBEMzV8MTc2NTkzMzY1NTE3M3w0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nwebVersion: 13.9.4\r\nx-ad-flag: 8FkZa3NuCnoO+IBsqSDbVbjbZFDPBy/Ccg7HPaagWd6Z0k+h6+rK67aH0c1E5efGgWYq61YJe9rvWC5xPj7ZVVYoP3i9GVpBfVkWfa8EsrsGa2KgaixOSZmJfGKy6YI874yU0pb2l85B3RSMhSMlbQ==\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nuber-trace-id: ff31d53e1b302e83:ff31d53e1b302e83:0:0\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933655209\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=HGmR2YjY5NDFiNDdmYTc3ODMxMjFlN2ZjNzI3MzkyNzgwMTM1YTM5NjczOGI1NWZmNTEyNjI1OTYwNjY4OTkzYTUwMw%3D%3D\r\nx-cs-random: sdk error\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 373\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: fDE3NjU5MzM2NTU0NTl8RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: ff31d53e1b302e83\r\nserver-timing: g;dur=2\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster2\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":373,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"714fde9326c0b9650418f1388aeaa895","sha1":"d1555bc7e074defc8700327801ea221ea12605c2","sha256":"7c92696bea4a72539cfd09200c1b025df35f41c2af60d7cae6b5feb181546570","sha512":"557d32e0cf3cc9f71cf153ba8b527af4939e636dd8cbd3d0fecba464d9d52cfd3402a2fcdd56006fcbd211ca2df085f8189749863ddca313bc4eff4c9b2ce266","ssdeep":"","tlshash":"0ae01281f439eb0280eb0d70939a59c9784bf1d289d09b04d85de61b910d539122065d","first_seen":"2025-05-19T19:51:55.906002Z","last_seen":"2026-06-03T06:21:04.355173Z","times_seen":1008,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/j/pi/2025/09/09/60/17573823902f4b0de2bebf875b38cc6f8140e7235c_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/j/pi/2025/09/09/60/17573823902f4b0de2bebf875b38cc6f8140e7235c_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27728\r\ncf-ray: 9af286482b19569b-OSL\r\nlast-modified: Sun, 30 Nov 2025 02:02:40 GMT\r\netag: \"692ba5c0-6c50\"\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ncache-control: public, max-age=604800\r\nedge-cache-tag: 2025120422\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 30029\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27728,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"61bc427db2643133284a4c8fc9027479","sha1":"cbebd17c0eefc9d82fa9085647bc39378ea6d789","sha256":"133be4e685fe38f38318a2fb236ed79fac758d81d18267f88181bed85cc9ae67","sha512":"e0ad4eeaac120458b193f4fcf29b7b5033aedec0791667c879e9614d450409df65d06f8b738be583e21e3b27a7b3ddc9be3655e5b26a877ac0820b238f6441f9","ssdeep":"384:gYNg7Q1iKcvi80a/yVoeVIKmbk71slConcnfeZ+hhBABOQ1im7zkbszZsjvZ1pjR:gYyilcvB0pFmbkpo6TApG/jX4Rs","tlshash":"a8c2e17bdd51d013dcb1917c1cf1a582bacb2218473765374e3ca4fbb36d18aac4aa45","first_seen":"2025-12-16T16:48:13.511333Z","last_seen":"2025-12-17T01:08:42.962896Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/user/v3/msg_unread?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /bff-api/user/v3/msg_unread?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\ntimezone: GMT+0\r\nbrand: shein\r\nchannel: pc\r\nappcurrency: EUR\r\napplanguage: en\r\ntoken: MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\r\nsiteuid: eur\r\ncurrency: EUR\r\nlanguage: en\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3fDE3NjU5MzM2NTMyMDN8\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: \r\nx-request-by: bridgeX\r\nuber-trace-id: ff2e51d011b64465:ff2e51d011b64465:0:0\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 697\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0Q3wxNzY1OTMzNjUzMzE3fDBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: ff2e51d011b64465\r\nserver-timing: g;dur=5\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster1\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster1\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster1\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":697,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c4f1146baed9d9ddc2b4d2376de877e3","sha1":"2a5b87c57ebf114bd23b3906d1d4995d383a9ff4","sha256":"89db1bd451cc19dbc4773b4d3da3e087a0fd6e0128b71c35ba6d3de3b2951799","sha512":"54bdb0ea2eea9e151f13466f7c4dc66d0be024e6efd5cb9385645a3bf5a621d6cff2985956e0322551b8a02d814165d1af7517e094f0701a7580b90c64025bbb","ssdeep":"","tlshash":"7501a2c60c18be93039f80a0b5c7399a1bdd0b6adb9cde34877c9b0c26ddba88a41111","first_seen":"2024-07-29T13:20:42Z","last_seen":"2026-06-01T22:35:15.041582Z","times_seen":691,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/j/pi/2025/06/25/04/175084332054c5748773b5b305c04c2ffff906d2b5_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/j/pi/2025/06/25/04/175084332054c5748773b5b305c04c2ffff906d2b5_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 33603\r\ncf-ray: 9af286296d76569b-OSL\r\nlast-modified: Tue, 02 Dec 2025 02:04:42 GMT\r\netag: \"692e493a-8343\"\r\nexpires: Wed, 24 Dec 2025 01:07:31 GMT\r\ncache-control: public, max-age=604800\r\nage: 884200\r\nedge-cache-tag: 2025120703\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33603,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"2ed03da3eb0a98e0f6e0d78ca248ad8e","sha1":"7ef385138d8d7a60f22aa40474e1e6b2aa7d3aa1","sha256":"e2e6f249ab474a03edc0b871cdcb392504ba135bfc3db1326b9cc4639567ec27","sha512":"9a280f1d55473d5c76b729e0af287434b0fc9b560e8b9b406def7db8a1539e113b4433c30aa30b898dc57046bfd859939d4d59c4b30d69eecaa8b2fc1bf309c9","ssdeep":"768:gYy2EBOZqYldQravNfSIr4Gf+c0cugqqrarYc6nGs:gZBWqG2ErxGc0cufqOrYci","tlshash":"72e2e16926fb9bbdf129dc3839e137e1b1f37365e3109892d935fd0600df0a1911628a","first_seen":"2025-12-12T09:43:05.347934Z","last_seen":"2025-12-17T01:08:42.963991Z","times_seen":6,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/sh5_dist/libs/wing/wing.compatible.prod.0.14.2.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /sh5_dist/libs/wing/wing.compatible.prod.0.14.2.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 05 Sep 2025 06:21:17 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 7320\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":21871,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21772)","md5":"1e0e8db37b08f2c8b4210cf10839c900","sha1":"055936da1bc7ceca2267eea0407ac75df203a357","sha256":"f45c2fbbd33912b4daa8066e2e5acd2a7c1ec717b36bd7e462ff0687966d6842","sha512":"90d0ec3cc2f8367a37ffb429af2582c96944a6f9d13c24f1aa2cf1e68bcc04567c856f08007814557bfa2e57b865e639f0a8a447a7169e47bbf0438dd6fe46de","ssdeep":"384:AYvC7CAlmJPoOaTLmfCuQNoRNA/qpQ8ClwgNMM8FuK+uJKbBM+WUT:AYvC7CAcOQIlYeT","tlshash":"69a2e9dcb6c6f06186b77575417f110bb27aba56a08ce400d113bec0bd6999f9323e6c","first_seen":"2025-07-18T12:09:05.952663Z","last_seen":"2026-06-01T22:35:14.920189Z","times_seen":815,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":28,"dns":1,"connect":1,"send":0,"wait":4,"receive":1,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/h5/bff-api/abt/merge/get_abt_by_poskey?_ver=1.1.8\u0026_lang=en\u0026posKeys=personalizedEntrance,HomepageWhatsapp,PCmessenger","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /h5/bff-api/abt/merge/get_abt_by_poskey?_ver=1.1.8\u0026_lang=en\u0026posKeys=personalizedEntrance,HomepageWhatsapp,PCmessenger HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\ntimezone: GMT+0\r\nbrand: shein\r\nchannel: pc\r\nappcurrency: \r\napplanguage: \r\ntoken: MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\r\nsiteuid: eur\r\ncurrency: EUR\r\nlanguage: en\r\nx-oest: RTB8MTc2NTkzMzY1MzIwM3xEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: \r\nx-request-by: bridgeX\r\nwebversion: 11.8.2\r\nuber-trace-id: ff789864d5829601:ff789864d5829601:0:0\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 513\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: fDE3NjU5MzM2NTMzMTd8RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: ff789864d5829601\r\nserver-timing: g;dur=4\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster1\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster1\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster1\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":513,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"eb8a6d91f509e62f4b33d5da2c1aeb7f","sha1":"4b7b7602b0ee8de1cb85f6a69efd11b304176678","sha256":"a654319566ed6ce0b3a73287f18e33e6449a45febc9f3437d3eec98ec46e6c87","sha512":"0ec555eba26ce81bcb06986ca1c12acaa457ada0c4dbef7cbfa200c6348cb448d759298d0b090e84947a49727a80d9b53323acebcfac5baef8a7d9f5ed32892c","ssdeep":"","tlshash":"84f0e906010a6eaba917423160fd79c1429e057bb4dc9f7cb40d8c2b86fd0bd6641684","first_seen":"2025-12-17T01:08:42.96594Z","last_seen":"2025-12-17T01:08:42.96594Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/app-track/metric-info","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:34.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /app-track/metric-info HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/15443-66b72579a58eb20c.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/15443-66b72579a58eb20c.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 05 Dec 2025 06:08:32 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 9170\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49251,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49190)","md5":"bf9c0eb7c09560126d95e9bc0ca4f2a8","sha1":"88da718aebc44eddec4811af1abfc1aee3a55ec2","sha256":"3ba7e7d5d15031a9972a747d3478ee199e56895b6b68ee770194c443ca20cb69","sha512":"dbc87723fb5d07ae0e84750f97fa930d6a4c59a3d8b233c09eb0c77d1f251d8994eae4352f63f22508f4a33abe879ef83d3501bb8aa75094df596e5a7ac60905","ssdeep":"768:z/YwZKG+GyeJgYe5hS3u4Liv4dpBFRsUj/5g4w+bJJhSjls4FgfHpwBFpsUeo:L5g/7","tlshash":"6b23b7117258403fb037f767a4c1c6ca38507622e53e5119ac65a631cfeabbf3ab6631","first_seen":"2025-03-16T01:45:37.102547Z","last_seen":"2026-01-20T19:05:52.652411Z","times_seen":1128,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_ccc/2024/07/18/a8/1721304268b322782973705553140903295e8d76a9.png","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_ccc/2024/07/18/a8/1721304268b322782973705553140903295e8d76a9.png HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 12931\r\ncf-ray: 9af28633b9ee569b-OSL\r\nlast-modified: Fri, 24 Oct 2025 20:48:27 GMT\r\netag: \"68fbe61b-3283\"\r\nexpires: Thu, 25 Dec 2025 01:07:33 GMT\r\ncache-control: public, max-age=691200\r\nage: 2415115\r\nedge-cache-tag: 2025102504\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12931,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 494 x 104, 8-bit colormap, non-interlaced","md5":"8bedbfce94a234cdb49d42dd7f8c5a49","sha1":"1b2ce518ecb4f26620b7c7d61599ea2694a7f2c7","sha256":"d704d8e63fadd2ddc527b248b90bd17dc009e97e738c4ab4e262ca9a25b4b9d6","sha512":"aea26933ae73e9547cb44812e84bf490751969594eb8c8f060a718c4079c59d196d124ae5e1152801c92a748d83e68118021184c5cf6e5e62319c34a056c838f","ssdeep":"192:BXmkbIOVBdmyALPmNEEUkcQjVkqEzdDFMtjevGvw8SsxJ1PJ13wl+y6MT:oHGdmyoOKEU9QEVbvqw8Ssv1PHAl16g","tlshash":"5d42c0ba1697c100ad48d9754f1d2c254fd7fcbfbfa82cb3c1620224ca2be65a5e410e","first_seen":"2025-07-18T12:09:05.887702Z","last_seen":"2026-06-01T22:35:14.828103Z","times_seen":821,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/app-track/metric-info","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:34.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /app-track/metric-info HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"armor.ltwebstatic.com/she_dist/armor-libs/infp/infp.3.11.1.min.js","fqdn":"armor.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/armor-libs/infp/infp.3.11.1.min.js HTTP/1.1\r\nHost: armor.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 05 Dec 2025 06:07:16 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 113284\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:35 GMT\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":398761,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (62546)","md5":"ba71a30c9f65f46a20f936ad346ad4d1","sha1":"2bacd165657393080439f9a8fe9e2cb62e7c226d","sha256":"17dc904b7ae25d3eb7063aafbfbb2ad48e8fdc6469d92e68caa693ba2fb4ab4a","sha512":"074182b54fbe22dd4f3ecbbb90ad13eccce647e0ead754e8822dc9da1e05adc3141c0afa21829936b38f2b70df948cb702aa4e3e7fc531807465d8d241525313","ssdeep":"3072:KeoxugPZZ8eyCxgVs/avEgzAwYtU/HCQnPnNWJiXd1/NjaKcK9mqO/k2XSBb29gL:pSPn/10EGmcXw/k2XfnB+hf8WWq/X4Y","tlshash":"cd8482cc7bf0b26807ab50a5887f2496d7aa7c5af04ee040c51ad1c278e9f5d9d27e34","first_seen":"2025-10-29T19:12:39.357221Z","last_seen":"2026-06-01T22:35:14.801267Z","times_seen":754,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/event-center-37.059108a709f45339.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/event-center-37.059108a709f45339.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Sep 2025 05:59:01 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 630\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:35 GMT\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2366,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2305)","md5":"4ac8d5404035c22f2436000b4a2b10c5","sha1":"c79afb17bdb3fffa95d6050265087a3e33fb6304","sha256":"de0d4586a53f4278c735bfcbedaa66d9fd1f8f49772d110bb22dcf110bcd4f6b","sha512":"21d2455fb2ef91482841b0e8ceb466284a01d4a6b2aa025378b0552cfccc2048459da8cfdf1ed0212e808c9609c805dfad068456b1c549895ce8b41a130dd1b3","ssdeep":"","tlshash":"ca415bdcf4ee28bb693d898d77a552950c78ce3a7acb05d00602cf8544ebfd872853a1","first_seen":"2025-07-24T23:38:29.653991Z","last_seen":"2026-01-20T19:05:52.76461Z","times_seen":1028,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token,ds-from-terminal,x-oest\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/63251-04db0393bf35c715.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/63251-04db0393bf35c715.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:39 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 12841\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39463,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (39292)","md5":"952eff822bee7d57cb4457b118f50c5d","sha1":"eec04fee07948afe677c4d4eb946a32084838952","sha256":"1a9db1da45ed34faf1da42b9130ed01794080766fc5cf131b9c976d75294daa0","sha512":"19cb71b7989f9b9100b0885b00a82940b430dac5ce081c48ee677b4e1fd742afc95102149ef811c51dc7e170fc66e8da78a02d8cdab530fe0ce664c1ec886412","ssdeep":"768:yCDNuxS0lDFZujnc8drCl/m+MlmDRjcMT6rkJRE+kLFKwNlsEQXPLpIYDCaa7zqJ:xuw0lDFZujnc8d6/m+MSk2CDGfKYou","tlshash":"b7030b9537e2707485fe21be812f0206a339651b304ac064bb7adcd56db950fa177f3a","first_seen":"2025-12-09T15:42:57.61847Z","last_seen":"2025-12-24T03:17:54.127855Z","times_seen":40,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:37.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nds-from-terminal: pc\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZ8MTc2NTkzMzY1Nzc5NXxFMzQ3NUM3\r\nContent-Length: 1588\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/ccc/common/top_banner?_ver=1.1.8\u0026_lang=en\u0026pageType=topBanner\u0026contentId=","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /bff-api/ccc/common/top_banner?_ver=1.1.8\u0026_lang=en\u0026pageType=topBanner\u0026contentId= HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\ntimezone: GMT+0\r\nbrand: shein\r\nchannel: pc\r\nappcurrency: EUR\r\napplanguage: en\r\ntoken: MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\r\nsiteuid: eur\r\ncurrency: EUR\r\nlanguage: en\r\nx-oest: RTBEMzU0fDE3NjU5MzM2NTMyMDN8QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: \r\nx-request-by: bridgeX\r\nuber-trace-id: ff7de1f91b6dd3e6:ff7de1f91b6dd3e6:0:0\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1435\r\ncontent-encoding: br\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NXwxNzY1OTMzNjUzMzYwfEM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-navigation\r\nx-gw-traceid: ff7de1f91b6dd3e6\r\nserver-timing: g;dur=12\r\nvia-shein-gateway: c-shein-pc!bff-navigation\r\nheader-cmdb-name: bff_navigation_eucentral_prod_cluster1\r\nheader-cmdb-name-origin: bff-navigation-eucentral-prod-cluster1\r\nheader-cmdb-sname: bff-navigation-eucentral-prod-cluster1\r\nheader-cmdb-app-name: bff_navigation\r\nheader-cmdb-app-name-origin: bff-navigation\r\nheader-cmdb-app-sname: bff-navigation\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3441,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"9a1cf4690aca3d7ffe56c21ed40a6aba","sha1":"c0bc9a073556e612de3ca4c930d01d7118a4cc90","sha256":"9c72fed15c74b7b01873fc855232d13706640b3988a76567560ecd2449780e44","sha512":"4c2c9695f0d1ed84666ffa47946294b32ffc472a252ea334578e6542ba5c326abc2361ecd4ba40df5201b5b99caa94d745e37a82d05f9d28e73c286a039b8bba","ssdeep":"","tlshash":"e3614f21e5318da78a9723c6d8debd0243cc2ea3e5d11c38e90c9f0402f98bda25334e","first_seen":"2025-12-08T12:10:24.702958Z","last_seen":"2025-12-28T23:11:11.492263Z","times_seen":75,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/js/sui-lib.170acad.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/js/sui-lib.170acad.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Dec 2025 14:27:16 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 33188\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":143643,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"52173c60c3dde9d5f2794cd6cd4fc28c","sha1":"90ec2ff09686af992a1366f0cf5441f2db621e18","sha256":"5d89d9a985029c9e695ad4fb9559c926f40e791cd79d7865c039c38b4892fb7c","sha512":"63260ddaa66b4e239b56aa06a6519ab5f7c7d37c0db76805c51d9980db4501424cc994c697db09760ec47a1c5d1d901d6add4da7a68ee5f921301eee856e8182","ssdeep":"1536:yQgJ+9ch7GbCeqadjtAEPTDpAiLGk7KqhiDo8M3P2jc9B:yQZiEuEPTDpAiLGkp8ykmB","tlshash":"42e3d9dcb4c6b4612be3696a803f150da33f6f45481584d0f2a6e8a62e7ed5cd327b1c","first_seen":"2025-11-06T16:13:23.149591Z","last_seen":"2026-06-01T22:35:15.038498Z","times_seen":610,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/js/main.788de6d.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/js/main.788de6d.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Nov 2025 15:12:17 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 17830\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":68875,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fe9cb15418bfad7b0e5c65123055dd1f","sha1":"12a57ec038850a8f92d287088e6c2bb6d31755ea","sha256":"2a20b28925770d8348acf92ff1398d9c54dc112af158ec2779769b6199d2f234","sha512":"23168bfcde75ec0cb9c1fafa84db753e7ad6ff980fd2852d0a92138338934bbb614b58ac6113fd1de82a4f74edb5400c83204056aff9869ca9650e120386c348","ssdeep":"1536:jFW8u00lQyy6i4o5FGY9wpGjqpcUE9j+oSHk1wH1j9q49LqR6MnE6QW:56lQyyZ4o5FGY9wpGjqpcUE9j+oSHk1j","tlshash":"9663e9adead6b01410f66964c13f2d27767d3702a04ac8e0a17788c57ed568fb213ebd","first_seen":"2025-11-06T16:13:23.141232Z","last_seen":"2026-03-23T01:37:21.092676Z","times_seen":550,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinm.ltwebstatic.com/pwa_dist/images/market_activity/gift/yellowlight-7b9607a007.png","fqdn":"sheinm.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /pwa_dist/images/market_activity/gift/yellowlight-7b9607a007.png HTTP/1.1\r\nHost: sheinm.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: image/png\r\ncontent-length: 47646\r\nlast-modified: Wed, 24 Sep 2025 14:11:39 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:33 GMT\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47646,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"7b9607a007a1bb9a6b33e9b74a8ebbb6","sha1":"af4092255daa80fb7441d35531c45a304b26e5a1","sha256":"e6dc325066e01dcd4b27c0972b1a5c5d0a29cb006256712b405f9add5771b5f4","sha512":"4bb8c473521900d61ae58fb7964a956a749a57838b6bdcb9c421dbf26658c83683ef1922c2f626933079dcc2d7cc3af65a9211aba9266cebf38454d632bd763b","ssdeep":"768:zbGMYbA0uv9DTpxbiFGQGh6RI8X3QGRRboCec87pFETltVT96WCIJCTqtOcPWhog:zbGMYsjvp1OGLSQeRVecmfarM9wCaOcW","tlshash":"9623f1b6dc948ffbb06f0c36a06798a54a73a17bfa0c67618b475fdcb6601d01f0a458","first_seen":"2025-07-18T12:09:05.943412Z","last_seen":"2026-06-01T22:35:14.8945Z","times_seen":826,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/84838.9b908adc0f7f3a83.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:36.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/84838.9b908adc0f7f3a83.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Nov 2025 12:35:27 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 338\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":416,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (365)","md5":"d77326d36a31589c3d429b373e519ca6","sha1":"e587549ecaf1bd1a947a9e08a593f94086787575","sha256":"da74ee503426dc5e29a74bc1f2d9b5f20ff91d0cf366bfad7a0d7ec0299d9df4","sha512":"b97469d48058de70e77c9f1fdb4d58946306d6f575dfab1a4d0d7af18f45f04b5021b6bdbd31e54b940b5c76a56347f599102cf5c2131e2c7f6c8677828ef6b0","ssdeep":"","tlshash":"ace0f1fb11a6be1e1b7324cd7a82575b9c3c00733c3896caa74495500193a09f183c7c","first_seen":"2025-11-12T15:12:31.889071Z","last_seen":"2025-12-24T03:17:54.157815Z","times_seen":112,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/51686.e94a053bdb89d372.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:36.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/51686.e94a053bdb89d372.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Nov 2025 12:35:27 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 651\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":971,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (920)","md5":"99ddd77ef87d6e16bb0ad489be163080","sha1":"efea4510d66ed1f447c88c56a87419374afc4dce","sha256":"12dd6d0b3226cf1fd17f23aab3f9d73743b599edc2de407e0119acd612961995","sha512":"25e9bd7fc6d9318447d65afeb3cf767a9b0f8634974de49c3aafeed2d5555de05fe88df02360646667e0f5893cb901ec906a7c411ce97fe3b5b6f6beba65c6bd","ssdeep":"","tlshash":"7c1198db14c37b6954da54988e5687b9643e0422766d9de1bc0789801007607e592df4","first_seen":"2025-11-12T15:12:31.818663Z","last_seen":"2025-12-17T05:54:39.279411Z","times_seen":89,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/css/SwiftContentPlugin.f6a4ba5.chunk.css","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/css/SwiftContentPlugin.f6a4ba5.chunk.css HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: text/css\r\nlast-modified: Tue, 02 Dec 2025 09:28:06 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 2341\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:33 GMT\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":12498,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12366)","md5":"9e3a816b1264db6e3b06045c99deda11","sha1":"8123da97b2786725d699bfeb1bc8c9a4870641ff","sha256":"f23a67513ffb8e4d889b68164b5ebf956af6cbca66b4a9ca6e2b669e6e70749b","sha512":"1c9c275ada2c4eda261cdf8162e5587ad448cea7ef3573e0fa6c8fa7a752d9a045bd30de52447c327e12e872e7414dd3f386f1a888e7728b8f8e2bcf29b269de","ssdeep":"384:YPSnitJEOnd/qDqjUsKLWRj+OvYAQu3L4juCWedw1NtLK:bOnd/qDqQsKLWRj+OvYAQu3UjuCWedw8","tlshash":"7a42641732787404b837c5f1bdc081a881fca52be71346ab37e2b6d04f97e6d352619a","first_seen":"2025-09-19T08:00:13.150222Z","last_seen":"2026-03-23T01:37:21.068135Z","times_seen":713,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/app-track/metric-info","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:34.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /app-track/metric-info HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/57963-e847e944d044a0f3.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/57963-e847e944d044a0f3.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:39 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 9372\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":34250,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34199)","md5":"f5a78d9ab35be73fe8436daf1cf79135","sha1":"cfbffed2cdf6682172f8b1df44e873ef420c2408","sha256":"100f2841fc432b6a155b65da79fcc77380ace2331721fcb199275fb09c7a9a17","sha512":"d65c10bef236b3a073b06d354bae5116167418a2f1dde86c13061adf0d7205658ff4872ce71dfdaed2b5119113d7d97eb55f86b526d5d56bce8f070d2b014c7a","ssdeep":"768:FMOQE5NnzaozbFgbzPv28Rkl8wq9YtsE8KjAaH5ywbZ0FBTT+c/9MaqqkyKyN:QuzeH28Rp+PmBTWyN","tlshash":"62f2e946c9f9d65568bae6f1f0d30532608cbe47f6098ce0b92f4da47019e8bf171e26","first_seen":"2025-12-09T15:42:57.727258Z","last_seen":"2025-12-17T05:54:39.283892Z","times_seen":17,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/j/ssms/2025/11/24/14/1763972056f5c5e72eccba807d89f2288b05f2ea94_thumbnail_336x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/j/ssms/2025/11/24/14/1763972056f5c5e72eccba807d89f2288b05f2ea94_thumbnail_336x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 56348\r\ncf-ray: 9af286297d7e569b-OSL\r\ncache-control: public, max-age=2592000\r\nedge-cache-tag: 20251126_webp\r\nlast-modified: Wed, 26 Nov 2025 02:36:33 GMT\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 1793454\r\nexpires: Fri, 16 Jan 2026 01:07:31 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56348,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 336x448, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"587d7bff1da47c6f8875a1c730589ab2","sha1":"a7bb3fe326a1401780f308600dde09090cdcfbb2","sha256":"afcba4e07c339b49542d2f22c0c2d9c642dd4ececd8aaf1b8d2a5bb590ded14b","sha512":"24d98e599dd1ee80bb4467174078612fbbe81c5b66c8c51ce35f9569c93319f99b60765010e101f8752a34bd2dd7e19d5575fe3793aaadbc3cfe6710ce4e4e85","ssdeep":"1536:CO6Ggx19O7b8hhzWpYKnlTpM1BZPePQt6ScNEuff8V:CO61ToGKn4PXtZQEg0V","tlshash":"1c4302b97e53f3404a90ac530f8e1370b7d9624ac21a8547996a14697beced37b7033b","first_seen":"2025-12-16T16:48:13.58113Z","last_seen":"2025-12-17T05:54:39.212076Z","times_seen":5,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/js/948.3285a5c.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/js/948.3285a5c.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 19 Oct 2025 09:32:21 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 8902\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25240,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25064)","md5":"68e116b78d086f2200dee0e812e20c8c","sha1":"1c0c1fc820173a55ce71ee04c53896415a37b402","sha256":"f6c7506bd7e831fb9bdce330863bd66eafea35bb6ee743198319444ed8e8dbbd","sha512":"643346a8738b9f37d450108e414b184827e10627c8f7e2b328c1aee40674b2393921b90b823992738eaf834c9fb2e75688aaf71ae82275399b9f1a9269aba240","ssdeep":"384:fZdmFg1Udh0nFYsR1LQZVpezNhZE6/dX9qjOUkYmp1eYlhnVmfpSy9VyV:v6mDGpeTZbLz7YUe+gi","tlshash":"3eb209c9b5d0b07753a361f8c86f680af1ba5524e80c44a0fb51d8f66cb4a5d9337f68","first_seen":"2025-07-31T13:40:14.458338Z","last_seen":"2026-04-16T21:34:30.311889Z","times_seen":752,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/app-track/metric-info","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:34.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /app-track/metric-info HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/footer-77c60dac985d20d5.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/footer-77c60dac985d20d5.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 26 Nov 2025 03:00:23 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 107\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":113,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"fbbf9a9c0fd3d9c5f7fa7221b5dffa7d","sha1":"994d55f58f48532407e4417823de805c2d1b1773","sha256":"30788026ee778924b24c00144c7c0237116efa99ab9258ff347d3a1f51d43547","sha512":"c6c9bff2ecb513483bac1ff7d6d86b3f6ddf8c29af94305aeaa39cb6b6a137161153635aef0ee134c7cff6a5731ef7e188d55fd90e938b2c0ea6c2b9dd8ef4fb","ssdeep":"","tlshash":"48b0929131837a35382b08c459b716662c2601633c78c4c9689a9c621492e281fa2ca8","first_seen":"2025-03-16T01:45:36.930563Z","last_seen":"2026-06-03T06:21:04.433144Z","times_seen":1543,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/abt/merge/get_abt_by_poskey?_ver=1.1.8\u0026_lang=en\u0026posKeys=Searchfilter,SearchSuggestwordFeedback,CccxPublicBanner,CccAppIcon,CccKidsCategory,CccHomeCategory,CccPlussizeCategory,Aod,Similaritems,ListNoScrollDown,Aftersimilar,Reviewsubmit,Orderdetail,OrderTrack,ChangePassword,CODwithdraw,Bodysize,FastRegisterPopup,ThirtyLogin,SPcSignPrefer,newPrivacy,ProductDetailYouMayAlsoLike,ProductDetailCustomersAlsoViewedList,CookieResult,Selfsizerecommended,ACTrandom,ActDefault,ActHot,ActNew,ActElement,ActAbt,ActReview,ActFavorite,SilentloginPrivacy,SpecialOutgoingScene,Quickregclosed,LoginSwtichsite,phoneRegisterLogin,LoginMerge,SearchCard,AddShowGroup,ActAbt1,ActAbt2,ActAbt3,ActAbt4,ActAbt5,ActAbt6,ActAbt7,ActAbt8,ActAbt9,ActAbt10,sheinclubprice,FlashShowedCrowed,Movepoints,CCCxTopbanner,RecentlyViewNotlogged,GoogleOneTapSignIn,Cartshowobmtitle,Showplatformtitle,TradeQuickship,Cartnoteligibleforcoupons,Discountlistshowlimitexceededtip,AllListQuickShip,CccMenCategory,OpenFreeTrial,HomepageWhatsapp,UnderPrice,VerifyCodeSwitch,LowpriceUser,CouponTimeFormatChange,CouponbagUpdate,SearchListCoupon,SearchSceneCoupon,PhoneAreaCodePopop,recSwitch,RelatedSearchNew,DefaultWordTag,PCAlltabCategory,MeClubTrailSwitch,storewishlist,SearchDefaultNew,SearchHotGD,SearchHotNew,PcCartPrefetch,detailcountdown,PageMeNews,HomePopup,AccountManager,storeiconchange,newsearch,Reviewchange,subrating,PerformanceLogNodeTestFetch,SHEINcomplianceswitch,CccAllHomepage,Cartshowcoupon,Cartentranceinfo,listdiscountLabel,DetailStarReview,detailgoodsCard,listpriceTag,detailKeyAttribute,pcwordSize,FlashSaleCountDown\u0026_abt=1","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /bff-api/abt/merge/get_abt_by_poskey?_ver=1.1.8\u0026_lang=en\u0026posKeys=Searchfilter,SearchSuggestwordFeedback,CccxPublicBanner,CccAppIcon,CccKidsCategory,CccHomeCategory,CccPlussizeCategory,Aod,Similaritems,ListNoScrollDown,Aftersimilar,Reviewsubmit,Orderdetail,OrderTrack,ChangePassword,CODwithdraw,Bodysize,FastRegisterPopup,ThirtyLogin,SPcSignPrefer,newPrivacy,ProductDetailYouMayAlsoLike,ProductDetailCustomersAlsoViewedList,CookieResult,Selfsizerecommended,ACTrandom,ActDefault,ActHot,ActNew,ActElement,ActAbt,ActReview,ActFavorite,SilentloginPrivacy,SpecialOutgoingScene,Quickregclosed,LoginSwtichsite,phoneRegisterLogin,LoginMerge,SearchCard,AddShowGroup,ActAbt1,ActAbt2,ActAbt3,ActAbt4,ActAbt5,ActAbt6,ActAbt7,ActAbt8,ActAbt9,ActAbt10,sheinclubprice,FlashShowedCrowed,Movepoints,CCCxTopbanner,RecentlyViewNotlogged,GoogleOneTapSignIn,Cartshowobmtitle,Showplatformtitle,TradeQuickship,Cartnoteligibleforcoupons,Discountlistshowlimitexceededtip,AllListQuickShip,CccMenCategory,OpenFreeTrial,HomepageWhatsapp,UnderPrice,VerifyCodeSwitch,LowpriceUser,CouponTimeFormatChange,CouponbagUpdate,SearchListCoupon,SearchSceneCoupon,PhoneAreaCodePopop,recSwitch,RelatedSearchNew,DefaultWordTag,PCAlltabCategory,MeClubTrailSwitch,storewishlist,SearchDefaultNew,SearchHotGD,SearchHotNew,PcCartPrefetch,detailcountdown,PageMeNews,HomePopup,AccountManager,storeiconchange,newsearch,Reviewchange,subrating,PerformanceLogNodeTestFetch,SHEINcomplianceswitch,CccAllHomepage,Cartshowcoupon,Cartentranceinfo,listdiscountLabel,DetailStarReview,detailgoodsCard,listpriceTag,detailKeyAttribute,pcwordSize,FlashSaleCountDown\u0026_abt=1 HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nSmDeviceId: \r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: HewaI0AR-isVikRSGpX30TnfiRycO7R9AxSI\r\nAppCurrency: EUR\r\nAppLanguage: en\r\nx-oest: RTBEMzU0QzBfODEyN19GQnwxNzY1OTMzNjU1MTY2fDg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nwebVersion: 13.9.4\r\nx-ad-flag: 8FkZa3NuCnoO+IBsqSDbVbjbZFDPBy/Ccg7HPaagWd6Z0k+h6+rK67aH0c1E5efGgWYq61YJe9rvWC5xPj7ZVVYoP3i9GVpBfVkWfa8EsrsGa2KgaixOSZmJfGKy6YI874yU0pb2l85B3RSMhSMlbQ==\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nuber-trace-id: ff79882450234bce:ff79882450234bce:0:0\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933655182\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=JUa6NZTNiN2MwZDJmZDc1NjcyYjA2ZTc1ZDZiZDdhYTJlNDcwZjcxOThiZjNhYTMwMDcxZmUyNWZlYzA5NTMwMTkxNA%3D%3D\r\nx-cs-random: sdk error\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 4353\r\ncontent-encoding: br\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzR8MTc2NTkzMzY1NTM2M3w3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: ff79882450234bce\r\nserver-timing: g;dur=7\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster2\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":25315,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4fdd41541e981834ff0afd98c262c460","sha1":"fbc2fbd5268aae6ae1d3da3b4d4d67c358a17dab","sha256":"965aa9a288134aabc78bc0f9ed65deda5623b25159bd91bcb12622f977a3e42c","sha512":"f052e548260ec6a5f91c93de54bc0604a08442afbdbdc7a036c1672eacad8abf00fa51248ead72847af6bfb8feca6260f4428fdf54085ef0d16ede89d2b1771f","ssdeep":"768:WHSs8Qbff52mwDv+qBQe/AcQbff52RMVjHk:ECCfk","tlshash":"d4b2ce0d039c5af6995742aa56adfd8151ee1027f8cc5f3df469ee1683ec0b8e22029c","first_seen":"2025-12-17T01:08:42.97639Z","last_seen":"2025-12-17T01:08:42.97639Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/app-track/metric-info","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /app-track/metric-info HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nContent-Length: 767\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":767,"data":"{\"data\":[{\"app_name\":\"shein\",\"timestamp\":\"1765933656621\",\"local_time\":\"12/17/2025, 1:07:36 AM\",\"session_id\":\"\",\"member_id\":\"\",\"sdk_version\":\"1.1.43\",\"network_type\":\"\",\"device_id\":\"\",\"device_level\":\"1\",\"device_type\":\"pc\",\"device_model\":\"\",\"device_brand\":\"\",\"browser_name\":\"\",\"browser_versions\":\"\",\"os_versions\":\"\",\"os_name\":\"\",\"language\":\"en\",\"sub_site\":\"eur\",\"money_type\":\"USD\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"referer\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"level\":\"INFO\",\"tag\":\"\",\"message\":\"smDeviceId load success\",\"params\":{},\"environment\":\"production\",\"value\":3923,\"metric_name\":\"si_anti_spider_sdk_c\",\"tags\":{\"url\":\"https://armor.ltwebstatic.com/she_dist/libs/devices/fpv2.7.js\",\"type\":\"loadSM\"}}]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_pi/2025/02/19/c9/173994815332328b9ef766bc4c5345b0b81b596d1c_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_pi/2025/02/19/c9/173994815332328b9ef766bc4c5345b0b81b596d1c_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28220\r\ncf-ray: 9af286296d7b569b-OSL\r\nlast-modified: Mon, 01 Dec 2025 00:50:30 GMT\r\netag: \"692ce656-6e3c\"\r\nexpires: Wed, 24 Dec 2025 01:07:31 GMT\r\ncache-control: public, max-age=604800\r\nage: 1015990\r\nedge-cache-tag: 2025120514\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28220,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"d3949fa1905fe8a46e89852d4397edb8","sha1":"9b2f3403539cbe5b8a5de7dd5dc8c6e27c072a55","sha256":"4cdd43ea640e24c8f9ef9e41a697bf1e2df6c6f0d168477e641df55d100fa2ad","sha512":"aac56bd7e28f883dee98b072d7c0243f0a730359b343939373639af844a420f31c66c3b4a63c0d923b6fdc5fdfbb5fb61426ecafd47e232334e571fb35acc400","ssdeep":"768:HYyk31iM04mJL1MktI+i7U/y05wDkQ6yR+8pQo:H21iM0hL+kI+ig/z5Cf6y4o","tlshash":"68c2e1bad999aeaced3f423e1c61b78c56f600343720e743486079beca512e0cd142d8","first_seen":"2025-12-17T01:08:42.977165Z","last_seen":"2025-12-19T22:09:28.312427Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":26,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/js/123.36651ea.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/js/123.36651ea.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Nov 2025 15:12:18 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 48574\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":172138,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65355)","md5":"1d68e94f9c2b2b3e6b38b33e31096815","sha1":"6c508032e07cd96f1535978c5759cbd959d3dcb0","sha256":"8809ea0e39374b1bc6c0e13266f48b666a699a629f34341eb879708f22b1fce2","sha512":"f276e7af583fadc07a83799e66d291c4c752807045a6498acd8d9c8eb4fa4836e0eb7c3c38e8d38ed3e9c42fe1e92fe7a423172de2b84c05b8cfa5cfafa9c02c","ssdeep":"1536:xD+iXytmrjktjjMuxfqc+tlihs/skbFTHUR0d6Rbd/bd6O4zF0FHVw2zuMfG4x3d:lnuxfqci28zF0F1w6E41yx2XkIbr","tlshash":"fff30adcb283f0e942e77564c12f100aa33b7955654d88a0f226dce17c7999fa223f79","first_seen":"2025-11-06T16:13:22.964935Z","last_seen":"2026-03-23T01:37:20.954366Z","times_seen":550,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/product/search/v3/get_keywords?_ver=1.1.8\u0026_lang=en\u0026word_type=1\u0026scene=home","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /bff-api/product/search/v3/get_keywords?_ver=1.1.8\u0026_lang=en\u0026word_type=1\u0026scene=home HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\ntimezone: GMT+0\r\nbrand: shein\r\nchannel: pc\r\nappcurrency: EUR\r\napplanguage: en\r\ntoken: MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\r\nsiteuid: eur\r\ncurrency: EUR\r\nlanguage: en\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFfDE3NjU5MzM2NTMyMDF8MzQ3NUM3\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: \r\nx-request-by: bridgeX\r\nuber-trace-id: ff48c87379bc23b9:ff48c87379bc23b9:0:0\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 561\r\ncontent-encoding: br\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3fDE3NjU5MzM2NTMyODl8NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-category\r\nx-gw-traceid: ff48c87379bc23b9\r\nserver-timing: g;dur=29\r\nvia-shein-gateway: c-shein-pc!bff-category\r\nheader-cmdb-name: bff_category_eucentral_prod_cluster4\r\nheader-cmdb-name-origin: bff-category-eucentral-prod-cluster4\r\nheader-cmdb-sname: bff-category-eucentral-prod-cluster4\r\nheader-cmdb-app-name: bff_category\r\nheader-cmdb-app-name-origin: bff-category\r\nheader-cmdb-app-sname: bff-category\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5843,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3b5d6a1f741b2b0f5757feff8346a32a","sha1":"52c147c8b03acb2fdb2d440c1998cfaad4d900fd","sha256":"76c95c60f22a7052d75941d87bb1f972676dd9d2945cd9662659536fc2f57115","sha512":"2c53224c6dc17e0533100c3d6530ec7a40ec0e6c02cf4a428a6960176f514e777a64e793d10129d618983305cd06b052fb08faaccb815c5bfc4164b296a78b85","ssdeep":"96:IbDjftisjfnjfKjf0jffpjfhxjfHjfvjf1K:mDjDj/jCjMj5jjjfjXjI","tlshash":"5fc15d24d49c4dbbb88948e779c0bf4895df2147d2268db8a1bedf4b80f893c12717a5","first_seen":"2025-12-17T01:08:42.978517Z","last_seen":"2025-12-17T01:08:42.978517Z","times_seen":1,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zpnv-eur.shein.com/risk/verify/identity/validation/anti/spider","fqdn":"zpnv-eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /risk/verify/identity/validation/anti/spider HTTP/1.1\r\nHost: zpnv-eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\ncontent-type: application/json\r\nContent-Length: 126\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":126,"data":"{\"v\":\"0.0.26\",\"sdk\":[\"anti_in\",\"main\",\"infp\",\"sm\"],\"site_id\":\"8004\",\"site_from\":\"eur\",\"channel\":\"0\",\"scene\":\"anti_crawler_RT\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json; charset=utf-8\r\ncontent-security-policy: frame-ancestors *.shein.com https://www.shein.com.hk https://www.shein.com.vn https://www.shein.com.mx https://www.shein.co.uk https://www.shein.tw https://www.shein.se https://co.shein.com https://www.shein.com.co\r\nx-dns-prefetch-control: on\r\nx-xss-protection: 1; mode=block\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=7776000000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: no-cache, max-age=0, no-store, must-revalidate\r\nx-anti: MUYwMDRDODFfQzBFRF83Rjk0X0MyfDE3NjU5MzM2NTMzODZ8MzFfQzU0OEE5RkU5MjdC\r\netag: W/\"53f-Un5lnm53AM4nwC8VgQqdFjlEIOk\"\r\ncontent-encoding: gzip\r\nx-gw-traceid: 5b324b14e4e9b0cc\r\nserver-timing: g;dur=14\r\nvia-shein-gateway: c-shein-pc\r\nheader-cmdb-sname: shein-pc-eucentral-prod-app02\r\nheader-cmdb-app-name: SheinPC\r\nheader-cmdb-app-name-origin: SheinPC\r\nheader-cmdb-app-sname: shein-pc\r\nheader-cmdb-name: SheinPC_eucentral_prod_app02\r\nheader-cmdb-name-origin: SheinPC-eucentral-prod-app02\r\ntiming-allow-origin: *\r\ncontent-length: 546\r\nvary: Accept-Encoding\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nset-cookie: language=eur; expires=Wed, 24 Dec 2025 01:07:33 GMT; max-age=604800; path=/; domain=shein.com\nAT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUzLCJyIjoiQVhHeGtNIiwidCI6MX0.f05cd83925e97d2a; expires=Fri, 16 Jan 2026 01:07:33 GMT; max-age=2592000; path=/; HttpOnly; secure\narmorUuid=2025121709073368f5ae5e5d109aa57718bc76373eb95200456d9da9dc5da500; expires=Thu, 21-Jan-2027 01:07:33 GMT; max-age=34560000; path=/; domain=shein.com\nsessionID_shein=s%3A2kobthQWgzXYqcBLJ6d4BvDkVQlBF50y.wj1B6xfsHuL20sYywEDlH7c%2FQ954yEmc26nUn49RAis; expires=Thu, 18-Dec-2025 13:07:33 GMT; max-age=129600; path=/; HttpOnly; secure\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1343,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"54233a76515d3056a40f3111dcbd8233","sha1":"527e659e6e7700ce27c02f15810a9d16394420e9","sha256":"a5edcd4fa4f0300ce98713febae277fb86c95793c8a7ca3bcd2d4e1e1d76a911","sha512":"4bb5ae43d55b7d293a20f52e9417db38f2d40560cb7c9870e6916d149b9182408bcfc445a602a3169c84cbf28201cab03563a7ac56b87cbd657dc40df5ee2f33","ssdeep":"","tlshash":"9f21e29590bd8cb76ed12bf9b40b3fc894a1b077dec0f0bac5a4da145d18d48d12a116","first_seen":"2025-12-12T08:03:27.776152Z","last_seen":"2025-12-30T01:06:37.477584Z","times_seen":91,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/CommonHeader.19b1e0dbecb1c617.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/CommonHeader.19b1e0dbecb1c617.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:37 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 341\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:35 GMT\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":467,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (409)","md5":"fc0357469c58c4c915629b9353956a82","sha1":"8a07b56a53c216093c94eb3bf89d6d2b841b567e","sha256":"6ab4e9161518baa6bf10cc88211cb332be0c6039ef2fe758026fb0d362dde8b2","sha512":"eb7c0111115b4de3d7dfb84bd55915657bcaf86c523d63460be6051c84d3fc5491f709c399d324ba491efd03d18edf344d27459ace2750fe0a62c0f55f86ea29","ssdeep":"","tlshash":"72f0dcc298a23c37682f18e9a19bac45182f2421752986ea541cce4600ab414bbd18f8","first_seen":"2025-12-09T15:42:57.67309Z","last_seen":"2025-12-17T05:54:39.335341Z","times_seen":16,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/user-api/setting/get_sample_config?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /bff-api/user-api/setting/get_sample_config?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nSmDeviceId: \r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: HewaI0AR-isVikRSGpX30TnfiRycO7R9AxSI\r\nx-oest: RTBEMzU0QzBfODEyN19GQjh8MTc2NTkzMzY1NTE3M3w0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nwebVersion: 13.9.4\r\nx-ad-flag: 8FkZa3NuCnoO+IBsqSDbVbjbZFDPBy/Ccg7HPaagWd6Z0k+h6+rK67aH0c1E5efGgWYq61YJe9rvWC5xPj7ZVVYoP3i9GVpBfVkWfa8EsrsGa2KgaixOSZmJfGKy6YI874yU0pb2l85B3RSMhSMlbQ==\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nuber-trace-id: ff687eb7e1ea738d:ff687eb7e1ea738d:0:0\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933655209\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=0kk88ODA1MmQ2Mzk3NjM1ZDczNTNkN2JkYjI5NjI4NGJlZjc1MWQ5N2YxYmNiM2MyZTE3OWZlZjNhMzgzODY5MzUyYg%3D%3D\r\nx-cs-random: sdk error\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 373\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfODEyN19GQjg0fDE3NjU5MzM2NTUzNjh8XzdBQUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: ff687eb7e1ea738d\r\nserver-timing: g;dur=2\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster2\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":373,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"714fde9326c0b9650418f1388aeaa895","sha1":"d1555bc7e074defc8700327801ea221ea12605c2","sha256":"7c92696bea4a72539cfd09200c1b025df35f41c2af60d7cae6b5feb181546570","sha512":"557d32e0cf3cc9f71cf153ba8b527af4939e636dd8cbd3d0fecba464d9d52cfd3402a2fcdd56006fcbd211ca2df085f8189749863ddca313bc4eff4c9b2ce266","ssdeep":"","tlshash":"0ae01281f439eb0280eb0d70939a59c9784bf1d289d09b04d85de61b910d539122065d","first_seen":"2025-05-19T19:51:55.906002Z","last_seen":"2026-06-03T06:21:04.355173Z","times_seen":1008,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_pi/2024/12/05/18/17333643323a74a5ea6cf8d64e87cb0f79713621a0_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_pi/2024/12/05/18/17333643323a74a5ea6cf8d64e87cb0f79713621a0_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21151\r\ncf-ray: 9af286481b17569b-OSL\r\nlast-modified: Mon, 01 Dec 2025 00:18:33 GMT\r\netag: \"692cded9-529f\"\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ncache-control: public, max-age=604800\r\nage: 883678\r\nedge-cache-tag: 2025120703\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21151,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"a435ccd07b3a8765f8edd861d3bb4ce1","sha1":"66dd1024299897bf629831e8e42898472dde50e6","sha256":"a4e879a85d40a80037e2b6769f19700b38fb9e7421e072b583c5425cc7c8ca49","sha512":"4489c2f58ce3c2a28c18fdd3497bd541a947924dfd73b160d10157c14af7bd5dc1270342c43e44961d9747a1195ec37f86d2b8eb29e5da22ae7727954a3eafe6","ssdeep":"384:gYNg7LvFhAEhhEcZucYE47CWwjiMDwfut07+tzTob9vst2p:gYyPdhR/2zwjihUA+tzMbVlp","tlshash":"5e92d03cf64bfbe7d510c1bc8eb406edd1932732a32971b544360e2a4194695e92d32f","first_seen":"2025-11-24T02:22:49.666917Z","last_seen":"2026-02-14T19:47:14.488008Z","times_seen":5,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_pi/2024/12/25/20/1735096437faa597580ed96c3311a90e7f6cff5253_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_pi/2024/12/25/20/1735096437faa597580ed96c3311a90e7f6cff5253_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20438\r\ncf-ray: 9af286482b1d569b-OSL\r\nlast-modified: Fri, 28 Nov 2025 03:58:13 GMT\r\netag: \"69291dd5-4fd6\"\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ncache-control: public, max-age=604800\r\nedge-cache-tag: 2025120520\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 24957\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20438,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3afe549378e2a891479498eded115387","sha1":"e1982aec3f788a20cff9e433f1692273c66f4477","sha256":"f73b1bab15566cbe3d73510d418ac7ee8148e2d0e9bca952542638ae22243822","sha512":"a149aee349dae8e67d0228e20333793d78f1f1d6bd3f84a84000e0bd9de1ef01fa4253dea1194678869b7f3bc47c06b0e3b05fc1ffa75e015ca5add10a1b93cd","ssdeep":"384:aYNg7zd7WeK/D9A2XLeNgyk6NMNQULigYW8CLTysLG:aYyHd7PCqACNgl66GUFQwyx","tlshash":"cf92e0236f5ee6bbe6207a7e5cf0bf522540a1179a503f101098fb7b06f29c47c195ea","first_seen":"2025-11-19T22:10:55.940196Z","last_seen":"2025-12-17T01:08:42.980899Z","times_seen":8,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/j/pi/2025/09/02/3e/1756802507aa2d6559e97ecf16fb8a39a59af2da63_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/j/pi/2025/09/02/3e/1756802507aa2d6559e97ecf16fb8a39a59af2da63_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17316\r\ncf-ray: 9af28629bdaf569b-OSL\r\nlast-modified: Wed, 26 Nov 2025 08:04:47 GMT\r\netag: \"6926b49f-43a4\"\r\nexpires: Wed, 24 Dec 2025 01:07:31 GMT\r\ncache-control: public, max-age=604800\r\nage: 1373509\r\nedge-cache-tag: 2025113023\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17316,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"78293d05684740ced572f339832febd4","sha1":"d6e3bbcb10c5cd4ac0076872231fed4890b46a98","sha256":"80e5f128c1fcbb3559998436420b776ea56eead8697fb24ae24c2fb52bdfc419","sha512":"236ab9fb9ffcd12c3920b86f96ca18748b850ddc158fb919e6deeaba52509a79788883865bb473b24f8424add2aa2ff7583c7560f0c8e5b2e068ef542268c043","ssdeep":"384:gYNg7dC3IigBxmwLLllpjrCalC9QMu7NAilJlCne0:gYy5C3IXmEprrlC9QMENAAlCne0","tlshash":"ee72c07ecb7ffb67df13cbbc86b42ac0d2a6161df3e427421860a1268355650bd29188","first_seen":"2025-12-08T12:10:24.662399Z","last_seen":"2026-01-01T20:30:47.603606Z","times_seen":8,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":38,"dns":5,"connect":14,"send":0,"wait":9,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_pi/2025/03/14/ab/17419488541d5b1a815df1a86530d4406e2008f5e4_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_pi/2025/03/14/ab/17419488541d5b1a815df1a86530d4406e2008f5e4_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27117\r\ncf-ray: 9af286296d71569b-OSL\r\nlast-modified: Sun, 30 Nov 2025 18:21:05 GMT\r\netag: \"692c8b11-69ed\"\r\nexpires: Wed, 24 Dec 2025 01:07:31 GMT\r\ncache-control: public, max-age=604800\r\nedge-cache-tag: 2025120520\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27117,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"3d60345507d642dc0da0cc8e8d6d6be3","sha1":"b1d7e5fbbe1161d9cf8cde9c51ef4d85786f8a37","sha256":"9d70e65075901b95def79083df45111725bc988333fe5fde849ea894e218dd7a","sha512":"6151985dcf56a2fc5fd40cbe707807179c2a6ede15d42abf2bff982d7e54bef372663816b52c8ba85d8f7969ed065185616e9057712336dbfa9d45ab22d4d232","ssdeep":"768:gYycFh7T0BHACDwCkMt1ICuu4zZ1AWojoJLsxm:gKnYDwxMEC+Pt32m","tlshash":"93c2e1fa96bbd09ccb73b33414f23310c2d29177f7b66e516b20d882144a5b4b78d295","first_seen":"2025-12-16T16:48:13.591381Z","last_seen":"2025-12-17T01:08:42.981943Z","times_seen":3,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/js/shein-bs-vendors-2f5c332c.3d1f76d.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/js/shein-bs-vendors-2f5c332c.3d1f76d.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Nov 2025 06:44:07 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 11261\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":38551,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38422)","md5":"2ebdddf811fbf24407476683b878065c","sha1":"6a3bbcec93c49081f770be99cec8e2a65befaccb","sha256":"4708b77a9de3b9f6debd906898d2e939a52d2c1d8f80957202f7250ee7873613","sha512":"e767977cecffe3d1877c3cedb41c8bb0038beb4a0a60ae1106041100303dc57938273d211d29c057cf35e12bcb67489913beabfe933a63fb15a9abe20cbe502a","ssdeep":"768:43wLLNM7V1D1lWD7cTRV0DjGCzUogOOgNYdTi:43w+W0TRV0651i","tlshash":"d6031aecb699b48513b36926501f250be21f7f56d40f4cd0f937c8e43a6de1aa12eb18","first_seen":"2025-09-19T08:00:13.145672Z","last_seen":"2026-04-16T21:34:30.351275Z","times_seen":716,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/69153-3a70c540f8df5eaa.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/69153-3a70c540f8df5eaa.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Nov 2025 12:50:05 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 8546\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:35 GMT\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32502,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31909)","md5":"816b16eff3ef9eca4aeeb1052f2cd689","sha1":"9f2701f15a30e520d1eadf23750b9220346331c3","sha256":"7a3578da36967513adc7a5befede8a001f5a87e83df25e4858ad945724f7bfc4","sha512":"886fa3ba628d12a523b37ad9827612fa0d57140792480c2772e2f1c4f89892162d1f151868dc9d27b17e0514261051d92d5c79436f78df1bd7675febd21efa6d","ssdeep":"768:Ug1M6Dby/balaY4V4F3Il2tTfgPQSvns1oSjxs1kN0cL+zFghEEWYQ0ayi1uiuuW:Ug1M2ec95JY/VYcm0YemroDOecxgg","tlshash":"dbe2e9be852c5835dc0d9af0d9912ac51ee42b7ae2854ca1f7cdccb5904c9ef312927c","first_seen":"2025-11-21T14:31:04.888693Z","last_seen":"2025-12-17T05:54:39.353946Z","times_seen":84,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/event-center-46.96f5db62b53f61d8.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/event-center-46.96f5db62b53f61d8.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Oct 2025 08:36:49 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 395\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:35 GMT\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":741,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (680)","md5":"32435c623f8283d2c9502fe3bb337077","sha1":"30cb5f42bb164966f2a59eeea6f762d492650e6f","sha256":"bb0945e377adeab7f5d911661dbafc49827fb78936d7bd4b82eea7a58509bf27","sha512":"7395d8d8330d72c56c80de53c9e02828c83464e6010e0324174a2877cecbaa2eda3e274355c4047dcc16ee74d8b233c212e73798e305bb90d96f8a2c13989b33","ssdeep":"","tlshash":"5601d0c8a0896dba6cbd099c6f5253820978cebff00a21c0bf407ea10495a0871c8771","first_seen":"2025-05-19T19:51:55.845489Z","last_seen":"2026-01-20T19:05:52.678789Z","times_seen":1097,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/user-api/setting/get_sample_config?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /bff-api/user-api/setting/get_sample_config?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nSmDeviceId: \r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: HewaI0AR-isVikRSGpX30TnfiRycO7R9AxSI\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBfDE3NjU5MzM2NTUxNzN8MzZFMzQ3NUM3\r\nwebVersion: 13.9.4\r\nx-ad-flag: 8FkZa3NuCnoO+IBsqSDbVbjbZFDPBy/Ccg7HPaagWd6Z0k+h6+rK67aH0c1E5efGgWYq61YJe9rvWC5xPj7ZVVYoP3i9GVpBfVkWfa8EsrsGa2KgaixOSZmJfGKy6YI874yU0pb2l85B3RSMhSMlbQ==\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nuber-trace-id: ffd59b63e5db8c74:ffd59b63e5db8c74:0:0\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933655209\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=EPOOHYjQzMzlhYTNkN2QzNWMwMGFjZTI3Yjc4NTIyOTkzODliMmMwMTFiN2RkOGM1ZjhhMDFmMWRmYzc0ZTVhMmE2ZA%3D%3D\r\nx-cs-random: sdk error\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 373\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfODEyN19GfDE3NjU5MzM2NTUzNjd8Qjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: ffd59b63e5db8c74\r\nserver-timing: g;dur=2\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster2\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":373,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"714fde9326c0b9650418f1388aeaa895","sha1":"d1555bc7e074defc8700327801ea221ea12605c2","sha256":"7c92696bea4a72539cfd09200c1b025df35f41c2af60d7cae6b5feb181546570","sha512":"557d32e0cf3cc9f71cf153ba8b527af4939e636dd8cbd3d0fecba464d9d52cfd3402a2fcdd56006fcbd211ca2df085f8189749863ddca313bc4eff4c9b2ce266","ssdeep":"","tlshash":"0ae01281f439eb0280eb0d70939a59c9784bf1d289d09b04d85de61b910d539122065d","first_seen":"2025-05-19T19:51:55.906002Z","last_seen":"2026-06-03T06:21:04.355173Z","times_seen":1008,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/user-api/setting/get_sample_config?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /bff-api/user-api/setting/get_sample_config?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nSmDeviceId: \r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: HewaI0AR-isVikRSGpX30TnfiRycO7R9AxSI\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0fDE3NjU5MzM2NTUxNzN8XzdBQUZfMkNBMzZFMzQ3NUM3\r\nwebVersion: 13.9.4\r\nx-ad-flag: 8FkZa3NuCnoO+IBsqSDbVbjbZFDPBy/Ccg7HPaagWd6Z0k+h6+rK67aH0c1E5efGgWYq61YJe9rvWC5xPj7ZVVYoP3i9GVpBfVkWfa8EsrsGa2KgaixOSZmJfGKy6YI874yU0pb2l85B3RSMhSMlbQ==\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nuber-trace-id: ffacaa145c17aaf8:ffacaa145c17aaf8:0:0\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933655209\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=f8LLpMzI3YTc3NTY1ZWVmYzEwMDhiYzhhNjJhYTdjZWYxNDFjMDJlMzAwMDQwNmE3Y2E1MDkxNTdjZjhkOTEyZDQ1Zg%3D%3D\r\nx-cs-random: sdk error\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 373\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZ8MTc2NTkzMzY1NTM3NnxfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: ffacaa145c17aaf8\r\nserver-timing: g;dur=1\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster2\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":373,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"714fde9326c0b9650418f1388aeaa895","sha1":"d1555bc7e074defc8700327801ea221ea12605c2","sha256":"7c92696bea4a72539cfd09200c1b025df35f41c2af60d7cae6b5feb181546570","sha512":"557d32e0cf3cc9f71cf153ba8b527af4939e636dd8cbd3d0fecba464d9d52cfd3402a2fcdd56006fcbd211ca2df085f8189749863ddca313bc4eff4c9b2ce266","ssdeep":"","tlshash":"0ae01281f439eb0280eb0d70939a59c9784bf1d289d09b04d85de61b910d539122065d","first_seen":"2025-05-19T19:51:55.906002Z","last_seen":"2026-06-03T06:21:04.355173Z","times_seen":1008,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:37.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token,ds-from-terminal,x-oest\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/6914.b4785ee6224f7652.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:36.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/6914.b4785ee6224f7652.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:37 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 1010\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1890,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1840)","md5":"908c418649af280452343e7436a302c8","sha1":"b310da6877ec039d1cc0d6ee490328058e4b0317","sha256":"4a2f2d655e9efd8e36734ddd446a5ee8f7e8be27ed5a7837bc29ba55b119ff56","sha512":"81ba5a6f86a6e56e740ed96e83acb6a60e60616ac2befc017a6e79b7e5905eb73dd0c164d4e60ad3a56a0c08710e0312e406352273f4dbe1778eb19ee3f34ebd","ssdeep":"","tlshash":"c24146a9b1db342456d9988c4433511db45d840de06ea381be0b0ceeadd1f5ef4d3d9e","first_seen":"2025-12-09T15:42:57.692899Z","last_seen":"2025-12-24T03:17:54.139523Z","times_seen":40,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/clientPerInfo","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:37.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /clientPerInfo HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token,ds-from-terminal,x-oest\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/app-track/metric-info","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:34.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /app-track/metric-info HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/86093.fd0ac7f79022b89f.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:36.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/86093.fd0ac7f79022b89f.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:37 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 423\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":541,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (490)","md5":"c6b5b7ebdbcc29d861f16f68609d89d0","sha1":"ca267798c6372e200718ebb8557943272467a30c","sha256":"a582aa0d06bc87c7c39d5765701e25dc8a285df92c9922041276f4822edbe0fb","sha512":"d29ffe6adc64791342349116424ef31a54eb4155feae79a565932a71e370e368fee6210986db41b7e5ddef3e8eeffca7b286874256dabd1c42ac421b65add317","ssdeep":"","tlshash":"09f0c08b52e7383b25ab24fe5d46df5a147c15e27a7d02c47993c7842923d04e6d2c68","first_seen":"2025-12-09T15:42:57.725428Z","last_seen":"2025-12-24T03:17:54.178105Z","times_seen":40,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/user-api/cookie_banner/remove_cookies","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:36.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /bff-api/user-api/cookie_banner/remove_cookies HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nSmDeviceId: WHJMrwNw1k/E6FWWr45huH0SHkq/FHZP1RiBdRWJwnugpcKfvQ3M3byyyMOZe0v4ZceX7Tyqo6/mmqa0+4YaY/SFq8F8CjtuOdCW1tldyDzmQI99+chXEimu23C9OY/lrYp5HxsF710w6FU/fzhj65gCHPPxycwCneu8bpbMPuOQ3v/uKv7fr2biq+/JtOAQVL1Zk3jUkmm7NtAKvckCXn1o1sVkOqGcHswC/75UCs431H7aqDLDtYA==1487582755342\r\nContent-Type: application/json\r\nContent-Length: 267\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":267,"data":"{\"list\":[\"smidV2\",\"forterToken\",\"_gclxxxx\",\"fita.sid.shein\",\"_aimtellSubscriberID\",\"fita.short_sid.shein\",\"g_state\",\"cto_bundle\",\"cto_tld_test\",\"cto_tld_test\",\"_uetvid\",\"_uetsid\",\"_sctr\",\"_scid_r\",\"_scid\",\"_schn1\",\"_ScCbts\",\"_fbp\",\"cto_bundle\",\"_gcl_au\",\"_screload\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 33\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEfDE3NjU5MzM2NTY3MTB8MzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: f027afd9a57ede6e\r\nserver-timing: g;dur=2\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster2\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":33,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"142779a89960ca22b2a1460521a15e50","sha1":"e7163aad6b877e6ec8532a0415baf352e2001c9e","sha256":"b17eb1643dd133972a3ec250a5ea2ff0c6259bca9fadbec3f2a8d0e9d472597f","sha512":"7ffe60539f95175c11ab5bb35aefaeecc76b937c6de47189593c24cfbc9f072e84d46ad5f3def4aef8300deb71f4b319cd50cb9efb6ae78aad696a4d08d3a5e3","ssdeep":"","tlshash":"8d800000000f2c83000382088c8e0a80c0ae22a080a2c3000e2c0e380a2a8c20020838","first_seen":"2024-09-20T20:13:09.759Z","last_seen":"2026-06-03T06:21:04.360191Z","times_seen":1552,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_pi/2024/12/25/da/17351062092424b7c68eed124015fdae51d8ff897d_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_pi/2024/12/25/da/17351062092424b7c68eed124015fdae51d8ff897d_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34232\r\ncf-ray: 9af286297d82569b-OSL\r\nlast-modified: Mon, 15 Dec 2025 01:16:10 GMT\r\netag: \"693f615a-85b8\"\r\nexpires: Wed, 24 Dec 2025 01:07:31 GMT\r\ncache-control: public, max-age=604800\r\nage: 54064\r\nedge-cache-tag: 2025121618\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34232,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"85818d25a648a8adb473fceb2484d12b","sha1":"80a8848f4ab31759941f58af0fe4a22df47dabbb","sha256":"d0b4560e8580ed3e4f0fdc905933c3a482ed4e7aa0bbe3a30e52696f252de226","sha512":"91a7cb9405f596efbd2018f090e2acc7601dfa2030dfc1ed177fec49532df084e63c05628a99be1aae45b8710dfe76c7aa39690acfacf5296b804e4ef2f0ce4f","ssdeep":"768:gYy4OdGzs23g54r7ZU2ow009581574KLcXFO7HtZ7IKYn:gxM4P5sU09+574HoDbIJn","tlshash":"21e2e178fbb5d86eecb908bc92eda3933984576fc75c08ed5268752613c242d470d163","first_seen":"2025-11-17T23:10:20.770015Z","last_seen":"2025-12-17T01:08:42.985927Z","times_seen":5,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/js/swiper.c0e1c23.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/js/swiper.c0e1c23.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 12 Dec 2025 11:30:42 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 28111\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":101761,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1ac7591c613fb157b5bbdaf7504331cc","sha1":"ab7d437577d73c82701dc2fe53e2792550852dbe","sha256":"9bf2ea1a16f9921ec669e6b1fb655a4c9e4d61166ecebe80496f54347272fcbc","sha512":"0acf39b76f19cb3fa3fcd658c991aeb4a1eb1c790bd95b8f24106ae9da0b3eb473fc22a15b2b4324f37c455b6537a84c50231af7f4d0f134ac316e574d572787","ssdeep":"1536:ft39W9LcIqIEridfGzUnAdUEKWxXB1xWqApMQ9mBlxvHkKb8s1XXiA6wG6a62uYQ:ZIEriqvXt/W6CZK","tlshash":"97a31985b12175b241e316db93a5c212b3b54844b449c4b870fd8caf997e8a803beffd","first_seen":"2025-07-31T13:40:14.767042Z","last_seen":"2026-04-16T21:34:30.250968Z","times_seen":751,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":12,"send":0,"wait":6,"receive":1,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shein.ltwebstatic.com/svgicons/icons/sh_pc_sui_icon_cleanall_16px.svg","fqdn":"shein.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /svgicons/icons/sh_pc_sui_icon_cleanall_16px.svg HTTP/1.1\r\nHost: shein.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Oct 2025 09:11:23 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 298\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:33 GMT\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":534,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f1d6eb1bc49b049dcdd3d1d78fdc3688","sha1":"b76d7bd7e90bc9d16bf4b6c01a33d6a5c178ef95","sha256":"8a0dfa1a5c9aebd4bc7832a2d80e1f01a9c763bf8a8b8c5bc39bc02d567f21ac","sha512":"c8d867154cacf9b5eb1b3e7932baa799eee8bfeb0e4081bfa310ef5e70ee092c41e1e423fbafaec81a0512a6a828e9f8b5b724dc4df3bc4d976af75e995cbe04","ssdeep":"","tlshash":"11f02bfa6348d6e0f202cf38855dbeea243ebc7f7e8c049691e53504bc691d5884cb68","first_seen":"2025-09-01T22:06:28.877509Z","last_seen":"2026-06-03T06:21:04.439203Z","times_seen":1087,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:42.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: client-ugid,content-type,ds-access-site,ds-access-token,smdeviceid,x-oest\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:42 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cjs.ltwebstatic.com/unpkg/@shein-aidc/basis-sa@1.1.15/dist/web-sa.umd.js","fqdn":"cjs.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /unpkg/@shein-aidc/basis-sa@1.1.15/dist/web-sa.umd.js HTTP/1.1\r\nHost: cjs.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 26 Oct 1985 08:15:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 21342\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":68230,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52516)","md5":"7c329c44acbacc4326294182f45fd511","sha1":"2619b5178a8127cd5fbddfa8a8b13856680f61a8","sha256":"bf914002f83a96759034530a90da9ca2bd3ee2aa372d753469952789c269d7f1","sha512":"a9b7ffa373cebe482c97ffde4ab218a59ed0ea24bc8c633015effa08f3042f597293d638cb12ac07c030b8060537c959dcd8c67717c93083ceacc7685a911bc5","ssdeep":"768:Z/uZ/KDdCWBNnU+G8+TbpRdv399QRCdqy1/WJsbXReYPwoe2PP5dj1Z64mkHwm2B:Z62+8Y7dv3Q0/ZVXPP5dj1hI26","tlshash":"9f631a9d73d7f42506f2e029c43f2a02b2363a155888d060fa36ddd17d78a9b6257f3a","first_seen":"2025-07-18T12:09:05.940674Z","last_seen":"2026-04-06T21:07:19.2984Z","times_seen":786,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/49647-a2602a3c0b668f18.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/49647-a2602a3c0b668f18.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:39 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 4537\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":16687,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16636)","md5":"b96d0508f4d4db82d9c7625693dc584a","sha1":"0645478caf803659ff960113f23e2887151f8239","sha256":"d09ee6ff266296e6e0896faf5124976e41274661fe923e3a7da72f655a286f68","sha512":"98b77dc561fae7e3ee57ebd5974e33d555c02fa52a3338bd05445ac439d7fb13f1d4d968c1af45316d3f9a331f17b680052559526488b0d506a437ea39112273","ssdeep":"384:pnvskAH8zJ2Mi7tJBWCC+Gg7gzDHS9jXx9TJK/hEt/0cTFAY2cFtH0cLB+vvctmT:pU/Mi7tJBWCC+Gg7gzDHS9zxhJK/hI8X","tlshash":"e872da47a3f34827877648f9e4272510e12e5f012519c065bd8e49fa078ebcba56bf3e","first_seen":"2025-12-09T15:42:57.615348Z","last_seen":"2026-01-20T19:05:52.666184Z","times_seen":71,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_pi/2024/12/09/d5/1733739296e0ca08777760d3eb0ee8c6301241803e_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_pi/2024/12/09/d5/1733739296e0ca08777760d3eb0ee8c6301241803e_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36502\r\ncf-ray: 9af286488b4d569b-OSL\r\nlast-modified: Tue, 09 Dec 2025 07:05:40 GMT\r\netag: \"6937ca44-8e96\"\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ncache-control: public, max-age=604800\r\nage: 669716\r\nedge-cache-tag: 2025120915\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36502,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"223289b9df8181d7300343cbc9083d5c","sha1":"99dabb9e12d089e870c615a50c1ef33903e0a038","sha256":"456e59d15bdc88b0e6f9cc2725854a7770161e6b55175991a9508c3a92ababd4","sha512":"2580e166501725623ac109e6f7bd1bf3349fabe82ea5990ed074f27a3135241df35c71b1ed8943ed0dd9a2088f23d91931d525fbc59ce9a9dc66751fd3eabd64","ssdeep":"768:Al7YRiR4Ii06sP9/HgFXff2cpP8+7/AQyxlWk7xPj7yJ+v2XBPfQXHcuoX:Al7LRNiFQ9/Hyff2cp9/z6dJ+rPfQXHO","tlshash":"20f202d4cc01bf18dafd2ade6a9e396d63c34b405541875120d4a76053a7f283dc9fb9","first_seen":"2025-11-07T10:39:31.62041Z","last_seen":"2025-12-23T11:07:06.08588Z","times_seen":9,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/abt/merge/get_abt_by_poskey?_ver=1.1.8\u0026_lang=en\u0026posKeys=webpushsubscribe\u0026_abt=1","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:37.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /bff-api/abt/merge/get_abt_by_poskey?_ver=1.1.8\u0026_lang=en\u0026posKeys=webpushsubscribe\u0026_abt=1 HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nSmDeviceId: WHJMrwNw1k/E6FWWr45huH0SHkq/FHZP1RiBdRWJwnugpcKfvQ3M3byyyMOZe0v4ZceX7Tyqo6/mmqa0+4YaY/SFq8F8CjtuOdCW1tldyDzmQI99+chXEimu23C9OY/lrYp5HxsF710w6FU/fzhj65gCHPPxycwCneu8bpbMPuOQ3v/uKv7fr2biq+/JtOAQVL1Zk3jUkmm7NtAKvckCXn1o1sVkOqGcHswC/75UCs431H7aqDLDtYA==1487582755342\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: nTohXdDF-15sWgce8ZNP6YreVwqzw-mJq1Po\r\nAppCurrency: EUR\r\nAppLanguage: en\r\nx-oest: RTBEMzU0QzBfODEyN198MTc2NTkzMzY1Njk4NnxGQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nwebVersion: 13.9.4\r\nx-ad-flag: 8FkZa3NuCnoO+IBsqSDbVYTFm6zUmft9Vh7q2yhidy/tjTBrwINMUj9QAPXBTqi1Z9m3aGmbBKDl19FMxbV7y+55HcmFRosSIRKGPivl8+LqhNSOT7goHRSBc8hQvaioiQrAI0RJ5sm4uEg1OBb9Ig==\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nuber-trace-id: ff5ba4e59aa56931:ff5ba4e59aa56931:0:0\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933656992\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=TehfuMWM1NzU2NTFlMGNjOTMxNTBmYzE3ZWE3NTk4NDRlNDhmMjRjMThjN2I5OWMzMTc2ZTk4ZGQ3ODczOTk3NWIzYw%3D%3D\r\nx-cs-random: 03d0ed219071939e5c7a63f35f13847de83b7a9069f09771d1f948202558066fa477d52296a00a0e98600fff0260fc590f1087a62a72a754d29224cb51ca07de495902d2ccb31\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 237\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUN8MTc2NTkzMzY1NzA1NHw3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: ff5ba4e59aa56931\r\nserver-timing: g;dur=3\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster2\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":237,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d36f8704a1d9fe012d1066e7c6f37f31","sha1":"855a2ca08d0e6d67a25b53207b0df1cf0fcf3e39","sha256":"340e19b048875864ec9d70ab95ae7f5dbfcc458ec08079d97c493cdc03b2fffa","sha512":"6e8c5696f5df0634dc84b0d71e4413681b97074007ecfe0eed2da7894a650609c08dcbc4edacdf7cc22f269c86d61e5a93023e2e07d215ad8252edf3a9f1021c","ssdeep":"","tlshash":"ead0a702410f0cb74827a13548ee7ca4428f1a2594d997d8e99d8d19c9fc0ed08111a0","first_seen":"2025-12-17T01:08:42.988999Z","last_seen":"2025-12-17T01:08:42.988999Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nds-from-terminal: pc\r\nx-oest: RTBEMzU0QzBfODEyN19GQjh8MTc2NTkzMzY1NzkzMnw0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nContent-Length: 2088\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2088,"data":"{\"activity_name\":\"expose_navigation_menu\",\"activity_param\":{\"first_menu_content\":\"Women Clothing\",\"first_menu_hole\":\"3\",\"second_menu_content\":\"Women Clothing\",\"second_menu_hole\":\"3\",\"second_node_id\":\"110000033\",\"src_identifier\":\"fc=Women Clothing`sc=Women Clothing`tc=0`oc=0`ps=tab03navbar03`jc=itemPicking_017172961\",\"second_content_list\":\"/RecommendSelection/Women-Clothing-sc-017172961.html?ici=eur_tab03navbar03\u0026src_module=topcat\u0026src_identifier=fc%3DWomen%20Clothing%60sc%3DWomen%20Clothing%60tc%3D0%60oc%3D0%60ps%3Dtab03navbar03%60jc%3DitemPicking_017172961\u0026adp=\u0026src_tab_page_id=page_ad_landing1765933653032\",\"is_slidebar\":false,\"third_menu_content\":\"\",\"third_menu_hole\":\"\",\"fourth_menu_content\":\"\",\"fourth_menu_hole\":\"\",\"src_module\":\"topcat\"},\"device_type\":\"pc\",\"home_site\":\"shein\",\"sub_site\":\"eur\",\"language\":\"en\",\"system_language\":\"en-US\",\"money_type\":\"\",\"device_country\":\"\",\"app_versions\":\"\",\"network_type\":\"\",\"ip\":\"\",\"screen_pixel\":\"1280*1024\",\"screen_size\":\"\",\"device_class\":\"1\",\"device_brand\":\"\",\"device_name\":\"\",\"device_model\":\"\",\"os_type\":\"1\",\"os_name\":\"Windows\",\"os_versions\":\"10\",\"browser_name\":\"Firefox\",\"browser_versions\":\"134.0\",\"session_id\":\"bi_1765933653037_61177\",\"channel\":\"affiliate_af_b_33_121_0\",\"origin_otherid\":\"\",\"traffic_source\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"market\":\"\",\"start_time\":\"1765933653032\",\"end_time\":\"\",\"environment\":\"production\",\"device_id\":\"\",\"device_idfa\":\"\",\"device_idfv\":\"\",\"device_aaid\":\"\",\"referer\":\"https%3A%2F%2Feur.shein.com%2Fark%2F2812%3Fonelink%3D13%2F4s0r28uoh4d8%26requestId%3Dolw-5ag0n5ca69ld%26url_from%3Daffiliate_af_b_33_121_0%26affiliateID%3Daf_b_sub_13300%26click_id%3Dd0e56b0a85344d81ae746ea548d5e9a1%26cdn_rsite%3Dcf%26ref%3Dwww%26rep%3Ddir%26ret%3Deur\",\"sdk_version\":\"1.1.15\",\"login\":\"0\",\"member_id\":\"\",\"ugid\":\"\",\"page_param\":{\"ad_activity_name\":\"newuserprice\",\"scene_id\":\"m_app\",\"platfrom_nm\":\"swift\"},\"tab_page_id\":\"page_ad_landing1765933653032\",\"page_id\":\"6342\",\"page_name\":\"page_ad_landing\",\"log_id\":\"b96a2c06-b108-4a81-86f1-8cb909d9b018\",\"seq\":\"8\",\"timestamp\":\"1765933657917\",\"local_time\":\"2025/12/17 01:07:37\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/j/pi/2025/09/09/20/1757382015da5ac62fc8d10d6caedbc4b87ac2f63a_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/j/pi/2025/09/09/20/1757382015da5ac62fc8d10d6caedbc4b87ac2f63a_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14667\r\ncf-ray: 9af286296d79569b-OSL\r\nlast-modified: Sat, 13 Dec 2025 17:46:43 GMT\r\netag: \"693da683-394b\"\r\nexpires: Wed, 24 Dec 2025 01:07:31 GMT\r\ncache-control: public, max-age=604800\r\nage: 285647\r\nedge-cache-tag: 2025121401\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14667,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"d30aa84ae85deea0aa72bba8f96a4d51","sha1":"161af9b0f45a99115f055fb85a9256abe91cf026","sha256":"535c73b33c4bcb9091448e6db243b62d4afd66c682512b8850c72f22e3257d29","sha512":"c8dff727b0530fabb0e3a386c3f4b0ec9d2379ded2d88feb46a6b59f8f2ba976fa3f8e2818afd8e6dd36a007fc727d6df0ded5dedc20afee3fb46ba27860f4e8","ssdeep":"192:gYNMtKwPSbvRl9RbgzjvWAABEf/LelqP3cGMQpZrE6dY+8Z2Nym4bhcuwg:gYNg7UlDAAyfIFdWNEbJZ2NPQhfN","tlshash":"af62bf76cb5b9290dcaac6bc7cf61fd055c33f154726bb448a6d793a854a4c18ccd107","first_seen":"2025-12-16T16:48:13.50318Z","last_seen":"2025-12-17T01:08:42.989832Z","times_seen":3,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":13,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_pi/2025/03/04/26/1741063105d93691880b74bbd8e850b39e736ce4a4_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_pi/2025/03/04/26/1741063105d93691880b74bbd8e850b39e736ce4a4_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12288\r\ncf-ray: 9af286296d72569b-OSL\r\nlast-modified: Sun, 16 Nov 2025 21:50:25 GMT\r\netag: \"691a4721-3000\"\r\nexpires: Wed, 24 Dec 2025 01:07:31 GMT\r\ncache-control: public, max-age=604800\r\nedge-cache-tag: 2025111705\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 2002125\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12288,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"72b8a8ac12dc49c7ee8bcfcb1c59704c","sha1":"23fb1057e06220a679ffc79fb5d5c16348e8c738","sha256":"cbd342aa82778282433290c386a7c063705288ef3eabdff64c8fc95d7a585af7","sha512":"9c8d39d970b7354712b43a5708f79bfefa3bffe9a4ee147851c498f5671165a2249dd67a60ef3d014254122a130f7d4663162cf913491b87ff8849e92c34e3e0","ssdeep":"192:gYNMtKwPGBiGichJjriR/uROv7HspbkIziBDePDHcNU9X:gYNg7OBiTEBCVHIJLz","tlshash":"1342af51cb419797faf2ebfc38f747a8f3b23310abb24151fb24812814826846d9d11e","first_seen":"2025-11-23T22:38:20.52864Z","last_seen":"2025-12-17T01:08:42.990721Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/system/configs/page_multi_language_mapping?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /bff-api/system/configs/page_multi_language_mapping?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\nContent-Type: application/json\r\ntimezone: GMT+0\r\nbrand: shein\r\nchannel: pc\r\nappcurrency: EUR\r\napplanguage: en\r\ntoken: MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\r\nsiteuid: eur\r\ncurrency: EUR\r\nlanguage: en\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkN8MTc2NTkzMzY1NjIxNXxBMzZFMzQ3NUM3\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: \r\nx-request-by: bridgeX\r\nuber-trace-id: ff14435dcb7db734:ff14435dcb7db734:0:0\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933656217\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=oNrkeNDhiMmI0MjU3N2FkOTFjOGFiNDBkZTQwZmEyYTkzNmNjYTUyMzM1Zjg3ZWU2NzUxM2U3MjkxYzVkY2E5YmI2NQ%3D%3D\r\nContent-Length: 25\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":25,"data":"{\"pages\":[\"page_footer\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1655\r\ncontent-encoding: br\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RXwxNzY1OTMzNjU2MjY3fDBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-navigation\r\nx-gw-traceid: ff14435dcb7db734\r\nserver-timing: g;dur=2\r\nvia-shein-gateway: c-shein-pc!bff-navigation\r\nheader-cmdb-name: bff_navigation_eucentral_prod_cluster3\r\nheader-cmdb-name-origin: bff-navigation-eucentral-prod-cluster3\r\nheader-cmdb-sname: bff-navigation-eucentral-prod-cluster3\r\nheader-cmdb-app-name: bff_navigation\r\nheader-cmdb-app-name-origin: bff-navigation\r\nheader-cmdb-app-sname: bff-navigation\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5318,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"361f0152b5f8e23678e4f43f7395b423","sha1":"8838da64b56d0cbe22add27148ea02fdb920a5f6","sha256":"0d7d3975f993b1f064fe85f21aaf228b1704ab291d36996a058c46fba644eeb5","sha512":"ee67a6d3ea7a494732af66907d30e39b50126f8385c2f652fde983f38e1ea9c99118dcc8bd4fac4d7b2be755f32146567a69d5cd8813de9ddb65d414fa3c6146","ssdeep":"96:II8ttMRa6AwZAX9cy7Mc7UpoUNoqfIXoksJnorG6lDkpf:q6NZM9chjpoUCXokKnoycDkpf","tlshash":"53b150cd7a23732f1ad2469379a35520acb573d73e20541ac49c08791a7921fafdb32c","first_seen":"2025-07-18T12:09:06.005482Z","last_seen":"2026-06-03T06:21:04.485251Z","times_seen":886,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_pi/2024/07/28/3d/17221574666fb8754ceac63a5cfa848989c2aa4634_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_pi/2024/07/28/3d/17221574666fb8754ceac63a5cfa848989c2aa4634_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22834\r\ncf-ray: 9af286481b10569b-OSL\r\nlast-modified: Thu, 11 Dec 2025 23:37:55 GMT\r\netag: \"693b55d3-5932\"\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ncache-control: public, max-age=604800\r\nage: 437380\r\nedge-cache-tag: 2025121207\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22834,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"18c4723f39cc9964ae5cb14df8f46b13","sha1":"5097ec40254d440d09b74429d4e58649bcc8ed41","sha256":"164ef201c169b763c29ed48b0d882b246613b0a1b54632c3829391992121f5d6","sha512":"8273fca0810c151de90aa638731c435c9762cc5821fc34eed93e4063b30a0d4c66921e5cc3e12e96517239ab45647c857b78a38842c5888c653678c5fd71f2f9","ssdeep":"384:gYNg7DBipbjAVawd5VHCSC6oYCfiniLkqTlmFTAhxYcI5c24s3GAQ5+oB+:gYy3opbjQVEdLLEFTAdIPT9","tlshash":"70a2e1d12b13c497f6b08570c5297bd8bf5ab31ac281be484f048e940f9694c67ad682","first_seen":"2025-12-16T16:48:13.631325Z","last_seen":"2026-01-01T05:49:13.004573Z","times_seen":7,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/iframe_login-dc777986ac0aa7bd.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/iframe_login-dc777986ac0aa7bd.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 11 Dec 2025 08:42:08 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 109\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"76f3827dec5bfb9d7dc350faa32f0a99","sha1":"b05287b10955c7b97f5eba6e0e8944a1a14c2b18","sha256":"7df82408445aadcf5af88e79d8086a8d1c8428452335ade2c9d3b3d12a77fe9a","sha512":"7c179dd3ff9c36da4e6827e1483819825753cf4fc10a2a275f25c1f64afd64da45781541d6b9ccf0e57d26f790edf415dff05be2b291645ba9a24acf5740cff5","ssdeep":"","tlshash":"5db092a124c7be34382f49c498b246a79c3401733cb4d1c6685a9cb710a2d181aa3ca5","first_seen":"2025-07-26T09:54:21.566605Z","last_seen":"2026-06-01T22:35:15.049955Z","times_seen":753,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/event-center-418.51880629ad9f5bd1.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/event-center-418.51880629ad9f5bd1.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 02 Dec 2025 06:01:06 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 2812\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:35 GMT\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":19567,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19505)","md5":"8645df2bad922bc480d4cec6b971d384","sha1":"ac0c5ed73d73838188f06b7b1bad3934f9965a62","sha256":"e6fadb3bae34c9e69045e7617a928e46d2b79d8d5231b65a17b5ce4675a57398","sha512":"b1e66830e1c9e5d0c77fc48fa9fbc2a05fa60825256b6b88ac5f4d3fec8003a2f1ec7738eca48a9c2abb2264c05fb473bbb27c24f883003980692a98ac4a069f","ssdeep":"384:ZgUwfxROCMZ30L0JcgXA9Y3YQb6Dqk7/Rn:ZgPTOCMZ30L07XA9Yun","tlshash":"cb92acd8f4ae14ba2c3d844ebb5557c92ca6cf69b6cb00d097529f59188df09b04e3f4","first_seen":"2025-11-05T12:44:44.235838Z","last_seen":"2025-12-17T05:54:39.354455Z","times_seen":224,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/72474.9adb8bf95f1bd0f1.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:36.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/72474.9adb8bf95f1bd0f1.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:37 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 573\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":861,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (810)","md5":"a4b3b1e984c8dd293a1339145a9e0c1d","sha1":"b1031575cf78f6e7365dece57a5f3d69c954287b","sha256":"319bc66832118cda71c05458cc25f681f898c2127fd0452bb20f4fe35afc585b","sha512":"282b8177380dae5b452ede65cebea3dcb65d8db8033b038bdc9507e81c7c50e8614f19873588465fc4596c78fe73bf1cd2986ece6b79e915ea86a275da0e51c6","ssdeep":"","tlshash":"6611566292e7145b1bdd08cc1483cb1f05bd2e26752d9b80fc8b6c801243b5e7281bfd","first_seen":"2025-12-09T15:42:57.548636Z","last_seen":"2025-12-17T05:54:39.325496Z","times_seen":17,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/abt/merge/abt_async?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:38.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /bff-api/abt/merge/abt_async?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nSmDeviceId: WHJMrwNw1k/E6FWWr45huH0SHkq/FHZP1RiBdRWJwnugpcKfvQ3M3byyyMOZe0v4ZceX7Tyqo6/mmqa0+4YaY/SFq8F8CjtuOdCW1tldyDzmQI99+chXEimu23C9OY/lrYp5HxsF710w6FU/fzhj65gCHPPxycwCneu8bpbMPuOQ3v/uKv7fr2biq+/JtOAQVL1Zk3jUkmm7NtAKvckCXn1o1sVkOqGcHswC/75UCs431H7aqDLDtYA==1487582755342\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: nTohXdDF-15sWgce8ZNP6YreVwqzw-mJq1Po\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0Xzd8MTc2NTkzMzY1ODE2NXxBQUZfMkNBMzZFMzQ3NUM3\r\nwebVersion: 13.9.4\r\nx-ad-flag: 8FkZa3NuCnoO+IBsqSDbVYTFm6zUmft9Vh7q2yhidy/tjTBrwINMUj9QAPXBTqi1Z9m3aGmbBKDl19FMxbV7y+55HcmFRosSIRKGPivl8+LqhNSOT7goHRSBc8hQvaioiQrAI0RJ5sm4uEg1OBb9Ig==\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nuber-trace-id: ffacd26833497d14:ffacd26833497d14:0:0\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933658167\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=xTtWZMTViODA0MmE5N2MwZDYwNTgwZDI1OTliZjE0Mzk2NzM3YzFlNWEwOTQ5YWZkMTI0YTU5ZTRkZTM4NjY5NjM0Yw%3D%3D\r\nx-cs-random: 03d0ed21907194f3413ea82fc5de0d6af74ed0248f80b268df6ffcba7e9187c73e579cb331762e9d9ac9b45190fc976e3f7d42c3715435bacc0edba3e28d247aa759562e054b6\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM; smidV2=20251217010735039e5b05b5444c805ea4e51d90efaa8e00b93c429d3cee080\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 33\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NXwxNzY1OTMzNjU4MjEyfEM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: ffacd26833497d14\r\nserver-timing: g;dur=8\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster2\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"142779a89960ca22b2a1460521a15e50","sha1":"e7163aad6b877e6ec8532a0415baf352e2001c9e","sha256":"b17eb1643dd133972a3ec250a5ea2ff0c6259bca9fadbec3f2a8d0e9d472597f","sha512":"7ffe60539f95175c11ab5bb35aefaeecc76b937c6de47189593c24cfbc9f072e84d46ad5f3def4aef8300deb71f4b319cd50cb9efb6ae78aad696a4d08d3a5e3","ssdeep":"","tlshash":"8d800000000f2c83000382088c8e0a80c0ae22a080a2c3000e2c0e380a2a8c20020838","first_seen":"2024-09-20T20:13:09.759Z","last_seen":"2026-06-03T06:21:04.360191Z","times_seen":1552,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/js/shein-bs-vendors-839d398e.926141b.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/js/shein-bs-vendors-839d398e.926141b.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 12:48:46 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 38336\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":203263,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"88aa7f4534646f57c383482bd03839fc","sha1":"b41c54ff7e8b34d50fb72cc8aa18f20049823fee","sha256":"7a3f32e87f5975ecf37345be688b6c715b82f876053c2162b644c7d3323a9d2f","sha512":"a43a662e553989697a6792c9a04621af86aa429f0923c927d221052ce6880b59c0e61ef4e9011f26a74d1f7803eaec7577e8e3e8577d4bc391072901cc917fb0","ssdeep":"3072:fWQ7bozyylujfQO1UTmymRNUEqcJqicNvBz:f1b6yylurQeUTmymXUEqKqic5Bz","tlshash":"4f14d5d8f088b4162db3ad6d802b1409939fff4df92485e0d772a5602b9ed5db216b3c","first_seen":"2025-09-19T08:00:13.269951Z","last_seen":"2026-04-16T21:34:30.383102Z","times_seen":716,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_ccc/2024/08/13/79/1723560135d7e1547334584782167463c7a7f975a1.png","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_ccc/2024/08/13/79/1723560135d7e1547334584782167463c7a7f975a1.png HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 11437\r\ncf-ray: 9af28633a9e9569b-OSL\r\nlast-modified: Thu, 20 Nov 2025 01:07:25 GMT\r\netag: \"691e69cd-2cad\"\r\nexpires: Thu, 25 Dec 2025 01:07:33 GMT\r\ncache-control: public, max-age=691200\r\nage: 1794352\r\nedge-cache-tag: 2025112521\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11437,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 654 x 248, 8-bit colormap, non-interlaced","md5":"7058e83d5e424fade9254ed30c9fcd0e","sha1":"2eed106cbb3e6ddb3123cd5a6b75d142b858b329","sha256":"3e5613fd520e77cd8879e7e9ae3c0882ad644feb0bb5f88135ffddee50f38b0e","sha512":"b821d649ef7a853d2294a4dc78436f21e82d88e443cd680a085ff2fc8d34a9cb7e57040fb8567d3406bcb65021e52705c8202b061bf3b2ea152430b3d8845fbf","ssdeep":"192:kiDpfrH1GmJ+6ijEDprE5z4OXdtWDSGOUguH2Hc7xLj3HPeTBpQN/w9U:kiDpfxt+6ijEDVOXdsOpyxpEBpQ56U","tlshash":"4832bfe119d8fde090f1e2af92ac14bd958e23250570179bc24e27193cdde384e8196c","first_seen":"2025-07-31T13:40:14.474075Z","last_seen":"2026-06-01T22:35:14.840024Z","times_seen":814,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/53475.fdf51dc13736cf90.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:36.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/53475.fdf51dc13736cf90.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Nov 2025 12:35:27 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 933\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1657,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1606)","md5":"c333ce91e68d90f1924061d988da461f","sha1":"6df71a08dad355bfb57ff6bff6696b473419cada","sha256":"849477a196351edab2be71857cc780c51011f28592792fc2770def6a24455b34","sha512":"0122748d3f4a822370c2444b459c0fce944353275752d91511ba449fad6e2e7fc133afc7c2c1589f61d842838d87abd7394d762a0b62708a4b351eabf28f6f5c","ssdeep":"","tlshash":"4831768adb9ea4ac2afb68edc0b748119939772635996804f7435cd430093df1206cb5","first_seen":"2025-11-12T15:12:31.758511Z","last_seen":"2025-12-24T03:17:54.234395Z","times_seen":112,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_pi/2025/01/15/97/173692767782df23109d6f5e6ee09ec6830c4e497e_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_pi/2025/01/15/97/173692767782df23109d6f5e6ee09ec6830c4e497e_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24752\r\ncf-ray: 9af286297d84569b-OSL\r\nlast-modified: Thu, 11 Dec 2025 04:06:55 GMT\r\netag: \"693a435f-60b0\"\r\nexpires: Wed, 24 Dec 2025 01:07:31 GMT\r\ncache-control: public, max-age=604800\r\ntiming-allow-origin: *\r\nedge-cache-tag: 2025121220\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24752,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a146e6adac9a5293cf7733f480980760","sha1":"e281fedaa0764085afcc9ac36c8c9278e2afbe19","sha256":"8a6ef5a47bbf93112b047f637abb71a82265e7e2692e66e09442a43c7e75a7ae","sha512":"c57ea3d4afdb1457025ea3556f86fd4a1fc1f2d5f5586c2722ff1f8f6320de33952952effde6250cc5accaa44175ceacb04dc65d2b9ff38649ab2987076e04b1","ssdeep":"768:hYyTucDW6GvYg1OoSpQ2dNT6wuESQrhKpDIJ9A3k:hMb1f4QcgESQo5oT","tlshash":"dfb2e1b1c7dc9633f26bf63450d47fe45d66e595e766384e11102b81028a6503fec1f6","first_seen":"2025-12-17T01:08:42.996484Z","last_seen":"2025-12-17T01:08:42.996484Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":38,"dns":13,"connect":1,"send":0,"wait":68,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_pi/2024/12/25/57/17351079424c0607b53664a6bda07f00e70f8fdc4f_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_pi/2024/12/25/57/17351079424c0607b53664a6bda07f00e70f8fdc4f_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21376\r\ncf-ray: 9af286297d89569b-OSL\r\nlast-modified: Sat, 22 Nov 2025 03:47:13 GMT\r\netag: \"69213241-5380\"\r\nexpires: Wed, 24 Dec 2025 01:07:31 GMT\r\ncache-control: public, max-age=604800\r\nedge-cache-tag: 2025113016\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21376,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cbe525ef959df2cd66383318d9196804","sha1":"2328ec6df9a9d15410b9779247d4f7d806f6bfb9","sha256":"7fb7645238d681e653b685870e604791c5c338219afb8aac84fdbdd640313b13","sha512":"99f23f4a5205a5d218668ca59b042046c788f79116cb511b9c3f186fde8c70b459562d00d52161ffdf856885c54f4a66b02922ac9fde664fe4f03f305cf7e841","ssdeep":"384:IYNg7ozPtZIEVz+UixJajhFLppwQTLLN2Vjc9+DnjGM:IYyEnIEV+UtjhFLiVBnGM","tlshash":"92a2e17e6948636ef1a2f77154502bc12fa81e10d2a962f3019893e74251dc6fd892cb","first_seen":"2025-12-05T02:39:06.805185Z","last_seen":"2025-12-17T01:08:42.997285Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":34,"dns":6,"connect":4,"send":0,"wait":73,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/app-track/metric-info","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /app-track/metric-info HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1181\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1181,"data":"{\"data\":[{\"timestamp\":1765933653038,\"local_time\":\"12/17/2025, 1:07:33 AM\",\"params\":{\"pathname\":\"/ark/2812\",\"url\":\"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\",\"host\":\"eur.shein.com\",\"screen\":\"1280*1024\",\"uemId\":\"9c26ecf5-63d9-589a-a5de-55487193fe4c\",\"sdk_light_version\":\"0.2.12\"},\"sdk_version\":\"1.0.0\",\"browser_name\":\"Firefox\",\"browser_versions\":\"134.0\",\"os_name\":\"Windows\",\"device_level\":1,\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"environment\":\"production\",\"app_name\":\"shein\",\"language\":\"en\",\"sub_site\":\"eur\",\"money_type\":\"EUR\",\"device_type\":\"pc\",\"session_id\":\"esqiv2ozdgqktm3riwng5\",\"tags\":{\"pathname\":\"/ark/2812\",\"page_id\":\"2812\",\"businessType\":918,\"scene\":\"page_ad_landing_pageview\",\"ad_type\":\"\",\"pf\":\"\"},\"metric_name\":\"page_ark_production_pv_track\",\"type\":1,\"value\":1,\"message\":\"{\\\"page_name\\\":\\\"page_ad_landing\\\",\\\"page_id\\\":\\\"6342\\\",\\\"page_param\\\":{\\\"ad_activity_name\\\":\\\"newuserprice\\\",\\\"scene_id\\\":\\\"m_app\\\",\\\"platfrom_nm\\\":\\\"swift\\\"}}\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/mdmpUserLanding","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /mdmpUserLanding HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token,ds-from-terminal,x-oest\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cjs.ltwebstatic.com/unpkg/privacy-sdk@0.0.47-alpha.2/dist/privacy-sdk.umd.js","fqdn":"cjs.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /unpkg/privacy-sdk@0.0.47-alpha.2/dist/privacy-sdk.umd.js HTTP/1.1\r\nHost: cjs.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 26 Oct 1985 08:15:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 23407\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84210,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42644)","md5":"35aba1464a8ae359242e6d036e2dc9c4","sha1":"98505568e5f5e33ee3352909a011ecff9e048b8a","sha256":"de85bad088cc7c1b1f353f73f2f85227445a6a38d66d0353edd19d7090f23390","sha512":"97b8b718cd19455d1cc94744c79de87116e97406ed07a0c5d3c707b9645a1ec0290895d3a4668301888c789d51c158ba6cd6ec7ecad0a8a87ebc3e3e420086dc","ssdeep":"1536:2K++Z5kj1tj1yTSHuXTgvWcYHIV43cu6XGEeIrYgL:Q7TuXTRpKGEeA","tlshash":"8d83c7cd7763f0a452b66569807b8106f1386b1b407e9460f19edee47878d8a9233f3e","first_seen":"2025-11-12T15:12:31.862981Z","last_seen":"2026-01-13T23:26:55.398652Z","times_seen":306,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_acp/2022/07/15/16578780662588a80574c90b8286806bcb172658ad.gif","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_acp/2022/07/15/16578780662588a80574c90b8286806bcb172658ad.gif HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\ncontent-type: image/gif\r\ncontent-length: 7589\r\ncf-ray: 9af286477add569b-OSL\r\nlast-modified: Wed, 17 Sep 2025 06:20:20 GMT\r\netag: \"68ca5324-1da5\"\r\nexpires: Thu, 25 Dec 2025 01:07:36 GMT\r\ncache-control: public, max-age=691200\r\nedge-cache-tag: 2025092417\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 2310750\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7589,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 3840 x 96","md5":"399fd94bdaf4e9e060cad16b7158b5df","sha1":"109b9b4ad42e32fd1c55e7f740985ec3589928f3","sha256":"b6cacf6ab75194eba6c9564551fd1244c9e42b1c20594bb049b0aa157ddaa4a8","sha512":"b65e28c0b3555bb7c91c04e495f73091e602972f11e7341d1dd70019f4efc1d44c00f5e20f91ac30e2267c26ac227982581c8b84ef0b51030635bd4dd3b27a48","ssdeep":"96:FSxuFDHzYm1Sp3hb+woVyYjT8flMZB6nuOIpU1XGvMqAWNzkv/jGB44D0TrF:F2ulOjifZwflmB89IpUYMzWFYE44gXF","tlshash":"71f19e4fe668fcc0b6da64102ba276350ed61dc083f1b753719aacc752780294375aa3","first_seen":"2023-05-16T11:34:34Z","last_seen":"2026-01-20T01:11:25.92542Z","times_seen":554,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_spmp/2024/06/21/a8/171894037150be74b03544bcf3dcc8eee5712d663b_thumbnail_336x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_spmp/2024/06/21/a8/171894037150be74b03544bcf3dcc8eee5712d663b_thumbnail_336x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39770\r\ncf-ray: 9af286297d81569b-OSL\r\nlast-modified: Mon, 01 Dec 2025 01:57:07 GMT\r\netag: \"692cf5f3-9b5a\"\r\nexpires: Wed, 24 Dec 2025 01:07:31 GMT\r\ncache-control: public, max-age=604800\r\nage: 534159\r\nedge-cache-tag: 2025121104\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39770,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 336x447, components 3","md5":"1484ff644be2cabc85a37ca6582b4cc5","sha1":"b3c0ebed89249e0d424e93c25dabd737a9d6d010","sha256":"5303b42c6e2b6563ee5e022017d66371bc69da5f81a626e53ddc93ecf5f887b7","sha512":"506379d57bf5603cb42917b634ffddb8d972884933931298cb373afbcd28fce85e1d0679be75400f96250c2c2d5512f22a20a60e5d53461fb264a02ffc6efe0e","ssdeep":"768:Y24Anwo02LCEbRE086sWH5UDwuqO4AiGjfU111X8fSYfWdQ9Mb:T311Tp5UwJOKGjMx8fSOWy9Mb","tlshash":"1303f17c49e48ec46734c3fe9a5cd92823d4f552f4b83274ea8221c2df7d27957249a2","first_seen":"2025-11-24T06:38:12.719234Z","last_seen":"2025-12-17T05:54:39.249752Z","times_seen":14,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/js/240.8c7f325.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/js/240.8c7f325.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 24 Nov 2025 11:43:52 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 11819\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34029,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33844)","md5":"158b2e5fcd9b18c99a4e7a3013006009","sha1":"40d7336bae0c6d4aaab2ebc9965ad4ab23a55d42","sha256":"a5b14a8f4c1f3d07dc064f8f2a1cd9f4869aaad8b7723b012510d6e089d63ab0","sha512":"96b8a9f8cd6b8f26f9b891765409135cdf2b7c6e715d9c997b3607f0aa11b280083a08b1d80323bd8c824fde0d424a8bbc48dfcf842a8620ad79909646b6bce5","ssdeep":"768:B4zng7zlC4p7QqT3i8FWgzIza5KSlpAn5LNtHencg+h6:qzozlC4p7NCqDlTcg+A","tlshash":"9ee2a6c971c2f4d453d339a5842f614af23bfb45194e8940e122e9e27c7ca5ea123fb9","first_seen":"2025-10-28T13:10:33.681359Z","last_seen":"2026-03-23T01:37:20.969146Z","times_seen":618,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/product/search/v3/get_keywords?_ver=1.1.8\u0026_lang=en\u0026word_type=2\u0026scene=home","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /bff-api/product/search/v3/get_keywords?_ver=1.1.8\u0026_lang=en\u0026word_type=2\u0026scene=home HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\ntimezone: GMT+0\r\nbrand: shein\r\nchannel: pc\r\nappcurrency: EUR\r\napplanguage: en\r\ntoken: MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\r\nsiteuid: eur\r\ncurrency: EUR\r\nlanguage: en\r\nx-oest: RTBEfDE3NjU5MzM2NTMyMDJ8MzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: \r\nx-request-by: bridgeX\r\nuber-trace-id: ff23c36521436b88:ff23c36521436b88:0:0\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 561\r\ncontent-encoding: br\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZ8MTc2NTkzMzY1MzM2N3xFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-category\r\nx-gw-traceid: ff23c36521436b88\r\nserver-timing: g;dur=29\r\nvia-shein-gateway: c-shein-pc!bff-category\r\nheader-cmdb-name: bff_category_eucentral_prod_cluster3\r\nheader-cmdb-name-origin: bff-category-eucentral-prod-cluster3\r\nheader-cmdb-sname: bff-category-eucentral-prod-cluster3\r\nheader-cmdb-app-name: bff_category\r\nheader-cmdb-app-name-origin: bff-category\r\nheader-cmdb-app-sname: bff-category\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5843,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"928b00e0499525a2a0cb4d2a5a1291b0","sha1":"767b8df1511db32fdaaf8be65bf833bf80f27e79","sha256":"e9d46e9b35164e5535a04226c6e1dcad55bd2ddf42ca847d429f2344715b4d58","sha512":"cfb197c612fe2274f452b35df325cec4897a654ca161d22ac92e6012409180b82676b2e7b38aec77ceebc7f9d87d378b184fcc8554de58c6075bf464d28749f2","ssdeep":"96:IbDjftisjfnjfKjf0jffpjfhxjfHjfvjf1G:mDjDj/jCjMj5jjjfjXj8","tlshash":"b6c15e24d49c4dbbb88948e779c0bf4895df2147d2268db8a1bedf4a80f893c12717a5","first_seen":"2025-12-17T01:08:43.001654Z","last_seen":"2025-12-17T01:08:43.001654Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/user/language/list?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /bff-api/user/language/list?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\ntimezone: GMT+0\r\nbrand: shein\r\nchannel: pc\r\nappcurrency: EUR\r\napplanguage: en\r\ntoken: MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\r\nsiteuid: eur\r\ncurrency: EUR\r\nlanguage: en\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZ8MTc2NTkzMzY1MzIwMnxfMkNBMzZFMzQ3NUM3\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: \r\nx-request-by: bridgeX\r\nuber-trace-id: ffcc84b7ff88762b:ffcc84b7ff88762b:0:0\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 137\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFM3wxNzY1OTMzNjUzMzY3fDQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: ffcc84b7ff88762b\r\nserver-timing: g;dur=2\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster3\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster3\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster3\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"846034ab6fb598ac37c348a92e282fd0","sha1":"350d6c8dfd2315692e69fbbdbf741c007cb7c288","sha256":"fba5a926f515993f004e027c80af49de746b7e6aa1805771dd407c3fa2380f59","sha512":"68ab6d8f885d14626c49fa41182f206f5b60470886b572df26de277f8cdea65353c6ff2747450bd3a11d08a3ccc8f2eba1de7c003b707109ddcf4022880602dc","ssdeep":"","tlshash":"9cc09b20087d98371786c16554ca170756de53d406c277400f9cfed5554ba91c4655e5","first_seen":"2024-11-22T10:47:21.543825Z","last_seen":"2025-12-24T03:17:54.265951Z","times_seen":251,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_pi/2025/02/20/c1/17400299157671a5edcd6ef98108e6ec16c7349411_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_pi/2025/02/20/c1/17400299157671a5edcd6ef98108e6ec16c7349411_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23026\r\ncf-ray: 9af286483b22569b-OSL\r\nlast-modified: Sat, 29 Nov 2025 17:46:03 GMT\r\netag: \"692b315b-59f2\"\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ncache-control: public, max-age=604800\r\nedge-cache-tag: 2025121000\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 51643\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23026,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"ff006d79c13587c5fe77f7bc513e5f0b","sha1":"9fa540840aa3c1de381feb99263865936199c2ed","sha256":"2d8206afc357c21a170a324e3515d7066b09e61909258efe29bc207e0b4f5cfc","sha512":"e10a90a2158963fa2f77c5d296e8a702e45c0c9b69c26253e482e0ec8ef0d38da22e3c1cd39b4db988eb2ce9aee40a441acdce5ea54e03b3bd8db7d6f3f9054a","ssdeep":"384:gYNg7lELfUU4Tvck+IonQ8bb0e1MwQsKSpABZsLnkaRLEG4ff0xm4yG:gYy+Dr4TYQ80eueKIMZsrkaKlfMxmG","tlshash":"a7a2c037ea42c737fe694d3c8d5db7803783ab14a6332519673d653c22a8a59dc9c2c4","first_seen":"2025-11-24T02:22:49.653586Z","last_seen":"2026-01-09T19:17:00.018897Z","times_seen":5,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/clientPerInfo","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:37.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /clientPerInfo HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:38.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nDS-ACCESS-TOKEN: 4bc3a2dd3549401b817438eede7e78da\r\nDS-ACCESS-SITE: shein\r\nSmDeviceId: WHJMrwNw1k/E6FWWr45huH0SHkq/FHZP1RiBdRWJwnugpcKfvQ3M3byyyMOZe0v4ZceX7Tyqo6/mmqa0+4YaY/SFq8F8CjtuOdCW1tldyDzmQI99+chXEimu23C9OY/lrYp5HxsF710w6FU/fzhj65gCHPPxycwCneu8bpbMPuOQ3v/uKv7fr2biq+/JtOAQVL1Zk3jUkmm7NtAKvckCXn1o1sVkOqGcHswC/75UCs431H7aqDLDtYA==1487582755342\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZffDE3NjU5MzM2NTgyNjh8MkNBMzZFMzQ3NUM3\r\nClient-Ugid: 240fv9wkwo\r\nContent-Length: 1510\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1510,"data":"{\"device_type\":\"pc\",\"home_site\":\"shein\",\"sub_site\":\"eur\",\"language\":\"en\",\"system_language\":\"en-US\",\"money_type\":\"EUR\",\"device_country\":\"NO\",\"app_versions\":\"\",\"network_type\":\"\",\"ip\":\"\",\"screen_pixel\":\"1280*1024\",\"screen_size\":\"\",\"device_class\":\"1\",\"device_brand\":\"\",\"device_name\":\"\",\"device_model\":\"\",\"os_type\":\"1\",\"os_name\":\"Windows\",\"os_versions\":\"10\",\"browser_name\":\"Firefox\",\"browser_versions\":\"134.0\",\"session_id\":\"bi_1765933653037_61177\",\"channel\":\"\",\"origin_otherid\":\"\",\"traffic_source\":\"https%3A%2F%2Feur.shein.com%2Fark%2F2812%3Fonelink%3D13%2F4s0r28uoh4d8%26requestId%3Dolw-5ag0n5ca69ld%26url_from%3Daffiliate_af_b_33_121_0%26affiliateID%3Daf_b_sub_13300%26click_id%3Dd0e56b0a85344d81ae746ea548d5e9a1%26cdn_rsite%3Dcf%26ref%3Dwww%26rep%3Ddir%26ret%3Deur\",\"market\":\"\",\"activity_param\":{\"heart_interval\":\"0\",\"heart_no\":\"1\"},\"activity_name\":\"heart_active\",\"environment\":\"production\",\"device_idfa\":\"\",\"device_idfv\":\"\",\"device_aaid\":\"\",\"timestamp\":\"1765933658266\",\"local_time\":\"2025/12/17 01:07:38\",\"referer\":\"https%3A%2F%2Feur.shein.com%2Fiframe_login\",\"device_id\":\"\",\"member_id\":\"\",\"login\":0,\"page_id\":\"\",\"page_name\":\"\",\"page_param\":\"\",\"start_time\":\"\",\"end_time\":\"\",\"tab_page_id\":\"\",\"log_id\":\"ba13e980-d076-4a2e-a93a-64617d4ad06c\",\"sdk_version\":\"0.9.9\",\"seq\":\"2\",\"showInfo\":1,\"top\":{\"page_param\":{\"tab_page_id\":\"\",\"tab_id\":\"\",\"mod1_id\":\"\"},\"activity_nm\":\"\",\"activity_param\":{\"src_module\":\"\",\"src_identifier\":\"\",\"tab_list\":\"\",\"block_id\":\"\",\"block_key\":\"\",\"activity_from\":\"\",\"title\":\"\",\"order_status\":\"\"}}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/j/pi/2025/06/19/b6/175032231923ecbe011e99fad8ec4e63445b7e745c_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/j/pi/2025/06/19/b6/175032231923ecbe011e99fad8ec4e63445b7e745c_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23927\r\ncf-ray: 9af286296d78569b-OSL\r\nlast-modified: Wed, 03 Dec 2025 17:37:37 GMT\r\netag: \"69307561-5d77\"\r\nexpires: Wed, 24 Dec 2025 01:07:31 GMT\r\ncache-control: public, max-age=604800\r\nedge-cache-tag: 2025120513\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 311540\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23927,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"9daf883ffb38f418ce971901ed07632d","sha1":"ef6f319997c8c4fb8c58bf3739880897c6803327","sha256":"82c8382638cf6aad2c717264151cfed84142b4deb60ef14806cd682df3d1210d","sha512":"5b12071e191f6f3f55d5fadd2f86deae392de77686f5b834be9f07ab23543aeea2d8eb3da7bc8e5f0e74affd0be3025556ab310320c8655f98d846a4faab06a1","ssdeep":"384:gYNg7vfvTU2iH6iEuUp4zhYGJgKmId7Do/xZLGO9tPo6Z6O5KUc6c5fjpspZ:gYyDv6hvJgu8DaO9tPIiKICCpZ","tlshash":"75b2c07be6a5c313fe4ad53c1c50b794b4af8690531b3b5178a4073f478d1968d4d28c","first_seen":"2025-12-16T16:48:13.560387Z","last_seen":"2025-12-17T01:08:43.003909Z","times_seen":3,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":13,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shein.ltwebstatic.com/svgicons/icons/sh_pc_sui_icon_search_trends_16px.svg","fqdn":"shein.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /svgicons/icons/sh_pc_sui_icon_search_trends_16px.svg HTTP/1.1\r\nHost: shein.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 05 Nov 2025 02:48:41 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 326\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:33 GMT\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":479,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4f5d81d2bbb72e629cafd0cc17caa78a","sha1":"0f380ca3f5276626a640196da00f2b93751375cd","sha256":"de90e86ed4d7a6ba720aba42364a0f57f9eff11ecc8917bcca5f5be2ec8d5ce6","sha512":"1c583fd83067307a49c00926b1372c3bf2d69da85ccefc4eb462172ca695739b8cc804f0dcbad41f815524cbf329a42cc77b650e8003b1ea1dc28894ddeee397","ssdeep":"","tlshash":"dff0d4f5790c15d25403c7215c2c64a719fa716d9fe101bdc2855487f50b1f22cd8ae5","first_seen":"2025-08-21T21:34:42.179345Z","last_seen":"2026-06-01T22:35:14.769402Z","times_seen":792,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/j/pi/2025/08/27/88/1756264781d52aa7634833ccd55e1071ecdf6da089_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/j/pi/2025/08/27/88/1756264781d52aa7634833ccd55e1071ecdf6da089_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20902\r\ncf-ray: 9af28647dafd569b-OSL\r\nlast-modified: Sat, 22 Nov 2025 00:19:36 GMT\r\netag: \"69210198-51a6\"\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ncache-control: public, max-age=604800\r\nedge-cache-tag: 2025112208\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 122015\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20902,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"03e82952315750e5996be16cd80cc91c","sha1":"6a8703faf1f11e617fcfc9a1eb130e118b5f2b37","sha256":"081bb5a878c388ced4aac3c35143e2cc8bd82c22f09ce51408c4cf80db253386","sha512":"e88cc23488ff1736f03ddde79933df1a87b00a5c37d40cb3f185d48007bbf6e2cd847f5c8b57f14c913aba6397532bd419db81fc2803217d235d2c4bdb316249","ssdeep":"384:gYNg77ULvyWBkFMbFGLpBL28YIFRkM8YRbNKVliYst0mv7:gYy0vEebiL28Yal8YLc4Y7mv7","tlshash":"6092c09cefdd400fdb60f2bcdcb6d34ea08957b9dae8057e16b1831d46580c6178d06a","first_seen":"2025-12-06T14:39:18.555561Z","last_seen":"2025-12-17T01:08:43.005194Z","times_seen":5,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/clientPerInfo","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:37.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /clientPerInfo HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nDS-ACCESS-TOKEN: 4bc3a2dd3549401b817438eede7e78da\r\nDS-ACCESS-SITE: shein\r\nContent-Length: 2202\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2202,"data":"{\"browser_versions\":\"134\",\"browser_name\":\"Firefox\",\"os_versions\":\"10\",\"os_name\":\"Windows\",\"device_name\":\"\",\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"visit_id\":\"mggzq4xmy0ao\",\"host\":\"eur.shein.com\",\"local_time\":1765933657858,\"timestamp\":1765933657858,\"client_url\":\"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\",\"url_path\":\"/ark/2812\",\"app_versions\":\"\",\"network_effectivetype_type\":\"unknow\",\"worker_init_type\":\"navigate\",\"cache_type\":\"unknow\",\"is_crawler\":0,\"device_type\":\"pc\",\"sub_site\":\"eur\",\"language\":\"en\",\"home_site\":\"shein\",\"page_name\":\"page_ark_production_918\",\"page_version\":\"2812\",\"page_from\":\"Marketing\",\"data\":[{\"key_path\":\"navigationStart__requestStart\",\"values\":{\"num\":122,\"mark\":{\"start\":1765933650777,\"end\":1765933650899}}},{\"key_path\":\"redirectStart__redirectEnd\",\"values\":{\"num\":0,\"mark\":{\"start\":0,\"end\":0}}},{\"key_path\":\"redirectEnd__fetchStart\",\"values\":{\"num\":50,\"mark\":{\"start\":1765933650777,\"end\":1765933650827}}},{\"key_path\":\"fetchStart__domainLookupStart\",\"values\":{\"num\":1,\"mark\":{\"start\":1765933650827,\"end\":1765933650828}}},{\"key_path\":\"domainLookupStart__requestStart\",\"values\":{\"num\":71,\"mark\":{\"start\":1765933650828,\"end\":1765933650899}}},{\"key_path\":\"requestStart__responseStart\",\"values\":{\"num\":349,\"mark\":{\"start\":1765933650899,\"end\":1765933651248}}},{\"key_path\":\"navigationStartv2__requestStartv2\",\"values\":{\"num\":122,\"mark\":{\"start\":0,\"end\":122}}},{\"key_path\":\"redirectStartv2__redirectEndv2\",\"values\":{\"num\":0,\"mark\":{\"start\":0,\"end\":0}}},{\"key_path\":\"redirectEndv2__fetchStartv2\",\"values\":{\"num\":50,\"mark\":{\"start\":0,\"end\":50}}},{\"key_path\":\"responseStart__startParse\",\"values\":{\"num\":139,\"mark\":{\"start\":1765933651248,\"end\":1765933651387}}},{\"key_path\":\"startParse__parsedSSR\",\"values\":{\"num\":260,\"mark\":{\"start\":1765933651387,\"end\":1765933651647}}},{\"key_path\":\"parsedSSR__fsp\",\"values\":{\"num\":467,\"mark\":{\"start\":1765933651647,\"end\":1765933652114}}}],\"resource\":\"ssr-landing\",\"render_type\":\"ssr\",\"id\":\"9c26ecf5-63d9-589a-a5de-55487193fe4c\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/p/ccc/2025/07/18/e4/1752843942c48365d9e656f0f418d7d6ebebfd730c.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/p/ccc/2025/07/18/e4/1752843942c48365d9e656f0f418d7d6ebebfd730c.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2200\r\ncf-ray: 9af286297d83569b-OSL\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:31 GMT\r\nedge-cache-tag: 20251107_webp\r\nlast-modified: Fri, 07 Nov 2025 01:30:10 GMT\r\ntiming-allow-origin: *\r\nage: 2311081\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2200,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a05cd439cbce742d4ea2d15c9e92b418","sha1":"b37f76ab03691f5ac6f7fbb6a5c2c9338fe5a9ba","sha256":"86f03eed86a8c8abaaab19781038ac4935b5c0294535eb8c4a4ea7417451acfc","sha512":"91d675ca001ed39f3da2b96164ad5a9deda5af5d0a02bc0e3ff77a0271620d002223186ea0a8e8ce5bebcabe43dcaf2d7801476b76c9ac390439b317c5e3e246","ssdeep":"","tlshash":"0c4107aef5725c1b47c9b4b064bbdfa1f14c7a09342477fe040822a70a240e93f48e78","first_seen":"2025-08-01T05:09:58.089736Z","last_seen":"2026-06-01T22:35:14.760983Z","times_seen":751,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":43,"dns":12,"connect":1,"send":0,"wait":28,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/j/pi/2025/08/20/b6/17556535189a26687695399d7762b6452c6b5fb668_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/j/pi/2025/08/20/b6/17556535189a26687695399d7762b6452c6b5fb668_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10620\r\ncf-ray: 9af286296d77569b-OSL\r\nlast-modified: Fri, 21 Nov 2025 03:39:04 GMT\r\netag: \"691fded8-297c\"\r\nexpires: Wed, 24 Dec 2025 01:07:31 GMT\r\ncache-control: public, max-age=604800\r\nedge-cache-tag: 2025112903\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 311540\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10620,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"f6b54380e9c48e52fefde690be46de43","sha1":"b2501b45119bd05e2141ea5951bc254345bcc4ce","sha256":"87676b3aae2ac800fd75ef6d53727a3668cb1c54644b1a6f695305e8b142ee92","sha512":"ce029d711071dbf08ce51249602f7bcfa958967f1c4f7dbbbef598565c059b688eb45e379bcf3189aa256c54b8ce0ebdeebc5d3ecb642597269cb40a4ddc95f3","ssdeep":"192:gYNMtKwjBBv5Bun7TERNav0u892RH2+Mz1iYigYUjAk:gYNg7jLvTun7TEXahW+Mz1iYRjMk","tlshash":"67228d6bbba4e197cbb4d67099a7338073e39331e711a58f7a0a553a42c52c84ecc193","first_seen":"2025-12-16T16:48:13.505284Z","last_seen":"2025-12-20T03:55:51.815651Z","times_seen":7,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/app-track/metric-info","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:34.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /app-track/metric-info HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nContent-Length: 1333\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1333,"data":"{\"data\":[{\"app_name\":\"shein\",\"timestamp\":\"1765933654093\",\"local_time\":\"12/17/2025, 1:07:34 AM\",\"session_id\":\"\",\"member_id\":\"\",\"sdk_version\":\"1.1.43\",\"network_type\":\"\",\"device_id\":\"\",\"device_level\":\"1\",\"device_type\":\"pc\",\"device_model\":\"\",\"device_brand\":\"\",\"browser_name\":\"\",\"browser_versions\":\"\",\"os_versions\":\"\",\"os_name\":\"\",\"language\":\"en\",\"sub_site\":\"eur\",\"money_type\":\"USD\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"referer\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"level\":\"INFO\",\"tag\":\"\",\"message\":\"monitorJsLoadTime\",\"params\":{\"name\":\"https://armor.ltwebstatic.com/she_dist/libs/devices/fpv2.7.js\",\"entryType\":\"resource\",\"startTime\":\"1921\",\"duration\":\"92\",\"initiatorType\":\"script\",\"nextHopProtocol\":\"h2\",\"workerStart\":\"0\",\"redirectStart\":\"0\",\"redirectEnd\":\"0\",\"fetchStart\":\"1921\",\"domainLookupStart\":\"1921\",\"domainLookupEnd\":\"1921\",\"connectStart\":\"1921\",\"connectEnd\":\"1921\",\"secureConnectionStart\":\"1921\",\"requestStart\":\"1978\",\"responseStart\":\"2011\",\"responseEnd\":\"2013\",\"transferSize\":\"56903\",\"encodedBodySize\":\"56380\",\"decodedBodySize\":\"187719\",\"serverTiming\":\"[]\"},\"environment\":\"production\",\"value\":0,\"metric_name\":\"si_anti_spider_sdk_mjlt\",\"tags\":{\"type\":\"mjlt\",\"url\":\"https://armor.ltwebstatic.com/she_dist/libs/devices/fpv2.7.js\",\"name\":\"fpv2.7.js\",\"duration\":\"92\"}}]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/8423.627afc99bddc891f.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/8423.627afc99bddc891f.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:37 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 7902\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:35 GMT\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38628,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38546)","md5":"5cc80e347e94dc393a6b7c5e73b90dc1","sha1":"56393077fc9d9530caac94fc7b539a2a9af6eda7","sha256":"51cd4196b0437d03d116831c3ab34522b147fdb827478469574d4e5cea78574a","sha512":"5d0c3ff8138f54813a9af4f34d8992235d6bdedb318350825664aa64a9ec2fa5ddcec4a4f4aa2c2672f16fe9bcd74a629d2b624e1f2374261b0a0122a8798892","ssdeep":"768:rO2ejlBdIOroVSpovyfecGO8J6N2uE0dVThe4weRA8chg1zhOT3kcknDiE2cLjrP:C2ejlLIOroVSnfecGO8J6MgoT3krnDiE","tlshash":"e00355fce59e04b66c798989b6732bc71424ef6e7a8a84e0855b4fc454cd68bb04733c","first_seen":"2025-12-09T15:42:57.691399Z","last_seen":"2025-12-24T03:17:54.259336Z","times_seen":40,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/user-api/privacy-banner-api/get_private_banner","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:36.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /bff-api/user-api/privacy-banner-api/get_private_banner HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nSmDeviceId: \r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"brand\":7,\"domain\":\"eur.shein.com\",\"siteUid\":\"eur\",\"language\":\"en\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-encoding: br\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfODEyN3wxNzY1OTMzNjU2NTA1fF9GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: 643a3e53f11a80b9\r\nserver-timing: g;dur=8\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster2\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ncontent-length: 8625\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43878,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"40f31bdc28d01d8b51871d6629e34dfa","sha1":"c2cf63893c2fb519c7b1a31c0b2be75e16049aba","sha256":"bd424cfe1ffe86b58eded6a407e19faee4a1aca97dbd9fd05020251efe6d84eb","sha512":"ded05ad4197cec7a769a555cccd82e7df6e53a74833528ee81d99a1aa2e57ead7681d06d52218816cb2217edefe37edbd03653208df0204edb4b5332938d4231","ssdeep":"768:zF7HRIvz3kmC/0UdUE9yONuEDG8TM83QKP07FGy9FXxOI78:BMQdUE9yONzPM7O07N4","tlshash":"8b13541d75a5e67d83c31beb6ca10d322dbc675193818cf48ebcca58c7486356d228af","first_seen":"2025-11-12T15:12:31.850437Z","last_seen":"2025-12-22T22:44:36.008119Z","times_seen":167,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/event-center-48.00034696f5c9bba1.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:36.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/event-center-48.00034696f5c9bba1.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 24 Nov 2025 08:59:47 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 639\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2232,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2171)","md5":"573ed976d86c39b2661c5564890b1fe6","sha1":"1ffeafe18014294a5420874ace1615b939cfbb29","sha256":"22c9a28c3eaba56f50ebf93174a9996227b408b3909768171a78343a2a0adf80","sha512":"22665e223330f232169945a48cb3b68d1c45abf6455cef2e349815d6c8d30c834c4ebe73d1e5f3a7e2039fc46b42edc49691bdbf27e84f851b714421a0e6eafc","ssdeep":"","tlshash":"5441c0d8b4af247f2c6d4c8a72a29bc42c74df79b6c714c0869acfc504ded0ab0493a4","first_seen":"2025-05-19T19:51:55.864108Z","last_seen":"2026-01-20T19:05:52.656169Z","times_seen":1095,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/clientPerInfo","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:37.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /clientPerInfo HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nDS-ACCESS-TOKEN: 4bc3a2dd3549401b817438eede7e78da\r\nDS-ACCESS-SITE: shein\r\nContent-Length: 1117\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1117,"data":"{\"resource\":\"workerInitType:navigate-deliveryType:empty\",\"page_from\":\"Home\",\"page_version\":\"Other\",\"data\":[{\"key_path\":\"ttfb\",\"values\":{\"num\":84}},{\"key_path\":\"interactive\",\"values\":{\"num\":651}},{\"key_path\":\"dcl\",\"values\":{\"num\":2527}},{\"key_path\":\"tcpt\",\"values\":{\"num\":0}},{\"key_path\":\"dnst\",\"values\":{\"num\":0}},{\"key_path\":\"ctt\",\"values\":{\"num\":81}},{\"key_path\":\"gwt\",\"values\":{\"num\":27}},{\"key_path\":\"ttfbv2\",\"values\":{\"num\":84}},{\"key_path\":\"onload\",\"values\":{\"num\":3151}}],\"browser_versions\":\"134\",\"browser_name\":\"Firefox\",\"os_versions\":\"10\",\"os_name\":\"Windows\",\"device_name\":\"\",\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"visit_id\":\"13uh8ithijvgg\",\"host\":\"eur.shein.com\",\"local_time\":1765933657848,\"timestamp\":1765933657848,\"client_url\":\"https://eur.shein.com/iframe_login\",\"url_path\":\"/iframe_login\",\"app_versions\":\"\",\"network_effectivetype_type\":\"unknow\",\"worker_init_type\":\"navigate\",\"cache_type\":\"unknow\",\"is_crawler\":0,\"device_type\":\"pc\",\"sub_site\":\"eur\",\"language\":\"en\",\"home_site\":\"shein\",\"page_name\":\"page_other\",\"id\":\"fdf304b4-9e52-56e1-b9be-159baeafb0b9\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/j/pi/2025/07/11/2d/1752235331dd015b1a352a3c25baac3c42007bda32_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/j/pi/2025/07/11/2d/1752235331dd015b1a352a3c25baac3c42007bda32_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25155\r\ncf-ray: 9af286297d85569b-OSL\r\nlast-modified: Sat, 22 Nov 2025 13:03:51 GMT\r\netag: \"6921b4b7-6243\"\r\nexpires: Wed, 24 Dec 2025 01:07:31 GMT\r\ncache-control: public, max-age=604800\r\nage: 1847639\r\nedge-cache-tag: 2025112523\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25155,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"84cdf451ce4dbc885a709726bcb014cc","sha1":"a21712a091f2a4002f22d5f9fa7dc9fa9b97ac30","sha256":"221dd60d5adc2b34fbe3d5441f675b7e704403fbd5b2d75101f91616c37fdbb0","sha512":"8f04b2a6b1d89e7486cf46204ca7a10171f3b9cc74d4091bbab8b6c54aa39dc81201475d2532001d5c390cc958e3dba1460e4b4c573b64feaec6d9aaf4015203","ssdeep":"768:gYyq/ULkfHiuEDFhCJkyE7IR9/R4vtvqX+0:gOMLk/BEDFPGR9putj0","tlshash":"52b2e1ecdab91a61c60590fdb4f427997237b329d3c0aed95c67d70d10c11c9ea6818f","first_seen":"2025-12-16T16:48:13.685405Z","last_seen":"2025-12-26T00:08:08.908549Z","times_seen":4,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/system/configs/multi_language?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /bff-api/system/configs/multi_language?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\nContent-Type: application/json\r\ntimezone: GMT+0\r\nbrand: shein\r\nchannel: pc\r\nappcurrency: EUR\r\napplanguage: en\r\ntoken: MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\r\nsiteuid: eur\r\ncurrency: EUR\r\nlanguage: en\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzR8MTc2NTkzMzY1MzIwMnw3NUM3\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: \r\nx-request-by: bridgeX\r\nuber-trace-id: ffcafd92cb7a0bcd:ffcafd92cb7a0bcd:0:0\r\nContent-Length: 60\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":60,"data":"{\"languageKeys\":[\"SHEIN_KEY_PC_33522\",\"SHEIN_KEY_PC_33523\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 133\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NXwxNzY1OTMzNjUzMzIwfEM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-navigation\r\nx-gw-traceid: ffcafd92cb7a0bcd\r\nserver-timing: g;dur=2\r\nvia-shein-gateway: c-shein-pc!bff-navigation\r\nheader-cmdb-name: bff_navigation_eucentral_prod_cluster3\r\nheader-cmdb-name-origin: bff-navigation-eucentral-prod-cluster3\r\nheader-cmdb-sname: bff-navigation-eucentral-prod-cluster3\r\nheader-cmdb-app-name: bff_navigation\r\nheader-cmdb-app-name-origin: bff-navigation\r\nheader-cmdb-app-sname: bff-navigation\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":133,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0f8c110c33629fcb5826ae9efba80e8c","sha1":"c18f8a901d1840837bdb3fb7b293355467df42c5","sha256":"d6dd2f99db6a2e2cf86883dbbc639e152a6e78b1cd0e18a80590fec0303656d9","sha512":"bc262bdb167d656b28962ee557f3055196d2cfbf0259778f451f707c88e462bfc14999d0a1a550ac8b696876830b684b829bfbf33a0cb787a07f3b6650a5e0f0","ssdeep":"","tlshash":"8dc09b886017264744d7c551746e5a55786c33c53423cb40cd5c0d7405575dd0fb6328","first_seen":"2025-01-16T13:08:22.333761Z","last_seen":"2026-06-03T06:21:04.451337Z","times_seen":927,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cinfo-v4.shein.com/","fqdn":"cinfo-v4.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cinfo-v4.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 207\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\naccess-control-allow-credentials: *\r\naccess-control-expose-headers: client-ipaddr-v4\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,PATCH\r\naccess-control-allow-origin: *\r\nclient-ipaddr-v4: 91.90.42.154\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":207,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e77edbf7060357fa1398a87d8b3ce002","sha1":"fa13a0b30a2043158f9393e83daa12800bff6c5f","sha256":"b1c9cfe4438206ce279f33ab1310e7d2271850921d2a3ae5fa5c0ed46012763d","sha512":"871ea50a4998a1eaf8873e64ba50e92591007d74d1882861ca1aed6a4b4d201dfe550da474c86f620841d6d88e5b94da902358ee625aed4c658416634598b37d","ssdeep":"","tlshash":"e9d022871082441a0075c3202fc5e15456ea6ee4aba248802fc3e19b2cdeb01c8ab198","first_seen":"2024-11-07T21:28:14.656832Z","last_seen":"2026-06-03T06:21:04.344024Z","times_seen":1637,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/clientPerInfo","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:37.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /clientPerInfo HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/js/shein-bridge.b6b32b6.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/js/shein-bridge.b6b32b6.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Nov 2025 15:12:17 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 22126\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84038,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c7549e1272965706abd730f4e5bee2e0","sha1":"577f278119db18b1907ff7142725254c02f2a523","sha256":"3b73f934d08a1bc7dfe5fca02ddd70373eab86a7154dafb99980cb1d9fed8c1f","sha512":"c4b4b56500d8f6bad5465c26b7efa241cee17a9c42fd400fae896547886e218687d3663c0e3630b5b3c93400307e8ca3d385ecff8cbf71a9f577e48d2a06997f","ssdeep":"1536:GNX8oK+gQh5GGZ+rrrMa3HrIpC9tja018oscrrWmu:GLK+gQ3GGZ+XX3Hr++tX18o/rrg","tlshash":"c483e6cdb582b05453a371a8902f241fb23dea42518c8890e626ddd66d7860fe737fbd","first_seen":"2025-10-16T23:10:29.692092Z","last_seen":"2026-03-23T01:37:21.06728Z","times_seen":680,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":73,"dns":1,"connect":12,"send":0,"wait":7,"receive":1,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/schttp-chunk-1a3a6c9877621ea6.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/schttp-chunk-1a3a6c9877621ea6.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:39 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 9822\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29758,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29662)","md5":"75dc68c2509df82a32b1dc3e63e1124d","sha1":"89cc88501c6faaf278169c224c6fdf463c0e5fa4","sha256":"fc07d7c963cb0d2eaddaf5752aac6139753f599fcce9aa5db009f4aa5705dfde","sha512":"299541e437d4e062fd129ef1ce429e3ad18aab90dc54d8d01bc10918e66165ca5705aa0592177ec3bc5b3c7e2b153ebb066ba6fffba29723b0e2c90dbdaeb84b","ssdeep":"768:8kY4vnZBQjcYhRUeTIf3awhWykC3CVLMYWffglljtENYiVGgDOqbfAek3SnF6eJY:zucYhRF0XQrdOD5M2K8QRW8c5KP","tlshash":"a6d2fbcbfeea944506f648b9c43b1432b03c7b5a2288d090e5537cd938d568ff652e7a","first_seen":"2025-12-09T15:42:57.597946Z","last_seen":"2025-12-24T03:17:54.180706Z","times_seen":40,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":118,"dns":45,"connect":29,"send":0,"wait":24,"receive":2,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:42.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nDS-ACCESS-TOKEN: 4bc3a2dd3549401b817438eede7e78da\r\nDS-ACCESS-SITE: shein\r\nSmDeviceId: WHJMrwNw1k/E6FWWr45huH0SHkq/FHZP1RiBdRWJwnugpcKfvQ3M3byyyMOZe0v4ZceX7Tyqo6/mmqa0+4YaY/SFq8F8CjtuOdCW1tldyDzmQI99+chXEimu23C9OY/lrYp5HxsF710w6FU/fzhj65gCHPPxycwCneu8bpbMPuOQ3v/uKv7fr2biq+/JtOAQVL1Zk3jUkmm7NtAKvckCXn1o1sVkOqGcHswC/75UCs431H7aqDLDtYA==1487582755342\r\nx-oest: RTBEMzU0fDE3NjU5MzM2NjE5OTd8QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nClient-Ugid: 240fv9wkwo\r\nContent-Length: 1584\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:42 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_pi/2024/09/29/47/1727604686a8198324fb44b3d0ad991cd0d1f6f144_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_pi/2024/09/29/47/1727604686a8198324fb44b3d0ad991cd0d1f6f144_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22555\r\ncf-ray: 9af286296d73569b-OSL\r\nlast-modified: Sat, 22 Nov 2025 14:07:05 GMT\r\netag: \"6921c389-581b\"\r\nexpires: Wed, 24 Dec 2025 01:07:31 GMT\r\ncache-control: public, max-age=604800\r\nedge-cache-tag: 2025112904\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 780701\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22555,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"557c26e03a9687acbcb6c2b5bc5d19fa","sha1":"c124ed5feb3bea5998fbeab861894e4f5405f128","sha256":"ecc3f632c8e001c787edc1b9324ede2fe5245a4e4ff4832998f735574decda55","sha512":"71c6a965467f0465a1fb4e5df812c1e2ab92effc67dae9878bbafe7892bc553ae2e495f4ffe2af9d99ba6a96c1a1301574de23e21c8dc12d065de8370d318ed0","ssdeep":"384:1M8+TZ1ypoS1q8ZMVDl05riQdGS2VxrhWy7bqTgpZaJFzO7/LN8C:190a31r2QicGSatWy7bqW4nzOV8C","tlshash":"d4a2e1f9826e8f1a81ef336e91c888eca6b55c0658db5fd22f3c235576256d68c073c1","first_seen":"2025-11-04T22:07:02.191599Z","last_seen":"2025-12-28T23:11:11.423472Z","times_seen":29,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/48643.3d52d771c9ecb013.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:36.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/48643.3d52d771c9ecb013.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:37 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 783\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1217,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1150)","md5":"f13d9107ac01f97a7bfe33825c6a3764","sha1":"5d96097e48f77ae607bc4ed5a2ee342f18a51f4d","sha256":"2245e90375fc2569f1d0d2706c18b028836cd8d1143e4412a0279222cd3e1339","sha512":"ae483af9cdfa3cf4175c3d7eb26d930ff78bef9ed601bbeba7f43d0f24a9eb7f68000f78c7373bf5197cb8fea0da6a5dc1519e0a52c8fa86e1484b9c26d3e7a9","ssdeep":"","tlshash":"3b213fe68ba3b07d21fa5cdec0538d6a947c3a1b640898c1b44b5cc450c26ea3183e3d","first_seen":"2025-12-09T15:42:57.680083Z","last_seen":"2025-12-17T05:54:39.221654Z","times_seen":17,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:37.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nDS-ACCESS-TOKEN: 4bc3a2dd3549401b817438eede7e78da\r\nDS-ACCESS-SITE: shein\r\nSmDeviceId: WHJMrwNw1k/E6FWWr45huH0SHkq/FHZP1RiBdRWJwnugpcKfvQ3M3byyyMOZe0v4ZceX7Tyqo6/mmqa0+4YaY/SFq8F8CjtuOdCW1tldyDzmQI99+chXEimu23C9OY/lrYp5HxsF710w6FU/fzhj65gCHPPxycwCneu8bpbMPuOQ3v/uKv7fr2biq+/JtOAQVL1Zk3jUkmm7NtAKvckCXn1o1sVkOqGcHswC/75UCs431H7aqDLDtYA==1487582755342\r\nx-oest: RTBEMzU0QzBfODEyN3wxNzY1OTMzNjU3MzEwfF9GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nClient-Ugid: 240fv9wkwo\r\nContent-Length: 1717\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nds-from-terminal: pc\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUN8MTc2NTkzMzY1NzkzM3w3\r\nContent-Length: 2144\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2144,"data":"{\"activity_name\":\"expose_navigation_menu\",\"activity_param\":{\"first_menu_content\":\"Jewelry \u0026 Accessories\",\"first_menu_hole\":\"9\",\"second_menu_content\":\"Jewelry \u0026 Accessories\",\"second_menu_hole\":\"9\",\"second_node_id\":\"110004517\",\"src_identifier\":\"fc=Jewelry \u0026 Accessories`sc=Jewelry \u0026 Accessories`tc=0`oc=0`ps=tab09navbar09`jc=itemPicking_017291431\",\"second_content_list\":\"/RecommendSelection/Jewelry-Accessories-sc-017291431.html?ici=eur_tab09navbar09\u0026src_module=topcat\u0026src_identifier=fc%3DJewelry%20%26%20Accessories%60sc%3DJewelry%20%26%20Accessories%60tc%3D0%60oc%3D0%60ps%3Dtab09navbar09%60jc%3DitemPicking_017291431\u0026adp=\u0026src_tab_page_id=page_ad_landing1765933653032\",\"is_slidebar\":false,\"third_menu_content\":\"\",\"third_menu_hole\":\"\",\"fourth_menu_content\":\"\",\"fourth_menu_hole\":\"\",\"src_module\":\"topcat\"},\"device_type\":\"pc\",\"home_site\":\"shein\",\"sub_site\":\"eur\",\"language\":\"en\",\"system_language\":\"en-US\",\"money_type\":\"\",\"device_country\":\"\",\"app_versions\":\"\",\"network_type\":\"\",\"ip\":\"\",\"screen_pixel\":\"1280*1024\",\"screen_size\":\"\",\"device_class\":\"1\",\"device_brand\":\"\",\"device_name\":\"\",\"device_model\":\"\",\"os_type\":\"1\",\"os_name\":\"Windows\",\"os_versions\":\"10\",\"browser_name\":\"Firefox\",\"browser_versions\":\"134.0\",\"session_id\":\"bi_1765933653037_61177\",\"channel\":\"affiliate_af_b_33_121_0\",\"origin_otherid\":\"\",\"traffic_source\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"market\":\"\",\"start_time\":\"1765933653032\",\"end_time\":\"\",\"environment\":\"production\",\"device_id\":\"\",\"device_idfa\":\"\",\"device_idfv\":\"\",\"device_aaid\":\"\",\"referer\":\"https%3A%2F%2Feur.shein.com%2Fark%2F2812%3Fonelink%3D13%2F4s0r28uoh4d8%26requestId%3Dolw-5ag0n5ca69ld%26url_from%3Daffiliate_af_b_33_121_0%26affiliateID%3Daf_b_sub_13300%26click_id%3Dd0e56b0a85344d81ae746ea548d5e9a1%26cdn_rsite%3Dcf%26ref%3Dwww%26rep%3Ddir%26ret%3Deur\",\"sdk_version\":\"1.1.15\",\"login\":\"0\",\"member_id\":\"\",\"ugid\":\"\",\"page_param\":{\"ad_activity_name\":\"newuserprice\",\"scene_id\":\"m_app\",\"platfrom_nm\":\"swift\"},\"tab_page_id\":\"page_ad_landing1765933653032\",\"page_id\":\"6342\",\"page_name\":\"page_ad_landing\",\"log_id\":\"04cdb708-c0d3-4e7e-9300-62f0438e676e\",\"seq\":\"14\",\"timestamp\":\"1765933657924\",\"local_time\":\"2025/12/17 01:07:37\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_pi/2025/02/19/fb/1739951540fd3dacc94ba3271e492af48b30ea2087_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_pi/2025/02/19/fb/1739951540fd3dacc94ba3271e492af48b30ea2087_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32433\r\ncf-ray: 9af286296d7a569b-OSL\r\nlast-modified: Sat, 22 Nov 2025 01:04:49 GMT\r\netag: \"69210c31-7eb1\"\r\nexpires: Wed, 24 Dec 2025 01:07:31 GMT\r\ncache-control: public, max-age=604800\r\nedge-cache-tag: 2025120103\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32433,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"3f8659f4cc7816d731ec262b88f422b0","sha1":"7346f46f41b40f1fecc8b52d5112829f09a357c3","sha256":"602e14626e91b03be76120cad038bb981dd9b96943de3c728e5d8916a18704aa","sha512":"0b2b152c1afcac1d2e51fc428638deb54280b96bf473e857a6bce778f60e9a5b9156fa512b6dd38b0a23de3554a6fd9f7d92e74eaa5e7c195052a11e38b8bfd7","ssdeep":"768:HYyqZjtKMeyHd2819P+duS8JzGqzQUVhy/cKUpcL4EaUo0:Heem/Tm4S8JSq7Vhy0KTkEaUp","tlshash":"2ee2e03a1743dfc4ec5457ba1db0bba4e421f732c3a57ab0b2e5976653e0489ab160c4","first_seen":"2025-12-17T01:08:43.011718Z","last_seen":"2025-12-26T22:02:10.413004Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/js/430.2e838f3.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/js/430.2e838f3.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Nov 2025 15:12:18 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 54743\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":182365,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2db33585c1a2849bb4312cce47c0415f","sha1":"027a2521330a021056d3e63ffbedae8ecd44f3f0","sha256":"6b11a4ab4e9573a6dbead687f200abe27517bf8f609008fa23ae0462a96ecac9","sha512":"58fdb53741a28de33f4ffe0f369b769e0425b8ed1606bbd962f7bf15bf9027138e36ecb84ba14c22bd6c73cddc291f04e98d634f8e209de62c2c7c64e794713e","ssdeep":"3072:fFmiShILG2SNBu1N/ZvDY2VoazZeIS1kYK0HHjSI4f1o1ZzlgAqe:fFmiShILGBNBu1NBvZVoazZeIkkYK0HZ","tlshash":"ef042acd75d2b09047b3a668902f111bb23e7f5a254c8890e227dc953d6ca5fe223f79","first_seen":"2025-11-01T03:09:47.469583Z","last_seen":"2026-03-23T01:37:21.073423Z","times_seen":604,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_ccc/2024/08/13/79/17235601359ea7df123d6879c183529544b7f23a2a.png","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_ccc/2024/08/13/79/17235601359ea7df123d6879c183529544b7f23a2a.png HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 9648\r\ncf-ray: 9af2863369d0569b-OSL\r\nlast-modified: Wed, 01 Oct 2025 10:43:00 GMT\r\netag: \"68dd05b4-25b0\"\r\nexpires: Thu, 25 Dec 2025 01:07:33 GMT\r\ncache-control: public, max-age=691200\r\nage: 2242497\r\nedge-cache-tag: 2025100619\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9648,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 441 x 113, 8-bit colormap, non-interlaced","md5":"92259c4d75c2e80c4b4466b495bd2c50","sha1":"086f0a6ffa8d66e9b1959fc853094f7173a632d5","sha256":"e087fd8f507cf030642db915c4cddbd716ba305f765a8b9e212c10489d6ef4bd","sha512":"e06081f2b0bf6bf762434843b091cccc359c747adc29aa59bb0c0453f590bf93d3e3daa1efe113e82aeb23467f2c8a61ac9e38b63348d50fe51857cea59c9489","ssdeep":"192:VoutS3JRcGKZHyZ7/ZnJeg45fgj++8+dtiLgfmD2FmNea5CjOGdV:KuuJRcGsIRnEg45M84isfmDHNe4Cj9","tlshash":"ca129ffe38211a318b72a267b6bc50ea3bdc0998d50ba2b615f19edfd2214294d94cc5","first_seen":"2025-07-18T12:09:06.030257Z","last_seen":"2026-06-01T22:35:15.035485Z","times_seen":821,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shein.ltwebstatic.com/svgicons/icons/sh_pc_sui_icon_hot_12px.svg","fqdn":"shein.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /svgicons/icons/sh_pc_sui_icon_hot_12px.svg HTTP/1.1\r\nHost: shein.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 29 Oct 2025 09:17:52 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 308\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:33 GMT\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":469,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7302e1aa144d27b33fb808b1d000c6e","sha1":"ad5e08e398ed12bf533f1ded653e35fa7deacf18","sha256":"992fc68fb806fa60676398d4a4bf61c359a5a816a4115b40b93a9477cc23da54","sha512":"57abc3f169e529bb4ded540f8cd1f5e3ad9eb83865f9dd3fc68a57fd155891f6f6ba5f0dae81cc4e3873cb42f63e561f7e3ab4652c80bd42a50b38c6252d87a9","ssdeep":"","tlshash":"ccf0dce98824c08291022d38df7d1ee664f70cfaaf4f85a090409c20b813bb38e00d56","first_seen":"2023-12-11T05:55:31Z","last_seen":"2026-06-03T06:21:04.377237Z","times_seen":1440,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/j/pi/2025/11/14/c4/17630864309129142b44226f85481a6ccef36c0d52_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/j/pi/2025/11/14/c4/17630864309129142b44226f85481a6ccef36c0d52_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11392\r\ncf-ray: 9af28647eb01569b-OSL\r\nlast-modified: Thu, 04 Dec 2025 01:53:50 GMT\r\netag: \"6930e9ae-2c80\"\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ncache-control: public, max-age=604800\r\nedge-cache-tag: 2025120409\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 30029\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11392,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"849cb15ef3949b71f17ede5854330abf","sha1":"1e2cc255f3bd582fb2973de00b9e057ad1311b09","sha256":"2da39838357fbc17d90aaf1f81445eaf134fdfbe58bc58c414adab722154c9e1","sha512":"ee80dfb7b0080b4d856da00e11a41080c63d996683eca681a285a66ba58f808ca207692aaed3c2f80652d54f2dd06b994de0411db8a2ac6e4a33501064c48734","ssdeep":"192:gYNMtKwk1u/IZimG7vvpc0FBiIsr7opM/QpKz17bVeLqE:gYNg70bTIvDFwIQoxc7xMqE","tlshash":"9f32af63eb5bf353da04d63890da5f94bba33a3ce3ba32960d3cb12844c05415d8e24e","first_seen":"2025-12-16T16:48:13.499407Z","last_seen":"2025-12-28T23:11:11.511753Z","times_seen":11,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/68822.9238556f3012499d.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:36.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/68822.9238556f3012499d.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:37 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 11267\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32374,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31707)","md5":"c32ccce90da00384effb51e3134118f6","sha1":"fcbad2f7db2de4cc658f065f623177fb59227073","sha256":"2fcb615e3b24ec7ddee4bf77ee7232aadbd4a8e07e9ca7addf47c6b15b7d0c5d","sha512":"d5848a21ce3e90c87dcd7d77b4d8ffea24eef3739b35ef5da482e9d449092a8e72689f1764d10142cb5e3d82de28cf704ffbe94982f76ce5ddabcae96bc660da","ssdeep":"768:ln0l+9kXJ9iVSCOiB5S8yLuOaWLyMe1CIsDO+rCae/0SlZ467ZjsAaUeEx2TqUQh:xj56LiCATPQre","tlshash":"89e2c6d6f653e05926fa48ea94370829d03c3b06b595d8a0f45f0ce0698629f3b9377f","first_seen":"2025-12-09T15:42:57.728035Z","last_seen":"2025-12-17T05:54:39.346592Z","times_seen":17,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token,ds-from-terminal,x-oest\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/j/pi/2025/09/23/c4/175859672580f97fd654f105d544d8018f39aa47dc_thumbnail_336x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/j/pi/2025/09/23/c4/175859672580f97fd654f105d544d8018f39aa47dc_thumbnail_336x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9295\r\ncf-ray: 9af286297d80569b-OSL\r\nlast-modified: Sat, 15 Nov 2025 02:09:24 GMT\r\netag: \"6917e0d4-244f\"\r\nexpires: Wed, 24 Dec 2025 01:07:31 GMT\r\ncache-control: public, max-age=604800\r\nedge-cache-tag: 2025111510\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 1592378\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9295,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 336x448, components 3","md5":"780bc28e85e63a6174159532c293f001","sha1":"85e2aa04720a8aac909bd2d7b8833be34e198a77","sha256":"a0641f40350404ae8267bf7ff53deb506d3aa4600cc7a9de0ecabf40e0467a00","sha512":"ae03bdf9f21fc42b1e9c1c778642861d5f51852a70ea63c61a2e5b9c5fc4816a7d2053a4854d0c1be819a9004b15795a426b3c4d0a306575a721cd1e3332fc56","ssdeep":"192:XRncBSD1vK6uu40UdeyMIc/B6I/HzG1PkAIhnyQl41g8Kol71jfKa:xg6761lc/B6oHS1ZIhh7mjfN","tlshash":"ef12bf961a65cd00cb42c538aa76169cd9d339ff5882a616f539b0030ab4f8f78e37d2","first_seen":"2025-12-16T16:48:13.648194Z","last_seen":"2025-12-17T05:54:39.341567Z","times_seen":5,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_ccc/2024/08/13/79/1723560135b8eb5b10fdf4b06120e3b87c5db4e7a2.png","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_ccc/2024/08/13/79/1723560135b8eb5b10fdf4b06120e3b87c5db4e7a2.png HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 989\r\ncf-ray: 9af2863369d1569b-OSL\r\nlast-modified: Thu, 20 Nov 2025 06:35:25 GMT\r\netag: \"691eb6ad-3dd\"\r\nexpires: Thu, 25 Dec 2025 01:07:33 GMT\r\ncache-control: public, max-age=691200\r\nedge-cache-tag: 2025112620\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 2509\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":989,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 470 x 194, 4-bit colormap, non-interlaced","md5":"4c55e74d1890130a4f161e14160e9605","sha1":"555cf774170176004f87089d1c2388e55b2ed1a1","sha256":"fe255554f648bc9286a2ba6c291b7d35565011d13b3d3cd22449c8e7abd852fe","sha512":"74f58e58afb2695b85c0f3d3647d981a177fbf96a9d8c578a425c09a8ddcda3b24ca75829ecb5c8e3c4bc1b6c572d32fd6ae95d1b6fac09dabc9c3b676b4c886","ssdeep":"","tlshash":"e9115482bf49d6575e107a15ded3c581d7e445203986b5e300c721ff3f56d4946d709c","first_seen":"2025-07-31T13:40:14.631788Z","last_seen":"2026-06-01T22:35:15.039121Z","times_seen":814,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/40004-7ddd3aaaad2961f7.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/40004-7ddd3aaaad2961f7.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:39 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 17527\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62338,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62279)","md5":"5659aec1e3063615fad57aafabdf9d4c","sha1":"54d220b86c9ea0379975a6940d65ef84d615ce92","sha256":"161e2cb6d3f54ca993bcb74b34bab81f4fa4898cbcc0237606cb1ede4e574574","sha512":"d1521e76ecfeff206da38983069694a2ba2b61dab5f11d829a994a6c62676d565c539d37f0898c166cfe1cce628d50d937199758af1113cf576788fb1a78508c","ssdeep":"1536:p1zARVGaiYt50fTShxMKGWjv3Ml+45lpqlnDbFFJRj:fTn+46","tlshash":"02539372409d58772b9e0c54fab38863dc9733c771162112fb5177aa23cd7c81ea62ea","first_seen":"2025-12-09T15:42:57.715699Z","last_seen":"2025-12-17T05:54:39.179609Z","times_seen":17,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/j/pi/2025/06/17/3f/17501402926578bdb2ab821f751ba157d343678003_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/j/pi/2025/06/17/3f/17501402926578bdb2ab821f751ba157d343678003_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22205\r\ncf-ray: 9af286480b0a569b-OSL\r\nlast-modified: Thu, 11 Dec 2025 11:23:15 GMT\r\netag: \"693aa9a3-56bd\"\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ncache-control: public, max-age=604800\r\nage: 481460\r\nedge-cache-tag: 2025121119\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22205,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"0604b8a46e134ec81ad9af5d81fe72d2","sha1":"d982b1905b530fa17d93fb53aca7fb0ca37f1994","sha256":"bd7ffe4c3dcd3fe6f889df93d50be1c997e1028e288683a75e5183a2a3fee57f","sha512":"f8e5407eb20f50a4321069e1ea8eed61ba56645efcb3794ea45f1caa392a5fd3c8590b3ffc7fe094f0723eb8b3a108591899c6506f14fe7ff851169b54dce3b4","ssdeep":"384:gYNg7UxS9Nm0F5GGPO+zyCfKev2+U2MLgH2sFwO:gYyNzmi5/PfWCieJr2sH","tlshash":"c1a2d012cdfae3e9ff42aabcc5395b40615275f07685e511206e8a3e6d824c16e0f07b","first_seen":"2025-12-16T16:48:13.717538Z","last_seen":"2025-12-17T01:08:43.017568Z","times_seen":3,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/j/pi/2025/07/30/d8/175384502354e3692fd09af3481fd058029f409b15_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/j/pi/2025/07/30/d8/175384502354e3692fd09af3481fd058029f409b15_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26474\r\ncf-ray: 9af286296d6b569b-OSL\r\nlast-modified: Sun, 16 Nov 2025 23:02:48 GMT\r\netag: \"691a5818-676a\"\r\nexpires: Wed, 24 Dec 2025 01:07:31 GMT\r\ncache-control: public, max-age=604800\r\nedge-cache-tag: 2025111707\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 2357147\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26474,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"4a21a7bbb0b900a1a4c19346be384a7b","sha1":"f890e7263c9c66b09e1d15c78637ca24adb0d21f","sha256":"859d603ab99c5b0905db401cca03c1c37069a89b13f812c2b33904b2008b2ecd","sha512":"88ea08f4da055cd469fbfb742966e0744aa246e09e0d8293f4fbe1455a2f0ef9df1800dcba79049428eb7c5219bf392b7b25c168067458adc992ec1d35151e96","ssdeep":"768:gYyrPT5A5p0FdgKe+Krh736Gbgq/VBxZTbQWR:gvP9AX0JK1736G9VLZQWR","tlshash":"6ec2d174ba5d23d2f034f5f88d81676eb6d7396653a0f0fd28093558b2984c84f1f296","first_seen":"2025-11-24T23:29:24.231787Z","last_seen":"2026-01-14T23:43:49.540286Z","times_seen":22,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/js/lib-polyfill.b4b95c9.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/js/lib-polyfill.b4b95c9.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 24 Nov 2025 11:43:52 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 44809\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":147536,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65457)","md5":"226b7cdb5b372d63f0fd353fb45bb62a","sha1":"9d368dde42acf9cf828c712b832ea98cd65a1310","sha256":"dd92f2e09fee789386f1b684361420f2c37cab1f4095c755b5764b84fff857d0","sha512":"4583db802346e4624c313f786e9cc84526c199090a74e3aca884383a2db3dd650525d922c1818a92eacf2852b7f2ebb306e71c66313c8142768760d2a09bd846","ssdeep":"1536:0gh3E6WQAwFfq9aQEwNPfVYd6n6ijzuLjyGcxS5anytxmzqS7:0gharGqUAzzdx4angoR","tlshash":"a1e385cd7192e0e90fb154dc412fd803f6a62e70245dd4a2bfa1ddc8987ad5f903ba68","first_seen":"2025-10-28T13:10:33.625389Z","last_seen":"2026-04-16T21:34:30.245558Z","times_seen":620,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":74,"dns":4,"connect":1,"send":0,"wait":9,"receive":1,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/app-track/metric-info","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:34.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /app-track/metric-info HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/j/pi/2025/07/21/ac/175308116581f6c5f1b2fdaa4d6d2dcc528ff43c2f_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/j/pi/2025/07/21/ac/175308116581f6c5f1b2fdaa4d6d2dcc528ff43c2f_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35880\r\ncf-ray: 9af286486b39569b-OSL\r\nlast-modified: Sun, 30 Nov 2025 12:58:21 GMT\r\netag: \"692c3f6d-8c28\"\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ncache-control: public, max-age=604800\r\nage: 622715\r\nedge-cache-tag: 2025121004\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35880,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"97f4660acaf3901f4f66f99e695e0759","sha1":"21f510a465e86324abc62a4083d78d9a148e1419","sha256":"c070af132247666f2b4696cb74d66d409a676baf0d1cfde6f90323ebb10de0e5","sha512":"2bfa15981076fbd2cb80f33d89ac3cb6bbd400ed8f96782437f97a63329318ca05bfe883fb0c2fb3c46d4afd70f8aa6877ceb74fc5930131ec4de25a418791cc","ssdeep":"768:gYy7DoFCBHfOKoDnN4yxd22S9XQCSd7jzwFwpFiQ3uT+p8:gLgCBG4yxdOgCSQwN9+","tlshash":"15f2f13ed659c506f3268a36795b93c4350bf14a7a3e83c21444ee73613015d63f7c29","first_seen":"2025-12-12T09:43:05.291275Z","last_seen":"2026-01-07T16:02:13.240911Z","times_seen":12,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/57265.007161cde0a5dadd.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:36.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/57265.007161cde0a5dadd.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Nov 2025 12:35:27 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 348\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":430,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (379)","md5":"6bcf5a0396a8192a6b2cfee0c266c3af","sha1":"1ba05817cf0775ba4b203111a46da57d79e710b1","sha256":"b535f8005f2bf16b864838c1444e32abedf6ec9c5f46e50f09bbb0a2968e2307","sha512":"a0feaf0c2c2823b62cbba0ddf9bb57c1ab098b11c76034993ceb4d05e9334971d2c2f4b3e22e51085151d28912fbd4d77456650b595c7ca26053776a6225c44f","ssdeep":"","tlshash":"a8e0a34649d2793a0ba754c79d479bc31c3c0563656cc5c5f94559510053804f256d78","first_seen":"2025-11-12T15:12:31.756781Z","last_seen":"2025-12-24T03:17:54.217456Z","times_seen":112,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/j/aoc/2025/10/17/32/1760692415f7738d2e8955ea4856355886d3e6fa0f.jpg","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/j/aoc/2025/10/17/32/1760692415f7738d2e8955ea4856355886d3e6fa0f.jpg HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 413043\r\ncf-ray: 9af286296d68569b-OSL\r\ncache-control: public, max-age=691200\r\ncf-bgj: h2pri\r\netag: \"6914e247-64d73\"\r\nedge-cache-tag: 2025111417\r\nexpires: Thu, 25 Dec 2025 01:07:31 GMT\r\nlast-modified: Wed, 12 Nov 2025 19:38:47 GMT\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 293938\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":413043,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2700x700, components 3","md5":"03887618891ac8fae95e6e946df2332c","sha1":"1410be66cee9e76890c3a5db76a6e208ef4cb2c5","sha256":"2607fbcc2be0a31b01c0de5d43d6cd2be7e3170fa2838960846338305b33bd19","sha512":"9df57f9e710ee21117f0203ce37a3d838ee79b9f83dbc372303234e331999a2f0164a666a4c8b0b2548c257f0fbdb95f604dc0badb8f7fb8ebe5b299cb1a914d","ssdeep":"6144:iN/va0dsgdiDF2AEl97LNonBqHujt8fmixVS8geCbv+21xyewOCPn1DdJ9mgXQZ:iZQgUDFv4LASuUS8ge8WOXy10KS","tlshash":"62941391f72f44fbe0a47332f5de4967167799048827a46c8a8bb41489faa5fdf02334","first_seen":"2025-11-04T22:07:02.27391Z","last_seen":"2026-06-01T22:35:14.805228Z","times_seen":601,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":35,"dns":9,"connect":1,"send":0,"wait":12,"receive":38,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/api/zpnv/am0?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:37.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /api/zpnv/am0?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nSmDeviceId: WHJMrwNw1k/E6FWWr45huH0SHkq/FHZP1RiBdRWJwnugpcKfvQ3M3byyyMOZe0v4ZceX7Tyqo6/mmqa0+4YaY/SFq8F8CjtuOdCW1tldyDzmQI99+chXEimu23C9OY/lrYp5HxsF710w6FU/fzhj65gCHPPxycwCneu8bpbMPuOQ3v/uKv7fr2biq+/JtOAQVL1Zk3jUkmm7NtAKvckCXn1o1sVkOqGcHswC/75UCs431H7aqDLDtYA==1487582755342\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: nTohXdDF-15sWgce8ZNP6YreVwqzw-mJq1Po\r\nContent-Type: application/json\r\nx-oest: RTBEMzU0Q3wxNzY1OTMzNjU3NzQ3fDBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nuber-trace-id: ff65da252822a58f:ff65da252822a58f:0:0\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933657749\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=FuGIRYTA5OGE1OTNjZTQwMDQ1NTA3ZjI3Y2IzNTNjMmFjYzhiMTU5MGZlNGUwYjNmZDFjY2MwY2Q4ZTM4Yzg5NDRiYQ%3D%3D\r\nx-cs-random: 03d0ed219071939e5c7a63f35f13847de83b7a9069f0967b5985a081dbccf107110b625426191d5193007a25ed325337047d69d9add814db97e62734b4b14267b20d818e0d289\r\nContent-Length: 5224\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":5224,"data":"{\"data\":\"0_3.11.1_0bcb936e_RnwbU5vvpFvVFeUwXFWo5F_wgLyIalcy8jLKEXHxqmCMVSZFI8dv68zZ8OWlWumC1R8OrvO_oily20TzaIf59p4lkvbtA64M8ftLlks2mBTnzZia_IfWJh4_LbD9iJ-eOO7aQGGR4Nf7AgNlflsYTTPFZJEC_QMFwhH2jm1LsqLqAbVUQl9pYTLdd-oDZ0hoApi1vXSaaFVuUXh-LBxS7NBONL_tQIFZsKi3gXzn7cDkTWLY9jOEIoSUgCV-N2NNo1vYwhBrnEQ9zWs1pKPlMD2aiD_2y-tQSkfrSWI60uieMaN2B038mLUT7wLFFDA4vpQGDg4kTW8W_PvUO8KF3mTEAt3jIq1hh03_O2syDO5vVWHVyXpl6dea0N_eqIwvKiJzOngkX67QipPnCFj2L5IPg0XRA4vlMPbd-U0J7qqBWDeMiJzZp31gi_ScWq7M4CCk3G08cNIklphK7fXPfPMo1IQIX76p4VkdaY5rjl-lzN3djnjS0nRYRu0eG2Ca4JOiarUy4p1HRGGD6EEadlHFg7GuZCLCvq2ayEQ4bsFX1GY9rw_xOuPbOtTuq_7h-Zyh4_m4GfqxZfnWvwg4wMNmfQ7gT1pVhQOl9c1ItF6s6tHIiHi0Rpi4bjkWA5h2hSFTFokpn_dJWsnrrf2hjSMhI8uPR0Xm_mkmW2unktPOBEn0JC8KpZ9QgaVx-lsM0Yent5Hjw81Hf6QAYZTqy5j48AegDL7JvL5BXJNKsbEfAfOvA3ejwbudtip-OOSG1H4bdPqV5Aabv184J0nKLncBv4sPdk9gC-QPunwSQ-zzYd77CKjAViVqFy57MU6SPvjbDbV_8oR_Fg7O_Q6vuWhy7_BJOdRLthusxn6oxyDptoc6FLXQs-tkcjTMoC9bCNlS-oKbQ382M7TS5nvKxvhd3GC8quLiI3fOtDQieXmH9gfqYWXcuP2nGMZ5-ad6QrX38Dxfq3zcdlcQBxL9Ia6DEVyV15bP1gtPOPiyElfLuavro8HPvsY3-LrO-C0GMetm9h3jnIiEaJr_KzdLko4cbvKOIlkZ_0t8md6OjmqU-vnxZbwWt5JpLHAPAxxLSm_tUzna5IagUpe5u6GYuGWWmQ0wYXm-UQkf465sHJ-XVwrg6KGB7MEbn9g3ygmsGEv3iNR4iqcZQzQzpMLl_w_uAUF83vYhoYFm1SDTKMROslZrEeKiljrWoUbzILOTLG0Vha5OkwWC19JTExFQXyFVEQqsYNWYcE9wKm1QgNi3h8HIUwBBsX0LRg5chRDmhy7QJoMar64TvKdJM8CZhN1w-GqJGcBuaMpc2AVAnEk4vhOrkAuOr3-50_TJDxoY3kbL45kL8wp-DsPSc6664N7k59DnXkUeKu3zkxlbscIXM__nRXh5n6CNPngxC_1MFvnwjyeDeI5Q4J7hFohSHs_EQQkpHM79JUgpMvIMm22aB8vbWCBMpn4_z2gGC0kVkBY2pHxcS0WdzqUGM_zg0MJt0c1cXSy5-d6rc7w5kSw6IqAoZ_hEVvjn4NCmX9heg6eAcQZrqq0lkMWc55N_Q20zO6B0f7TFR9Aweo3673JRQpLUe_N4RUgr01OxHUqWxezgKDBq-Xm2HtNdv-b0zL5yLgX48F2iTMNuM_cfXbt5jmZ7o8AUmv6TLyep0vjSyO9dgO0UTvLbG5ROUDYeOcfvyucbRB0phCDPEIXIGVWa9OoUdGwN6gaQktamxnRPyjIOtChjrRJYnIBb6Ke-T_AI0EgyTHGZN9yMY8yq0mCKgYz5NFAoWpaJRt6NxX6TvogPZUCrb9xmC1ob3rsv7iuutQVCQLuMIM568sKQvsXinapO0GYyJluuhcFjZdz7swTJgxb9T9l_x75mypGhIwV_MF6OXTwfHoaOEtoTZE0EWGxLDmWtIDEwyOnNrlFIFGd9yAKRxw_6U73wQ60-9Oe_8p1iF0TTMvt1NCqAdSemqUXSq_NcCNKuP-jHiUQcLbxz70o2v38TNKP685MhX5PDgFikh496oZLt0C0Mw6cDOGVjMadXzXkQcbtHZtApZTGE0aK36VhgGDHjRYoJs2QwzilsG-CnUWzEhI3RectzeciwrQBCjRR7tvNmQ-sxxpPRQm8GWlgr0RTwyinK1MmCrFpSzrSKQ5fnfGcY0EbWdVfI6oPEb5EvlOexZNcb6Rcc7iPPNjLbPxUYkknGAf4Jj-ZsxZchNPEoCqG-hEzQDfN83JEqysoQkh62avRJqbZvRYB639T8YchPKf7yuKljn9-vK1mzaLoaM-jqSrrRx3w-TRhbIPJMf3uZsNK3F_BOdJZMX6TWX2jTsz0-xATa9efhrAUYdiOmgh3aaZuiY4eINCMBS4khcyM4P4z9RHT8MzcutpVO1fRwXB62vjMVwgNEPjBMkWYqwqEsnTMnoLe4u1eCZdufGXSyCaxxTPvcaTMCmQaIK0Y4wnDbIUzTbG4wuwbLV-MCcXh-WUhqkJoS-hdWT6po8Wx-BXv7dhOuInzKqnkP75v5RUB3Pajgy87-b5RiMx8aW2tiXMNbZ9-0T8EH-pRBtBYWw5UVlEc7WMpQi1yc_3KVjSXzaiSAU3rwljaW3gi_uNDhvw-xZkR220W1ttMNLT5fdCAk9Lzf-k95BYKYUhNuV9BE_Yh3Rw-s9VVdasUf3dtX9D-DOc-qFbSkj1A8rNQBT00iTgLl_nCCZo7E_4z-NGVxZ9j8BT1xnFp2NIDKimicFoD7J_hpLY6yqr3MEAv7aFEltSysZoEzrtXFdpv8Qg3MdRvzeSHBvhQhWirvu0G3VoJYybnwY9ZCbIcfuEUdnse3i2LY1uR3mjP92TJSbeEhg32xF4GRUTH-Xai-7BNtky9Up2R_QVAy6QG0fyrB3jZwCDsKhvbyYunsfIa4mjBV5KL-qz4ZGZw5mt5kIW_34KiEy_hs3FoABmfmlaDju-8aFZ2fU5OhijgWhakT8NbgUQB4UK6JK9jQZN4gqmIooTrSLrzuHGFVddT7pmBo7T28rAtADtnK-i8YhgMH7Wr2-eXlnNANgx883AFJs-bsS5G3Eo-M5NPe1SE7mRlqtL0slJxtD-oeDlX-82_dN0ugSg5KIDyCf5HRYuXWA45KfKoKT9ZdApeF87HQMGmRBP3Btu-1RjK_EBZp-uhFgg4SO3vestA4tXY3MuZDezv8yE09jfoeYrvz43RTrSouBXaISEPVvUSXhFPUYCaSxSEp6QcWg44XzEvgUbT0Yf6QJopqNZ5e_goWYBk_CKU5Ofo-FJy_dtUgkOUA3Li18KXKtsmehUxyJSDJtaYcIVeMI58Xrodh8-vWu_N8Tjc3hzYbPo90eQbXKxfNlZ6fDVytUYSt0upKeqvlXCEjvkIIEgnS_05TP2LLQebIogTkxqcHJfmBKmc7gbm2iwuzfwJHI8wotYy1PRtV-_bYFU4wec3sICAHmuMB-4O1VuwpglBrP007KywHQJ2mvUGX06znxnby9VkeFhaaEXygLWGY7FNDrV2K9E6P3fjmX5Nu6BPD0R_6bRg3GKdYAerGog8rQnNsW-Ze2Rpt31U2KwPlkXAnr-Dl_KJeOU_wlse1PBu79A5b25JN1LLmlMUvi6ElzdBXKH-Z_iUnyEId6WuuZWWBo89crXCVObQ_N_ZtKa22H-Og0qNN6wC5zQeHe2uqVimA1h92pGz9bhHrWKXrNOsHhuo_2vjqY9NrldDKHhr2tqA-amBeCuFJS5XDHjKFhodvqLi8tDfYDxO-fERkTBgIZJbHl3ZxC80dXUgeq_0xm81Srp69eEoPL-ffwSzN64sJJCYmfw2DxQiFBhlEfzH1q6hvZ08nkA4DMtv8tXgFHp1t9-IUQKVswr5h0aIOtRvmuPQzqTUPMQsrS_YAr2hz2h1JnOfONaTKmfhCVtBRY4M5ep2UGqRKfRkZK4u4IqeSY054DV6aBb2yESUaPC-F4LZ-uWhy4nAyjuzyxhEEaW3-1qQ9IJIAmSTT_crVt1FKjH1miPhs9MKws0vfBmrCguK35q5_0xuRNEojR6vDe45WeQGmacmJRCrA1UK10P3iB8nv0GFwd8_yTnp4i8G2frw3Gx1zv_Xb08iLtI9phAxC---hl-FTS6om-J-jFtO_N1i7kUCa1YjyC9v89-hGhobla4XN0y6b9QBhXT50iWKCl2AhKaj83l28FIlur2odO2DK1Ce-CXZ3caRi1v_WBY_W0N7lmR7FZFLBpwxWUgVMoqib5akCvSxZ50HvSp9Y-Kv1dbMPc7g2WMC7nE3scUHFi6dXXfJLkyGK8vL0cUtzU7rLd8nVla8tzXIxor_6QxtG4E6jRAY3MQW2ZepWzcAZ7rkwtgadwSFASJi7gMkCMwsVHMuNu6aER-HobvNNx6d9D0kbld3xK_oKJ31czg5xeFHbqVV_oIq8HTVuKI502nBkclWXZzyA6Tkl3kpzc1lLn3bBNGpsplXLHDcfNAEsVjwUXPaWEfiVdsFzPYL9xRi9QM4TTDQLM-o8KEPVDn0vDDZuGFDbGyvCtLYg1LLx6VgMYeQuAzm_9Ef-GTAzksKwru0uEeE75AD23tTghjK9GywWA6avHhY92brbv24I0-O29GTZVA8RvY1XFt6TcLetXFj7MMHTReAkMP5IUWPTiJASfPSt4cWUHwMB1kGNrvxSMhc1J1ogLDeTjGJOu94oP8lEmJhzZtvtUePBmeg8swn7jMMo0bisrHsBRx-d3n2YWz1EgvFgTCoZDvP2W7KJpO7i0SSh7D0todF0szTOJ-QzEh_t6WFHdywqd2PUd6ILt3d8wshiXumjqwCDm68iSCZ9bfPMRqMy93YKynOXN8PwbKJKmgl87W-y7XfetLiGjlYvO3x3Mqatksro3g3gJV38vQVyekHfAMgWTckWTWmlEPvQXEmG7txmsPSTNoq5IOP89uSKhI3b_WW8QyaU2uEW-wa-kt3eGhALOyqq6VDweAtPu8dHXjpzCKKNEpDn4n8zO81DmSYau078_X4JWDBhVfkqCTAI-o5mOvFrkxItZLkJtkVCKWNCRDaPv4dIGnC-rE2V_M5Q3\",\"appName\":\"shein\",\"extra_params\":{\"ak\":\"QrvLyoB0w3FINbGIJruStcfCAPx9DaEa+EHUDvTOjzWmC2RcBxjAXZQqMBKUOIGiq6oyLzp3fGfHaerw1+qqdA==\",\"ie\":1}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 328\r\ncontent-security-policy: frame-ancestors *.shein.com https://www.shein.com.hk https://www.shein.com.vn https://www.shein.com.mx https://www.shein.co.uk https://www.shein.tw https://www.shein.se https://co.shein.com https://www.shein.com.co\r\nx-dns-prefetch-control: on\r\nx-xss-protection: 1; mode=block\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=7776000000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: no-cache, max-age=0, no-store, must-revalidate\r\nx-anti: RTBEMzU0QzBfODEyN19GfDE3NjU5MzM2NTgyNzF8Qjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\netag: W/\"148-Jf3bNtYJdTfpIZ/oAxblzPtJrq8\"\r\nx-gw-traceid: ff65da252822a58f\r\nserver-timing: g;dur=639\r\nvia-shein-gateway: c-shein-pc\r\nheader-cmdb-name: SheinPC_eucentral_prod_app02\r\nheader-cmdb-name-origin: SheinPC-eucentral-prod-app02\r\nheader-cmdb-sname: shein-pc-eucentral-prod-app02\r\nheader-cmdb-app-name: SheinPC\r\nheader-cmdb-app-name-origin: SheinPC\r\nheader-cmdb-app-sname: shein-pc\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":328,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c48e37dde87e926459defa423a858752","sha1":"25fddb36d6097537e9219fe80316e5ccfb49aeaf","sha256":"5979c62dbcadc24fee132bf4fa99e73e56d16396747985461a046d17d365faf9","sha512":"5ee9875de0325d6455089e5e6989c52885c7087f652a2fdfb7054d59f87752fc4c09ebc59ce94f44ae8fdac4bce9218aaf2b822e341285028c1a1325181582b3","ssdeep":"","tlshash":"c0e02d8d0b1eeca39ba8c2a3af76b1f807090a42b23012018870ac8c2cb6037cc16475","first_seen":"2025-12-17T01:08:43.021251Z","last_seen":"2025-12-17T01:08:43.021251Z","times_seen":1,"resource_available":false,"data":null}},"time_used":705,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":703,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/j/pi/2025/07/22/0b/1753175672c9489760c3cfb82a0bd4dd2660e04ddc_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/j/pi/2025/07/22/0b/1753175672c9489760c3cfb82a0bd4dd2660e04ddc_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24933\r\ncf-ray: 9af286296d70569b-OSL\r\nlast-modified: Sat, 13 Dec 2025 13:13:11 GMT\r\netag: \"693d6667-6165\"\r\nexpires: Wed, 24 Dec 2025 01:07:31 GMT\r\ncache-control: public, max-age=604800\r\ntiming-allow-origin: *\r\nedge-cache-tag: 2025121707\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24933,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"4094c8eb04525aeaa0c763d333092c7f","sha1":"2f428df27776ae7e7b48fc6159c3f577e201b96c","sha256":"5dcc60f3e4c13cc37971b1bff67e88432ff8c3c8a9f454621cb35311a6f87e81","sha512":"355eba5cbfdb1791e6158114cf004a0f6d2a3e8f03a78ea208917d1112ad1012769b48f5e6aec8c6867663432b7599a65b2485f4b6e21c7913318c81ff0a13c9","ssdeep":"768:gYyC8z2wBPMiAr2dy6jJt3gp8iQfVeTvwOEk:gGa2wBnJjJ68NV0wJk","tlshash":"f3b2d06e9fed66dafeba85b8b4e6b7d8e0d16120b10117d1a97dd22800110c2fbcf157","first_seen":"2025-12-17T01:08:43.022256Z","last_seen":"2025-12-20T00:43:41.537303Z","times_seen":4,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/ticket/robot_customer_chan?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /bff-api/ticket/robot_customer_chan?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\ntimezone: GMT+0\r\nbrand: shein\r\nchannel: pc\r\nappcurrency: EUR\r\napplanguage: en\r\ntoken: MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\r\nsiteuid: eur\r\ncurrency: EUR\r\nlanguage: en\r\nx-oest: RTBEMzU0QzBfODEyN3wxNzY1OTMzNjUzMjAyfF9GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: \r\nx-request-by: bridgeX\r\nuber-trace-id: ff2b823173b548d5:ff2b823173b548d5:0:0\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 522\r\ncontent-encoding: br\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfODF8MTc2NTkzMzY1MzMxNnwyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: ff2b823173b548d5\r\nserver-timing: g;dur=3\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster3\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster3\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster3\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":3663,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7e1c6b6fe394429bc1f0bb44bca321ca","sha1":"958d54a4df94be11b691a3a819b706d9343d06ee","sha256":"f66e56acd03f1d860749aeeff46f28f970a21e18b94425d993f582e6a83c9663","sha512":"6a02fb111a43046cf49120a7c6f7a8c1bc51c9eaaf321b01ab9f63ec7284688587e9e038ad185a37ad6080db2243613f8dd0bbfb60d34e827b427ddb34495158","ssdeep":"","tlshash":"2c7183a5cdbd4c6a99b27a9322ce2943d1fd1363cd0d9f981f9b0f19c6f1831e512846","first_seen":"2025-11-11T12:43:23.393294Z","last_seen":"2026-04-05T18:49:38.252843Z","times_seen":30,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"common.ltwebstatic.com/dist_bundle/xjqHR52UWJdjKJ0x6QrCsus66rNXR9/2.0.13/1/main.js","fqdn":"common.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /dist_bundle/xjqHR52UWJdjKJ0x6QrCsus66rNXR9/2.0.13/1/main.js HTTP/1.1\r\nHost: common.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Jul 2023 02:45:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 55781\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":183214,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65474)","md5":"ff0cfcaddf4e485ef61f0b4bde284cbc","sha1":"105d41a1a3ea6383ddf8abfc5d8db70023ec5d5c","sha256":"e891c199244540f8a6135ff5f06b313cdc6a6e5c0624dc08818483af4db32d61","sha512":"e144d4382c4d7c6bf002f4d08e207ebc9e83640d8742d808dbd0d9e6b2115ac7c42577940a4f5b946f8d01f1b0b1f0c29115eebde93dd5228a592afb765b3791","ssdeep":"3072:EOu0KUgplejzOvntvHQq+rN1PJzjCpimzaf:EX0KUgplejSlHx+rTJ+ojf","tlshash":"650409fa30dff1aa53ea1f33409f30c74e2c5a23a54c6509926cf5d4a8746abd163e19","first_seen":"2023-09-22T19:47:07Z","last_seen":"2026-06-03T06:21:04.397512Z","times_seen":1771,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cjs.ltwebstatic.com/unpkg/@shein-aidc/basis-sada@1.0.7/dist/sada.umd.js","fqdn":"cjs.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /unpkg/@shein-aidc/basis-sada@1.0.7/dist/sada.umd.js HTTP/1.1\r\nHost: cjs.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 26 Oct 1985 08:15:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 10270\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:35 GMT\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35749,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32398)","md5":"7effe25bb7dbf93c8b2c921432f6207a","sha1":"b3f070a4ee7096e070d8f3b251ad2fc1c2afd157","sha256":"c8f8545ad3e1ab61c7cec03626d13c91910637ecdd98f305567f7a0a9852f794","sha512":"4712a3058215ddd7bd2e5fbc1d8c51d387207b574ff70e74c850caab73464d314ecb94ca2f43b4818ccb793d3f1728b79600b98b9c6b40b12b3a7072f57cf8a8","ssdeep":"768:NC5F0Cpt0CiLGNeHiWTLDA1GvG2OIBXDrhYTjAzfDOQcs:YB3IRr4zs","tlshash":"5bf2c6c9bb8af47102b36075883f640ba2367a115899d090e327ddd1bc6c95f7326e7e","first_seen":"2025-09-02T17:04:23.654248Z","last_seen":"2026-06-03T06:21:04.419972Z","times_seen":1102,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/user-api/setting/get_sample_config?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /bff-api/user-api/setting/get_sample_config?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nSmDeviceId: \r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: HewaI0AR-isVikRSGpX30TnfiRycO7R9AxSI\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQXwxNzY1OTMzNjU1OTQwfEZfMkNBMzZFMzQ3NUM3\r\nwebVersion: 13.9.4\r\nx-ad-flag: 8FkZa3NuCnoO+IBsqSDbVbjbZFDPBy/Ccg7HPaagWd6Z0k+h6+rK67aH0c1E5efGgWYq61YJe9rvWC5xPj7ZVVYoP3i9GVpBfVkWfa8EsrsGa2KgaixOSZmJfGKy6YI874yU0pb2l85B3RSMhSMlbQ==\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nuber-trace-id: ff5ddf46958930d9:ff5ddf46958930d9:0:0\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933655947\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=h2bNbNTllZDAzNDZlOTg4MGExNDc2M2VkODg2Yzc4NzYwMGZiODY0Mzg0NDQwNzEwNDZmYzZhMWE0MmRlNjI2ZWQxOQ%3D%3D\r\nx-cs-random: 03d0d0cb27b0ee5687ff5ccdd608fd07305312bff3b48f1597dbb0b573cf75e664abdfeacc0c05ca19545b38081e8213d59589f3d1ad7e7a55427e884dfbceec8e1e84ee72a43\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 373\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUN8MTc2NTkzMzY1NTk5Mnw3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: ff5ddf46958930d9\r\nserver-timing: g;dur=2\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster2\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":373,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"714fde9326c0b9650418f1388aeaa895","sha1":"d1555bc7e074defc8700327801ea221ea12605c2","sha256":"7c92696bea4a72539cfd09200c1b025df35f41c2af60d7cae6b5feb181546570","sha512":"557d32e0cf3cc9f71cf153ba8b527af4939e636dd8cbd3d0fecba464d9d52cfd3402a2fcdd56006fcbd211ca2df085f8189749863ddca313bc4eff4c9b2ce266","ssdeep":"","tlshash":"0ae01281f439eb0280eb0d70939a59c9784bf1d289d09b04d85de61b910d539122065d","first_seen":"2025-05-19T19:51:55.906002Z","last_seen":"2026-06-03T06:21:04.355173Z","times_seen":1008,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/clientPerInfo","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:37.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /clientPerInfo HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nds-from-terminal: pc\r\nx-oest: RTBEMzU0Q3wxNzY1OTMzNjU3OTMyfDBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nContent-Length: 1998\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1998,"data":"{\"activity_name\":\"expose_navigation_menu\",\"activity_param\":{\"first_menu_content\":\"Sale\",\"first_menu_hole\":\"2\",\"second_menu_content\":\"Sale\",\"second_menu_hole\":\"2\",\"second_node_id\":\"\",\"src_identifier\":\"fc=Sale`sc=Sale`tc=0`oc=0`ps=tab02navbar02`jc=itemPicking_0051884505\",\"second_content_list\":\"/sale/All-Sale-sc-0051884505.html?ici=eur_tab02navbar02\u0026src_module=topcat\u0026src_identifier=fc%3DSale%60sc%3DSale%60tc%3D0%60oc%3D0%60ps%3Dtab02navbar02%60jc%3DitemPicking_0051884505\u0026adp=\u0026src_tab_page_id=page_ad_landing1765933653032\",\"is_slidebar\":false,\"third_menu_content\":\"\",\"third_menu_hole\":\"\",\"fourth_menu_content\":\"\",\"fourth_menu_hole\":\"\",\"src_module\":\"topcat\"},\"device_type\":\"pc\",\"home_site\":\"shein\",\"sub_site\":\"eur\",\"language\":\"en\",\"system_language\":\"en-US\",\"money_type\":\"\",\"device_country\":\"\",\"app_versions\":\"\",\"network_type\":\"\",\"ip\":\"\",\"screen_pixel\":\"1280*1024\",\"screen_size\":\"\",\"device_class\":\"1\",\"device_brand\":\"\",\"device_name\":\"\",\"device_model\":\"\",\"os_type\":\"1\",\"os_name\":\"Windows\",\"os_versions\":\"10\",\"browser_name\":\"Firefox\",\"browser_versions\":\"134.0\",\"session_id\":\"bi_1765933653037_61177\",\"channel\":\"affiliate_af_b_33_121_0\",\"origin_otherid\":\"\",\"traffic_source\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"market\":\"\",\"start_time\":\"1765933653032\",\"end_time\":\"\",\"environment\":\"production\",\"device_id\":\"\",\"device_idfa\":\"\",\"device_idfv\":\"\",\"device_aaid\":\"\",\"referer\":\"https%3A%2F%2Feur.shein.com%2Fark%2F2812%3Fonelink%3D13%2F4s0r28uoh4d8%26requestId%3Dolw-5ag0n5ca69ld%26url_from%3Daffiliate_af_b_33_121_0%26affiliateID%3Daf_b_sub_13300%26click_id%3Dd0e56b0a85344d81ae746ea548d5e9a1%26cdn_rsite%3Dcf%26ref%3Dwww%26rep%3Ddir%26ret%3Deur\",\"sdk_version\":\"1.1.15\",\"login\":\"0\",\"member_id\":\"\",\"ugid\":\"\",\"page_param\":{\"ad_activity_name\":\"newuserprice\",\"scene_id\":\"m_app\",\"platfrom_nm\":\"swift\"},\"tab_page_id\":\"page_ad_landing1765933653032\",\"page_id\":\"6342\",\"page_name\":\"page_ad_landing\",\"log_id\":\"a8046e07-9d3b-4504-b969-7d9602592b41\",\"seq\":\"7\",\"timestamp\":\"1765933657916\",\"local_time\":\"2025/12/17 01:07:37\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nds-from-terminal: pc\r\nx-oest: RTBEMzV8MTc2NTkzMzY1NzkzMnw0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nContent-Length: 2015\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2015,"data":"{\"activity_name\":\"expose_navigation_menu\",\"activity_param\":{\"first_menu_content\":\"New In\",\"first_menu_hole\":\"1\",\"second_menu_content\":\"New In\",\"second_menu_hole\":\"1\",\"second_node_id\":\"\",\"src_identifier\":\"fc=New In`sc=New In`tc=0`oc=0`ps=tab01navbar01`jc=itemPicking_0021884529\",\"second_content_list\":\"/new/New-In-All-sc-0021884529.html?ici=eur_tab01navbar01\u0026src_module=topcat\u0026src_identifier=fc%3DNew%20In%60sc%3DNew%20In%60tc%3D0%60oc%3D0%60ps%3Dtab01navbar01%60jc%3DitemPicking_0021884529\u0026adp=\u0026src_tab_page_id=page_ad_landing1765933653032\",\"is_slidebar\":false,\"third_menu_content\":\"\",\"third_menu_hole\":\"\",\"fourth_menu_content\":\"\",\"fourth_menu_hole\":\"\",\"src_module\":\"topcat\"},\"device_type\":\"pc\",\"home_site\":\"shein\",\"sub_site\":\"eur\",\"language\":\"en\",\"system_language\":\"en-US\",\"money_type\":\"\",\"device_country\":\"\",\"app_versions\":\"\",\"network_type\":\"\",\"ip\":\"\",\"screen_pixel\":\"1280*1024\",\"screen_size\":\"\",\"device_class\":\"1\",\"device_brand\":\"\",\"device_name\":\"\",\"device_model\":\"\",\"os_type\":\"1\",\"os_name\":\"Windows\",\"os_versions\":\"10\",\"browser_name\":\"Firefox\",\"browser_versions\":\"134.0\",\"session_id\":\"bi_1765933653037_61177\",\"channel\":\"affiliate_af_b_33_121_0\",\"origin_otherid\":\"\",\"traffic_source\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"market\":\"\",\"start_time\":\"1765933653032\",\"end_time\":\"\",\"environment\":\"production\",\"device_id\":\"\",\"device_idfa\":\"\",\"device_idfv\":\"\",\"device_aaid\":\"\",\"referer\":\"https%3A%2F%2Feur.shein.com%2Fark%2F2812%3Fonelink%3D13%2F4s0r28uoh4d8%26requestId%3Dolw-5ag0n5ca69ld%26url_from%3Daffiliate_af_b_33_121_0%26affiliateID%3Daf_b_sub_13300%26click_id%3Dd0e56b0a85344d81ae746ea548d5e9a1%26cdn_rsite%3Dcf%26ref%3Dwww%26rep%3Ddir%26ret%3Deur\",\"sdk_version\":\"1.1.15\",\"login\":\"0\",\"member_id\":\"\",\"ugid\":\"\",\"page_param\":{\"ad_activity_name\":\"newuserprice\",\"scene_id\":\"m_app\",\"platfrom_nm\":\"swift\"},\"tab_page_id\":\"page_ad_landing1765933653032\",\"page_id\":\"6342\",\"page_name\":\"page_ad_landing\",\"log_id\":\"6c635b38-cd72-48fc-93d5-3b48f04d11da\",\"seq\":\"6\",\"timestamp\":\"1765933657914\",\"local_time\":\"2025/12/17 01:07:37\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/js/166.db999dc.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/js/166.db999dc.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 11 Nov 2025 08:22:27 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 7453\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21479,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21295)","md5":"8b5992914d1e8e9d298592259cd4d267","sha1":"8d4349d40ba963d46f336493100901f1dcde6082","sha256":"5a420decafee9d240a377dc6057cc3d81b27fba7152f6377600f835062a978fb","sha512":"17c89f21080512d0f7d50fa0d19566b60192571621c3a6300809773902bef0572fb2f2db0f27f7fdb78e0b714143f6cea427228fe41418b402fbe35ea21607e0","ssdeep":"384:K9jU8OWORcxZpyRU2sD0YZ/N6M47znCuSyGtR5YbMG/NJVJgqkF23BjLvNbgOvpN:CjU8OWORcxZpyC2sD07Meznd1GtRwtvf","tlshash":"7aa2a5c4f1a1b0e556a734a4513f318ae277a986240ac0b4e679c4df3c7d14cb96bfac","first_seen":"2025-10-16T23:10:30.031295Z","last_seen":"2026-04-16T21:34:30.241295Z","times_seen":682,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_ccc/2024/09/14/c4/1726308103afb22656373fc035549a3b184a4363c0.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_ccc/2024/09/14/c4/1726308103afb22656373fc035549a3b184a4363c0.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4140\r\ncf-ray: 9af286347a4a569b-OSL\r\nlast-modified: Wed, 29 Oct 2025 05:02:55 GMT\r\netag: \"69019fff-102c\"\r\nexpires: Wed, 24 Dec 2025 01:07:33 GMT\r\ncache-control: public, max-age=604800\r\nage: 2228368\r\nedge-cache-tag: 2025103008\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4140,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit gray+alpha, non-interlaced","md5":"7faa8c9065012eafd13343b4b37b4a35","sha1":"338ebfd5cc7e0bf516132836582c408a5ce99e17","sha256":"c88937e04d68700c6411a79dc4f843b9e07d88a5e5600fa436d9c05f7d01ae8b","sha512":"73f33c6804557db91003ef945d9c5b93686333d4169dabda25c28a324d894803a8085dab48d83486d76e0f64a50712093d8548501e2012e8dd70eaf9d17012aa","ssdeep":"48:eJ9K1jfTzdnv+VpFHLGbWpSGVqlC3Cbsy5v+1+WwaFEm/NoL2F9uYXw774Jp8Eki:r1Nkxu1+1+WBFWi9da01cKH8deOh5JY","tlshash":"3c8148e84436de825e03bf61042f9f93fea3599b6cc86442e594a78cc280dc456eaf09","first_seen":"2025-03-22T01:58:24.759904Z","last_seen":"2026-06-03T06:21:04.450747Z","times_seen":1411,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nds-from-terminal: pc\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBM3wxNzY1OTMzNjUzMjEwfDZFMzQ3NUM3\r\nContent-Length: 1388\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1388,"data":"{\"activity_name\":\"page_view\",\"activity_param\":{},\"device_type\":\"pc\",\"home_site\":\"shein\",\"sub_site\":\"eur\",\"language\":\"en\",\"system_language\":\"en-US\",\"money_type\":\"\",\"device_country\":\"\",\"app_versions\":\"\",\"network_type\":\"\",\"ip\":\"\",\"screen_pixel\":\"1280*1024\",\"screen_size\":\"\",\"device_class\":\"1\",\"device_brand\":\"\",\"device_name\":\"\",\"device_model\":\"\",\"os_type\":\"1\",\"os_name\":\"Windows\",\"os_versions\":\"10\",\"browser_name\":\"Firefox\",\"browser_versions\":\"134.0\",\"session_id\":\"bi_1765933653037_61177\",\"channel\":\"affiliate_af_b_33_121_0\",\"origin_otherid\":\"\",\"traffic_source\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"market\":\"\",\"start_time\":\"1765933653032\",\"end_time\":\"\",\"environment\":\"production\",\"device_id\":\"\",\"device_idfa\":\"\",\"device_idfv\":\"\",\"device_aaid\":\"\",\"referer\":\"https%3A%2F%2Feur.shein.com%2Fark%2F2812%3Fonelink%3D13%2F4s0r28uoh4d8%26requestId%3Dolw-5ag0n5ca69ld%26url_from%3Daffiliate_af_b_33_121_0%26affiliateID%3Daf_b_sub_13300%26click_id%3Dd0e56b0a85344d81ae746ea548d5e9a1%26cdn_rsite%3Dcf%26ref%3Dwww%26rep%3Ddir%26ret%3Deur\",\"sdk_version\":\"1.1.15\",\"login\":\"0\",\"member_id\":\"\",\"ugid\":\"\",\"page_param\":{\"ad_activity_name\":\"newuserprice\",\"scene_id\":\"m_app\",\"platfrom_nm\":\"swift\"},\"tab_page_id\":\"page_ad_landing1765933653032\",\"page_id\":\"6342\",\"page_name\":\"page_ad_landing\",\"log_id\":\"f67b301d-5f12-4b4c-9017-91ecb1cad342\",\"seq\":\"1\",\"timestamp\":\"1765933653036\",\"local_time\":\"2025/12/17 01:07:33\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/ccc/bottom/policy/aggregation?_ver=1.1.8\u0026_lang=en\u0026channel_id=23\u0026page_type=1","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /bff-api/ccc/bottom/policy/aggregation?_ver=1.1.8\u0026_lang=en\u0026channel_id=23\u0026page_type=1 HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\ntimezone: GMT+0\r\nbrand: shein\r\nchannel: pc\r\nappcurrency: EUR\r\napplanguage: en\r\ntoken: MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\r\nsiteuid: eur\r\ncurrency: EUR\r\nlanguage: en\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0Xzd8MTc2NTkzMzY1MzIwM3xBQUZfMkNBMzZFMzQ3NUM3\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: \r\nx-request-by: bridgeX\r\nuber-trace-id: ff8450d90b288e09:ff8450d90b288e09:0:0\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1677\r\ncontent-encoding: br\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfODEyN19GQnwxNzY1OTMzNjUzMzM4fDg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-navigation\r\nx-gw-traceid: ff8450d90b288e09\r\nserver-timing: g;dur=5\r\nvia-shein-gateway: c-shein-pc!bff-navigation\r\nheader-cmdb-name: bff_navigation_eucentral_prod_cluster3\r\nheader-cmdb-name-origin: bff-navigation-eucentral-prod-cluster3\r\nheader-cmdb-sname: bff-navigation-eucentral-prod-cluster3\r\nheader-cmdb-app-name: bff_navigation\r\nheader-cmdb-app-name-origin: bff-navigation\r\nheader-cmdb-app-sname: bff-navigation\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6146,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"aa5eac674cb15ee7d0717d096b56ed93","sha1":"6a72e9d1381585cb8f1f4d3c9006d287c75b311c","sha256":"4d475923156064fb335bd50e5157f9675c93575eaf4812aea3bac494b5e38766","sha512":"45eb899654eeed2490efcbccf934810155ea7de4ace1d36c018bc7dd801e94acae598c986cff216398df76f4378a85f0024ba28bfe5be0f524d401ee1fd91df2","ssdeep":"192:HiaK2xVo+kOzqY2enH87Xpkk3eBhSbdwXIcJnM8a:tV0EA","tlshash":"85c1357221faecbde7c667c578cb1069f4cce06f92d9ac9283c8edd448b4ad12931591","first_seen":"2025-11-04T22:07:02.172704Z","last_seen":"2026-03-02T23:36:35.410091Z","times_seen":533,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/app-track/metric-info","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:34.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /app-track/metric-info HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1062\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1062,"data":"{\"data\":[{\"timestamp\":1765933654872,\"local_time\":\"12/17/2025, 1:07:34 AM\",\"params\":{\"pathname\":\"/ark/2812\",\"url\":\"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\",\"host\":\"eur.shein.com\",\"screen\":\"1280*1024\",\"uemId\":\"9c26ecf5-63d9-589a-a5de-55487193fe4c\",\"sdk_light_version\":\"0.2.12\"},\"sdk_version\":\"1.0.0\",\"browser_name\":\"Firefox\",\"browser_versions\":\"134.0\",\"os_name\":\"Windows\",\"device_level\":1,\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"environment\":\"production\",\"app_name\":\"shein\",\"language\":\"en\",\"sub_site\":\"eur\",\"money_type\":\"EUR\",\"device_type\":\"pc\",\"session_id\":\"esqiv2ozdgqktm3riwng5\",\"tags\":{\"pathname\":\"/ark/2812\",\"page_id\":\"2812\",\"businessType\":918,\"scene\":\"SwiftCouponTwoPlugin_popUpExposure_noLogin\",\"did\":\"2626901\"},\"metric_name\":\"page_ark_production_coupon_api_track\",\"type\":1,\"value\":1,\"message\":\"{\\\"member_id\\\":null}\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/api/common/userInfoManager/get?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /api/common/userInfoManager/get?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\ntimezone: GMT+0\r\nbrand: shein\r\nchannel: pc\r\nappcurrency: EUR\r\napplanguage: en\r\ntoken: MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\r\nsiteuid: eur\r\ncurrency: EUR\r\nlanguage: en\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBfDE3NjU5MzM2NTYxNzh8MzZFMzQ3NUM3\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: eCg0CFZ2-22nXZ-gNsEBLxJVJEHHojIYjcaY\r\nx-request-by: bridgeX\r\nuber-trace-id: ffb0621101bf94d1:ffb0621101bf94d1:0:0\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933656182\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=WqGCwZmUwYjg5OTJiNThlODlhNTY3ODQ5YzYyOGZmMDEwMzdlNzIwNmM1NTgzZjEwZDAxMWIyZGE1MDY3MWM2Y2RiMg%3D%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 26\r\ncontent-security-policy: frame-ancestors *.shein.com https://www.shein.com.hk https://www.shein.com.vn https://www.shein.com.mx https://www.shein.co.uk https://www.shein.tw https://www.shein.se https://co.shein.com https://www.shein.com.co\r\nx-dns-prefetch-control: on\r\nx-xss-protection: 1; mode=block\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=7776000000; includeSubDomains\r\ncache-control: no-cache, max-age=0, no-store, must-revalidate\r\nx-anti: RTBEMzU0QzBfODEyN19GQjh8MTc2NTkzMzY1NjQ2MXw0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nx-ad-flag-update: 8FkZa3NuCnoO+IBsqSDbVYTFm6zUmft9Vh7q2yhidy/tjTBrwINMUj9QAPXBTqi1Z9m3aGmbBKDl19FMxbV7y+55HcmFRosSIRKGPivl8+LqhNSOT7goHRSBc8hQvaioiQrAI0RJ5sm4uEg1OBb9Ig==\r\netag: W/\"1a-x+tUZ5haJaBPSuOtW9eu0LBJZ5Y\"\r\nx-gw-traceid: ffb0621101bf94d1\r\nserver-timing: g;dur=400\r\nvia-shein-gateway: c-shein-pc\r\nheader-cmdb-name: SheinPC_eucentral_prod_app04\r\nheader-cmdb-name-origin: SheinPC-eucentral-prod-app04\r\nheader-cmdb-sname: shein-pc-eucentral-prod-app04\r\nheader-cmdb-app-name: SheinPC\r\nheader-cmdb-app-name-origin: SheinPC\r\nheader-cmdb-app-sname: shein-pc\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":26,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f6f8d23058613f09c3c57df5d84d0943","sha1":"c7eb5467985a25a04f4ae3ad5bd7aed0b0496796","sha256":"2e8eb9f58374ffdb20fab60c29ff634764ab247179efaafbbf44f1e1b3759777","sha512":"e36613a8dd75f1fae13d64a6b9ae56c3fc075ee5f320f0741d30b2a4f29e9b41d3960815b51d90f86eecf839d296184fb6759cadfd73f77fb975ff038a657d7e","ssdeep":"","tlshash":"97800002000c088b000a8088880e03300a2e008008a0c3022eacaa20800a0802803a28","first_seen":"2024-11-22T10:47:53.392152Z","last_seen":"2026-06-01T22:35:14.956392Z","times_seen":1347,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:37.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token,ds-from-terminal,x-oest\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zpnv-eur.shein.com/api/zpnv/am0","fqdn":"zpnv-eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"OPTIONS /api/zpnv/am0 HTTP/1.1\r\nHost: zpnv-eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: openresty\r\ncontent-security-policy: frame-ancestors *.shein.com https://www.shein.com.hk https://www.shein.com.vn https://www.shein.com.mx https://www.shein.co.uk https://www.shein.tw https://www.shein.se https://co.shein.com https://www.shein.com.co\r\nx-dns-prefetch-control: on\r\nx-xss-protection: 1; mode=block\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=7776000000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type\r\nx-gw-traceid: 63a76631eb993c05\r\nserver-timing: g;dur=1\r\nvia-shein-gateway: c-shein-pc\r\nheader-cmdb-name: SheinPC_eucentral_prod_master\r\nheader-cmdb-name-origin: SheinPC-eucentral-prod-master\r\nheader-cmdb-sname: shein-pc-eucentral-prod-master\r\nheader-cmdb-app-name: SheinPC\r\nheader-cmdb-app-name-origin: SheinPC\r\nheader-cmdb-app-sname: shein-pc\r\ntiming-allow-origin: *\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_ccc/2024/08/13/79/172356013535a6443e6f97e83d8c5122eed06c9f7d.png","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_ccc/2024/08/13/79/172356013535a6443e6f97e83d8c5122eed06c9f7d.png HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 1515\r\ncf-ray: 9af286297d87569b-OSL\r\nlast-modified: Wed, 29 Oct 2025 18:10:51 GMT\r\netag: \"690258ab-5eb\"\r\nexpires: Thu, 25 Dec 2025 01:07:31 GMT\r\ncache-control: public, max-age=691200\r\nage: 2227667\r\nedge-cache-tag: 2025103018\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1515,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 4-bit colormap, non-interlaced","md5":"2609ddd076eea9ff8e42476895670d60","sha1":"7c34edcf0d3d3a797e3a4fead55174b5451962b3","sha256":"c3c40c2b0d53cc09b28e7464eedec09daf54351444abf80b9fc605ade21e2278","sha512":"fceededeb67daf3f6cfd5c90ccae4854999a68d2dd8952db03eb85faae23fe827c3cf2d711efd54418cb504c3ba0405574c908dcaf32ca4c68155938f97a34ec","ssdeep":"","tlshash":"f031d7e46a906e5501f16f342d400ed29fb91e25a90598b8df83d47e831209e89ccd7f","first_seen":"2025-07-18T12:09:05.935684Z","last_seen":"2026-06-01T22:35:14.941201Z","times_seen":826,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":50,"dns":14,"connect":1,"send":0,"wait":29,"receive":1,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/js/runtime~main.1ef93f5.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/js/runtime~main.1ef93f5.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Nov 2025 15:12:17 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 2245\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":4698,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4582)","md5":"a981cd3c0815ff6b7c39a0e3a52b1df8","sha1":"7278c3a513c3de4779918d5def425da5a67a6132","sha256":"43ffa9347d161aa7ac1a4ae15b097ead2b15affab897d77b40a5cfd24a0bdbb1","sha512":"8f0e055dc6a569e7b3637992fe5188741f82a0179a7019debe7416bea138a53093136109da9ae14eca7c885a2e656264873b10d436a112e93d39e08ef5310d68","ssdeep":"96:mIaO8cM/6p/vRWcoBVfFVirnROhFWHvGQE8P7D:mi1MUUbcrnROhFWVn","tlshash":"1ba10add22a0b9766bd705d0957ed4e2f4247235291e94b0d60fcc7ca43ced04216f71","first_seen":"2025-11-06T16:13:23.0875Z","last_seen":"2026-03-23T01:37:21.165997Z","times_seen":550,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":75,"dns":3,"connect":1,"send":0,"wait":4,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/js/core-vendors.d32339f.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/js/core-vendors.d32339f.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Nov 2025 13:06:31 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 47070\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":132267,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65458)","md5":"b9a6ee21e31e729b4b11021d1ec236fa","sha1":"55dd9b77dac30b62af5a7ece784cbf1cbee01ec9","sha256":"ce482388498bb5582d7bb143001109ee4766209ab52880295106c2a308936be9","sha512":"656e64f39c2540ae1c028e1a309a82418cf0301b4952da00c3b49fc26ca1f4270b8903ae4335bc3963ccc241c71bb5bf5cdb07ba254777c2569fe7d1c025bb9f","ssdeep":"1536:UgH+qtpGR1MWMNfhKYz026tBdNYtbYX1sUajD1C6f7NIPj:bH+qtpG3MWMNfhK/BdSbYX1sZjDU6xI7","tlshash":"e7d3e8d876c2b0d157d360f5443f12cbb26b9d91288d9890e213f8e53d3dadea063e69","first_seen":"2025-10-16T23:10:30.080514Z","last_seen":"2026-04-16T21:34:30.123847Z","times_seen":683,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":75,"dns":4,"connect":1,"send":0,"wait":4,"receive":1,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/system/configs/multi_language?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /bff-api/system/configs/multi_language?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\nContent-Type: application/json\r\ntimezone: GMT+0\r\nbrand: shein\r\nchannel: pc\r\nappcurrency: EUR\r\napplanguage: en\r\ntoken: MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\r\nsiteuid: eur\r\ncurrency: EUR\r\nlanguage: en\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZ8MTc2NTkzMzY1MzE5OHxfMkNBMzZFMzQ3NUM3\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: \r\nx-request-by: bridgeX\r\nuber-trace-id: ff7feaea9d5b7ba2:ff7feaea9d5b7ba2:0:0\r\nContent-Length: 60\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":60,"data":"{\"languageKeys\":[\"SHEIN_KEY_PC_15604\",\"SHEIN_KEY_PC_15996\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 107\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfODEyN19GQnwxNzY1OTMzNjUzMjcwfDg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-navigation\r\nx-gw-traceid: ff7feaea9d5b7ba2\r\nserver-timing: g;dur=2\r\nvia-shein-gateway: c-shein-pc!bff-navigation\r\nheader-cmdb-name: bff_navigation_eucentral_prod_cluster2\r\nheader-cmdb-name-origin: bff-navigation-eucentral-prod-cluster2\r\nheader-cmdb-sname: bff-navigation-eucentral-prod-cluster2\r\nheader-cmdb-app-name: bff_navigation\r\nheader-cmdb-app-name-origin: bff-navigation\r\nheader-cmdb-app-sname: bff-navigation\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":107,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"af1bafe438ed8a2a69b79163ff21034a","sha1":"c9987e9d71ba2df79ff16b85ad0966c565c062e3","sha256":"17aff531d4b331698e2b0a66c727b987d6213bc60f79f6b432987789fe207930","sha512":"134d1eb001bf372e1292dd7c1502569c25188127662e3c5eaab5e5878b014fc8bcc88bbf8ad30db16d202f5284ec7ee3a73e70e646eb186dc9ec18afde1dafbb","ssdeep":"","tlshash":"79b012cc241b698724524709f42e1541443d37c12931ca008d0c0d70096704a4a4c7ef","first_seen":"2024-12-20T04:08:11.368761Z","last_seen":"2026-06-01T22:35:15.036057Z","times_seen":886,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":70,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nds-from-terminal: pc\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUN8MTc2NTkzMzY1NjEyMXw3\r\nContent-Length: 1462\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1462,"data":"{\"activity_name\":\"expose_cart_entrance\",\"activity_param\":{\"status\":\"4\",\"num\":\"0\",\"available_point\":\"-\",\"actual_point\":\"-\"},\"device_type\":\"pc\",\"home_site\":\"shein\",\"sub_site\":\"eur\",\"language\":\"en\",\"system_language\":\"en-US\",\"money_type\":\"\",\"device_country\":\"\",\"app_versions\":\"\",\"network_type\":\"\",\"ip\":\"\",\"screen_pixel\":\"1280*1024\",\"screen_size\":\"\",\"device_class\":\"1\",\"device_brand\":\"\",\"device_name\":\"\",\"device_model\":\"\",\"os_type\":\"1\",\"os_name\":\"Windows\",\"os_versions\":\"10\",\"browser_name\":\"Firefox\",\"browser_versions\":\"134.0\",\"session_id\":\"bi_1765933653037_61177\",\"channel\":\"affiliate_af_b_33_121_0\",\"origin_otherid\":\"\",\"traffic_source\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"market\":\"\",\"start_time\":\"1765933653032\",\"end_time\":\"\",\"environment\":\"production\",\"device_id\":\"\",\"device_idfa\":\"\",\"device_idfv\":\"\",\"device_aaid\":\"\",\"referer\":\"https%3A%2F%2Feur.shein.com%2Fark%2F2812%3Fonelink%3D13%2F4s0r28uoh4d8%26requestId%3Dolw-5ag0n5ca69ld%26url_from%3Daffiliate_af_b_33_121_0%26affiliateID%3Daf_b_sub_13300%26click_id%3Dd0e56b0a85344d81ae746ea548d5e9a1%26cdn_rsite%3Dcf%26ref%3Dwww%26rep%3Ddir%26ret%3Deur\",\"sdk_version\":\"1.1.15\",\"login\":\"0\",\"member_id\":\"\",\"ugid\":\"\",\"page_param\":{\"ad_activity_name\":\"newuserprice\",\"scene_id\":\"m_app\",\"platfrom_nm\":\"swift\"},\"tab_page_id\":\"page_ad_landing1765933653032\",\"page_id\":\"6342\",\"page_name\":\"page_ad_landing\",\"log_id\":\"a13961b2-0bfb-4408-8161-e9a384d559b0\",\"seq\":\"2\",\"timestamp\":\"1765933656120\",\"local_time\":\"2025/12/17 01:07:36\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/70775.9493cdf2cb9c8c33.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:36.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/70775.9493cdf2cb9c8c33.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:37 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 566\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":832,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (781)","md5":"068fc3315d877139b5f89ca5a5bb0b3a","sha1":"f5a9bf54820ad20b69ebb9db210d801b1496397b","sha256":"2823d97a0f671eb943395cd713823ccebcca3c37ba7a2d27864ca9c7ca04d9bb","sha512":"ace4c9b4c9f3f0fbbcd796fcfd6c6343d25f41945294d6121a0d1fc1e1e3c320e94b975bd2549cf3b6a1d00c7e77a65dfb1246f5b4faab0d6e7a9e5a05bf10e4","ssdeep":"","tlshash":"c201129351d2393c3d7124e97ca26719387c8896f81dd4847d478dc80c33809d543d98","first_seen":"2025-12-09T15:42:57.688366Z","last_seen":"2025-12-24T03:17:54.205738Z","times_seen":40,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/abt/merge/get_abt_by_poskey?_ver=1.1.8\u0026_lang=en\u0026posKeys=CouponWindowsNew,CouponBagUITest","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:37.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /bff-api/abt/merge/get_abt_by_poskey?_ver=1.1.8\u0026_lang=en\u0026posKeys=CouponWindowsNew,CouponBagUITest HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nSmDeviceId: WHJMrwNw1k/E6FWWr45huH0SHkq/FHZP1RiBdRWJwnugpcKfvQ3M3byyyMOZe0v4ZceX7Tyqo6/mmqa0+4YaY/SFq8F8CjtuOdCW1tldyDzmQI99+chXEimu23C9OY/lrYp5HxsF710w6FU/fzhj65gCHPPxycwCneu8bpbMPuOQ3v/uKv7fr2biq+/JtOAQVL1Zk3jUkmm7NtAKvckCXn1o1sVkOqGcHswC/75UCs431H7aqDLDtYA==1487582755342\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: nTohXdDF-15sWgce8ZNP6YreVwqzw-mJq1Po\r\nx-oest: RTBEMzU0Q3wxNzY1OTMzNjU2OTg2fDBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nwebVersion: 13.9.4\r\nx-ad-flag: 8FkZa3NuCnoO+IBsqSDbVYTFm6zUmft9Vh7q2yhidy/tjTBrwINMUj9QAPXBTqi1Z9m3aGmbBKDl19FMxbV7y+55HcmFRosSIRKGPivl8+LqhNSOT7goHRSBc8hQvaioiQrAI0RJ5sm4uEg1OBb9Ig==\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nuber-trace-id: ff54b35085e5dec5:ff54b35085e5dec5:0:0\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933656992\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=SkhGCNzM4Njc3MDA2YTczYmM2NDY5ZDExNjA2MjM3NmEzNzY2MTIxYWUzNDJjNjJjMDRmMWNhYWZmZWRhZDI2N2YxYw%3D%3D\r\nx-cs-random: 03d0ed219071939e5c7a63f35f13847de83b7a9069f09ad698e12afd2ae0cbffb993fbd4202b4e66a438c6d58dd7675cba9aab814fd20a0ae637fca3f3be8f442f55bf216687e\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1815\r\ncontent-encoding: br\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUN8MTc2NTkzMzY1NzA0OHw3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: ff54b35085e5dec5\r\nserver-timing: g;dur=5\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster2\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6035,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"61abd12d5ce32c8f2b797f582f33ef0c","sha1":"5f72af487cd4efcf34d06869352e12ab583061df","sha256":"c93598c4e700fea0745c0ae275aad72e3147ae8c30e4b8b353f4d88e364a7450","sha512":"0aa8c6f0d3314444786f2547344cb4d2620dc74290a505a829650560ae919568da194fa2cfe339b7bf55b09a6c2c8c715a7eea50944f04364bf4fb2f0b27824f","ssdeep":"96:IfQ3vLiWS8cU+0wVEaECX7/9EILcX8EgYSKEw9eEYwuwmE10KBjv9EMMV3urEQkp:xiB8NlCLyzgYSVSai6Z5ThN3gmCFuKS","tlshash":"18c102e150ab6c7359d74ec051f9ad1358ed02a1d78c4c30f3c49c9c9bab7694a983af","first_seen":"2025-12-17T01:08:43.030289Z","last_seen":"2025-12-17T01:08:43.030289Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nds-from-terminal: pc\r\nx-oest: RTBEMzU0QzBfODEyN19GQnwxNzY1OTMzNjU4MTUxfDg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nContent-Length: 1427\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1427,"data":"{\"activity_name\":\"heart_active\",\"activity_param\":{\"heart_interval\":\"0\",\"heart_no\":\"1\"},\"device_type\":\"pc\",\"home_site\":\"shein\",\"sub_site\":\"eur\",\"language\":\"en\",\"system_language\":\"en-US\",\"money_type\":\"\",\"device_country\":\"\",\"app_versions\":\"\",\"network_type\":\"\",\"ip\":\"\",\"screen_pixel\":\"1280*1024\",\"screen_size\":\"\",\"device_class\":\"1\",\"device_brand\":\"\",\"device_name\":\"\",\"device_model\":\"\",\"os_type\":\"1\",\"os_name\":\"Windows\",\"os_versions\":\"10\",\"browser_name\":\"Firefox\",\"browser_versions\":\"134.0\",\"session_id\":\"bi_1765933653037_61177\",\"channel\":\"affiliate_af_b_33_121_0\",\"origin_otherid\":\"\",\"traffic_source\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"market\":\"\",\"start_time\":\"1765933653032\",\"end_time\":\"\",\"environment\":\"production\",\"device_id\":\"\",\"device_idfa\":\"\",\"device_idfv\":\"\",\"device_aaid\":\"\",\"referer\":\"https%3A%2F%2Feur.shein.com%2Fark%2F2812%3Fonelink%3D13%2F4s0r28uoh4d8%26requestId%3Dolw-5ag0n5ca69ld%26url_from%3Daffiliate_af_b_33_121_0%26affiliateID%3Daf_b_sub_13300%26click_id%3Dd0e56b0a85344d81ae746ea548d5e9a1%26cdn_rsite%3Dcf%26ref%3Dwww%26rep%3Ddir%26ret%3Deur\",\"sdk_version\":\"1.1.15\",\"login\":\"0\",\"member_id\":\"\",\"ugid\":\"\",\"page_param\":{\"ad_activity_name\":\"newuserprice\",\"scene_id\":\"m_app\",\"platfrom_nm\":\"swift\"},\"tab_page_id\":\"page_ad_landing1765933653032\",\"page_id\":\"6342\",\"page_name\":\"page_ad_landing\",\"log_id\":\"51b35af1-363f-44f4-b307-d28aafeb8189\",\"seq\":\"19\",\"timestamp\":\"1765933658150\",\"local_time\":\"2025/12/17 01:07:38\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/js/shein-bs-vendors-6129d59f.46b407a.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/js/shein-bs-vendors-6129d59f.46b407a.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 11 Nov 2025 08:22:27 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 53218\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":226233,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65289), with no line terminators","md5":"6cf789b2bc77a442d4e5af876640715f","sha1":"fca53599aceeac14130c1f88e92ac3a4c75d4e24","sha256":"0aa400ba2254f2648564489541590b2ba1f5b32169b052d4dd78b5a8cf345ab2","sha512":"1134c3570e71f83d5db1292b4fc1e89c465e9346e09643414d6f0cdf33d5fd6880016a18fba44a050ebc309fde36c8b901ba9097730e7a09ac64b8b86bd1e582","ssdeep":"1536:yvsbcYk9s3Xhj983U95DYROhxYe653OPop6c0rvJ+EaNMcuNxzGPw0u8p/aj8a:yvx598Rp83UvYROhxKK0HMb7zGDuiiwa","tlshash":"30242bcdf0c2716213b35a68d01b240aa22f7f59784d8c94f3b7d9512b6ed5eb62272c","first_seen":"2025-10-16T23:10:29.957228Z","last_seen":"2026-04-16T21:34:30.361025Z","times_seen":682,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/app-track/metric-info","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:34.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /app-track/metric-info HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nContent-Length: 1368\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1368,"data":"{\"data\":[{\"app_name\":\"shein\",\"timestamp\":\"1765933654289\",\"local_time\":\"12/17/2025, 1:07:34 AM\",\"session_id\":\"\",\"member_id\":\"\",\"sdk_version\":\"1.1.43\",\"network_type\":\"\",\"device_id\":\"\",\"device_level\":\"1\",\"device_type\":\"pc\",\"device_model\":\"\",\"device_brand\":\"\",\"browser_name\":\"\",\"browser_versions\":\"\",\"os_versions\":\"\",\"os_name\":\"\",\"language\":\"en\",\"sub_site\":\"eur\",\"money_type\":\"USD\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"referer\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"level\":\"INFO\",\"tag\":\"\",\"message\":\"monitorJsLoadTime\",\"params\":{\"name\":\"https://armor.ltwebstatic.com/she_dist/armor-libs/infp/infp.3.10.0.min.js\",\"entryType\":\"resource\",\"startTime\":\"1920\",\"duration\":\"83\",\"initiatorType\":\"script\",\"nextHopProtocol\":\"h2\",\"workerStart\":\"0\",\"redirectStart\":\"0\",\"redirectEnd\":\"0\",\"fetchStart\":\"1920\",\"domainLookupStart\":\"1920\",\"domainLookupEnd\":\"1920\",\"connectStart\":\"1920\",\"connectEnd\":\"1920\",\"secureConnectionStart\":\"1920\",\"requestStart\":\"1976\",\"responseStart\":\"1999\",\"responseEnd\":\"2003\",\"transferSize\":\"123039\",\"encodedBodySize\":\"122515\",\"decodedBodySize\":\"424742\",\"serverTiming\":\"[]\"},\"environment\":\"production\",\"value\":1,\"metric_name\":\"si_anti_spider_sdk_mjlt\",\"tags\":{\"type\":\"mjlt\",\"url\":\"https://armor.ltwebstatic.com/she_dist/armor-libs/infp/infp.3.10.0.min.js\",\"name\":\"infp.3.10.0.min.js\",\"duration\":\"83\"}}]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/ark/api/get_token?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /ark/api/get_token?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\ntimezone: GMT+0\r\nbrand: shein\r\nchannel: pc\r\nappcurrency: EUR\r\napplanguage: en\r\ntoken: MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\r\nsiteuid: eur\r\ncurrency: EUR\r\nlanguage: en\r\nx-oest: RTBEMzU0QzBfODEyN19GQnwxNzY1OTMzNjU2MDIxfDg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: \r\nx-request-by: bridgeX\r\nuber-trace-id: ffa098eb398876c1:ffa098eb398876c1:0:0\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933656023\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=iblYEM2IwYWNkNWVlZDk4YWUzNDc1ODlmMzZkMzBkYzA4ODI5MzUyNjU3OWViNmMzZWE5YWFiOGNhMjIyZjBhYjNkNA%3D%3D\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json; charset=utf-8\r\nx-dns-prefetch-control: on\r\nx-xss-protection: 1; mode=block\r\nx-download-options: noopen\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=7776000000; includeSubDomains\r\nx-frame-options: ALLOW-FROM https://www.messenger.com\r\nx-anti: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUN8MTc2NTkzMzY1NjA2OXw3\r\ncache-control: no-cache, max-age=0, no-store, must-revalidate\r\netag: W/\"21-4a3tXHng+aaCPzF8RTmDL2uuAjs\"\r\ncontent-encoding: gzip\r\nx-gw-traceid: ffa098eb398876c1\r\nserver-timing: g;dur=11\r\nvia-shein-gateway: c-swift-ssr-service\r\nheader-cmdb-sname: swift-ssr-service-eucentral-prod-eu\r\nheader-cmdb-app-name: swift_ssr_service\r\nheader-cmdb-app-name-origin: swift-ssr-service\r\nheader-cmdb-app-sname: swift-ssr-service\r\nheader-cmdb-name: swift_ssr_service_eucentral_prod_eucentral\r\nheader-cmdb-name-origin: swift-ssr-service-eucentral-prod-eucentral\r\ntiming-allow-origin: *\r\ncontent-length: 59\r\nvary: Accept-Encoding\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ce312b4d4ecf1f033d232f97a5faabbf","sha1":"e1aded5c79e0f9a6823f317c4539832f6bae023b","sha256":"0ad93eb23dcbff02c3ff7b7f594d60a6aca51b343209a70c2c4037cbb1409626","sha512":"ca3722dc03abf109af426dd02ba3288e615949755d2e249ad5407064395fa357abdef2a3a1c94fd5cb45e400b4670ad431388480ca6026ba57990611dd7107d7","ssdeep":"","tlshash":"0c80040015371400454341c1104d4540411470300d00450d4c475131c5d40fd1311430","first_seen":"2025-07-18T12:09:05.990784Z","last_seen":"2026-05-09T18:35:20.502594Z","times_seen":731,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/clientPerInfo","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:37.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /clientPerInfo HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token,ds-from-terminal,x-oest\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/clientPerInfo","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:47.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /clientPerInfo HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:47 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/js/SwiftImagePlugin.891ffd2.chunk.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/js/SwiftImagePlugin.891ffd2.chunk.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 31 Oct 2025 13:22:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 1273\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2657,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2499)","md5":"a96757e31fbe40e37de9c66df90243d4","sha1":"893d5cbae28fe0a3a8f5295ce7b8e87ebf8608f5","sha256":"e6563bb0bd112e51910ab9eb060e4b06d2e82ecb4f6dce0d22a2954b7e51b7c9","sha512":"c8a355441b856c8c69d1f581dffbef14e89a3aed2ef422670a07be4a9ce058817afeabd0108367e4fce50a71a3fe517d07448ffdb02df330c3363cabd8ba5ef8","ssdeep":"","tlshash":"da51c86ef681f89033b314e8816f2c19d37dbfc4450486a0f8cda8d18b79dae7523699","first_seen":"2025-11-01T03:09:47.643726Z","last_seen":"2026-03-23T01:37:21.100066Z","times_seen":604,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/js/963.2696e00.chunk.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/js/963.2696e00.chunk.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 31 Oct 2025 13:22:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 18978\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:33 GMT\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":69406,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65148), with no line terminators","md5":"205f46cbf2481b8b4edb438082c9b644","sha1":"7f1e9cd8d76b70847905b5bfa02d971013c6a248","sha256":"3fd5e80308e4258d3764e652bf80b6d77891df817539644af9ac673c4bce9538","sha512":"9f516a02cacb14f9e6935a71479f560dcc53d421a4a57654ff51729d5c6bc59d5f78ad88640d36db5e150e639a529bbed2d5f1fa9b56269cb3049d03992ea08b","ssdeep":"768:5dqdTa5Hf/uy5d/Ttbx4vLwRPhUTuu45kgS3FANo0h2LsrpnwjKwDXAZQ2j/:5dqdTyG4iTunoLsjl","tlshash":"81634bdcf281b82d1b6795ad802f2d5d61af3f4d516558d0f3e6c8302a6ce88b239739","first_seen":"2025-11-01T03:09:47.533984Z","last_seen":"2026-03-23T01:37:21.01719Z","times_seen":604,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/15457.2e9d8ad3e43d8cf3.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:36.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/15457.2e9d8ad3e43d8cf3.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Nov 2025 12:35:27 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 326\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":403,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (352)","md5":"6005eb330410fb2f42b7185a977ac171","sha1":"6d09ab2c82a33acc76001e48967d8c7c8f7db2d6","sha256":"afa85afb30db84804eede56e9856633608f5bd13f7a44511512852ca8953e033","sha512":"dc547ddba7c10e15496890955020d83bd840a983daa626b7581e7c3efed41af5826fb59641152e13c2548a24b14d9d8b93527d8d85afd893fc03a03c42ff24cf","ssdeep":"","tlshash":"f3e0f1a737d23d0e19d759cc2a8246d3083c08b3a83d8787ae115b400062f0da746c28","first_seen":"2025-11-12T15:12:31.817895Z","last_seen":"2025-12-24T03:17:54.105672Z","times_seen":112,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nds-from-terminal: pc\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZffDE3NjU5MzM2NTc5MzN8MkNBMzZFMzQ3NUM3\r\nContent-Length: 2024\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2024,"data":"{\"activity_name\":\"expose_navigation_menu\",\"activity_param\":{\"first_menu_content\":\"Shoes\",\"first_menu_hole\":\"11\",\"second_menu_content\":\"Shoes\",\"second_menu_hole\":\"11\",\"second_node_id\":\"110000038\",\"src_identifier\":\"fc=Shoes`sc=Shoes`tc=0`oc=0`ps=tab11navbar11`jc=itemPicking_017172966\",\"second_content_list\":\"/RecommendSelection/Shoes-sc-017172966.html?ici=eur_tab11navbar11\u0026src_module=topcat\u0026src_identifier=fc%3DShoes%60sc%3DShoes%60tc%3D0%60oc%3D0%60ps%3Dtab11navbar11%60jc%3DitemPicking_017172966\u0026adp=\u0026src_tab_page_id=page_ad_landing1765933653032\",\"is_slidebar\":false,\"third_menu_content\":\"\",\"third_menu_hole\":\"\",\"fourth_menu_content\":\"\",\"fourth_menu_hole\":\"\",\"src_module\":\"topcat\"},\"device_type\":\"pc\",\"home_site\":\"shein\",\"sub_site\":\"eur\",\"language\":\"en\",\"system_language\":\"en-US\",\"money_type\":\"\",\"device_country\":\"\",\"app_versions\":\"\",\"network_type\":\"\",\"ip\":\"\",\"screen_pixel\":\"1280*1024\",\"screen_size\":\"\",\"device_class\":\"1\",\"device_brand\":\"\",\"device_name\":\"\",\"device_model\":\"\",\"os_type\":\"1\",\"os_name\":\"Windows\",\"os_versions\":\"10\",\"browser_name\":\"Firefox\",\"browser_versions\":\"134.0\",\"session_id\":\"bi_1765933653037_61177\",\"channel\":\"affiliate_af_b_33_121_0\",\"origin_otherid\":\"\",\"traffic_source\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"market\":\"\",\"start_time\":\"1765933653032\",\"end_time\":\"\",\"environment\":\"production\",\"device_id\":\"\",\"device_idfa\":\"\",\"device_idfv\":\"\",\"device_aaid\":\"\",\"referer\":\"https%3A%2F%2Feur.shein.com%2Fark%2F2812%3Fonelink%3D13%2F4s0r28uoh4d8%26requestId%3Dolw-5ag0n5ca69ld%26url_from%3Daffiliate_af_b_33_121_0%26affiliateID%3Daf_b_sub_13300%26click_id%3Dd0e56b0a85344d81ae746ea548d5e9a1%26cdn_rsite%3Dcf%26ref%3Dwww%26rep%3Ddir%26ret%3Deur\",\"sdk_version\":\"1.1.15\",\"login\":\"0\",\"member_id\":\"\",\"ugid\":\"\",\"page_param\":{\"ad_activity_name\":\"newuserprice\",\"scene_id\":\"m_app\",\"platfrom_nm\":\"swift\"},\"tab_page_id\":\"page_ad_landing1765933653032\",\"page_id\":\"6342\",\"page_name\":\"page_ad_landing\",\"log_id\":\"120f9ed3-c698-4351-89bf-8516bb776538\",\"seq\":\"16\",\"timestamp\":\"1765933657927\",\"local_time\":\"2025/12/17 01:07:37\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/app-track/metric-info","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:34.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /app-track/metric-info HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/user-api/setting/get_sample_config?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /bff-api/user-api/setting/get_sample_config?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nSmDeviceId: \r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: HewaI0AR-isVikRSGpX30TnfiRycO7R9AxSI\r\nx-oest: RTBEMzU0QzBfODEyfDE3NjU5MzM2NTUxNzN8N19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nwebVersion: 13.9.4\r\nx-ad-flag: 8FkZa3NuCnoO+IBsqSDbVbjbZFDPBy/Ccg7HPaagWd6Z0k+h6+rK67aH0c1E5efGgWYq61YJe9rvWC5xPj7ZVVYoP3i9GVpBfVkWfa8EsrsGa2KgaixOSZmJfGKy6YI874yU0pb2l85B3RSMhSMlbQ==\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nuber-trace-id: ff4051e40e81665b:ff4051e40e81665b:0:0\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933655209\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=NwAixNmZkYWVhYjRmMzI2ZTM2OGY1MTFiMTc0ZTY2ODFkOWU5OTZiNjNjZTMxNDRlMjQ4YjQ2MmM1MDZiNGIyMzM4ZA%3D%3D\r\nx-cs-random: sdk error\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 373\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzB8MTc2NTkzMzY1NTM3MHxfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: ff4051e40e81665b\r\nserver-timing: g;dur=3\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster2\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":373,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"714fde9326c0b9650418f1388aeaa895","sha1":"d1555bc7e074defc8700327801ea221ea12605c2","sha256":"7c92696bea4a72539cfd09200c1b025df35f41c2af60d7cae6b5feb181546570","sha512":"557d32e0cf3cc9f71cf153ba8b527af4939e636dd8cbd3d0fecba464d9d52cfd3402a2fcdd56006fcbd211ca2df085f8189749863ddca313bc4eff4c9b2ce266","ssdeep":"","tlshash":"0ae01281f439eb0280eb0d70939a59c9784bf1d289d09b04d85de61b910d539122065d","first_seen":"2025-05-19T19:51:55.906002Z","last_seen":"2026-06-03T06:21:04.355173Z","times_seen":1008,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_pi/2025/04/08/dd/17440788233b72e5fa8003f51e58bbd4f9272f0ce4_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_pi/2025/04/08/dd/17440788233b72e5fa8003f51e58bbd4f9272f0ce4_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16093\r\ncf-ray: 9af286484b29569b-OSL\r\nlast-modified: Fri, 12 Dec 2025 12:35:43 GMT\r\netag: \"693c0c1f-3edd\"\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ncache-control: public, max-age=604800\r\nage: 337847\r\nedge-cache-tag: 2025121311\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16093,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"92e04346972da76102ed933b90585cf9","sha1":"bea99c3e2f18a16b14f48dbc19d5458f11e60daa","sha256":"16fc497ac838afecdb4b5b5bd727f02e6efc52ff5f86f025999922018392137b","sha512":"37338889f9679e29bc312ecea552d97fc9da9154cae56792c1d54821b9955702e948ba866987ae2ebdf5cd2ee6b2f715d52e4e8151ac328d6870dbfafabd4448","ssdeep":"384:gYNg7nqc/HEyfv6UVOzbWvHjfc+qhRbJKNAy6A:gYyrqmH9v9NTdqhXdA","tlshash":"7b72c0b6c774c27ad114d33c45d91350a3c3b6b9f3b7668b6a3c862e85eb1c0ad4e056","first_seen":"2025-12-16T16:48:13.57365Z","last_seen":"2025-12-26T22:01:53.29044Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/user-api/address/update_country?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:37.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /bff-api/user-api/address/update_country?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nSmDeviceId: WHJMrwNw1k/E6FWWr45huH0SHkq/FHZP1RiBdRWJwnugpcKfvQ3M3byyyMOZe0v4ZceX7Tyqo6/mmqa0+4YaY/SFq8F8CjtuOdCW1tldyDzmQI99+chXEimu23C9OY/lrYp5HxsF710w6FU/fzhj65gCHPPxycwCneu8bpbMPuOQ3v/uKv7fr2biq+/JtOAQVL1Zk3jUkmm7NtAKvckCXn1o1sVkOqGcHswC/75UCs431H7aqDLDtYA==1487582755342\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: nTohXdDF-15sWgce8ZNP6YreVwqzw-mJq1Po\r\nx-oest: RTBEMzV8MTc2NTkzMzY1Njk4N3w0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nwebVersion: 13.9.4\r\nx-ad-flag: 8FkZa3NuCnoO+IBsqSDbVYTFm6zUmft9Vh7q2yhidy/tjTBrwINMUj9QAPXBTqi1Z9m3aGmbBKDl19FMxbV7y+55HcmFRosSIRKGPivl8+LqhNSOT7goHRSBc8hQvaioiQrAI0RJ5sm4uEg1OBb9Ig==\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nuber-trace-id: ff74256d59ab82cf:ff74256d59ab82cf:0:0\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933656997\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=MK2wjNzQxNTBlMTk0YTc0MmM5ZDA3NWUwOWI0MDk0ODEzOTU2YjZmNDEzZjNmODdmMWU1ZmMwZTgxYWIwMWI0YTE0NQ%3D%3D\r\nx-cs-random: 03d0ed219071939e5c7a63f35f13847de83b7a9069f0916da36613eeb17546a27a883593e168229fe6e7bac60e1a5c851311edc1c9ebe479bc51f9cf871b2944b12ab7ad3fdb2\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 94\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfODEyN19GQnwxNzY1OTMzNjU3MDU4fDg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: ff74256d59ab82cf\r\nserver-timing: g;dur=2\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster2\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\nset-cookie: sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; expires=Thu, 18-Dec-2025 13:07:37 GMT; max-age=129600; path=/; HttpOnly; secure\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":94,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"2afa9fd8207612569c54d2305a2daf1b","sha1":"3473829afe4137ba5df8cfc97b7b4ee25d881e09","sha256":"93b59dd90c73ab01af123601ba2022fa3f69b94ff99dcccca8528c0d40d7c47f","sha512":"024dab5a51c8b2d3dc3b653fe6673c01936be45e97bb6c926f1860c726ed8dc43404cb4993787a4fb1eb897d2418f038acd6f6bff1ea4164c1f78a7c1512556c","ssdeep":"","tlshash":"34b0125d500b1acfe823c3406ccf24000d097111c10391224c881b2286619da034052d","first_seen":"2024-12-27T16:00:36.522134Z","last_seen":"2026-06-03T06:21:04.459249Z","times_seen":1648,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nds-from-terminal: pc\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBM3wxNzY1OTMzNjU3OTMzfDZFMzQ3NUM3\r\nContent-Length: 2104\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2104,"data":"{\"activity_name\":\"expose_navigation_menu\",\"activity_param\":{\"first_menu_content\":\"Beauty \u0026 Health\",\"first_menu_hole\":\"10\",\"second_menu_content\":\"Beauty \u0026 Health\",\"second_menu_hole\":\"10\",\"second_node_id\":\"110000044\",\"src_identifier\":\"fc=Beauty \u0026 Health`sc=Beauty \u0026 Health`tc=0`oc=0`ps=tab10navbar10`jc=itemPicking_017172970\",\"second_content_list\":\"/RecommendSelection/Beauty-Health-sc-017172970.html?ici=eur_tab10navbar10\u0026src_module=topcat\u0026src_identifier=fc%3DBeauty%20%26%20Health%60sc%3DBeauty%20%26%20Health%60tc%3D0%60oc%3D0%60ps%3Dtab10navbar10%60jc%3DitemPicking_017172970\u0026adp=\u0026src_tab_page_id=page_ad_landing1765933653032\",\"is_slidebar\":false,\"third_menu_content\":\"\",\"third_menu_hole\":\"\",\"fourth_menu_content\":\"\",\"fourth_menu_hole\":\"\",\"src_module\":\"topcat\"},\"device_type\":\"pc\",\"home_site\":\"shein\",\"sub_site\":\"eur\",\"language\":\"en\",\"system_language\":\"en-US\",\"money_type\":\"\",\"device_country\":\"\",\"app_versions\":\"\",\"network_type\":\"\",\"ip\":\"\",\"screen_pixel\":\"1280*1024\",\"screen_size\":\"\",\"device_class\":\"1\",\"device_brand\":\"\",\"device_name\":\"\",\"device_model\":\"\",\"os_type\":\"1\",\"os_name\":\"Windows\",\"os_versions\":\"10\",\"browser_name\":\"Firefox\",\"browser_versions\":\"134.0\",\"session_id\":\"bi_1765933653037_61177\",\"channel\":\"affiliate_af_b_33_121_0\",\"origin_otherid\":\"\",\"traffic_source\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"market\":\"\",\"start_time\":\"1765933653032\",\"end_time\":\"\",\"environment\":\"production\",\"device_id\":\"\",\"device_idfa\":\"\",\"device_idfv\":\"\",\"device_aaid\":\"\",\"referer\":\"https%3A%2F%2Feur.shein.com%2Fark%2F2812%3Fonelink%3D13%2F4s0r28uoh4d8%26requestId%3Dolw-5ag0n5ca69ld%26url_from%3Daffiliate_af_b_33_121_0%26affiliateID%3Daf_b_sub_13300%26click_id%3Dd0e56b0a85344d81ae746ea548d5e9a1%26cdn_rsite%3Dcf%26ref%3Dwww%26rep%3Ddir%26ret%3Deur\",\"sdk_version\":\"1.1.15\",\"login\":\"0\",\"member_id\":\"\",\"ugid\":\"\",\"page_param\":{\"ad_activity_name\":\"newuserprice\",\"scene_id\":\"m_app\",\"platfrom_nm\":\"swift\"},\"tab_page_id\":\"page_ad_landing1765933653032\",\"page_id\":\"6342\",\"page_name\":\"page_ad_landing\",\"log_id\":\"be60c201-2aed-45be-b8d3-c124cf9d0d63\",\"seq\":\"15\",\"timestamp\":\"1765933657925\",\"local_time\":\"2025/12/17 01:07:37\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/risk/verify/identity/validation/publish/sign/rule?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /risk/verify/identity/validation/publish/sign/rule?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nSmDeviceId: \r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: HewaI0AR-isVikRSGpX30TnfiRycO7R9AxSI\r\nContent-Type: application/json\r\nx-oest: RTBEMzU0QzBfOHwxNzY1OTMzNjU1OTM4fDEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nuber-trace-id: ff4e50aaccc204c7:ff4e50aaccc204c7:0:0\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933655941\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=FEHTiMDQzNjA4MzIwZjM4YTk1YTVjMTkzMGIwOTdlODEyYmZhNmJhYzFlNmQ1ZWRkZTI3ODY5NzU4Nzk4Njc4MjBkNA%3D%3D\r\nx-cs-random: 03d0d0cb27b0ee5687ff5ccdd608fd07305312bff3b48bc5837fab029a40476edd7f1982f37c2ddfdf9f2862a8f3a70c316c6c88daf462f61e84b905b56fd3a88c4077291b9be\r\nContent-Length: 15\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":15,"data":"{\"channel\":\"0\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 237\r\ncontent-security-policy: frame-ancestors *.shein.com https://www.shein.com.hk https://www.shein.com.vn https://www.shein.com.mx https://www.shein.co.uk https://www.shein.tw https://www.shein.se https://co.shein.com https://www.shein.com.co\r\nx-dns-prefetch-control: on\r\nx-xss-protection: 1; mode=block\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=7776000000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: no-cache, max-age=0, no-store, must-revalidate\r\nx-anti: RTBEMzU0QzBfODEyN19GQjh8MTc2NTkzMzY1NjA3NXw0XzdBQUZfMkNBMzZFMzQ3NUM3\r\netag: W/\"ed-ZQMR76mAmg3HTq8grlj+gk1gha4\"\r\nx-gw-traceid: ff4e50aaccc204c7\r\nserver-timing: g;dur=206\r\nvia-shein-gateway: c-shein-pc\r\nheader-cmdb-name: SheinPC_eucentral_prod_app02\r\nheader-cmdb-name-origin: SheinPC-eucentral-prod-app02\r\nheader-cmdb-sname: shein-pc-eucentral-prod-app02\r\nheader-cmdb-app-name: SheinPC\r\nheader-cmdb-app-name-origin: SheinPC\r\nheader-cmdb-app-sname: shein-pc\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":237,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2c2fe7f62b020b75c0f95613a5254e05","sha1":"650311efa9809a0dc74eaf20ae58fe824d6085ae","sha256":"69ba7ffcba20c6866f9f8d1a513518cc6742e7c0fd1935e06a63953e0d16035a","sha512":"091a3f518a8ce8bb1493d7ed99eae25da3aac9141156fa279c77d2a2556a774ac49dc595c8cedf6db4b5d52e783c1db77b447c468e9f6d2bc1a9c69ac72dc85d","ssdeep":"","tlshash":"ebd0970b088e4c33628a22500a0e6d109337e06509849b12928a658888a012e9623934","first_seen":"2025-12-17T01:08:43.03526Z","last_seen":"2025-12-17T01:08:43.03526Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zpnv-eur.shein.com/risk/verify/identity/validation/devices/v3/profile/web?callback=smCB_1765933656019\u0026organization=FPNyuLhAtVnAeldjikus\u0026smdata=W7N7Uu94bq%2BVmrg%2BpkkKvFXwq4vD58YUIUFF%2BJHoFn311Wf4x15vP4GtrTrn01EM4GqFcVE8m99jSixY7xJ%2BBtyzUapIuUlUXeZGp5dkTnh5tILmq%2FEbuvAE4njltD%2BHUrGDwcPdQ0hr%2FPe87XRE73D6Le3P68Z2gtkdygcvBv%2BElU19Ug9JDaYv6q%2BCo%2BTAw8DAeuK8vE5Ce84NLQmqQXDVneiESivfkW1zgJ%2FcztA0tUnVkKw2of0ir0VCcc2NsuUP4ObMx1IUANA2C%2FFC%2FoSUrHo6nDyEtUYtIHnIT10Pfx1qfjLxg1gXXL0L%2FStzB3tzQ7ChGrZGSIFTNKTby7%2FHSfP0VzUFyKuKaiUgS%2FK66UFKhjYgt4F10zjL%2BgbRBHek4CTC78hjEjQCs8%2FLLyhT09GRH8ZuChCYT2Kf0qxJEVtnWe72AnSWn4gmQvRn5GInIVXLORKcVhZlpo0c6HJcHPp5ej%2FW1pIQ%2FdYrfn8HozrdxmjOPoNVbh18aOXTi8gxuxawP%2B1E1ykIcslB1l3SSn%2Bovjkb6iOXR9JiKnxYGPST5TUC6giJJFxrzQrmM8ht741M%2Fs5oW4hJzVP6rJ%2BqOLitxolLHNILQPGOqmFcy8K0Sa0oUfnjRNbtL6QFbMzlBc%2FMMFkzFXeRRsu5gpoGpYYN9TxEql5EEv3gLj3angGGi16hciUdjuDYgd7BoWNDHuLWdTOY3EQeItiv2sTPyZJaYnTqPOsiKg3cbfy4FwFzHNKvpujqKVoiOiqjAEWP8u3JyKhVaYAQ5RmHR0mWk2OtlJukaSfWpEECmPGKXG57Jrw0FRkx3IltCQQyIXgMNU9inZZzHKLS21LWOWk1A0983q1p%2F29exvQf%2Beq0mO21mV1SuYy6lDikytepRefXvOYgb%2FdywpRc0q81OX2SehOPnpSXwjubaSgwPjUvJbqfNZ%2Fc2YJQPMh9cJDnJ%2Fz398%2FPgsrDguf8n9CGfSbi7LLsAPMTU6nVu4SOm7rO7F51D1SnZqnHsN%2B8Y7%2Bgvgtz10L8vi4hvM8ATkvBkY%2B1AedrinSKXzjGGmqyIh%2BuYeiL1KiiTQa77TD6B34nwS946neUU%2FPUVOo%2FO%2FPXvdlJltS00s9e3HI70d1omqIaCaC1atTxsZyImTO5vukJBEYbk0tmRr9WqOC%2BVKDvfVBaV0fgE35zmogJC1M9w8FzXmMGmBgW3cvyxt1akhXdJMdo%2FAepBRUe1ZirycK%2Bm%2BhD58jwpWfc%2F7PwXsRfZ1toOti%2FIfgD%2BtxrawFRZhdgU56Uv1%2FWczgJWcqKwvdCL7OXE1RWr8HDzxbwviSjoUTsSYVJW%2BqJm8LHfOjuH0lRT72%2Fv%2BSL%2BZtQP4hZtP%2Bfk%2BNIBY5XfYKt6hNqlAILnuIvoyR9mIzGgTGEZ6o2zQUDeNUgOtd0U3NNAh%2BMGOsJIztSFQbYWKtL5OopWiI6KqMDCiRh726n%2BJ8xeY3ZH69iaowOGwE0w10e8wBA6MTHsdQ%3D%3D1487577677129\u0026os=web\u0026version=2.0.0","fqdn":"zpnv-eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /risk/verify/identity/validation/devices/v3/profile/web?callback=smCB_1765933656019\u0026organization=FPNyuLhAtVnAeldjikus\u0026smdata=W7N7Uu94bq%2BVmrg%2BpkkKvFXwq4vD58YUIUFF%2BJHoFn311Wf4x15vP4GtrTrn01EM4GqFcVE8m99jSixY7xJ%2BBtyzUapIuUlUXeZGp5dkTnh5tILmq%2FEbuvAE4njltD%2BHUrGDwcPdQ0hr%2FPe87XRE73D6Le3P68Z2gtkdygcvBv%2BElU19Ug9JDaYv6q%2BCo%2BTAw8DAeuK8vE5Ce84NLQmqQXDVneiESivfkW1zgJ%2FcztA0tUnVkKw2of0ir0VCcc2NsuUP4ObMx1IUANA2C%2FFC%2FoSUrHo6nDyEtUYtIHnIT10Pfx1qfjLxg1gXXL0L%2FStzB3tzQ7ChGrZGSIFTNKTby7%2FHSfP0VzUFyKuKaiUgS%2FK66UFKhjYgt4F10zjL%2BgbRBHek4CTC78hjEjQCs8%2FLLyhT09GRH8ZuChCYT2Kf0qxJEVtnWe72AnSWn4gmQvRn5GInIVXLORKcVhZlpo0c6HJcHPp5ej%2FW1pIQ%2FdYrfn8HozrdxmjOPoNVbh18aOXTi8gxuxawP%2B1E1ykIcslB1l3SSn%2Bovjkb6iOXR9JiKnxYGPST5TUC6giJJFxrzQrmM8ht741M%2Fs5oW4hJzVP6rJ%2BqOLitxolLHNILQPGOqmFcy8K0Sa0oUfnjRNbtL6QFbMzlBc%2FMMFkzFXeRRsu5gpoGpYYN9TxEql5EEv3gLj3angGGi16hciUdjuDYgd7BoWNDHuLWdTOY3EQeItiv2sTPyZJaYnTqPOsiKg3cbfy4FwFzHNKvpujqKVoiOiqjAEWP8u3JyKhVaYAQ5RmHR0mWk2OtlJukaSfWpEECmPGKXG57Jrw0FRkx3IltCQQyIXgMNU9inZZzHKLS21LWOWk1A0983q1p%2F29exvQf%2Beq0mO21mV1SuYy6lDikytepRefXvOYgb%2FdywpRc0q81OX2SehOPnpSXwjubaSgwPjUvJbqfNZ%2Fc2YJQPMh9cJDnJ%2Fz398%2FPgsrDguf8n9CGfSbi7LLsAPMTU6nVu4SOm7rO7F51D1SnZqnHsN%2B8Y7%2Bgvgtz10L8vi4hvM8ATkvBkY%2B1AedrinSKXzjGGmqyIh%2BuYeiL1KiiTQa77TD6B34nwS946neUU%2FPUVOo%2FO%2FPXvdlJltS00s9e3HI70d1omqIaCaC1atTxsZyImTO5vukJBEYbk0tmRr9WqOC%2BVKDvfVBaV0fgE35zmogJC1M9w8FzXmMGmBgW3cvyxt1akhXdJMdo%2FAepBRUe1ZirycK%2Bm%2BhD58jwpWfc%2F7PwXsRfZ1toOti%2FIfgD%2BtxrawFRZhdgU56Uv1%2FWczgJWcqKwvdCL7OXE1RWr8HDzxbwviSjoUTsSYVJW%2BqJm8LHfOjuH0lRT72%2Fv%2BSL%2BZtQP4hZtP%2Bfk%2BNIBY5XfYKt6hNqlAILnuIvoyR9mIzGgTGEZ6o2zQUDeNUgOtd0U3NNAh%2BMGOsJIztSFQbYWKtL5OopWiI6KqMDCiRh726n%2BJ8xeY3ZH69iaowOGwE0w10e8wBA6MTHsdQ%3D%3D1487577677129\u0026os=web\u0026version=2.0.0 HTTP/1.1\r\nHost: zpnv-eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-security-policy: frame-ancestors *.shein.com https://www.shein.com.hk https://www.shein.com.vn https://www.shein.com.mx https://www.shein.co.uk https://www.shein.tw https://www.shein.se https://co.shein.com https://www.shein.com.co\r\nx-dns-prefetch-control: on\r\nx-xss-protection: 1; mode=block\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=7776000000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: no-cache, max-age=0, no-store, must-revalidate\r\nx-anti: ODZGQ0ZDN0NfRTkyM19ENUU0XzVCODZfRjZGRXwxNzY1OTMzNjU2MDc4fEU3NjYzQUJG\r\ncontent-encoding: gzip\r\nx-gw-traceid: b15c337babebb00b\r\nserver-timing: g;dur=42\r\nvia-shein-gateway: c-shein-pc\r\nheader-cmdb-sname: shein-pc-eucentral-prod-master\r\nheader-cmdb-app-name: SheinPC\r\nheader-cmdb-app-name-origin: SheinPC\r\nheader-cmdb-app-sname: shein-pc\r\nheader-cmdb-name: SheinPC_eucentral_prod_master\r\nheader-cmdb-name-origin: SheinPC-eucentral-prod-master\r\ntiming-allow-origin: *\r\ncontent-length: 181\r\nvary: Accept-Encoding\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nset-cookie: language=eur; expires=Wed, 24 Dec 2025 01:07:36 GMT; max-age=604800; path=/; domain=shein.com\nAT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjU2LCJyIjoiMEIzNHl6IiwidCI6MX0.02c0bc460bc12a0b; expires=Fri, 16 Jan 2026 01:07:36 GMT; max-age=2592000; path=/; HttpOnly; secure\narmorUuid=2025121709073683f7c1af2d4ae1dd8bae6267a204bb2000ee1aab2415c9a800; expires=Thu, 21-Jan-2027 01:07:36 GMT; max-age=34560000; path=/; domain=shein.com\nsessionID_shein=s%3ATMms97_ePwpNs_fX_OcJkVkThlaCRA1x.rIpqQnCufXayP3BTGuUDFoKpsodrAM5f%2B8rVdAmbbl0; expires=Thu, 18-Dec-2025 13:07:36 GMT; max-age=129600; path=/; HttpOnly; secure\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":196,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"93bdb73280e236608d28753278ccce90","sha1":"e90871693ecef9cb7df863a478ce3bf72965a2de","sha256":"510a3d6b2e1cc4d57932af0abc844e67b36d7c74adb5243664206da311b2e5ed","sha512":"0c71c416c85bead4ca7771861c39fe64b660caf3542e3557bd266de69240dadc1f03592e2bcf268aa2b974458680baea1e3399145d40fa257734d0334b705809","ssdeep":"","tlshash":"72d022b29000808af9308374bf0e22b5a20b62b2ee04006358064a5406db369269e062","first_seen":"2025-12-17T01:08:43.036105Z","last_seen":"2025-12-17T01:08:43.036105Z","times_seen":1,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token,ds-from-terminal,x-oest\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/system/configs/page_multi_language_mapping?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /bff-api/system/configs/page_multi_language_mapping?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\nContent-Type: application/json\r\ntimezone: GMT+0\r\nbrand: shein\r\nchannel: pc\r\nappcurrency: EUR\r\napplanguage: en\r\ntoken: MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\r\nsiteuid: eur\r\ncurrency: EUR\r\nlanguage: en\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzR8MTc2NTkzMzY1MzIwM3w3NUM3\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: \r\nx-request-by: bridgeX\r\nuber-trace-id: ff5f55d57e064be3:ff5f55d57e064be3:0:0\r\nContent-Length: 26\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":26,"data":"{\"pages\":[\"userDropdown\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 666\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBffDE3NjU5MzM2NTMzMjB8ODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-navigation\r\nx-gw-traceid: ff5f55d57e064be3\r\nserver-timing: g;dur=2\r\nvia-shein-gateway: c-shein-pc!bff-navigation\r\nheader-cmdb-name: bff_navigation_eucentral_prod_cluster4\r\nheader-cmdb-name-origin: bff-navigation-eucentral-prod-cluster4\r\nheader-cmdb-sname: bff-navigation-eucentral-prod-cluster4\r\nheader-cmdb-app-name: bff_navigation\r\nheader-cmdb-app-name-origin: bff-navigation\r\nheader-cmdb-app-sname: bff-navigation\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":666,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0c1e461108415a8f7626ce24f848a521","sha1":"19989efc6851a5a264eefe03d58e2d09c78a2c2e","sha256":"1cdb685aff9a0d38813978caaaf959e587a56b18b00e98aed092a8de37f17437","sha512":"2bc910c0afbcd736f4f9c3689ceba92f6a55092adafb8b2e77a3f1bb3de887b83b072e79847c07a054ead5c0f79b4384c6edf31ca06140396265e2763c41a513","ssdeep":"","tlshash":"110146cd316bbb2f09c48a8639779a446db973a37c744114e45e0c351d3a9066fc735d","first_seen":"2025-06-08T05:40:45.270054Z","last_seen":"2026-04-26T22:38:02.313003Z","times_seen":860,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/abt/merge/get_abt_by_poskey?_ver=1.1.8\u0026_lang=en\u0026posKeys=Cartshowcoupon,orderCouponNewUser,CartCountdownDisplay","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /bff-api/abt/merge/get_abt_by_poskey?_ver=1.1.8\u0026_lang=en\u0026posKeys=Cartshowcoupon,orderCouponNewUser,CartCountdownDisplay HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\ntimezone: GMT+0\r\nbrand: shein\r\nchannel: pc\r\nappcurrency: EUR\r\napplanguage: en\r\ntoken: MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\r\nsiteuid: eur\r\ncurrency: EUR\r\nlanguage: en\r\nx-oest: RTB8MTc2NTkzMzY1MzIwM3xEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: \r\nx-request-by: bridgeX\r\nuber-trace-id: ffa2218feadf0d82:ffa2218feadf0d82:0:0\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 612\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfOHwxNzY1OTMzNjUzMzE3fDEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: ffa2218feadf0d82\r\nserver-timing: g;dur=4\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster3\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster3\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster3\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":612,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"254dcf29b18c80204a845964b72017e8","sha1":"1c23076837e07a9b329ae97b242be1d08a28e9e4","sha256":"52532d3c23dfe23d17371fc5c3bd67ae99b778235b09e48edd69c329acb4ae41","sha512":"64d962ef239bd78c7897dfdde64d464e34dfc993979d0a0657ac52cf025fb9fea83743e711518e6743a6ab3780c634b97c531c37de29ea3a0d64d9926859071f","ssdeep":"","tlshash":"8ff04c01436d58fb98464175019dbf5562af1426ecc44f6d248ade57e7fd0a86a200dd","first_seen":"2025-12-17T01:08:43.03758Z","last_seen":"2025-12-17T01:08:43.03758Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/j/pi/2025/04/23/2a/17453738063f9ccbb8ebbf1e08ad8e2b185a2d420d_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/j/pi/2025/04/23/2a/17453738063f9ccbb8ebbf1e08ad8e2b185a2d420d_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37137\r\ncf-ray: 9af286296d6d569b-OSL\r\nlast-modified: Wed, 10 Dec 2025 23:52:41 GMT\r\netag: \"693a07c9-9111\"\r\nexpires: Wed, 24 Dec 2025 01:07:31 GMT\r\ncache-control: public, max-age=604800\r\nage: 522890\r\nedge-cache-tag: 2025121107\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37137,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"c5f8bb09ab6af7a042c7bf926a646559","sha1":"be0f192a00b46a180800aa53ea3bcf11582df503","sha256":"c2cae0768c8d590bfc9d82dc11a8ceafaa6dc5e4a014258dbfa9da8ff76fc2da","sha512":"a4ddf0503f51269ad07b8e6f5144edeaf4a58da263a77eb7855c6437b2e8ca9ed9e04903dc638cbdd7fa48e1cb0073b7f55da0811957a190c0face80f37a48cb","ssdeep":"768:gYyKGuyWEN6upqznf4Np5kNHjDT5eqtgGygXci:gmGUENonf7jDT0QgGyCci","tlshash":"14f2e171ebaaa4cedb33e9b6278027349684a731bf716323454164789f6421c2f1e31e","first_seen":"2025-12-16T16:48:13.636978Z","last_seen":"2025-12-17T01:08:43.038378Z","times_seen":3,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/game_dist/public/client/js/lottie.1.3.3.min.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /game_dist/public/client/js/lottie.1.3.3.min.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Oct 2025 07:39:52 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 80776\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:31 GMT\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":347309,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1d4cc50e8576fa5c61db16066b3e3edb","sha1":"a1fdca294ff7726b236e2263c8b824efe7db96ac","sha256":"5af67089eb1e6a022850c8c799354c2ca8d16cdf762d4f2c5998d2eb829b52fd","sha512":"209e948fcc6a22bc6f80e00cadc19cf52bdddf56f458f98c0d08bb18099f582946a70430e1bfe0a2b4d4670e31c4be18923ef5c1a27cb85c8e9c76734e3d79a1","ssdeep":"6144:OOjfNgyvPSIoPaSufqdA80TKgACeVSfKt9:OOj+KCVAE","tlshash":"357439597254343805c540ad902f0a4bf732692e645ac45cb76cf8efa8bce8e317eb79","first_seen":"2025-07-18T12:09:05.960898Z","last_seen":"2026-06-01T22:35:14.810067Z","times_seen":876,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":57,"dns":54,"connect":1,"send":0,"wait":2,"receive":3,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"armor.ltwebstatic.com/she_dist/armor-libs/antiin/antiin.1.9.1.min.js","fqdn":"armor.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/armor-libs/antiin/antiin.1.9.1.min.js HTTP/1.1\r\nHost: armor.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 13 Nov 2025 09:27:27 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 39883\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":135034,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8206485312e901fa0de388595d182fae","sha1":"bfb5128cb43547524281dea3b4e32c38a2125096","sha256":"e2e6f8c888067aee778c93b50611ead91ac19582c18fdcfd8978aa9a0f0c83fd","sha512":"8f03f188896d79d4ab62d818e00cb5402795d763894bdcbeb40efa9bae3cc0fe582388bdd89695d5e89f771fba87b1214afafcd19d96fdf8388cbbc015788781","ssdeep":"3072:YzF4jAB2KVRo4/u17utUgaMA0MbeE8uK21weUi0kaIX5TH3pPNI7V:MwgRsYUW","tlshash":"53d375de7ec57160039750f8097f04a6d7bab958a44ed240c927c1c3b8f9b5aad27e38","first_seen":"2025-03-17T22:12:11.812004Z","last_seen":"2026-06-03T06:21:04.377799Z","times_seen":1644,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":2,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/iframe_login","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /iframe_login HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: text/html; charset=utf-8\r\ncontent-security-policy: frame-ancestors *.shein.com https://www.shein.com.hk https://www.shein.com.vn https://www.shein.com.mx https://www.shein.co.uk https://www.shein.tw https://www.shein.se https://co.shein.com https://www.shein.com.co\r\nx-dns-prefetch-control: on\r\nx-xss-protection: 1; mode=block\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=7776000000; includeSubDomains\r\ncache-control: no-cache, max-age=0, no-store, must-revalidate\r\nx-anti: fDE3NjU5MzM2NTI4NTN8RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nx-ad-flag-update: 8FkZa3NuCnoO+IBsqSDbVbjbZFDPBy/Ccg7HPaagWd6Z0k+h6+rK67aH0c1E5efGgWYq61YJe9rvWC5xPj7ZVVYoP3i9GVpBfVkWfa8EsrsGa2KgaixOSZmJfGKy6YI874yU0pb2l85B3RSMhSMlbQ==\r\netag: W/\"3c1a4-vVEjUaCeFgrW9WruxiBt1GYqPJY\"\r\ncontent-encoding: gzip\r\nx-gw-traceid: b5ad1033a9a001f5\r\nserver-timing: g;dur=27\r\nvia-shein-gateway: c-shein-pc\r\nheader-cmdb-sname: shein-pc-eucentral-prod-app02\r\nheader-cmdb-app-name: SheinPC\r\nheader-cmdb-app-name-origin: SheinPC\r\nheader-cmdb-app-sname: shein-pc\r\nheader-cmdb-name: SheinPC_eucentral_prod_app02\r\nheader-cmdb-name-origin: SheinPC-eucentral-prod-app02\r\nvary: Accept-Encoding\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\nset-cookie: sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; expires=Thu, 18-Dec-2025 13:07:32 GMT; max-age=129600; path=/; HttpOnly; secure\nsessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; expires=Thu, 18-Dec-2025 13:07:32 GMT; max-age=129600; path=/; HttpOnly; secure\nsessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; expires=Thu, 18 Dec 2025 13:07:32 GMT; path=/; HttpOnly; secure\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Lodash","description":"Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm.","website":"https://www.lodash.com","common_platform_enumeration":"cpe:2.3:a:lodash:lodash:*:*:*:*:*:*:*:*","icon":"Lodash.svg","categories":["JavaScript libraries"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":246180,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22552), with CRLF, LF line terminators","md5":"cf3efbe6293f324ecf788afd2649cdcf","sha1":"609c8fb6d758a364331922a2456aa7d8ff3fc328","sha256":"ebf853d6187cad8208a295c482173c04450c8ba1c4218bfd60e11b3b40685304","sha512":"b74d64e59d58e3a3787202e4a7153423e2576f9459279e06a787b1cb8d3a393e2f73658b9e4f3d73f73c0f5bae896c4f0cd25fd7cc0c5cb2689f5f669407d095","ssdeep":"1536:jfbhfWkWP8oLS2ksLXBeJrizPn92zZuTFzNzyMopDpDZV8PirU9QDwUuzNcYZULn:jQZ7BaUWpDarrZ619+SfdJq60onvT","tlshash":"df344d4d6439b83b0ab721a9b46b3807f8a46217d950c594f3adced00fdcd4f4662eb9","first_seen":"2025-12-17T01:08:43.040409Z","last_seen":"2025-12-17T01:08:43.040409Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/lib-lodash-9e773d9a8f283070.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/lib-lodash-9e773d9a8f283070.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:39 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 8937\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26337,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26275)","md5":"5f50e34fb73dd4e88f08e9759292f95e","sha1":"a439acae6e983b95ea9220838b918f59da8ca795","sha256":"9c22fc486c0a1936c5be9eaaae67e9b6bb1fa47a2a059b9479ba6ba6d90dc0fe","sha512":"d4681a06a86920cf6c397fd20fc52a407370c58ff07a1def4ec31cc3596b5590078108284f70772221b64790360f6b2afbe7b9b5fcf2c2a38872f3ff6d5cbefb","ssdeep":"768:ow8EdFuALoVNlQlWb3uWUITh1J7olbQ1kD:oedE9lQlIlH7olcCD","tlshash":"11c251c6f992b4d243f6e491615f488bf27b1945ac0dfb94c352e9f0b82d489a023f6d","first_seen":"2025-12-09T15:42:57.613655Z","last_seen":"2025-12-31T02:29:19.062053Z","times_seen":96,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":122,"dns":46,"connect":1,"send":0,"wait":14,"receive":1,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token,ds-from-terminal,x-oest\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token,ds-from-terminal,x-oest\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_ccc/2024/12/26/44/17352174561e73b55cba650619056fd8f849f685d4.png","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_ccc/2024/12/26/44/17352174561e73b55cba650619056fd8f849f685d4.png HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 20519\r\ncf-ray: 9af2863379d5569b-OSL\r\nlast-modified: Tue, 28 Oct 2025 12:38:23 GMT\r\netag: \"6900b93f-5027\"\r\nexpires: Thu, 25 Dec 2025 01:07:33 GMT\r\ncache-control: public, max-age=691200\r\nedge-cache-tag: 2025102921\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 1056261\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20519,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 813 x 120, 8-bit colormap, non-interlaced","md5":"239b9262b6f00409ae2cfa4b1a5d6466","sha1":"8e72580be94f040f5b5fe02269e5fee5cb75e8f6","sha256":"0477593c75efe0bd81872d663aa5c33abdd8be5f0ee32d739ba96c94a5a15d08","sha512":"97c0eb8e11d4d0409e29209cedeefa92ae6bd788b3a3e61717909b09b4c529479ab95f16dd5b69c818d75017832549c53a3423f1571c6ab8e7479cdbe4dc817b","ssdeep":"384:7T2p+Lxo5poZCzEwItzXwxPWlJEghZS09fjK48Q3ZjhozC5/emYAP:f5xozUCz+tzXwBWjEn09fjxP3Zj9/5h","tlshash":"7f92d1826bb7ec3b624456b756368286309545de3837b1a4e6a3f4713ff12743c30a29","first_seen":"2025-07-31T13:40:14.485929Z","last_seen":"2026-06-01T22:35:14.770176Z","times_seen":798,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/common-3653b6f914e9de4a.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/common-3653b6f914e9de4a.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:39 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 4718\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11312,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11256)","md5":"c516a5b70faa9f0ecd6a714cf7a36262","sha1":"c782b10376e9ecda2c95de6fdb5d1ebb3868675b","sha256":"53c7f236d64259ad8aa8d9de15ed4e3297f2ab87a1f45e3a14af464ad44906ee","sha512":"2ca34c98b51152e394db5c3a334c3d9262313ac453622762fd16f3d207d482f759d1479744e5a4acf0f4e6f336b882ec8fff8dce01c3fd512a9940c08b216746","ssdeep":"192:QCXzAlFAgv7O7ThXYvBwyOKGOK4LmjroWmTRz+tMVHvTEuSmL/unRLvJpNLNLC8K:QCXclFAl8BwyprmP3mTRzO0HvTEuSmDv","tlshash":"cd32ea9372d6f48527b15cbac83a10a1d23d670d3a889550f369ade1385b68f7332a39","first_seen":"2025-12-09T15:42:57.703149Z","last_seen":"2025-12-17T05:54:39.197297Z","times_seen":17,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/9907.620afe12d1b44be9.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/9907.620afe12d1b44be9.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:37 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 11572\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:35 GMT\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31330,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31228)","md5":"a3050f27f7a913eec397686301a03a54","sha1":"803b8c5fccc31269d30e73df40a9735674567545","sha256":"45f50c0df46e2af0bdb2a9112912c5039050e4b71b81734afadb9c8f538f001d","sha512":"184fa0481a748668547a3e385bfe96cc3b1e5c3bbe8fd4f092a4a1efab56581a6bc3addf47c2c2ed0999e36ad78684cdd50db8c9b9fcdeeb7669d22d4af89d85","ssdeep":"768:6TrXfvUQKwPvWN88WLrUSqlnvbFwrgNvKq7V14Vob76D1QzTf3szgZwsoNj5IhMI:IlKwPbfUSqlnvbFv8LVoa2zghI","tlshash":"3de25cb4b26650bf42fe55c0b4fa6801dce87719e0848d58e6decd62121df877133aae","first_seen":"2025-12-09T15:42:57.646826Z","last_seen":"2025-12-17T05:54:39.292909Z","times_seen":17,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/api/common/ugidInit?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /api/common/ugidInit?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nSmDeviceId: \r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: HewaI0AR-isVikRSGpX30TnfiRycO7R9AxSI\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBfDE3NjU5MzM2NTUxNjZ8MzZFMzQ3NUM3\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nuber-trace-id: fff34fbc715c7875:fff34fbc715c7875:0:0\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933655183\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=473wHYjE3ZGYyMTNmMmJhM2VmZmYxYjI4ZjJiZTc0MzBmNzRkMGE5YzQ2NTdmNjc2ZTgwNWFjOGVmMGI1ZTE3ZDdkNw%3D%3D\r\nx-cs-random: sdk error\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 12\r\ncontent-security-policy: frame-ancestors *.shein.com https://www.shein.com.hk https://www.shein.com.vn https://www.shein.com.mx https://www.shein.co.uk https://www.shein.tw https://www.shein.se https://co.shein.com https://www.shein.com.co\r\nx-dns-prefetch-control: on\r\nx-xss-protection: 1; mode=block\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=7776000000; includeSubDomains\r\ncache-control: no-cache, max-age=0, no-store, must-revalidate\r\nx-anti: RTBEMzU0QzBfODEyN19GQjg0X3wxNzY1OTMzNjU1Njk0fDdBQUZfMkNBMzZFMzQ3NUM3\r\nx-ad-flag-update: 8FkZa3NuCnoO+IBsqSDbVYTFm6zUmft9Vh7q2yhidy/tjTBrwINMUj9QAPXBTqi1Z9m3aGmbBKDl19FMxbV7y+55HcmFRosSIRKGPivl8+LqhNSOT7goHRSBc8hQvaioiQrAI0RJ5sm4uEg1OBb9Ig==\r\netag: W/\"c-E5igGABWt3k1cyRQOZHQcVZQlPI\"\r\nx-gw-traceid: fff34fbc715c7875\r\nserver-timing: g;dur=335\r\nvia-shein-gateway: c-shein-pc\r\nheader-cmdb-name: SheinPC_eucentral_prod_app02\r\nheader-cmdb-name-origin: SheinPC-eucentral-prod-app02\r\nheader-cmdb-sname: shein-pc-eucentral-prod-app02\r\nheader-cmdb-app-name: SheinPC\r\nheader-cmdb-app-name-origin: SheinPC\r\nheader-cmdb-app-sname: shein-pc\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fec0d8286df71d7244e9b624c1a56e3a","sha1":"1398a0180056b779357324503991d071565094f2","sha256":"f2737f5c8e664362e8792eae565ec6e0937113710e96769d6888a542502e967e","sha512":"b5a3014144e4f4cda5b2cdafc9386547c03ee89f36dceba1d2a773fd461ed4998285c07290285a6372a181229e8e49ce74a8afd7479edf0d2a509fbaf1bae23f","ssdeep":"","tlshash":"74600000000f3c0000030000c0cc0000003c000000c003030c0c033000000000000030","first_seen":"2023-04-19T12:02:15Z","last_seen":"2026-06-03T06:21:04.471762Z","times_seen":1612,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/j/pi/2025/06/13/89/1749817211a97bc15867ceb8e4c2e1426f76947ac8_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/j/pi/2025/06/13/89/1749817211a97bc15867ceb8e4c2e1426f76947ac8_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 45012\r\ncf-ray: 9af286487b3e569b-OSL\r\nlast-modified: Tue, 18 Nov 2025 18:55:56 GMT\r\netag: \"691cc13c-afd4\"\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ncache-control: public, max-age=604800\r\nedge-cache-tag: 2025112103\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 311591\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45012,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"9695d7a880957333b7ac5545659dbe2e","sha1":"385a2d0a1048bcf20f8256e4ec4e632e5d7fa26c","sha256":"5b02e0f53af909f809ce6015ea65a274022dc071d2aaa4f6b78a219351e69343","sha512":"a497c5e5726da95978208da5e43fd1375a3e78bcbfb6edcf44d9e04e703d397532767c7e62aa35f2081875511f8b9331d97eb04ce2826e2b73f836c49e4c8164","ssdeep":"768:gYytsEQU5LYeONtjtH5Xp0NtdVzW+uqYCxi+pqPXqiZJCxs7QPGVeLGVURrlfQJ9:g3hYeOfNzgVzP6MhqvqF6UP1jr6J+Q","tlshash":"bb13f1ca52a06f0ce62d5d303cf167f6628b12ae361e6c8d7193f83472a5548a63e0c9","first_seen":"2025-12-16T16:48:13.557321Z","last_seen":"2025-12-17T01:08:43.044111Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/39020.ba20061d8f8da0a2.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:36.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/39020.ba20061d8f8da0a2.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 24 Nov 2025 08:59:47 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 10607\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33741,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32730)","md5":"bd97cee2d1db14616ce1b356ae78e054","sha1":"34ca7a41165810d26824ee32c4ff4355fcacaa3f","sha256":"1f5f31b431a15f8fee8eee854c444b604d73e1dc46e88caf36ab9ae6926e3b7f","sha512":"e528e174b497fe98cef9876eeaeb283ea14c700bdb107ac75014f73c0920b71034c2834e78eabca79f9796bcedd2c84e9f26371bce58736aa8845e2f0db78a8f","ssdeep":"768:Ryz8IdWk00JHgtru9ZUisH3QQ2ZZw/VYi+rCe5kEZdO+qION5qQoo+fSPtOaDL7N:IUBOCAM+qnN5qDe","tlshash":"b6e2e892a191203756b2819a60ad0b03b211170d744e9c8fbb7c7ded2e9f84671f9b7f","first_seen":"2025-10-15T14:20:24.919745Z","last_seen":"2026-01-20T19:05:52.668109Z","times_seen":425,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token,ds-from-terminal,x-oest\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"best-r3v3nue.com/favicon.ico","fqdn":"best-r3v3nue.com","domain":"best-r3v3nue.com","tld":"com"},"ip":{"addr":"172.67.153.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://best-r3v3nue.com/?url=https://trk.offerroads.com/2JRNK2B/8CZ1J6L/?sub1=PNpWKrG8KmbnB5kqsxUeup\u0026source_id=3596_10281132\u0026sub2=PropellerAds1%20-%20noEnc\u0026sub3=3596","date":"2025-12-17T01:07:29.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"best-r3v3nue.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 15:46:07 GMT","end":"Sun, 15 Mar 2026 16:44:39 GMT"},"fingerprint":{"sha1":"A5:21:78:B2:D6:45:EC:3A:06:0B:A5:70:8B:DC:F8:E5:2C:A7:00:A8","sha256":"28:F2:9F:A0:E9:3C:CC:F3:48:FE:06:32:2B:70:EB:AF:FB:63:2C:D5:50:BA:25:5A:07:C0:69:0A:A8:3E:0D:10"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: best-r3v3nue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trk.offerroads.com/2JRNK2B/8CZ1J6L/?sub1=PNpWKrG8KmbnB5kqsxUeup","fqdn":"trk.offerroads.com","domain":"offerroads.com","tld":"com"},"ip":{"addr":"54.196.173.211","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-17T01:07:29.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trk.offerroads.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 07:57:45 GMT","end":"Thu, 12 Mar 2026 07:57:44 GMT"},"fingerprint":{"sha1":"5C:83:C2:50:DE:C2:47:E9:34:EA:00:E6:9B:7B:65:39:32:5B:C8:C3","sha256":"6C:1C:AD:69:E8:F6:3A:E0:0F:26:4A:AE:56:F3:5D:8C:DB:47:7E:EA:E8:7C:16:20:43:02:DF:02:BA:63:1A:4A"}}},"request":{"raw":"GET /2JRNK2B/8CZ1J6L/?sub1=PNpWKrG8KmbnB5kqsxUeup HTTP/1.1\r\nHost: trk.offerroads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nserver: nginx\r\ndate: Wed, 17 Dec 2025 01:07:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 174\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model\r\nlocation: https://onelink.shein.com/13/4s0r28uoh4d8?url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\r\nset-cookie: uniqueClick_8CZ1J6L=1d0242d5-deb2-4e79-bdab-0a278bcefc2c:1765933649; Path=/; Expires=Thu, 18 Dec 2025 01:07:29 GMT; SameSite=None\ntransaction_id=d0e56b0a85344d81ae746ea548d5e9a1; Path=/; Expires=Tue, 17 Mar 2026 01:07:29 GMT; SameSite=None\r\nvary: Origin\r\nx-eflow-request-id: 5283c0c2-09d4-4a9f-a80e-9b5b4f932daa\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3035,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":533,"timings":{"blocked":195,"dns":9,"connect":93,"send":0,"wait":132,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_spmp/2025/02/09/10/17391102693a28b32115ef46e9dea9b54be44e1d42_thumbnail_336x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_spmp/2025/02/09/10/17391102693a28b32115ef46e9dea9b54be44e1d42_thumbnail_336x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17979\r\ncf-ray: 9af286297d7d569b-OSL\r\nlast-modified: Thu, 23 Oct 2025 19:27:37 GMT\r\netag: \"68fa81a9-463b\"\r\nexpires: Wed, 24 Dec 2025 01:07:31 GMT\r\ncache-control: public, max-age=604800\r\nage: 2389216\r\nedge-cache-tag: 2025102403\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17979,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 336x447, components 3","md5":"7dc06782b6a89799b279ada809e73c63","sha1":"cb13e9999789f9dc6d1e20c5ab268eddc2b4211a","sha256":"8132f0666f8b2e607c114de082f7abf85447e8d9cb806fab5211c1a664a6db66","sha512":"64877e24c0b14c8b925cc8875d9ab53ccb8c078d62230bb9c8bb9b4846637f73ee89640c7bb9ad5b3667a70fb8836a9da125b25ea46f0fbd855c1fad92d0141b","ssdeep":"384:umZt2teBSGP/SjzrWPEsgDnht6592hqGuBc6fyo:udeAGP4rWPEsgDim6Bc6n","tlshash":"8282d03afb0f828de752307c98b9a780505fb5c9320353bab412b457b9df562a60036a","first_seen":"2025-12-16T16:48:13.562309Z","last_seen":"2025-12-26T04:07:51.818378Z","times_seen":7,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":13,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/app-track/metric-info","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:34.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /app-track/metric-info HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nContent-Length: 1373\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1373,"data":"{\"data\":[{\"app_name\":\"shein\",\"timestamp\":\"1765933654024\",\"local_time\":\"12/17/2025, 1:07:34 AM\",\"session_id\":\"\",\"member_id\":\"\",\"sdk_version\":\"1.1.43\",\"network_type\":\"\",\"device_id\":\"\",\"device_level\":\"1\",\"device_type\":\"pc\",\"device_model\":\"\",\"device_brand\":\"\",\"browser_name\":\"\",\"browser_versions\":\"\",\"os_versions\":\"\",\"os_name\":\"\",\"language\":\"en\",\"sub_site\":\"eur\",\"money_type\":\"USD\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"referer\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"level\":\"INFO\",\"tag\":\"\",\"message\":\"monitorJsLoadTime\",\"params\":{\"name\":\"https://armor.ltwebstatic.com/she_dist/armor-libs/antiin/antiin.1.9.1.min.js\",\"entryType\":\"resource\",\"startTime\":\"1919\",\"duration\":\"64\",\"initiatorType\":\"script\",\"nextHopProtocol\":\"h2\",\"workerStart\":\"0\",\"redirectStart\":\"0\",\"redirectEnd\":\"0\",\"fetchStart\":\"1919\",\"domainLookupStart\":\"1919\",\"domainLookupEnd\":\"1919\",\"connectStart\":\"1919\",\"connectEnd\":\"1919\",\"secureConnectionStart\":\"1919\",\"requestStart\":\"1976\",\"responseStart\":\"1978\",\"responseEnd\":\"1983\",\"transferSize\":\"40406\",\"encodedBodySize\":\"39883\",\"decodedBodySize\":\"135034\",\"serverTiming\":\"[]\"},\"environment\":\"production\",\"value\":1,\"metric_name\":\"si_anti_spider_sdk_mjlt\",\"tags\":{\"type\":\"mjlt\",\"url\":\"https://armor.ltwebstatic.com/she_dist/armor-libs/antiin/antiin.1.9.1.min.js\",\"name\":\"antiin.1.9.1.min.js\",\"duration\":\"64\"}}]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nds-from-terminal: pc\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBfDE3NjU5MzM2NTc5MzR8MzZFMzQ3NUM3\r\nContent-Length: 1981\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1981,"data":"{\"activity_name\":\"expose_block_main\",\"activity_param\":{\"spm_new\":{\"page_tp\":\"topBanner\",\"tab_nm\":\"-\",\"block_nm\":\"30101002_\",\"component_tp\":\"picture\",\"component_nm\":\"IMAGE_COMPONENT\",\"style_nm\":\"ONE_IMAGE_COMPONENT\",\"component_apply_id\":\"78555260\",\"component_apply_nm\":\"policy\",\"hot_area\":\"-\",\"hot_area_loc\":\"-\",\"block_id\":\"30101002\",\"block_key\":\"\",\"item_loc\":\"1\",\"oprt_loc\":\"1\"},\"aod_id\":\"-\",\"content_list\":\"itemPicking_00301507\",\"abtest\":\"\",\"rec_mark\":\"-\",\"src_module\":\"topBanner\",\"src_identifier\":\"on=IMAGE_COMPONENT`cn=policy`hz=-`jc=itemPicking_00301507`ps=1_1\",\"isDy\":\"0\",\"is_rcmd\":\"0\",\"public_id\":\"-\",\"user_tag\":\"\",\"UniformStyle\":\"0\"},\"device_type\":\"pc\",\"home_site\":\"shein\",\"sub_site\":\"eur\",\"language\":\"en\",\"system_language\":\"en-US\",\"money_type\":\"\",\"device_country\":\"\",\"app_versions\":\"\",\"network_type\":\"\",\"ip\":\"\",\"screen_pixel\":\"1280*1024\",\"screen_size\":\"\",\"device_class\":\"1\",\"device_brand\":\"\",\"device_name\":\"\",\"device_model\":\"\",\"os_type\":\"1\",\"os_name\":\"Windows\",\"os_versions\":\"10\",\"browser_name\":\"Firefox\",\"browser_versions\":\"134.0\",\"session_id\":\"bi_1765933653037_61177\",\"channel\":\"affiliate_af_b_33_121_0\",\"origin_otherid\":\"\",\"traffic_source\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"market\":\"\",\"start_time\":\"1765933653032\",\"end_time\":\"\",\"environment\":\"production\",\"device_id\":\"\",\"device_idfa\":\"\",\"device_idfv\":\"\",\"device_aaid\":\"\",\"referer\":\"https%3A%2F%2Feur.shein.com%2Fark%2F2812%3Fonelink%3D13%2F4s0r28uoh4d8%26requestId%3Dolw-5ag0n5ca69ld%26url_from%3Daffiliate_af_b_33_121_0%26affiliateID%3Daf_b_sub_13300%26click_id%3Dd0e56b0a85344d81ae746ea548d5e9a1%26cdn_rsite%3Dcf%26ref%3Dwww%26rep%3Ddir%26ret%3Deur\",\"sdk_version\":\"1.1.15\",\"login\":\"0\",\"member_id\":\"\",\"ugid\":\"\",\"page_param\":{\"ad_activity_name\":\"newuserprice\",\"scene_id\":\"m_app\",\"platfrom_nm\":\"swift\"},\"tab_page_id\":\"page_ad_landing1765933653032\",\"page_id\":\"6342\",\"page_name\":\"page_ad_landing\",\"log_id\":\"eb8ad2d7-13a6-43ad-b86f-3b4074bf5cc9\",\"seq\":\"18\",\"timestamp\":\"1765933657930\",\"local_time\":\"2025/12/17 01:07:37\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/js/720.91754e0.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/js/720.91754e0.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Oct 2025 13:10:37 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 12086\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40634,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40458)","md5":"631617d9a28580094d0e88e217182cff","sha1":"352de6ea79fe85c719eb784e0846e05190b788d3","sha256":"ba278ee6795c12b41c99002863394427033a1c8ef67c886e10953d06d87e596f","sha512":"f9462b50a6445a3e3b8ea6536da40995355f2cc45ed188abc13222096cd03b364f3d7b5d8f25f272184337513041aa0115a576bbc373812dbbd6cd8833c224cd","ssdeep":"768:2OC1bBW+fAcOk+n/TslWkI9SUqiFoptCX+uVo93l+s:4bBREAkkTiFoA+Co93ss","tlshash":"5103b4ddb7c7b06143b3b635842f6007a23aba56648e8450b237dcd17d7894ea237a7c","first_seen":"2025-10-28T13:10:33.665806Z","last_seen":"2026-03-23T01:37:20.992387Z","times_seen":618,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/js/client-analytics-sdk.dd1c82f.chunk.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/js/client-analytics-sdk.dd1c82f.chunk.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Nov 2025 11:23:21 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 12282\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43107,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42101)","md5":"fe4a988a03accd33c1faf9511dc0fff6","sha1":"64b4f5b329c9826ad57e4c85de4469b7419f5d98","sha256":"de6021b3fb32e4e5e4f6491572134464b459cc3fe3567a2c86cef5e7b0944824","sha512":"c0b5532fe54ea626443c54302d708af2b5cf10f6ca7f18b887c137319fdcdd62b9e1ec55bbd17a2c0ed9aa526a244f2d80b4af6aa294aba097aa27cc1a183024","ssdeep":"768:rmEfkA7ZqJu/SPHEkEC2qtOJA3NZ5HXzn3gXQ7K9z0ghtVxtmgPy865S3izEY:AOZqJu3qtOMRXzne9ztjCN","tlshash":"9a13a6e9f243706366b39129d02f0607723ab756058d8c4ab637ecc43e6d58ba561b3f","first_seen":"2025-07-31T13:40:14.1724Z","last_seen":"2026-04-16T21:34:30.215414Z","times_seen":752,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/app-track/metric-info","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:34.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /app-track/metric-info HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nContent-Length: 783\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":783,"data":"{\"data\":[{\"app_name\":\"shein\",\"timestamp\":\"1765933654020\",\"local_time\":\"12/17/2025, 1:07:34 AM\",\"session_id\":\"\",\"member_id\":\"\",\"sdk_version\":\"1.1.43\",\"network_type\":\"\",\"device_id\":\"\",\"device_level\":\"1\",\"device_type\":\"pc\",\"device_model\":\"\",\"device_brand\":\"\",\"browser_name\":\"\",\"browser_versions\":\"\",\"os_versions\":\"\",\"os_name\":\"\",\"language\":\"en\",\"sub_site\":\"eur\",\"money_type\":\"USD\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"referer\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"level\":\"INFO\",\"tag\":\"\",\"message\":\"anti-in load success\",\"params\":{},\"environment\":\"production\",\"value\":1323,\"metric_name\":\"si_anti_spider_sdk_c\",\"tags\":{\"url\":\"https://armor.ltwebstatic.com/she_dist/armor-libs/antiin/antiin.1.9.1.min.js\",\"type\":\"loadAntiIn\"}}]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/devices/v3/profile/web?callback=smCB_1765933655928\u0026organization=FPNyuLhAtVnAeldjikus\u0026smdata=W7N7Uu94bq%2BVmrg%2BpkkKvFXwq4vD58YUI3ho%2Bl12SPqv5zE%2F7lweyCuaV58rKAG68L11aBxKNhdeiHw%2BGlTmJxFT6QmO2Qti3GBNx8MHftoltILmq%2FEbuvAE4njltD%2BHUrGDwcPdQ0hr%2FPe87XRE73D6Le3P68Z2gtkdygcvBv%2BElU19Ug9JDaYv6q%2BCo%2BTAw8DAeuK8vE5Ce84NLQmqQXDVneiESivfkW1zgJ%2FcztA0tUnVkKw2of0ir0VCcc2NsuUP4ObMx1IUANA2C%2FFC%2FoSUrHo6nDyEtUYtIHnIT10Pfx1qfjLxg1gXXL0L%2FStzB3tzQ7ChGrZGSIFTNKTby7%2FHSfP0VzUFyKuKaiUgS%2FK66UFKhjYgt4F10zjL%2BgbRBHek4CTC78hjEjQCs8%2FLLyhT09GRH8ZuChCYT2Kf0qxJEVtnWe72AnSWn4gmQvRn5GInIVXLORKcVhZlpo0c6HJcHPp5ej%2FW1pIQ%2FdYrfn8HozrdxmjOPoNVbh18aOXTi8gxuxawP%2B1E1ykIcslB1l3SSn%2Bovjkb6iOXR9JiKnxYGPST5TUC6giJJFxrzQrmM8ht741M%2Fs5oW4hJzVP6rJ%2BqOLitxolLHNILQPGOqmFcy8K0Sa0oUfnjRNbtL6QFbMzlBc%2FMMFkzFXeRRsu5gpoGpYYN9TxEql5EEv3gLj3angGGi16hciUdjuDYgd7BoWNDHuLWdTOY3EQeItiv2sTPyZJaYnTqPOsiKg3cbfy4FwFzHNKvpujqKVoiOiqjAEWP8u3JyKhVaYAQ5RmHR0mWk2OtlJukaSfWpEECmPGKXG57Jrw0FRuiyL4oJYjumQWHkd59BZP7HKLS21LWOWk1A0983q1p%2FcLrrqNZmo35Gw823Al7Z19AYzmopMk9OikaI77qeIcnhTzflNwAHKPX3NNOllv48bX2RtvlcpwEuDQe5R%2BFf4tRvweCLT%2B1jIIAtc5m9V7tf8r19O02mHfmrU%2FnFUu5ZKSDxXa4KsfrIHZ8GiC3nEfvZx40YzYsEs0mXFYFzDyb%2BIVpL0o18gdGl2BEueuQrBeUZmGLgRpm6cZ0YWD41QQvK%2F7dbdcP6TKelIpT64rPhCRkUCfQN2H2S%2Fna6Zk7r0OuW25u4ilAxILGZU5OZbL6Kl%2BBz2r6SLqcZe9XDe1xjbGc83UCDSaDbQL52e2cgpg0whKO1YflrKEdd0H68kLgruIAThYqUJgzZJix3v1q3%2B3YGMQ1gidx%2FfW9%2Fhq6FogylcuMTnmoe5U%2FLgoUqis%2BwtujwiYLXn1Z8GpgtdaxKIY595wLZgi35vKuEkqxV8lyqt1Hw0%2FWpx9TYnDk4VYpcjLKRDBiov0ELIofM3wAP4hZtP%2Bfk%2BNIBY5XfYKt6hNqlAILnuIvoyR9mIzGgTGEZ6o2zQUDeNUgOtd0U3NNAh%2BMGOsJIztSFQbYWKtL5OopWiI6KqMDCiRh726n%2BJ8xeY3ZH69ia9%2FcLlahPY5QK4%2B28bvhVHg%3D%3D1487577677129\u0026os=web\u0026version=2.0.0","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /devices/v3/profile/web?callback=smCB_1765933655928\u0026organization=FPNyuLhAtVnAeldjikus\u0026smdata=W7N7Uu94bq%2BVmrg%2BpkkKvFXwq4vD58YUI3ho%2Bl12SPqv5zE%2F7lweyCuaV58rKAG68L11aBxKNhdeiHw%2BGlTmJxFT6QmO2Qti3GBNx8MHftoltILmq%2FEbuvAE4njltD%2BHUrGDwcPdQ0hr%2FPe87XRE73D6Le3P68Z2gtkdygcvBv%2BElU19Ug9JDaYv6q%2BCo%2BTAw8DAeuK8vE5Ce84NLQmqQXDVneiESivfkW1zgJ%2FcztA0tUnVkKw2of0ir0VCcc2NsuUP4ObMx1IUANA2C%2FFC%2FoSUrHo6nDyEtUYtIHnIT10Pfx1qfjLxg1gXXL0L%2FStzB3tzQ7ChGrZGSIFTNKTby7%2FHSfP0VzUFyKuKaiUgS%2FK66UFKhjYgt4F10zjL%2BgbRBHek4CTC78hjEjQCs8%2FLLyhT09GRH8ZuChCYT2Kf0qxJEVtnWe72AnSWn4gmQvRn5GInIVXLORKcVhZlpo0c6HJcHPp5ej%2FW1pIQ%2FdYrfn8HozrdxmjOPoNVbh18aOXTi8gxuxawP%2B1E1ykIcslB1l3SSn%2Bovjkb6iOXR9JiKnxYGPST5TUC6giJJFxrzQrmM8ht741M%2Fs5oW4hJzVP6rJ%2BqOLitxolLHNILQPGOqmFcy8K0Sa0oUfnjRNbtL6QFbMzlBc%2FMMFkzFXeRRsu5gpoGpYYN9TxEql5EEv3gLj3angGGi16hciUdjuDYgd7BoWNDHuLWdTOY3EQeItiv2sTPyZJaYnTqPOsiKg3cbfy4FwFzHNKvpujqKVoiOiqjAEWP8u3JyKhVaYAQ5RmHR0mWk2OtlJukaSfWpEECmPGKXG57Jrw0FRuiyL4oJYjumQWHkd59BZP7HKLS21LWOWk1A0983q1p%2FcLrrqNZmo35Gw823Al7Z19AYzmopMk9OikaI77qeIcnhTzflNwAHKPX3NNOllv48bX2RtvlcpwEuDQe5R%2BFf4tRvweCLT%2B1jIIAtc5m9V7tf8r19O02mHfmrU%2FnFUu5ZKSDxXa4KsfrIHZ8GiC3nEfvZx40YzYsEs0mXFYFzDyb%2BIVpL0o18gdGl2BEueuQrBeUZmGLgRpm6cZ0YWD41QQvK%2F7dbdcP6TKelIpT64rPhCRkUCfQN2H2S%2Fna6Zk7r0OuW25u4ilAxILGZU5OZbL6Kl%2BBz2r6SLqcZe9XDe1xjbGc83UCDSaDbQL52e2cgpg0whKO1YflrKEdd0H68kLgruIAThYqUJgzZJix3v1q3%2B3YGMQ1gidx%2FfW9%2Fhq6FogylcuMTnmoe5U%2FLgoUqis%2BwtujwiYLXn1Z8GpgtdaxKIY595wLZgi35vKuEkqxV8lyqt1Hw0%2FWpx9TYnDk4VYpcjLKRDBiov0ELIofM3wAP4hZtP%2Bfk%2BNIBY5XfYKt6hNqlAILnuIvoyR9mIzGgTGEZ6o2zQUDeNUgOtd0U3NNAh%2BMGOsJIztSFQbYWKtL5OopWiI6KqMDCiRh726n%2BJ8xeY3ZH69ia9%2FcLlahPY5QK4%2B28bvhVHg%3D%3D1487577677129\u0026os=web\u0026version=2.0.0 HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nSmDeviceId: \r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-security-policy: frame-ancestors *.shein.com https://www.shein.com.hk https://www.shein.com.vn https://www.shein.com.mx https://www.shein.co.uk https://www.shein.tw https://www.shein.se https://co.shein.com https://www.shein.com.co\r\nx-dns-prefetch-control: on\r\nx-xss-protection: 1; mode=block\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=7776000000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: no-cache, max-age=0, no-store, must-revalidate\r\nx-anti: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMnwxNzY1OTMzNjU1OTc4fENBMzZFMzQ3NUM3\r\ncontent-encoding: gzip\r\nx-gw-traceid: 81801dd688099792\r\nserver-timing: g;dur=25\r\nvia-shein-gateway: c-shein-pc\r\nheader-cmdb-sname: shein-pc-eucentral-prod-app02\r\nheader-cmdb-app-name: SheinPC\r\nheader-cmdb-app-name-origin: SheinPC\r\nheader-cmdb-app-sname: shein-pc\r\nheader-cmdb-name: SheinPC_eucentral_prod_app02\r\nheader-cmdb-name-origin: SheinPC-eucentral-prod-app02\r\ncontent-length: 180\r\nvary: Accept-Encoding\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":196,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"f0b2715d7ac005d5837ad90f1d1c2412","sha1":"3e101ad1c403e2a1470c97f81c78ad42c55805ee","sha256":"f8a05fe3dd50ecb8ed98d4eba1801bde82a342e6d025d425dca466e0278fabe8","sha512":"cccf7adfb8aa576c9b394197b2b056f62e2bf24c8b11d715848ba30278b5b099ebc59452372d39750960363ebcfe2d89921cdae7cb715cafcad3d0944eb51f20","ssdeep":"","tlshash":"f6d023b0d005c0c66010c072ff1e0571d3153361fd4100174c31556404d71a51065075","first_seen":"2025-12-17T01:08:43.047623Z","last_seen":"2025-12-17T01:08:43.047623Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/api/zpnv/report/get?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:38.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /api/zpnv/report/get?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nSmDeviceId: WHJMrwNw1k/E6FWWr45huH0SHkq/FHZP1RiBdRWJwnugpcKfvQ3M3byyyMOZe0v4ZceX7Tyqo6/mmqa0+4YaY/SFq8F8CjtuOdCW1tldyDzmQI99+chXEimu23C9OY/lrYp5HxsF710w6FU/fzhj65gCHPPxycwCneu8bpbMPuOQ3v/uKv7fr2biq+/JtOAQVL1Zk3jUkmm7NtAKvckCXn1o1sVkOqGcHswC/75UCs431H7aqDLDtYA==1487582755342\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: nTohXdDF-15sWgce8ZNP6YreVwqzw-mJq1Po\r\nContent-Type: application/json\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZffDE3NjU5MzM2NTg0ODJ8MkNBMzZFMzQ3NUM3\r\narmorToken: T0_3.11.1_h5aVW6NV2c6k5d0TlfDNz_EDjjsZfIrSj5xRqh_kFmKKzkH3Bn6lM6oeF7XeJZrURFsYzPt7Qzx6DpfVjVI5nN9Zd9EESuMoDs-NMT7xIkqWzRXE1nF1yf2VOpMdCIgNvPSjFLmSWBU6uDlt1X2k3gjwH65rJUrrgjL866nHiktCuzj7154sOc9-KkMYGmam_1765933658341\r\nuber-trace-id: ff0b87e83da418e5:ff0b87e83da418e5:0:0\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933658483\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=hWPh6MDIyNGQ1ZjEzMjg0YzM4ZWEyMWNmMjFkMjc2MzE4ODYwZDQ4ZmU2MTYzNWI1ZDIwYjBhZGMzY2FmNDVlMTlmZg%3D%3D\r\nx-cs-random: 03d0ed21907194f3413ea82fc5de0d6af74ed0248f80b65f435744c5b25e1440b7ce2d40e44cb8fe4f64281ee2ae44473f6655c7a737e9288f6faa52b1df9efba5b64a9d5e533\r\nContent-Length: 28\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM; smidV2=20251217010735039e5b05b5444c805ea4e51d90efaa8e00b93c429d3cee080; zpnvSrwrNdywdz=eur\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":28,"data":"{\"channel\":0,\"app\":\"3.11.1\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 736\r\ncontent-security-policy: frame-ancestors *.shein.com https://www.shein.com.hk https://www.shein.com.vn https://www.shein.com.mx https://www.shein.co.uk https://www.shein.tw https://www.shein.se https://co.shein.com https://www.shein.com.co\r\nx-dns-prefetch-control: on\r\nx-xss-protection: 1; mode=block\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=7776000000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: no-cache, max-age=0, no-store, must-revalidate\r\nx-anti: RTBEMzU0QzBfODEyN198MTc2NTkzMzY1ODUyN3xGQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\netag: W/\"2e0-CwLpZ6TimF5BWz8bnKAJWrMY3zc\"\r\nx-gw-traceid: ff0b87e83da418e5\r\nserver-timing: g;dur=11\r\nvia-shein-gateway: c-shein-pc\r\nheader-cmdb-name: SheinPC_eucentral_prod_app02\r\nheader-cmdb-name-origin: SheinPC-eucentral-prod-app02\r\nheader-cmdb-sname: shein-pc-eucentral-prod-app02\r\nheader-cmdb-app-name: SheinPC\r\nheader-cmdb-app-name-origin: SheinPC\r\nheader-cmdb-app-sname: shein-pc\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":736,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d921ce5954a5eedf8461083e4bd3fb06","sha1":"0b02e967a4e2985e415b3f1b9ca0095ab318df37","sha256":"35ed20d79844e34765bb6fec024a7144dedfaae9e7646ec8af6e397f7546643c","sha512":"209e24b00f61cdb1f9aff00b2ce16ae59c848ca347f30b11093bc51765f13853662181fb667f1373bc8fb273e7989d26b48699e951a4452a9748e18e89a879f5","ssdeep":"","tlshash":"23019c51052e8c6fdcecaaa7146b2f5c6a1e821f468f0c18a3014f6b45b9c50c48e937","first_seen":"2025-12-17T01:08:43.048492Z","last_seen":"2025-12-17T01:08:43.048492Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/js/937.2affda6.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/js/937.2affda6.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Nov 2025 15:12:18 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 17328\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79030,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65154), with no line terminators","md5":"04eed2a5c5609810941ed47c8b8a42f9","sha1":"a7ebf607c56090b2d02ce12a8cdedbab281f7be0","sha256":"6622f41f333fadb2362bc026d610510890b045eb9edaa3256f24e55fd589511d","sha512":"f3f98ea98509702b0c3effcac716cf64fced28a346ab3d4d8d06d121588c8fff91cbe1e05df38de323df024c455a2ed8085e39ad6f26c8ce4a328774e2d742ed","ssdeep":"768:hmlCCPQUD5gmrydOCPQEHARz8UAGx8FyX5wbPGRPNkZ1l9oQboH:YlhOmBNxNX4GQsH","tlshash":"8d73f989b0a370251ab31569a42f290d52bc3f1bd0448c90faef9ded1fe9c597125f3a","first_seen":"2025-11-01T03:09:47.523038Z","last_seen":"2026-03-23T01:37:21.151869Z","times_seen":604,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:37.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: client-ugid,content-type,ds-access-site,ds-access-token,smdeviceid,x-oest\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/clientPerInfo","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:37.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /clientPerInfo HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nDS-ACCESS-TOKEN: 4bc3a2dd3549401b817438eede7e78da\r\nDS-ACCESS-SITE: shein\r\nContent-Length: 1176\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1176,"data":"{\"browser_versions\":\"134\",\"browser_name\":\"Firefox\",\"os_versions\":\"10\",\"os_name\":\"Windows\",\"device_name\":\"\",\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"visit_id\":\"mggzq4xmy0ao\",\"host\":\"eur.shein.com\",\"local_time\":1765933657859,\"timestamp\":1765933657859,\"client_url\":\"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\",\"url_path\":\"/ark/2812\",\"app_versions\":\"\",\"network_effectivetype_type\":\"unknow\",\"worker_init_type\":\"navigate\",\"cache_type\":\"unknow\",\"is_crawler\":0,\"device_type\":\"pc\",\"sub_site\":\"eur\",\"language\":\"en\",\"home_site\":\"shein\",\"page_name\":\"page_ark_production_918\",\"page_version\":\"2812\",\"page_from\":\"\",\"resource\":\"ssr-landing-page2812\",\"data\":[{\"key_path\":\"fsp\",\"values\":{\"num\":1337}},{\"key_path\":\"ssr_create_html_time\",\"values\":{\"num\":54}},{\"key_path\":\"ssr_fetch_data_time\",\"values\":{\"num\":174}},{\"key_path\":\"ssr_server_start_to_mid\",\"values\":{\"num\":22}},{\"key_path\":\"ssr_total_time\",\"values\":{\"num\":256}}],\"id\":\"9c26ecf5-63d9-589a-a5de-55487193fe4c\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zpnv-eur.shein.com/api/zpnv/am0","fqdn":"zpnv-eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /api/zpnv/am0 HTTP/1.1\r\nHost: zpnv-eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 2835\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2835,"data":"{\"data\":\"0_3.10.0_0bab77e9_v6bVrhPMmU0OrxIoglszzLIqoOwzpZPHCghwqTrYiU-Fyrk-GFJoDSemfMiG0v9O16Ff93b8_9L2kqdyc48LoyD5PwtHxWiGZ9FfXD4IYQZseB196eareRyXRYpMZBtrwIGEJ6xZkOKuXEuIznzZBs7yQ8YYkyelE-voxRH2fAU0TAA89M9gnKmDWok9vGa9oOULk3Bf-eqwaWyQK3wMu_Kg1GLACv8i8nMmegaubdRpNNhxlYPSBMzbT3lLMftn336A_rpDGHc00NjWeHugAiWUpQ7iOm2n5HG6L5zQqEcF1rayk3vf-c_vHiH0rHfqOrQQINxD7C3AF77opjTidEWxKOSiratZ0NXlnRsv8wL2hbqjKnDwB7yTt4LF4sBscC8PSGZcjZPxm9lQk0Loyzc3B33y25jaarQTAyyfIsmcI0tuM2evMruulB6WZC_Fgn2JASsqS6irsn8Ke1x2Se2W2t7MV1uHI2IqUEeqwRS7LeWtyzZqbPMrmqMvE6hgd0sdAyV639ssRtF_xeQKkvKdscJqgtyHSK3TCNXF0oKPnhSBJQp2nvdPK5QRev5riZt6vk15-F3PoGi6IaRo-avor6XK4tzmsm6IsPZ52VfYpHWJSXScVOiKka6kY00E2n9Fbvc8b8rIQjJ-3twrAQiJZMUK7hgZ2PqXAN_esUrda9jxuahc1Jf5lktK0-JyGtMKdJbfl0tVEHY_kSBHmcaIqO31dvlsKU3QVIiU_3g9kpuQWRMzSeMYkRyeyoxw1KEcIETb_5nuBTXcX179b5e0zypDQRbDbxHf77nrC3GVzt3YXDclEyBet3C7C8velzl1C0JBiLpVU_tJGY299UBUESJx6t4lh8mwArobICjsbePxAaccLNT75dIccnbGCs9YliXpufWfXknmbZPkuVN9mvyja2-qMI3KGSd0IsGht5N2Z2oaj8CJU-C-ZsAnrzVL8Q0gQt8w0QbH_BAvOw3Z-LqlKBSZjrnKRkVwT9DQoekJRs4tjCBwDsqG00jc0GZdJtrUlU80Y7507PNqiAfYMw1VOyOYcrQrpO_h-7Bv55G8x9jqQbyTLeUwKgs_OKQyryGYfJlMXx5mjreLGk-Ocar56yXE0w67pApelNb4gLTeeDrSH9F97tVZPG3bZm5uc5GbNe8Irl87GFDSAJgeWcrCT1fgxt46GMecoVwTt83FVDHfJiD-r40KbsVnd2myeuuySkpdqMNce3I8MnG65OzAw1h7LeE8qMTH46WjV32ce45Y4OJdKWCJE0nGNVT0JSw29omh0-qaTbnm4K3XlcFBm-K_tFgA6rZ_P_nM5p264xeJLWk7lTxYBuKfk1SjfZSrksXM86-6YvNpgxt6QTqr6b4dgKgZTzf8Hjy_VS4UQVFaNx3ycmgc-LE8jAWwlDz5YOUcLmbiUuzoLxd7dVtUMIwexs-e_rsV7ewAD0px_zhMLFDuzkWq5Bzd3olit1L0gWvA2qRyayPA9to-tH3WiG2nd4yB4ZHRKIVyFXFBrAN2W815stsjGtznwKf2QCmotc2D5uDX1y2YpaU91k5FIIvQA2DV3paPpYqPY7PUF6W9SisgwIQvhjfl3o9Sd3MqNgu0hoH2m7fe0LBsdd7WjL0oB6vUIQ_Fo__3v-A8fv-I7VUQWWQrHL2DtfonwQiylBzQrLnYyHJ7ZSN4qSRDrGZZlWj1trEcHuFHo43ISK2vE-x0rJlS3vefB9rrLwUW55PbYCcxyaQc8tjeHwghAKyh4_2xJyXvEfw_QyxxAIBRBKsuRg83Yqun2aAk_CMuB-SbmD67VSwkdFwSRSfIVmWKAJQWYxRYtD-cyTC7oyyUBbqzmWzd0w2hHTFHL1wWJt5Joccy7NsTklqkmvG7arK7sa80KPdoo5vtX7mERKwUFBx4qo4uu5_ZM8ATwKaUTJmqA96qyD4KbEJ9pj4qEHhSJYz5hxfGJRxQ-9DoB7iy7H3Yuc06D1fceEhK3Y3kAQGqZVUgpZunvRBTFQ7OCSPr4BmUswjPsBmrXhSdiFMSAs503pdVJD-nlR3xGeQeNBzJ__yr8ZOq98uy2qHWKRPKJ0VLi-XMMBbgUxy17F-wLGRvEqhxXdLkzrkLC4gilcQBSpFDPESPA4E6v1Xf1I3_5AeSntSPYguf6Ei9y7cz0AXSDYzMrsTIEA7P_Vr0yidzROuA1B2xZ0JDlItSyTJFWyIBXdYnIKLjaWPOZrNkSFIfUzNwU8Ole762PzyzJRRtE0zGmlZEN2byQVK7M7AF2bIYkmkxJpeYWVWHCGV9Waqe6C6ChZk1Zy4JdvfvOgmwIY0Le4JQJV8FdupkWCl0Lx7HcAFj7M_iQ3R7GLhCf5mbN5dUakUVX4jPLn3D6k1fqP5oz6msU78UtgrBbVde2jxA0I9k1qI1esNt3xhUiB37vwA0NnOB6aEBIhlWBIQR-RtAre3NNXiTG_S8Yyfru4sSfjJNMmmFT3cJSyM0ZSOR0y8Wq-b23ggklhwDT6XMeqJzyiviLBMS-UQVieKkz-MMrmm98hrwdOB2uyCWPnt1iUxUMWL6dG825CysaY4j4kenz2YBfcs7HtDU7TNb605Qu6wb0nF8z0svkcAzESgHX5rdphCxxnEkV3IDlHljTKsN7RoZFMV_mVsC4G9uSaQrxIw037Za\",\"appName\":\"shein\",\"extra_params\":{\"ak\":\"mI1W/xLmnjaP5UaHM3uj4yc7NPIKXM7sjTlACCjZcefaxdOlELuJfM8shf/lBCagacegMCjP6YSy+4QkEGdHRw==\",\"ie\":0}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 328\r\ncontent-security-policy: frame-ancestors *.shein.com https://www.shein.com.hk https://www.shein.com.vn https://www.shein.com.mx https://www.shein.co.uk https://www.shein.tw https://www.shein.se https://co.shein.com https://www.shein.com.co\r\nx-dns-prefetch-control: on\r\nx-xss-protection: 1; mode=block\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=7776000000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: no-cache, max-age=0, no-store, must-revalidate\r\nx-anti: MDZCMjk2QjJfOUU0RF8yfDE3NjU5MzM2NTgyMjF8RkQ0X0MzNTdfOTc2MjJDMkE4Qjkw\r\netag: W/\"148-V4zUX4yglblkLLfgHxweg2RzVOs\"\r\nx-gw-traceid: ce09507adcad719f\r\nserver-timing: g;dur=18\r\nvia-shein-gateway: c-shein-pc\r\nheader-cmdb-name: SheinPC_eucentral_prod_master\r\nheader-cmdb-name-origin: SheinPC-eucentral-prod-master\r\nheader-cmdb-sname: shein-pc-eucentral-prod-master\r\nheader-cmdb-app-name: SheinPC\r\nheader-cmdb-app-name-origin: SheinPC\r\nheader-cmdb-app-sname: shein-pc\r\ntiming-allow-origin: *\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\nset-cookie: language=eur; expires=Wed, 24 Dec 2025 01:07:38 GMT; max-age=604800; path=/; domain=shein.com\nAT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjU4LCJyIjoiaW1tWUQzIiwidCI6MX0.7d0d0531fe3a040b; expires=Fri, 16 Jan 2026 01:07:38 GMT; max-age=2592000; path=/; HttpOnly; secure\narmorUuid=202512170907389881bb85e5f3ab2ed14c4fffa13787af006f8afaafc408b800; expires=Thu, 21-Jan-2027 01:07:38 GMT; max-age=34560000; path=/; domain=shein.com\nsessionID_shein=s%3AOKnUHyu2HAkyOJoyLltlRUl-nSoACFME.7L35%2BZshjQJ98SQ7Nvt9Xd7YnQj03U4xQnVj3hrgido; expires=Thu, 18-Dec-2025 13:07:38 GMT; max-age=129600; path=/; HttpOnly; secure\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":328,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"98fac00a06e1c36131a4cf911e54ba0a","sha1":"578cd45f8ca095b9642cb7e01f1c1e83647354eb","sha256":"4bbb5f3335c85ba129b92def96faae3b9f0ee593604091152f3f76af273843dd","sha512":"630f2fc5b09ca5f39bf066a4aee3824b928400b844a02ebf44ce5e990742f2ee41361b8538b929ff69c1c0ab8948ab04ab23278b6e16447657e0a7ebe538b1ca","ssdeep":"","tlshash":"4de0c6880918b807048ea199ec8f89562a2aa0e36a88420608332fad0b4018c4402c68","first_seen":"2025-12-17T01:08:43.049984Z","last_seen":"2025-12-17T01:08:43.049984Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/j/spmp/2025/06/16/48/1750060456127dabcd05c2859fab73cfb5bab87fd7_thumbnail_336x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/j/spmp/2025/06/16/48/1750060456127dabcd05c2859fab73cfb5bab87fd7_thumbnail_336x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21783\r\ncf-ray: 9af286297d7f569b-OSL\r\nlast-modified: Wed, 19 Nov 2025 12:57:58 GMT\r\netag: \"691dbed6-5517\"\r\nexpires: Wed, 24 Dec 2025 01:07:31 GMT\r\ncache-control: public, max-age=604800\r\nedge-cache-tag: 2025112318\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 1057303\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21783,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 336x447, components 3","md5":"3a3175b26b7ad1b62702ddfd61b664de","sha1":"ba3c2612fc7be922bc0abbbc8e4fb3c4e7d0c60c","sha256":"5c54e7419027cf85dbf72aa280872f87b4061b6ad8baa8f1775697b6e09853db","sha512":"618a14724d95bc373112f33b7ec1a6eaa50fc5a613bb4b4c095bef4e1924253cd20415678a5bdafa2aac7aded0303da96104abfa97871db6180a940336a0b2f3","ssdeep":"384:bgnV/9UB01F7nCSkaO/ShuaVxK4YPtItjay4L4IjYD87T8Ws1Gl8bDbgUx2lo:bgnV/9jH7CSkpaDKfP4KhMWgbgUolo","tlshash":"75a2d042415f8187da04bf2069b5cb9fcd5089fbb6a5d0f744ae580bf57bc005a5838f","first_seen":"2025-12-10T20:53:05.525342Z","last_seen":"2026-01-10T00:52:36.778492Z","times_seen":59,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/api/common/csrf/update?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /api/common/csrf/update?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\ntimezone: GMT+0\r\nbrand: shein\r\nchannel: pc\r\nappcurrency: EUR\r\napplanguage: en\r\ntoken: MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\r\nsiteuid: eur\r\ncurrency: EUR\r\nlanguage: en\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NXwxNzY1OTMzNjUzMTk5fEM3\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: 2wRTfrcc-ypYXNxX502Cw5-SrV1Lif6yCwJo\r\nx-request-by: bridgeX\r\nuber-trace-id: ff69414e65e6b7b3:ff69414e65e6b7b3:0:0\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 51\r\ncontent-security-policy: frame-ancestors *.shein.com https://www.shein.com.hk https://www.shein.com.vn https://www.shein.com.mx https://www.shein.co.uk https://www.shein.tw https://www.shein.se https://co.shein.com https://www.shein.com.co\r\nx-dns-prefetch-control: on\r\nx-xss-protection: 1; mode=block\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=7776000000; includeSubDomains\r\ncache-control: no-cache, max-age=0, no-store, must-revalidate\r\nx-anti: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUN8MTc2NTkzMzY1MzI3M3w3\r\nx-ad-flag-update: 8FkZa3NuCnoO+IBsqSDbVYTFm6zUmft9Vh7q2yhidy/tjTBrwINMUj9QAPXBTqi1Z9m3aGmbBKDl19FMxbV7y+55HcmFRosSIRKGPivl8+LqhNSOT7goHRSBc8hQvaioiQrAI0RJ5sm4uEg1OBb9Ig==\r\netag: W/\"33-HIUnqwSuTI+LIaOOW4OU5JEEbPI\"\r\nx-gw-traceid: ff69414e65e6b7b3\r\nserver-timing: g;dur=7\r\nvia-shein-gateway: c-shein-pc\r\nheader-cmdb-name: SheinPC_eucentral_prod_master\r\nheader-cmdb-name-origin: SheinPC-eucentral-prod-master\r\nheader-cmdb-sname: shein-pc-eucentral-prod-master\r\nheader-cmdb-app-name: SheinPC\r\nheader-cmdb-app-name-origin: SheinPC\r\nheader-cmdb-app-sname: shein-pc\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nset-cookie: sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; expires=Thu, 18 Dec 2025 13:07:33 GMT; path=/; HttpOnly; secure\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":51,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5c8acd818ad48fe5a8ce2cbe08951682","sha1":"1c8527ab04ae4c8f8b21a38e5b8394e491046cf2","sha256":"c46c9f35518603c2012ea236b426f4804d9b614b5e931b7d0d42c30987d59e11","sha512":"4626b04c7cf42cee3224febd833934b91ad4db1cb4f6a7e6b73ab88f6957f27aa0a55bcf5b4eb3a303c410cfc88304c002a9642d104efe853799c6e1200ad7bd","ssdeep":"","tlshash":"859004d544107110d3374cd51044c54075d77fcc57dd5455047fd404c431df4050d51f","first_seen":"2025-12-17T01:08:43.051482Z","last_seen":"2025-12-17T01:08:43.051482Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/order/get_cart_goods_sum_quantity?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /bff-api/order/get_cart_goods_sum_quantity?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\ntimezone: GMT+0\r\nbrand: shein\r\nchannel: pc\r\nappcurrency: EUR\r\napplanguage: en\r\ntoken: MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\r\nsiteuid: eur\r\ncurrency: EUR\r\nlanguage: en\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3fDE3NjU5MzM2NTMyMDF8\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: \r\nx-request-by: bridgeX\r\nfrontend-scene: page_web_common\r\nuber-trace-id: ff7d60a16684fbe5:ff7d60a16684fbe5:0:0\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 110\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTB8MTc2NTkzMzY1MzI5MHxEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-cart\r\nx-gw-traceid: ff7d60a16684fbe5\r\nserver-timing: g;dur=12\r\nvia-shein-gateway: c-shein-pc!bff-cart\r\nheader-cmdb-name: bff_cart_eucentral_prod_cluster1\r\nheader-cmdb-name-origin: bff-cart-eucentral-prod-cluster1\r\nheader-cmdb-sname: bff-cart-eucentral-prod-cluster1\r\nheader-cmdb-app-name: bff_cart\r\nheader-cmdb-app-name-origin: bff-cart\r\nheader-cmdb-app-sname: bff-cart\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":110,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a6b0ad25483c1e1cf40dcb9a23a273b3","sha1":"bf37d5b4a321d052982068a8de36b9a1d4ca75ff","sha256":"ae6c577a868918bd505972545a36d63b3935ba5c01cf726470501198aa4e35bc","sha512":"5c899b88f88c6c75e9a2e82c0958e37d23d4b87ae1522e717fa89de3f66c5e7514f457f2b52c566991143f218a38aef1f8d5da6b6ee25a9e57772ba9e3e51ace","ssdeep":"","tlshash":"c4b0125083af89731097490c480e2d85ea5f0791952bde000e9c5f5c520e546c400239","first_seen":"2024-11-22T10:47:21.562306Z","last_seen":"2026-06-03T06:21:04.393929Z","times_seen":667,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/abt/merge/get_abt_by_poskey?_ver=1.1.8\u0026_lang=en\u0026posKeys=GoogleAutoSign\u0026_abt=1","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:36.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /bff-api/abt/merge/get_abt_by_poskey?_ver=1.1.8\u0026_lang=en\u0026posKeys=GoogleAutoSign\u0026_abt=1 HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nSmDeviceId: WHJMrwNw1k/E6FWWr45huH0SHkq/FHZP1RiBdRWJwnugpcKfvQ3M3byyyMOZe0v4ZceX7Tyqo6/mmqa0+4YaY/SFq8F8CjtuOdCW1tldyDzmQI99+chXEimu23C9OY/lrYp5HxsF710w6FU/fzhj65gCHPPxycwCneu8bpbMPuOQ3v/uKv7fr2biq+/JtOAQVL1Zk3jUkmm7NtAKvckCXn1o1sVkOqGcHswC/75UCs431H7aqDLDtYA==1487582755342\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: nTohXdDF-15sWgce8ZNP6YreVwqzw-mJq1Po\r\nAppCurrency: EUR\r\nAppLanguage: en\r\nx-oest: RXwxNzY1OTMzNjU2NTg3fDBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nwebVersion: 13.9.4\r\nx-ad-flag: 8FkZa3NuCnoO+IBsqSDbVYTFm6zUmft9Vh7q2yhidy/tjTBrwINMUj9QAPXBTqi1Z9m3aGmbBKDl19FMxbV7y+55HcmFRosSIRKGPivl8+LqhNSOT7goHRSBc8hQvaioiQrAI0RJ5sm4uEg1OBb9Ig==\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nuber-trace-id: ffbc309c35cb9fd9:ffbc309c35cb9fd9:0:0\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933656589\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=i6BDfZjkxYWUxMjNmMmUwOGU1MmFmMjVhYWU5YWFiNzlkZTA0ZjcyYjY1NDhiMjdjMWNlNzZkZDQxN2IxNWE3MjQwYQ%3D%3D\r\nx-cs-random: 03d0d0cb27b0e3142d0cdb284b836d65099b27ef30caaaa3f38e14408e92db5e994edc06bdcfc8df09949cc91a3f6a31ae44bd6e1011abd62b94199ba26dd2c3fb80e5a9d39ae\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM; smidV2=20251217010735039e5b05b5444c805ea4e51d90efaa8e00b93c429d3cee080\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 313\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfODEyN19GQnwxNzY1OTMzNjU2NjgzfDg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: ffbc309c35cb9fd9\r\nserver-timing: g;dur=3\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster2\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":313,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"98ae65b75e69e41c76991f8d60e6f788","sha1":"97d8e468d024e85ba48e62642fa164dcad05fcfd","sha256":"85376d609a489423462c6761572d784c67cf5ba1d41a49818e0f255897b517d7","sha512":"189df557d4b8515616659299404f09a3666c492cbce63f3b92f919ab5ad0d357537cb96ae1ffa90fb7bf9f6151a2e54aec7b3b6dec169c867077e1ebafebf554","ssdeep":"","tlshash":"03e0c203b34c9cbfd4518759a09c2fa8b56e3855d8c28fb8751d9d1d8ebf0a864e00bc","first_seen":"2025-12-17T01:08:43.052776Z","last_seen":"2025-12-17T01:08:43.052776Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/js/191.c05e899.chunk.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/js/191.c05e899.chunk.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 31 Oct 2025 13:22:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 19629\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:33 GMT\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":86332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65442), with no line terminators","md5":"ca4091205790e15c66cea11f8f0338d3","sha1":"95042ad5e767e8f560c27829f228a2f1944845d1","sha256":"15a2e1cd82147b6b5c33916c6b0ed035ccbbf8f4e51287930190e3d3c64a8fc9","sha512":"ff4c96af6bb338c93e17ee3c145a78f86f0ce02ec1da962224054c4dcfd3392d9cf6b60622afdbd0b6b2e703bd0fe408bbfd70d86e199e9af17d6c0864844c64","ssdeep":"768:YbQGkuAUSzbeu59kn8oyToIk28EZQckkOiuolyytamBtPClbLwbPX8mcodHmAm1M:Ybkbj59kn8phuvkvlyyt5gbLwb/Vd22t","tlshash":"2f8306d8f550b8d855a31864803f1c1a52feef6df5d588f0d3aac8502f9de1cb22a7a4","first_seen":"2025-11-01T03:09:47.578431Z","last_seen":"2026-03-23T01:37:21.016344Z","times_seen":604,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_ccc/2024/07/18/b2/17213042637c91a5606cd0e7beb6d1593b08562e61.png","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_ccc/2024/07/18/b2/17213042637c91a5606cd0e7beb6d1593b08562e61.png HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 1515\r\ncf-ray: 9af28633b9f2569b-OSL\r\nlast-modified: Wed, 12 Nov 2025 12:33:24 GMT\r\netag: \"69147e94-5eb\"\r\nexpires: Thu, 25 Dec 2025 01:07:33 GMT\r\ncache-control: public, max-age=691200\r\nage: 2315212\r\nedge-cache-tag: 2025112002\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1515,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 4-bit colormap, non-interlaced","md5":"2609ddd076eea9ff8e42476895670d60","sha1":"7c34edcf0d3d3a797e3a4fead55174b5451962b3","sha256":"c3c40c2b0d53cc09b28e7464eedec09daf54351444abf80b9fc605ade21e2278","sha512":"fceededeb67daf3f6cfd5c90ccae4854999a68d2dd8952db03eb85faae23fe827c3cf2d711efd54418cb504c3ba0405574c908dcaf32ca4c68155938f97a34ec","ssdeep":"","tlshash":"f031d7e46a906e5501f16f342d400ed29fb91e25a90598b8df83d47e831209e89ccd7f","first_seen":"2025-07-18T12:09:05.935684Z","last_seen":"2026-06-01T22:35:14.941201Z","times_seen":826,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/app-track/metric-info","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:37.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /app-track/metric-info HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/js/shein-bs-vendors-62545772.f549631.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/js/shein-bs-vendors-62545772.f549631.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 08 Dec 2025 07:20:03 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 29350\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106584,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65422), with no line terminators","md5":"f2413f1cde07b2f999e07b814ff13ccb","sha1":"40cfb3ccd7a1f9c6f6a5af502e301ff862a7761f","sha256":"144b3e052f7b05eea0e265a4702a8f1829283ccedfe923f7500d15e56985d39e","sha512":"07d3c95c656e21fe2bc65491dc6953431590fc2e01ee1eb6487dff89e357ffa8627e947a34e3f0ec8e3f9e61a2e46fa4d59cfccd8c8a41d3399002b9192ddd60","ssdeep":"3072:cBo7dUFYAkhzwKzdxaoludLhWaXfPhsyDdHJ+YZ:cBo7dUqAkhzwKzdxaoludLhWCPhhDdHt","tlshash":"92a32cdd7543b09167b3a6b8d02b110ae22ebf1658498ca0b136ddd13f6dd0ed232b79","first_seen":"2025-10-16T23:10:29.91173Z","last_seen":"2026-03-23T01:37:21.088182Z","times_seen":680,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/user/currency/list?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /bff-api/user/currency/list?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\ntimezone: GMT+0\r\nbrand: shein\r\nchannel: pc\r\nappcurrency: EUR\r\napplanguage: en\r\ntoken: MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\r\nsiteuid: eur\r\ncurrency: EUR\r\nlanguage: en\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBfDE3NjU5MzM2NTMyMDJ8MzZFMzQ3NUM3\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: \r\nx-request-by: bridgeX\r\nuber-trace-id: ff1f24296af291b4:ff1f24296af291b4:0:0\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfODEyN19GQjg0XzdBfDE3NjU5MzM2NTMzMTd8QUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\ncontent-encoding: gzip\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: ff1f24296af291b4\r\nserver-timing: g;dur=2\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster4\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster4\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster4\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ncontent-length: 1189\r\nvary: Accept-Encoding\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":8025,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"089e70309da2f7d8820781accb47e06d","sha1":"e36ba17ca8d77a080eed842de7f4a50e5c344339","sha256":"05fe836e9be8552ffee033e80b37f873d376897c8525424dcb91be727d4b4845","sha512":"18a30162c887441414def15dbe0cd859208d200a6f57c7f35d093a222c83e9e39a38618bcfed2ae828c1e67b4887e35fcd486efbfbb57d1178762427f03ca19a","ssdeep":"192:O6VOGYtS+ngqCu+mcqRWH1jX1hpAoLgmasiBH0BA1A3l59zvQ:OyE+zxPn8jjOa","tlshash":"5ef1ac2079678ef7ecd7850290977649296d0337b0c999e0b7ccce1806dc867a629d2e","first_seen":"2025-12-15T13:29:53.421872Z","last_seen":"2025-12-21T18:11:09.091691Z","times_seen":20,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/user-api/privacy-banner-api/intercept_list","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /bff-api/user-api/privacy-banner-api/intercept_list HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"brand\":7,\"domain\":\"eur.shein.com\",\"siteUid\":\"eur\",\"language\":\"en\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3fDE3NjU5MzM2NTQ4MDV8NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\ncontent-encoding: gzip\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: 1f361e7d85ee15d\r\nserver-timing: g;dur=5\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster2\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ncontent-length: 1414\r\nvary: Accept-Encoding\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8322,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"440002254aabf664ddf206e4e1af98c0","sha1":"6bd8491d04fe10c4f52f9e1d950d9476138c8245","sha256":"96625197becd3b2ad2ac0567e409c49faa796ffbc10d6615bd38276b304133eb","sha512":"09c9c62592bbcf84c4d24defd687973018ecb52eefd85c613c5890db84276507461729298de5495bf40cf97a6cb5eb364a3e94e08e36749853d8ab6532036f83","ssdeep":"192:oPedcDfvomWrYwmfsRS2XMnLflomW8s8mpTickvygoVoMxd/0/E3eVoS//RRDqMg:oPedqvomSzmfsRS2XMnLflomrs8mpTiy","tlshash":"cc02939f42dc9cac1b561b9465863518ded7759e5fc3fc82e238cfd483aa0fa401852e","first_seen":"2025-11-04T22:07:02.211107Z","last_seen":"2026-06-03T06:21:04.418153Z","times_seen":686,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/order/mall/cart/index?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /bff-api/order/mall/cart/index?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\nContent-Type: application/json\r\ntimezone: GMT+0\r\nbrand: shein\r\nchannel: pc\r\nappcurrency: EUR\r\napplanguage: en\r\ntoken: MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\r\nsiteuid: eur\r\ncurrency: EUR\r\nlanguage: en\r\nx-oest: RTBEMzU0QzBfODEyN19GQnwxNzY1OTMzNjU2MTk5fDg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: \r\nx-request-by: bridgeX\r\nuber-trace-id: ffb233ae37c137db:ffb233ae37c137db:0:0\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933656201\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=sjiKiZGFlZGZlZDEzNDY5MDU5YzM0ZWU4NDQ3NGU5MmFjOTRmZWJjNmM1ZmEzZWQyMmUxYjcyMDE2YjVjMWE3YjAxZg%3D%3D\r\nContent-Length: 231\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":231,"data":"{\"auto_use_coupon\":\"1\",\"couponFilterGoods\":[],\"filterTagId\":\"\",\"filter_tag\":\"\",\"holdTopFilterTagIds\":\"\",\"isOpenScreenEfficiency\":\"1\",\"userLocalSizeCountry\":\"\",\"callScene\":\"miniCart\",\"city\":\"\",\"district\":\"\",\"postcode\":\"\",\"state\":\"\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1573\r\ncontent-encoding: br\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEfDE3NjU5MzM2NTYyNDd8MzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-cart\r\nx-gw-traceid: ffb233ae37c137db\r\nserver-timing: g;dur=28\r\nvia-shein-gateway: c-shein-pc!bff-cart\r\nheader-cmdb-name: bff_cart_eucentral_prod_cluster3\r\nheader-cmdb-name-origin: bff-cart-eucentral-prod-cluster3\r\nheader-cmdb-sname: bff-cart-eucentral-prod-cluster3\r\nheader-cmdb-app-name: bff_cart\r\nheader-cmdb-app-name-origin: bff-cart\r\nheader-cmdb-app-sname: bff-cart\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4395,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"999e408aa2589b3a16e772d17b06eff4","sha1":"14bff5aa23a6d84c6d8dd999b42a424420b3c1bf","sha256":"e1f1b4a65bb0c4cc3b7a790a2de4e3f88d5a958925ca27f82f0d9f8c469f50b4","sha512":"84dc05c3b2f95d9b33db761f243f22688f203e2d6c88fcb2c0708475277ee2e3c015ab2aed005011ed1695b908b76715046e0879b2d0772b999d6433150bbb9a","ssdeep":"96:IfM+AltNFEWQknKlLGzD/9JPK7YLqpP9KWA1GNjqJSdzOB078XC:T+qAWpYuPyYLqF9KWMGNjvJV","tlshash":"7c910282b20f6d3a02af5654ed8e7c1199dc233745dcce156dc98b3c02ed67f2506b19","first_seen":"2025-12-09T15:42:57.714063Z","last_seen":"2025-12-21T18:11:09.071609Z","times_seen":13,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/j/pi/2025/07/18/fa/1752805771a607de3891d4d8a4de70b94eab13672e_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/j/pi/2025/07/18/fa/1752805771a607de3891d4d8a4de70b94eab13672e_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22190\r\ncf-ray: 9af286485b33569b-OSL\r\nlast-modified: Sun, 16 Nov 2025 23:42:57 GMT\r\netag: \"691a6181-56ae\"\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ncache-control: public, max-age=604800\r\nedge-cache-tag: 2025111801\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 2039302\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22190,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"bdb1f8ec0274f4ecc2b8c848faaa2857","sha1":"9f76b8b17a32bc39461da457c5f9844671a9b07b","sha256":"d21e44c02e0ed6e1fb5bbfcb34fed9e4a2c282e2921e372d8009b8dac7f844ff","sha512":"ec77488188f18c1f23aeba0f35dbfee1a657fff2747199e7e8807480a2b573d18ec741d455ae239f13a7a6f39f950e8b47b2aff820de600a7e96127da14309c8","ssdeep":"384:gYNg7sP2TpmV2kieo4Y/VbXQIKgitMDbWghPnL1BMjQa0WMMAO:gYyTpmkkip4Y/1QsitFIUP3f","tlshash":"fda2d17cd96ed308ce6283bcb4d136a792877242a7638ea534756f200419ce0cd7a3ad","first_seen":"2025-11-19T14:44:43.121297Z","last_seen":"2026-01-24T21:18:49.737046Z","times_seen":10,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/js/310.6b9f7ae.js","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/js/310.6b9f7ae.js HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Nov 2025 15:12:18 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 13290\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49410,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49215)","md5":"893767b43d1e6644f54e58c482ce7fee","sha1":"8855ece90b213cbc713c99d42f90800e34797b46","sha256":"04f65fc3ca5497ec83e5b9fcf7099a0f3cb55b5699a063cd0196f37314277aa4","sha512":"d49be73b509b0577a708eae6d1bb8cddc276237b5baf9e48f060e9eb2fabc32d1816df3deee08a6c2c6d811d406f14f42017b24287f328bb15f70b5ca8b3d478","ssdeep":"1536:YCTjjfW1OZ3Er7Pri2EF6uWPikVjRIt+GiG1pUwzE8YRJ7bAnE2VMnBpNhNjK:YCTjOfr7PzEF6uWPikAt+GiG1pUwzE/o","tlshash":"8923b5cab753f0945f73b4b4d02b601fa16a7a0061858050b67ac8e1796cacfb632f7d","first_seen":"2025-11-06T16:13:23.068905Z","last_seen":"2026-03-23T01:37:21.058866Z","times_seen":550,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/app-track/metric-info","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /app-track/metric-info HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1191\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1191,"data":"{\"data\":[{\"timestamp\":1765933653040,\"local_time\":\"12/17/2025, 1:07:33 AM\",\"params\":{\"pathname\":\"/ark/2812\",\"url\":\"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\",\"host\":\"eur.shein.com\",\"screen\":\"1280*1024\",\"uemId\":\"9c26ecf5-63d9-589a-a5de-55487193fe4c\",\"sdk_light_version\":\"0.2.12\"},\"sdk_version\":\"1.0.0\",\"browser_name\":\"Firefox\",\"browser_versions\":\"134.0\",\"os_name\":\"Windows\",\"device_level\":1,\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"environment\":\"production\",\"app_name\":\"shein\",\"language\":\"en\",\"sub_site\":\"eur\",\"money_type\":\"EUR\",\"device_type\":\"pc\",\"session_id\":\"esqiv2ozdgqktm3riwng5\",\"tags\":{\"pathname\":\"/ark/2812\",\"page_id\":\"2812\",\"businessType\":918,\"scene\":\"page_ad_landing_mdmpUserLanding\",\"did\":\"no_did\"},\"metric_name\":\"page_ark_production_mdmplanding_track\",\"type\":1,\"value\":1,\"message\":\"{\\\"page_name\\\":\\\"page_ad_landing\\\",\\\"page_id\\\":\\\"6342\\\",\\\"page_param\\\":{\\\"ad_activity_name\\\":\\\"newuserprice\\\",\\\"scene_id\\\":\\\"m_app\\\",\\\"platfrom_nm\\\":\\\"swift\\\"}}\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/abt/merge/get_abt_by_poskey?_ver=1.1.8\u0026_lang=en\u0026posKeys=NewPopQueue","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /bff-api/abt/merge/get_abt_by_poskey?_ver=1.1.8\u0026_lang=en\u0026posKeys=NewPopQueue HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nSmDeviceId: \r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: HewaI0AR-isVikRSGpX30TnfiRycO7R9AxSI\r\nx-oest: RTBEMzU0QzBffDE3NjU5MzM2NTUxNjZ8ODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nwebVersion: 13.9.4\r\nx-ad-flag: 8FkZa3NuCnoO+IBsqSDbVbjbZFDPBy/Ccg7HPaagWd6Z0k+h6+rK67aH0c1E5efGgWYq61YJe9rvWC5xPj7ZVVYoP3i9GVpBfVkWfa8EsrsGa2KgaixOSZmJfGKy6YI874yU0pb2l85B3RSMhSMlbQ==\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nuber-trace-id: ffdb2d313a9c18d7:ffdb2d313a9c18d7:0:0\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933655183\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=9UjmxMDY3YzRjMjRkZjc2ZDlmOTE3NzQwMzNlNWNhNzM5ODRlY2RjM2U4YmRiOGQ2YTNhNmQxOTUxNGZmYTQ3NjVlNw%3D%3D\r\nx-cs-random: sdk error\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 606\r\ncontent-encoding: br\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RXwxNzY1OTMzNjU1MzYyfDBEMzU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: ffdb2d313a9c18d7\r\nserver-timing: g;dur=3\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster2\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1432,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"857be8b533d5344876fd06bd55f834d2","sha1":"635d72ba22d5d656bbe6312d1fef1ebbe251431d","sha256":"657627309a3201b55e662887b5e09febf38ff91f623562a1ac0a7b6ca17e539b","sha512":"fac0cdcd144897a88899c238230901d9fbdd7e273006ea02cea631934579263db540fe59618020238addd49e3f46f877cede38f425458141f3e76f4bb9d1878b","ssdeep":"","tlshash":"a7212521224dc8b793dd12b490e91c3475dd309870cf6d48fa6a8d675fc98e425b3a9d","first_seen":"2025-12-17T01:08:43.05711Z","last_seen":"2025-12-17T01:08:43.05711Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/69944.1e1b341b0dffd3fd.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/69944.1e1b341b0dffd3fd.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:37 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 4133\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:35 GMT\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":12152,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12101)","md5":"24157f9c182c1b466bf2bf9e19627d24","sha1":"b00c486619a8fedd0b920228758e14d6082b8d6b","sha256":"5d8aedfd5c85cf46b589fb2e4afad516cf4c1b2012cdc783b5059faaee15f3ad","sha512":"66dfc265e8547131afeb65b9a281fcc1699bb77575530f2f94e6880dc9aecc6c9a7ed53373a73ae8fcbec180816db99e5e629a5a992a89b0cf3dc5fd31132a06","ssdeep":"192:MP/TUrqcEJG9G4M2EGGJO0l7Tw6bgbN9cqTPvq84yN/DByTU14CTEMAQLJCneatr:MP/uqjWt8O0u6bkN2mvq84yN/DByTU1y","tlshash":"d842d957e23aa8cb0c95d4a4f01b115c1819ac0cfa9cde49f6b9dda36c0d527b5d3f08","first_seen":"2025-12-09T15:42:57.590398Z","last_seen":"2025-12-17T05:54:39.216176Z","times_seen":17,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"best-r3v3nue.com/?url=https://trk.offerroads.com/2JRNK2B/8CZ1J6L/?sub1=PNpWKrG8KmbnB5kqsxUeup\u0026source_id=3596_10281132\u0026sub2=PropellerAds1%20-%20noEnc\u0026sub3=3596","fqdn":"best-r3v3nue.com","domain":"best-r3v3nue.com","tld":"com"},"ip":{"addr":"172.67.153.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-17T01:07:29.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"best-r3v3nue.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Dec 2025 15:46:07 GMT","end":"Sun, 15 Mar 2026 16:44:39 GMT"},"fingerprint":{"sha1":"A5:21:78:B2:D6:45:EC:3A:06:0B:A5:70:8B:DC:F8:E5:2C:A7:00:A8","sha256":"28:F2:9F:A0:E9:3C:CC:F3:48:FE:06:32:2B:70:EB:AF:FB:63:2C:D5:50:BA:25:5A:07:C0:69:0A:A8:3E:0D:10"}}},"request":{"raw":"GET /?url=https://trk.offerroads.com/2JRNK2B/8CZ1J6L/?sub1=PNpWKrG8KmbnB5kqsxUeup\u0026source_id=3596_10281132\u0026sub2=PropellerAds1%20-%20noEnc\u0026sub3=3596 HTTP/1.1\r\nHost: best-r3v3nue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:29 GMT\r\ncontent-type: text/html\r\nreferrer-policy: no-referrer\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=urb8K5y07RVB2ylv%2FWAZQ9zHsE0mrk2yKOD3IG1hSIYIgpFiLSgBOpVAZ4B%2BgyYhwcf0inJA35rT%2F%2FFmv91rEA5oM6edzeqQFMMGz534pvA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9af2861b6d94a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":600,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"64b3f3509ed63a190fd75d8e2c69ba97","sha1":"0bd6529a4132343e144b2b058cfecc3f483bd53d","sha256":"9336e45643373f0e166ea8bf5520c31d5884a38f978c9993f0691ec5cd5036f0","sha512":"313488971d7d395c5ec01dd50709c100c7dd7d17f73de43b89131a88b17d389b5c2ff7dec4c05e0e53321628725cbe463615c80a59f008350267d026543da94e","ssdeep":"","tlshash":"cef0d49fb9f30d2427a3952415f4f70c1f5640132b49d4093ecd13404f9eb5184d3a5d","first_seen":"2025-12-17T01:08:43.058508Z","last_seen":"2025-12-17T01:08:43.058508Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":5,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onelink.shein.com/favicon.ico","fqdn":"onelink.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"35.207.106.184","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onelink.shein.com/13/4s0r28uoh4d8?url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1","date":"2025-12-17T01:07:30.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Thu, 20 Feb 2025 00:00:00 GMT","end":"Mon, 23 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F1:A9:45:8B:75:AE:6C:52:37:12:F9:5D:B4:3E:3C:F7:F7:DE:83:89","sha256":"B1:91:6F:FE:DF:A6:53:BE:ED:73:E3:FE:D2:FD:18:D3:98:98:A6:4A:0A:DB:6B:C6:CC:4A:58:E4:DE:87:EC:A2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: onelink.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onelink.shein.com/13/4s0r28uoh4d8?url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Wed, 17 Dec 2025 01:07:30 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Accept-Encoding\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":98,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e252f757fc5947f3c4d6c279237e3f51","sha1":"e7ab19b444675d3b100f703b56f38ec088ab2399","sha256":"33a6082bafbfafea273025d8db8073cd619f9dfee8e707cb5256f0f388a641b2","sha512":"8eb93e276849e591b222ea4e93bdc95d89ce8bf5bfa720134c7f660dcdeae76716566b16367bda3a4217f2c6f4c18550c644ce47737440f3fee517d242fc5845","ssdeep":"","tlshash":"6cb012000a4d509e9e45c5a444cc2e52c550dbc30c240c5074eace20e90182f6424415","first_seen":"2025-12-17T01:08:43.059293Z","last_seen":"2025-12-17T01:08:43.059293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/app-track/metric-info","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:34.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /app-track/metric-info HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nContent-Length: 781\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":781,"data":"{\"data\":[{\"app_name\":\"shein\",\"timestamp\":\"1765933654287\",\"local_time\":\"12/17/2025, 1:07:34 AM\",\"session_id\":\"\",\"member_id\":\"\",\"sdk_version\":\"1.1.43\",\"network_type\":\"\",\"device_id\":\"\",\"device_level\":\"1\",\"device_type\":\"pc\",\"device_model\":\"\",\"device_brand\":\"\",\"browser_name\":\"\",\"browser_versions\":\"\",\"os_versions\":\"\",\"os_name\":\"\",\"language\":\"en\",\"sub_site\":\"eur\",\"money_type\":\"USD\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"referer\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"level\":\"INFO\",\"tag\":\"\",\"message\":\"armorToken load success\",\"params\":{},\"environment\":\"production\",\"value\":1588,\"metric_name\":\"si_anti_spider_sdk_c\",\"tags\":{\"url\":\"https://armor.ltwebstatic.com/she_dist/armor-libs/infp/infp.3.10.0.min.js\",\"type\":\"loadInfp\"}}]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"armor.ltwebstatic.com/she_dist/armor-libs/antiin/antiin.1.9.1.min.js","fqdn":"armor.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/armor-libs/antiin/antiin.1.9.1.min.js HTTP/1.1\r\nHost: armor.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 13 Nov 2025 09:27:27 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 39883\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":135034,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8206485312e901fa0de388595d182fae","sha1":"bfb5128cb43547524281dea3b4e32c38a2125096","sha256":"e2e6f8c888067aee778c93b50611ead91ac19582c18fdcfd8978aa9a0f0c83fd","sha512":"8f03f188896d79d4ab62d818e00cb5402795d763894bdcbeb40efa9bae3cc0fe582388bdd89695d5e89f771fba87b1214afafcd19d96fdf8388cbbc015788781","ssdeep":"3072:YzF4jAB2KVRo4/u17utUgaMA0MbeE8uK21weUi0kaIX5TH3pPNI7V:MwgRsYUW","tlshash":"53d375de7ec57160039750f8097f04a6d7bab958a44ed240c927c1c3b8f9b5aad27e38","first_seen":"2025-03-17T22:12:11.812004Z","last_seen":"2026-06-03T06:21:04.377799Z","times_seen":1644,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/59924.d88498ca35d99ae8.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:36.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/59924.d88498ca35d99ae8.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:37 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 481\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":650,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (599)","md5":"07374b718c837d6a9a392eabdb1f2ce2","sha1":"695c6df3101c442caea9528cc7dddd8233390ea0","sha256":"1dd621c6384792d13246984101be88913faae29cab36d9fb9d3391ae81dab4f5","sha512":"b2d4d0bdc1537b50511f281b2e70d2ba53e8586f6eb45bb0ddddfc7152c8ce484f9b018c3e664fa4a0c261b2235b105a8bc51b9515c28831cf7cf35e2c39dc3c","ssdeep":"","tlshash":"eef068e29ae83c6e196310dd6493cb9bc4bc291671b7d7105e47d4f100a1a19f6c0cdd","first_seen":"2025-12-09T15:42:57.663682Z","last_seen":"2025-12-17T05:54:39.318555Z","times_seen":17,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/20297.384a92ee6ba8aebc.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:36.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/20297.384a92ee6ba8aebc.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 05 Dec 2025 06:08:31 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 11545\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36422,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36371)","md5":"6ef2e33aa126d2dca33e42d964606a84","sha1":"75598a2c6bb65e92e8ea9735bf136474fffcae04","sha256":"0014149a651f0ba10cf69d329fd8c60cc09aab285f9ce64f426bc75275b7b55d","sha512":"f6020f8501eb9fc35c4d8e037964bda3e72284807551716efec169076d4103a29f8bd6e727f2307211d69f22d4a156477cc3ad10aefabd7ba9e941bbc2788fd4","ssdeep":"768:HGPUkZhNbo5bszhhCUMglPhSFpNBLJpsxWp4/MJSAw1rYj/PJ2iZtdGvG4gWsNzY:nLIjY8IbJrSmoxlQK3VL1gQ","tlshash":"4ef2e989bbf3f52757a714da54771002e73a860c380e8064f35c99db6d6a80a967bf3c","first_seen":"2025-05-19T19:51:56.034636Z","last_seen":"2026-01-20T19:05:52.830849Z","times_seen":1097,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token,ds-from-terminal,x-oest\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"armor.ltwebstatic.com/she_dist/armor-libs/infp/infp.3.10.0.min.js","fqdn":"armor.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/armor-libs/infp/infp.3.10.0.min.js HTTP/1.1\r\nHost: armor.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Sep 2025 05:54:45 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 122515\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":424742,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (52878)","md5":"9487081996f40dcfcf06d0e3117aff28","sha1":"a838996caa3313c89e4b0e0d6c361daaab5b0f13","sha256":"26dd4b6938f50c1c11eb38b50ba0a1014b154c7223f42abef7fccb1e86bdb365","sha512":"bbd6fa09cda88cbf606d4eeb631c7c6c2ce5fa391cf2d78156b81456027ae5741433d7cf275b37119c7983c7742ddd3cd237eb30a82017b7ed55ca8607cc4a24","ssdeep":"6144:vD4JTWBk6QEzB8OWZDBvBlPuKnqcXZeKfy:wNEl8OWZDBfqcs","tlshash":"bc9470cc7ee1b264039750e94c7f148ae6aabda9f04ed040d916c1c278f9b5d9e27e34","first_seen":"2025-09-18T13:14:40.94132Z","last_seen":"2026-04-26T22:38:02.145736Z","times_seen":816,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":23,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/sh5_dist/libs/swiper/modules/navigation-element.min.css","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:34.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /sh5_dist/libs/swiper/modules/navigation-element.min.css HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: text/css\r\nlast-modified: Thu, 23 Oct 2025 06:34:31 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 355\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1267,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1267), with no line terminators","md5":"dfdb59d1ea9b798248b3e83cd0194357","sha1":"fca19d65068ffc8cc46aa2e92c44cda5ab149db7","sha256":"e0284ae2d361fa1c887af42aff133b3f0872a143aac5f1ef107ababcfbbafacb","sha512":"46f743232aefa67c2189b0970279e34b52a0ecdf16a8f54f66a545d906d0d6bb1338043b98a58098e544902908c25467e8eb7829cc7ecfd9de1f838e70084fb5","ssdeep":"","tlshash":"952106d203a4573f8b135f6b57868379b2269cc54583b380d1c1eea8c6fa471052d7af","first_seen":"2024-12-11T08:14:29.448095Z","last_seen":"2026-06-03T06:21:04.439722Z","times_seen":806,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/deliveryapi/delivery-feeds/feeds_list?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:34.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"POST /deliveryapi/delivery-feeds/feeds_list?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\nContent-Type: application/json\r\ntimezone: GMT+0\r\nbrand: shein\r\nchannel: pc\r\nappcurrency: EUR\r\napplanguage: en\r\ntoken: MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\r\nsiteuid: eur\r\ncurrency: EUR\r\nlanguage: en\r\nx-oest: RTBEMzU0Q3wxNzY1OTMzNjU0NjE2fDBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: \r\nx-request-by: bridgeX\r\nroute-bff: TRUE\r\nclientid: 100\r\nbff-clienturl: https://eur.shein.com/ark/2812\r\nbff-source: shein;pc\r\nbrowsermode: Firefox\r\nbrowserversion: 134.0\r\ndevicesystemversion: Windows 10\r\ndevice: Windows NT 10.0\r\nuber-trace-id: ffe39e9ada9c25c1:ffe39e9ada9c25c1:0:0\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933654619\u0026d=e3226fbd24e0ea1c3b0d9e4ed75be40f\u0026e=JsMZjZGNlOTBiNWEwYTI5YjkxNzJmZmIwZGZlYzMyNTg4MDE0NDdmY2ExYTY2ZTY4ODgzOTc3NjI5NWY2MmU3OTJiZQ%3D%3D\r\nContent-Length: 373\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":373,"data":"{\"client_info\":{\"app_version\":\"\",\"client_id\":100,\"currency\":\"EUR\",\"dev_id\":\"E0D354C0_8127_FB84_7AAF_2CA36E3475C7\",\"language\":\"en\",\"site_uid\":\"eur\",\"token\":\"MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\"},\"delivery_info\":{\"did\":3586491,\"param_map\":{},\"sub_business_type\":3,\"business_type\":918,\"page_id\":\"2812\"},\"page_num\":2,\"page_size\":20}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json\r\ncontent-length: 11671\r\ntraceid: ffe39e9ada9c25c1\r\ncontent-encoding: br\r\nx-gw-traceid: ffe39e9ada9c25c1\r\nserver-timing: g;dur=78\r\nvia-shein-gateway: c-delivery-feeds!swift-bff\r\nheader-cmdb-name: swift_bff_eucentral_prod_eur\r\nheader-cmdb-name-origin: swift-bff-eucentral-prod-eur\r\nheader-cmdb-sname: swift-bff-eucentral-prod-eur\r\nheader-cmdb-app-name: swift_bff\r\nheader-cmdb-app-name-origin: swift-bff\r\nheader-cmdb-app-sname: swift-bff\r\ntiming-allow-origin: *\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":105979,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d01f8317ff394c89856535c005b54277","sha1":"8b879dee89aa2675facbbbc46cbf1d88b9801063","sha256":"50a5f27cbfaf06e9348aba3055577bbbedde85d7a5036252b0b3a3de58b346a5","sha512":"632e41d1a507df821f9576b34fd21a367027878244da28b127754ca2dc30e7abcf1bffff4093887c0b96d7710b1dadbea5bef2ab827bf0543236e8dba6f477e2","ssdeep":"768:IGdmshPhA3KrXh7kjbPUDaI4Cfw1/53WVceh0zIVavbiof1:BdmshPh3xkjbPUDaIo1/53WVceMf1","tlshash":"3ba37858b588dcfb58ad9944ed4f2d7de2ac607bc089df95e2c04e3c4178a253f68b48","first_seen":"2025-12-17T01:08:43.062161Z","last_seen":"2025-12-17T01:08:43.062161Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/event-center-60.1a0253f71343db87.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/event-center-60.1a0253f71343db87.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:37 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 8166\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:35 GMT\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":21852,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21783)","md5":"8eaeeec340f29f6df408780fb0dee621","sha1":"10a36a179b6948bc534435dab79a54664b977103","sha256":"cf3fbe2b7b78e47ff71323df21d2bf94364da5991e21a30d5370ab6219397635","sha512":"56e6576b13f33cd6f9a8686f4c75cc4ef7df304991b689401994fbfd4f2d454032f0bafcc85867b67927ace65cf8ac3a878f3a6a1fe2c2e20258b198bc784505","ssdeep":"384:P14+1uENryEjyvh0aXOQVhZ4OzDzPFL4q4DkUJHZwyR8H/mjWc0k+LUBYX2fVqmY:++9sfvh0aXOQTZ4OzDzPFLf4wURZwyST","tlshash":"9aa22bb8a09a54ff87f918c1b4e71d44ad987b1a3188856cd2e7ceb2141ef46313367e","first_seen":"2025-12-09T15:42:57.628185Z","last_seen":"2025-12-17T05:54:39.340437Z","times_seen":17,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/user-api/common/userinfo_ugid?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /bff-api/user-api/common/userinfo_ugid?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/iframe_login\r\nSmDeviceId: \r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: HewaI0AR-isVikRSGpX30TnfiRycO7R9AxSI\r\nx-oest: RTBEMzU0QzBfODEyN3wxNzY1OTMzNjU1MTY2fF9GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nwebVersion: 13.9.4\r\nx-ad-flag: 8FkZa3NuCnoO+IBsqSDbVbjbZFDPBy/Ccg7HPaagWd6Z0k+h6+rK67aH0c1E5efGgWYq61YJe9rvWC5xPj7ZVVYoP3i9GVpBfVkWfa8EsrsGa2KgaixOSZmJfGKy6YI874yU0pb2l85B3RSMhSMlbQ==\r\narmorToken: S0_3.10.0_4ucrOtHBQRKEaOOI5EyMebKun4oiTTQwRkJcue0Xnm53ef6L8Av_q_nz-bgOIwg3pZ44ITruBF06jFnwqtYTMPvkAegzxL5rwnO3f8u1GEWcEcxrywxjMwH4SnG2jtUgIjDfnYxdfQdNhHNXHZ30ezP7yKNfJaby5QgGA2HeATX5jIIX3lXtMgR6Xh3lUrlENDWxUQUiKFeE_m19_Q_qZh7JEGpuODih4CXPwlSQ95_UdbhgVW5qyYdI7X6aqJHAM7_7mP0TkM550h5RcHpskQ_1765933654286\r\nuber-trace-id: ff06222e5319f9a0:ff06222e5319f9a0:0:0\r\nx-gw-auth: a=xjqHR52UWJdjKJ0x6QrCsus66rNXR9@2.0.13\u0026b=1765933655183\u0026d=06942fbc37be6a98b8dee877d03ae8f6\u0026e=Qmo4tOTkyZTljNzc5MTIzYjhmMWFkYWIxMTQzMDhmNGQ5NDVmNWFhMmUxMzQ0ZWMwODYyNjRkYTNhODVhMWE4ODNiOA%3D%3D\r\nx-cs-random: sdk error\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 52\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEMzU0QzBffDE3NjU5MzM2NTUzNjF8ODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: ff06222e5319f9a0\r\nserver-timing: g;dur=2\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster2\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster2\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"eee806c55cadab04733c791218470546","sha1":"49f2791e08302f4dd41b08ad7a63aa4c5106aef1","sha256":"ae468c536534d57a73119c31160a3ece23c8238250bff17aaeb303243ed44cf1","sha512":"e2575f3d294fa77fac71491c42e4d9c9e74651ba4c54122f6fd542d4ae43e759c3ab465915a14b8e75e42881a80ea0a6cc78057c259ab8d5983a564f744fd7af","ssdeep":"","tlshash":"b2900205580e1c130c135225488e47c1559d216080a9c6141d2cdaa21d155951420024","first_seen":"2025-12-17T01:08:43.063461Z","last_seen":"2025-12-17T01:08:43.063461Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/clientPerInfo","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /clientPerInfo HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nDS-ACCESS-TOKEN: 4bc3a2dd3549401b817438eede7e78da\r\nDS-ACCESS-SITE: shein\r\nContent-Length: 1353\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1353,"data":"{\"resource\":\"workerInitType:navigate-deliveryType:empty\",\"page_from\":\"\",\"page_version\":\"2812\",\"data\":[{\"key_path\":\"fcp\",\"values\":{\"num\":1022}},{\"key_path\":\"ttfb\",\"values\":{\"num\":471}},{\"key_path\":\"interactive\",\"values\":{\"num\":487}},{\"key_path\":\"dcl\",\"values\":{\"num\":1057}},{\"key_path\":\"tcpt\",\"values\":{\"num\":19}},{\"key_path\":\"dnst\",\"values\":{\"num\":51}},{\"key_path\":\"ctt\",\"values\":{\"num\":360}},{\"key_path\":\"gwt\",\"values\":{\"num\":265}},{\"key_path\":\"ttfbv2\",\"values\":{\"num\":471}},{\"key_path\":\"onload\",\"values\":{\"num\":5242}}],\"browser_versions\":\"134\",\"browser_name\":\"Firefox\",\"os_versions\":\"10\",\"os_name\":\"Windows\",\"device_name\":\"\",\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"visit_id\":\"u1tz6kf4nfgg\",\"host\":\"eur.shein.com\",\"local_time\":1765933658354,\"timestamp\":1765933658354,\"client_url\":\"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\",\"url_path\":\"/ark/2812\",\"app_versions\":\"\",\"network_effectivetype_type\":\"unknow\",\"worker_init_type\":\"navigate\",\"cache_type\":\"unknow\",\"is_crawler\":0,\"device_type\":\"pc\",\"sub_site\":\"eur\",\"language\":\"en\",\"home_site\":\"shein\",\"page_name\":\"page_ark_production_918\",\"id\":\"9c26ecf5-63d9-589a-a5de-55487193fe4c\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1","fqdn":"www.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"104.18.1.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-17T01:07:30.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Thu, 20 Feb 2025 00:00:00 GMT","end":"Mon, 23 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F1:A9:45:8B:75:AE:6C:52:37:12:F9:5D:B4:3E:3C:F7:F7:DE:83:89","sha256":"B1:91:6F:FE:DF:A6:53:BE:ED:73:E3:FE:D2:FD:18:D3:98:98:A6:4A:0A:DB:6B:C6:CC:4A:58:E4:DE:87:EC:A2"}}},"request":{"raw":"GET /ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1 HTTP/1.1\r\nHost: www.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onelink.shein.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 17 Dec 2025 01:07:30 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 0\r\nlocation: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\ncf-ray: 9af286258ab476ef-OSL\r\ncdn-rsite: cf\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; path=/; domain=.shein.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1143387,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":26,"dns":15,"connect":1,"send":0,"wait":11,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cjs.ltwebstatic.com/unpkg/@shein-risk/si_anti_spider@0.0.26/lib/umd/index.min.js","fqdn":"cjs.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /unpkg/@shein-risk/si_anti_spider@0.0.26/lib/umd/index.min.js HTTP/1.1\r\nHost: cjs.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 26 Oct 1985 08:15:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 20120\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78532,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65420), with no line terminators","md5":"f413e380a7d0a3324a5c9f2e69ce79c3","sha1":"f8eb0102ec796df2d2b09b4a243614b615d5fe32","sha256":"c2285901ddfd2c53ac9a7752c7ee6aa7172d0299221860de27d58059b5812c89","sha512":"51a4a9f122393af7788e7db3b2057029131c4621f9adf08ed7968a61063f580a73c16692aef7f8bf388719a1630f4e98d389d124a851ba26ff7464c0a75c32b0","ssdeep":"1536:B5so7n6xBzYW+Zk+tEBT2HEU4WqWlV4OufmQjMQAM0DGF4evL43KDMyMCpOyWQoh:Qo7n6xBzwqBOxGtPfmQjMQ4GFzD43KDi","tlshash":"e173e896e766d0660eb2a4f2d0675123e1293b057440d0a477ae5ce378cdbcfb262e3d","first_seen":"2025-10-28T06:11:14.906014Z","last_seen":"2026-01-06T16:24:31.393994Z","times_seen":370,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/app-track/metric-info","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /app-track/metric-info HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1063\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1063,"data":"{\"data\":[{\"timestamp\":1765933652943,\"local_time\":\"12/17/2025, 1:07:32 AM\",\"params\":{\"pathname\":\"/ark/2812\",\"url\":\"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\",\"host\":\"eur.shein.com\",\"screen\":\"1280*1024\",\"uemId\":\"9c26ecf5-63d9-589a-a5de-55487193fe4c\",\"sdk_light_version\":\"0.2.12\"},\"sdk_version\":\"1.0.0\",\"browser_name\":\"Firefox\",\"browser_versions\":\"134.0\",\"os_name\":\"Windows\",\"device_level\":1,\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"environment\":\"production\",\"app_name\":\"shein\",\"language\":\"en\",\"sub_site\":\"eur\",\"money_type\":\"EUR\",\"device_type\":\"pc\",\"session_id\":\"esqiv2ozdgqktm3riwng5\",\"tags\":{\"pathname\":\"/ark/2812\",\"page_id\":\"2812\",\"businessType\":918,\"scene\":\"SwiftCouponTwoPlugin_haveCouponData_noLogin\",\"did\":\"2626901\"},\"metric_name\":\"page_ark_production_coupon_api_track\",\"type\":1,\"value\":1,\"message\":\"{\\\"member_id\\\":null}\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":117,"dns":10,"connect":25,"send":0,"wait":28,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/app-track/metric-info","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:34.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /app-track/metric-info HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nContent-Length: 794\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":794,"data":"{\"data\":[{\"app_name\":\"shein\",\"timestamp\":\"1765933654121\",\"local_time\":\"12/17/2025, 1:07:34 AM\",\"session_id\":\"\",\"member_id\":\"\",\"sdk_version\":\"1.1.43\",\"network_type\":\"\",\"device_id\":\"\",\"device_level\":\"1\",\"device_type\":\"pc\",\"device_model\":\"\",\"device_brand\":\"\",\"browser_name\":\"\",\"browser_versions\":\"\",\"os_versions\":\"\",\"os_name\":\"\",\"language\":\"en\",\"sub_site\":\"eur\",\"money_type\":\"USD\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"referer\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"level\":\"INFO\",\"tag\":\"\",\"message\":\"mainjs load success\",\"params\":{},\"environment\":\"production\",\"value\":1424,\"metric_name\":\"si_anti_spider_sdk_c\",\"tags\":{\"url\":\"https://common.ltwebstatic.com/dist_bundle/xjqHR52UWJdjKJ0x6QrCsus66rNXR9/2.0.13/1/main.js\",\"type\":\"loadMain\"}}]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shein.ltwebstatic.com/svgicons/icons/sh_pc_sui_icon_viewmore_right_40px.svg","fqdn":"shein.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:34.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /svgicons/icons/sh_pc_sui_icon_viewmore_right_40px.svg HTTP/1.1\r\nHost: shein.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 13 Nov 2025 03:39:13 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 317\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":668,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a4aca17f92ddf49d5da25d01f0655587","sha1":"7f66a2c4d31a93ef2957002ba7a3ced9421bdd9d","sha256":"e44941340571e3a61ba0fcee47d66f014a4f28eff0da325b5557bcd1b8d1438f","sha512":"6c1d5a02ca53a96b44ebb322490e03ab6c54be8c543683eb06abb29767fa58bcd74a895431c13b21bfb4eb46337f7ca90c6d1fdff8e9da5fe96603b648b23f04","ssdeep":"","tlshash":"3501ddb9c1bb8ac4d980c7f0e6fab28aa0333b4d10ca405464f57da86c7457dcc265d3","first_seen":"2025-07-18T12:09:05.906249Z","last_seen":"2026-06-01T22:35:14.860921Z","times_seen":751,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nds-from-terminal: pc\r\nx-oest: RTBEMzU0fDE3NjU5MzM2NTc5MzN8QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nContent-Length: 2015\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2015,"data":"{\"activity_name\":\"expose_navigation_menu\",\"activity_param\":{\"first_menu_content\":\"Kids\",\"first_menu_hole\":\"7\",\"second_menu_content\":\"Kids\",\"second_menu_hole\":\"7\",\"second_node_id\":\"110003134\",\"src_identifier\":\"fc=Kids`sc=Kids`tc=0`oc=0`ps=tab07navbar07`jc=itemPicking_017185550\",\"second_content_list\":\"/RecommendSelection/Kids-sc-017185550.html?ici=eur_tab07navbar07\u0026src_module=topcat\u0026src_identifier=fc%3DKids%60sc%3DKids%60tc%3D0%60oc%3D0%60ps%3Dtab07navbar07%60jc%3DitemPicking_017185550\u0026adp=\u0026src_tab_page_id=page_ad_landing1765933653032\",\"is_slidebar\":false,\"third_menu_content\":\"\",\"third_menu_hole\":\"\",\"fourth_menu_content\":\"\",\"fourth_menu_hole\":\"\",\"src_module\":\"topcat\"},\"device_type\":\"pc\",\"home_site\":\"shein\",\"sub_site\":\"eur\",\"language\":\"en\",\"system_language\":\"en-US\",\"money_type\":\"\",\"device_country\":\"\",\"app_versions\":\"\",\"network_type\":\"\",\"ip\":\"\",\"screen_pixel\":\"1280*1024\",\"screen_size\":\"\",\"device_class\":\"1\",\"device_brand\":\"\",\"device_name\":\"\",\"device_model\":\"\",\"os_type\":\"1\",\"os_name\":\"Windows\",\"os_versions\":\"10\",\"browser_name\":\"Firefox\",\"browser_versions\":\"134.0\",\"session_id\":\"bi_1765933653037_61177\",\"channel\":\"affiliate_af_b_33_121_0\",\"origin_otherid\":\"\",\"traffic_source\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"market\":\"\",\"start_time\":\"1765933653032\",\"end_time\":\"\",\"environment\":\"production\",\"device_id\":\"\",\"device_idfa\":\"\",\"device_idfv\":\"\",\"device_aaid\":\"\",\"referer\":\"https%3A%2F%2Feur.shein.com%2Fark%2F2812%3Fonelink%3D13%2F4s0r28uoh4d8%26requestId%3Dolw-5ag0n5ca69ld%26url_from%3Daffiliate_af_b_33_121_0%26affiliateID%3Daf_b_sub_13300%26click_id%3Dd0e56b0a85344d81ae746ea548d5e9a1%26cdn_rsite%3Dcf%26ref%3Dwww%26rep%3Ddir%26ret%3Deur\",\"sdk_version\":\"1.1.15\",\"login\":\"0\",\"member_id\":\"\",\"ugid\":\"\",\"page_param\":{\"ad_activity_name\":\"newuserprice\",\"scene_id\":\"m_app\",\"platfrom_nm\":\"swift\"},\"tab_page_id\":\"page_ad_landing1765933653032\",\"page_id\":\"6342\",\"page_name\":\"page_ad_landing\",\"log_id\":\"2a39a1a4-e229-473d-b1d4-4c9008b09146\",\"seq\":\"12\",\"timestamp\":\"1765933657922\",\"local_time\":\"2025/12/17 01:07:37\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/clientPerInfo","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /clientPerInfo HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/clientPerInfo","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:47.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /clientPerInfo HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nDS-ACCESS-TOKEN: 4bc3a2dd3549401b817438eede7e78da\r\nDS-ACCESS-SITE: shein\r\nContent-Length: 963\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":963,"data":"{\"browser_versions\":\"134\",\"browser_name\":\"Firefox\",\"os_versions\":\"10\",\"os_name\":\"Windows\",\"device_name\":\"\",\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"visit_id\":\"mggzq4xmy0ao\",\"host\":\"eur.shein.com\",\"local_time\":1765933667857,\"timestamp\":1765933667857,\"client_url\":\"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\",\"url_path\":\"/ark/2812\",\"app_versions\":\"\",\"network_effectivetype_type\":\"unknow\",\"worker_init_type\":\"navigate\",\"cache_type\":\"unknow\",\"is_crawler\":0,\"device_type\":\"pc\",\"sub_site\":\"eur\",\"language\":\"en\",\"home_site\":\"shein\",\"page_name\":\"page_ark_production_918\",\"page_version\":\"2812\",\"page_from\":\"Marketing\",\"data\":[{\"key_path\":\"tti\",\"values\":{\"num\":1337}}],\"resource\":\"\",\"render_type\":\"ssr\",\"id\":\"9c26ecf5-63d9-589a-a5de-55487193fe4c\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:47 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/lib-polyfill-28b7cdd5642e2323.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/lib-polyfill-28b7cdd5642e2323.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Nov 2025 16:13:06 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 18470\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52327,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52257)","md5":"ac4275068da60da240380fbb8b24ef4e","sha1":"b7cbbdfcde80a9bb6d09f162c5ca31cc346f7374","sha256":"97b85992488e4357b1d7d65cc7a16cb2140382c04469c03e14fbe3a0fc02b185","sha512":"c02aa3a4c6de57190c808b1d5ca4803bdd6bb95e310bcd12cdb2ca47ef97c163314b0add6eaf3bdafe3368b027b44ed6cd8ccb99a3a8791aa66011896e4d9bbf","ssdeep":"768:QRo3wy2ArVQCj1UzJMuSP4LBtWkdfNRf/:7RH+NzUQBtdff/","tlshash":"98339688b9d2f4f91bf299d4842f9843f12b2d24640da5e4dfe2d6819874d8f407be39","first_seen":"2025-03-25T20:02:22.196Z","last_seen":"2026-01-20T19:05:52.823437Z","times_seen":1118,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":133,"dns":58,"connect":2,"send":0,"wait":12,"receive":2,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/lib-sui-7eac81b86d3b06bd.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/lib-sui-7eac81b86d3b06bd.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:39 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 88646\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":448885,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3cf317619da7af788db8850a55a7ecf2","sha1":"4d45513ad8579ce2292113049e97fb9fcbc7fb27","sha256":"fa4a9b34a85f0276926413729b66f1243a5f9e3737ea15909017da3c8a76d673","sha512":"c9cdd7096bdf6f57ea1746b68f983af4b7c7022c0af659f1bfc7f88c55fc46e328616501185b67f0265b345ad226de1a6aff052835d61491903477f9bf7adc86","ssdeep":"6144:W60VH+dBBU2Wuh90lJOkNnBi8tOBwPkAB7q2xrq2bZ:6CU2Wuh902kkwPN7q2xrq2bZ","tlshash":"82a43a111080ac3b3bdb46bb58e54640e1564a51e81365bdf6b9ecc4dbc8fec32aa37d","first_seen":"2025-12-09T15:42:57.541375Z","last_seen":"2025-12-24T03:17:54.199555Z","times_seen":40,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":117,"dns":50,"connect":1,"send":0,"wait":12,"receive":9,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/tpm-sources-globals.5c06c861e4a85c6f.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/tpm-sources-globals.5c06c861e4a85c6f.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 11:38:04 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 10630\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:35 GMT\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39932,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39867)","md5":"fcdb75f4f5aedadd440ddb4a13a27e6d","sha1":"b6f15663316a8708930d885454aaa55ddd20e2c0","sha256":"2df3ee7eb1b424d7ea54f6b88f4ffe450ce46641662e32d64c47b791e478941a","sha512":"14a011908a02bd5fc691d91d0bcdf5a7e1fd615f8622bace6a507cc62633433ab17a99a0d0f09db41afc1d13fd5020c0ef9393e4907b68292ccf319f57f3d0e6","ssdeep":"768:jK/1gvigVUGg8Juj4wLmBxeMyapXu0yyDy49q:jKrGdo49RDU/","tlshash":"1103f98977f9987136f680b8d5334603e17c3a91314ac0d4b2aeadc859a4bcfa651f7c","first_seen":"2025-11-12T15:12:31.737465Z","last_seen":"2026-01-20T19:05:52.620902Z","times_seen":210,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/j/pi/2025/08/22/e6/175582526718b4641c0905824f639181badf3f7a19_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/j/pi/2025/08/22/e6/175582526718b4641c0905824f639181badf3f7a19_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14393\r\ncf-ray: 9af28647fb06569b-OSL\r\nlast-modified: Mon, 17 Nov 2025 22:43:01 GMT\r\netag: \"691ba4f5-3839\"\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ncache-control: public, max-age=604800\r\nage: 1600769\r\nedge-cache-tag: 2025112814\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14393,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"72049f93cee93209a14e1e36450c6133","sha1":"71198bc635df36fcc240b375eaec34d20fef03d7","sha256":"be528c46390e9a0219cf3e8d114628d58e1b71635b1647ab47626d7e0a283489","sha512":"efb6c6eeecf5cd9eedfc4e2b629a837ba9d6b82346d06f98e54844f3cff5aaf3e2c90e324887b103dab79b4352f5f99a1f56c9e12cbaa06ea7b303db2ba7caad","ssdeep":"384:bwHWunCsIfNlNS7cIck9VP7jM3IMsqZujZhPp2bUdu:M2pfNmp9VP7oH6sQu","tlshash":"da52c0604344d71ef3043a3495e740d2f295a9b2ee29643fd6a8f75bc496bca4bc45c4","first_seen":"2025-12-02T09:38:35.867038Z","last_seen":"2025-12-17T01:08:43.066813Z","times_seen":8,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/j/pi/2025/07/07/3e/1751900125e4b23b19b6536f8cfbc56d3d623fb2be_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/j/pi/2025/07/07/3e/1751900125e4b23b19b6536f8cfbc56d3d623fb2be_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18360\r\ncf-ray: 9af286488b46569b-OSL\r\nlast-modified: Wed, 03 Dec 2025 14:14:06 GMT\r\netag: \"693045ae-47b8\"\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ncache-control: public, max-age=604800\r\nage: 1162410\r\nedge-cache-tag: 2025120322\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18360,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"5da69c1a3360bd23e946099a0aa7c870","sha1":"c72c99b1e2c295d38d6d6afec02631eeed8ed923","sha256":"e591bc9f1f3a6f2e95916fc2faa6d3f1f831a69eee14562cb29446b77fca2980","sha512":"cfdf0a5ec7672ec1cb43c85910ebe866b5c302eeeb4843d51969a82dccf144ee0b71546645cea903382d143a6a1a645e54b1c7e66c1990a79f5d4869f0d04c46","ssdeep":"384:gYNg7vIGzgBWB6Ao9ASYbPdlvOpGzxXwDIlsZDNwHR8mQ:gYycGsB6BTSqzsZDNwHRNQ","tlshash":"3e82d190ee4ed1f5eab8bb3c66f577a071e22558d72331a164708637628014e7ecc3b6","first_seen":"2025-12-16T16:48:13.658408Z","last_seen":"2025-12-31T02:29:19.023786Z","times_seen":10,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:37.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token,ds-from-terminal,x-oest\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/app-track/metric-info","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:37.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /app-track/metric-info HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nContent-Length: 921\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":921,"data":"{\"data\":[{\"app_name\":\"shein\",\"timestamp\":\"1765933657019\",\"local_time\":\"12/17/2025, 1:07:37 AM\",\"session_id\":\"\",\"member_id\":\"\",\"sdk_version\":\"1.1.43\",\"network_type\":\"\",\"device_id\":\"\",\"device_level\":\"1\",\"device_type\":\"pc\",\"device_model\":\"\",\"device_brand\":\"\",\"browser_name\":\"\",\"browser_versions\":\"\",\"os_versions\":\"\",\"os_name\":\"\",\"language\":\"en\",\"sub_site\":\"eur\",\"money_type\":\"USD\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"referer\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"level\":\"INFO\",\"tag\":\"\",\"message\":\"spider load success\",\"params\":{},\"environment\":\"production\",\"value\":4320,\"metric_name\":\"si_anti_spider_sdk_n\",\"tags\":{\"url\":\"https://zpnv-eur.shein.com/risk/verify/identity/validation/anti/spider\",\"status\":200,\"type\":\"loadSDK\",\"v\":\"0.0.26\",\"sdk\":\"[\\\"anti_in\\\",\\\"main\\\",\\\"infp\\\",\\\"sm\\\"]\",\"site_id\":\"8004\",\"site_from\":\"eur\",\"channel\":\"0\",\"scene\":\"anti_crawler_RT\"}}]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nds-from-terminal: pc\r\nx-oest: RTBEMzU0Q3wxNzY1OTMzNjU3OTMzfDBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nContent-Length: 2089\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2089,"data":"{\"activity_name\":\"expose_navigation_menu\",\"activity_param\":{\"first_menu_content\":\"Home \u0026 Living\",\"first_menu_hole\":\"5\",\"second_menu_content\":\"Home \u0026 Living\",\"second_menu_hole\":\"5\",\"second_node_id\":\"110003132\",\"src_identifier\":\"fc=Home \u0026 Living`sc=Home \u0026 Living`tc=0`oc=0`ps=tab05navbar05`jc=itemPicking_017185546\",\"second_content_list\":\"/RecommendSelection/Home-Kitchen-sc-017185546.html?ici=eur_tab05navbar05\u0026src_module=topcat\u0026src_identifier=fc%3DHome%20%26%20Living%60sc%3DHome%20%26%20Living%60tc%3D0%60oc%3D0%60ps%3Dtab05navbar05%60jc%3DitemPicking_017185546\u0026adp=\u0026src_tab_page_id=page_ad_landing1765933653032\",\"is_slidebar\":false,\"third_menu_content\":\"\",\"third_menu_hole\":\"\",\"fourth_menu_content\":\"\",\"fourth_menu_hole\":\"\",\"src_module\":\"topcat\"},\"device_type\":\"pc\",\"home_site\":\"shein\",\"sub_site\":\"eur\",\"language\":\"en\",\"system_language\":\"en-US\",\"money_type\":\"\",\"device_country\":\"\",\"app_versions\":\"\",\"network_type\":\"\",\"ip\":\"\",\"screen_pixel\":\"1280*1024\",\"screen_size\":\"\",\"device_class\":\"1\",\"device_brand\":\"\",\"device_name\":\"\",\"device_model\":\"\",\"os_type\":\"1\",\"os_name\":\"Windows\",\"os_versions\":\"10\",\"browser_name\":\"Firefox\",\"browser_versions\":\"134.0\",\"session_id\":\"bi_1765933653037_61177\",\"channel\":\"affiliate_af_b_33_121_0\",\"origin_otherid\":\"\",\"traffic_source\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"market\":\"\",\"start_time\":\"1765933653032\",\"end_time\":\"\",\"environment\":\"production\",\"device_id\":\"\",\"device_idfa\":\"\",\"device_idfv\":\"\",\"device_aaid\":\"\",\"referer\":\"https%3A%2F%2Feur.shein.com%2Fark%2F2812%3Fonelink%3D13%2F4s0r28uoh4d8%26requestId%3Dolw-5ag0n5ca69ld%26url_from%3Daffiliate_af_b_33_121_0%26affiliateID%3Daf_b_sub_13300%26click_id%3Dd0e56b0a85344d81ae746ea548d5e9a1%26cdn_rsite%3Dcf%26ref%3Dwww%26rep%3Ddir%26ret%3Deur\",\"sdk_version\":\"1.1.15\",\"login\":\"0\",\"member_id\":\"\",\"ugid\":\"\",\"page_param\":{\"ad_activity_name\":\"newuserprice\",\"scene_id\":\"m_app\",\"platfrom_nm\":\"swift\"},\"tab_page_id\":\"page_ad_landing1765933653032\",\"page_id\":\"6342\",\"page_name\":\"page_ad_landing\",\"log_id\":\"5a8cec45-b285-4cc9-8ecd-e27711aaf2fc\",\"seq\":\"10\",\"timestamp\":\"1765933657920\",\"local_time\":\"2025/12/17 01:07:37\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/j/pi/2025/05/22/63/1747906809588c6cff9eeb7aa62eda45cd96ad3d14_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:31.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/j/pi/2025/05/22/63/1747906809588c6cff9eeb7aa62eda45cd96ad3d14_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39226\r\ncf-ray: 9af286296d74569b-OSL\r\nlast-modified: Fri, 21 Nov 2025 06:06:16 GMT\r\netag: \"69200158-993a\"\r\nexpires: Wed, 24 Dec 2025 01:07:31 GMT\r\ncache-control: public, max-age=604800\r\nedge-cache-tag: 2025112114\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39226,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"a5360862c5dafda2087a322cdd6cf61f","sha1":"3283a32051b4c949605529a3993651fb80a3a6fc","sha256":"82ce882d2a91665771164c026b87d0533e57adcec819b8dd79654ef07abbe2ef","sha512":"9baffeba954005c04d67f21e7a0ba895f91d228b711d274baab97dd31e3c1b02313450a928d8ad2a6798f8e0cc7f8027b789b0f65689c9e37fa4745df699e397","ssdeep":"768:gYyyCrw80/c6u0MNhBebMDq3zUli+xMPQsXMf9lPw73N/ad3Z+9+dPQzTIBMblt:gmkdN0kGN+Zs8fjw7hadJdQnIBi","tlshash":"ba03f131890de1d1d939c1b82ef07f8075f1f998cf9271ce26696f0616f2e657a41839","first_seen":"2025-12-12T09:43:05.402322Z","last_seen":"2025-12-17T01:08:43.068139Z","times_seen":6,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token,ds-from-terminal,x-oest\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nds-from-terminal: pc\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0XzdBQUZfMnwxNzY1OTMzNjU3OTM0fENBMzZFMzQ3NUM3\r\nContent-Length: 2118\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2118,"data":"{\"activity_name\":\"expose_navigation_menu\",\"activity_param\":{\"first_menu_content\":\"Sports \u0026 Outdoors\",\"first_menu_hole\":\"12\",\"second_menu_content\":\"Sports \u0026 Outdoors\",\"second_menu_hole\":\"12\",\"second_node_id\":\"110003136\",\"src_identifier\":\"fc=Sports \u0026 Outdoors`sc=Sports \u0026 Outdoors`tc=0`oc=0`ps=tab12navbar12`jc=itemPicking_017185553\",\"second_content_list\":\"/RecommendSelection/Sports-Outdoors-sc-017185553.html?ici=eur_tab12navbar12\u0026src_module=topcat\u0026src_identifier=fc%3DSports%20%26%20Outdoors%60sc%3DSports%20%26%20Outdoors%60tc%3D0%60oc%3D0%60ps%3Dtab12navbar12%60jc%3DitemPicking_017185553\u0026adp=\u0026src_tab_page_id=page_ad_landing1765933653032\",\"is_slidebar\":false,\"third_menu_content\":\"\",\"third_menu_hole\":\"\",\"fourth_menu_content\":\"\",\"fourth_menu_hole\":\"\",\"src_module\":\"topcat\"},\"device_type\":\"pc\",\"home_site\":\"shein\",\"sub_site\":\"eur\",\"language\":\"en\",\"system_language\":\"en-US\",\"money_type\":\"\",\"device_country\":\"\",\"app_versions\":\"\",\"network_type\":\"\",\"ip\":\"\",\"screen_pixel\":\"1280*1024\",\"screen_size\":\"\",\"device_class\":\"1\",\"device_brand\":\"\",\"device_name\":\"\",\"device_model\":\"\",\"os_type\":\"1\",\"os_name\":\"Windows\",\"os_versions\":\"10\",\"browser_name\":\"Firefox\",\"browser_versions\":\"134.0\",\"session_id\":\"bi_1765933653037_61177\",\"channel\":\"affiliate_af_b_33_121_0\",\"origin_otherid\":\"\",\"traffic_source\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"market\":\"\",\"start_time\":\"1765933653032\",\"end_time\":\"\",\"environment\":\"production\",\"device_id\":\"\",\"device_idfa\":\"\",\"device_idfv\":\"\",\"device_aaid\":\"\",\"referer\":\"https%3A%2F%2Feur.shein.com%2Fark%2F2812%3Fonelink%3D13%2F4s0r28uoh4d8%26requestId%3Dolw-5ag0n5ca69ld%26url_from%3Daffiliate_af_b_33_121_0%26affiliateID%3Daf_b_sub_13300%26click_id%3Dd0e56b0a85344d81ae746ea548d5e9a1%26cdn_rsite%3Dcf%26ref%3Dwww%26rep%3Ddir%26ret%3Deur\",\"sdk_version\":\"1.1.15\",\"login\":\"0\",\"member_id\":\"\",\"ugid\":\"\",\"page_param\":{\"ad_activity_name\":\"newuserprice\",\"scene_id\":\"m_app\",\"platfrom_nm\":\"swift\"},\"tab_page_id\":\"page_ad_landing1765933653032\",\"page_id\":\"6342\",\"page_name\":\"page_ad_landing\",\"log_id\":\"e8c5fce5-2987-4b1e-8aa4-2b7d7c2cda77\",\"seq\":\"17\",\"timestamp\":\"1765933657928\",\"local_time\":\"2025/12/17 01:07:37\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_ccc/2024/08/13/79/17235601357d6177e5606e21933e410839b55d7db3.png","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_ccc/2024/08/13/79/17235601357d6177e5606e21933e410839b55d7db3.png HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 33719\r\ncf-ray: 9af2863369cf569b-OSL\r\nlast-modified: Mon, 13 Oct 2025 14:17:55 GMT\r\netag: \"68ed0a13-83b7\"\r\nexpires: Thu, 25 Dec 2025 01:07:33 GMT\r\ncache-control: public, max-age=691200\r\nedge-cache-tag: 2025101322\r\ntiming-allow-origin: *\r\nage: 2404384\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33719,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 654 x 585, 8-bit colormap, non-interlaced","md5":"b2a01661a190273eaf144bd0e578aaf2","sha1":"87a23b1c6bc44d15f862a63bd945a1b7fbda6aee","sha256":"33b2382c54218b6603aa9718d4db5b15aa66da1f20539f1b51df6ebbb1ab0c29","sha512":"9c6a83db87ba64611bab7b5876f756a6e9c7caa3fdb34e47cda79b3548ac002ecd8585dbd43357e74eece4531ae5a16d9b78b9843bba3140783392bb64d810a0","ssdeep":"768:mzqEwed/UWSwCDAEnPTbbcpDRUAhcXUOcyqPPsDJBMioPTQZ:m+id/U3hnPPbcJRCmPPsFIsZ","tlshash":"0fe2f2aad738fabc6d87ebdd0d475de86201290d558bbe82d2876c445c5e21ac00d36b","first_seen":"2025-07-31T13:40:14.317498Z","last_seen":"2026-06-01T22:35:14.913245Z","times_seen":814,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/CommonFooter.bdc5728f75a058c8.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/CommonFooter.bdc5728f75a058c8.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:37 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 335\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:35 GMT\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":466,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (408)","md5":"53cb1e6499ceca5013111b0a056582bf","sha1":"e27beba28400bd5b2a784b35460ca4f82de4f546","sha256":"484b9b0e62f61dbd9e9852e42345c8c76dcad640dbbe6b95645b8cb0aa7f456f","sha512":"85c6cc4be6eca8e95b209e37258ea6237f4114018e74f9231de264baf35c31da57f957ce500c8df787b42a6f8d0c14062d48e8f7580c12a152c5577f4d92bac8","ssdeep":"","tlshash":"5ff023c155e73c3a353b19eca0eb9c41282d387032654bf298a8cc48402b4147fc49f4","first_seen":"2025-12-09T15:42:57.706283Z","last_seen":"2025-12-17T05:54:39.242737Z","times_seen":17,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/v4/j/pi/2025/07/11/b9/1752235398263076881e1f8b79b1e18ea497155d7e_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /v4/j/pi/2025/07/11/b9/1752235398263076881e1f8b79b1e18ea497155d7e_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20790\r\ncf-ray: 9af286485b31569b-OSL\r\nlast-modified: Sun, 16 Nov 2025 22:21:11 GMT\r\netag: \"691a4e57-5136\"\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ncache-control: public, max-age=604800\r\nedge-cache-tag: 2025111901\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 30029\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20790,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 420x559, components 3","md5":"bf908bc1b87a55bfd2890597d7d5789e","sha1":"fe8e35a8c6de1c660f463c254a1974d23fa9600c","sha256":"6512e7b9c6c6ccaaf518cd48b7fd7b9c4fbb21d70851283cf4a6800ff1550e4b","sha512":"3c35ea7866527650a28e7d6217f9ea17f5278c880712d74a8f7d4c7a4b5717a3c9d5f9d43b83118d6ee2237eeff9e0e93598cf16e20565e2541d8dcf19467bf4","ssdeep":"384:gYNg7kTzM8qvZEgDQmLRgZFkUW9ykZ/d8dbvaRk83GLhEj:gYyMUBE6QmaFV8yHaRAlEj","tlshash":"1392d099ef46973ee93ce9bd198d4fde525b2214ef02b684a20087158596cdc3e050fb","first_seen":"2025-12-16T16:48:13.608185Z","last_seen":"2025-12-17T01:08:43.069607Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/clientPerInfo","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:37.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /clientPerInfo HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nDS-ACCESS-TOKEN: 4bc3a2dd3549401b817438eede7e78da\r\nDS-ACCESS-SITE: shein\r\nContent-Length: 1053\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1053,"data":"{\"browser_versions\":\"134\",\"browser_name\":\"Firefox\",\"os_versions\":\"10\",\"os_name\":\"Windows\",\"device_name\":\"\",\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"visit_id\":\"mggzq4xmy0ao\",\"host\":\"eur.shein.com\",\"local_time\":1765933657857,\"timestamp\":1765933657857,\"client_url\":\"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\",\"url_path\":\"/ark/2812\",\"app_versions\":\"\",\"network_effectivetype_type\":\"unknow\",\"worker_init_type\":\"navigate\",\"cache_type\":\"unknow\",\"is_crawler\":0,\"device_type\":\"pc\",\"sub_site\":\"eur\",\"language\":\"en\",\"home_site\":\"shein\",\"page_name\":\"page_ark_production_918\",\"page_version\":\"2812\",\"page_from\":\"Marketing\",\"data\":[{\"key_path\":\"fsp_class\",\"values\":{\"num\":1337}}],\"resource\":\"ssr: base-img-pc__inner\u0026fsp-element\u0026base-img-pc__contain\u0026fsp__SwiftPublicGoodsPlugin\",\"render_type\":\"ssr\",\"id\":\"9c26ecf5-63d9-589a-a5de-55487193fe4c\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:37.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token,ds-from-terminal,x-oest\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:37 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,ds-access-site,ds-access-token,ds-from-terminal,x-oest\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"armor.ltwebstatic.com/she_dist/armor-libs/csrandom/csrandom.1.0.6.min.js","fqdn":"armor.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/armor-libs/csrandom/csrandom.1.0.6.min.js HTTP/1.1\r\nHost: armor.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Oct 2025 07:42:05 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 27265\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":83646,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (62889)","md5":"c034d36e3fefd4a13c0bf0ee4fbe9490","sha1":"2075a3799e3ba888fc3295d1e64a2b87eab3a9d1","sha256":"0ee4cc002ff073281cad440ee438ae9508b316c4b0d57ad27498125a95aa8211","sha512":"40fa2c5510efaa85616dce5d7ece0ed54a5a62b1c80fc79ed18c4c14dd7ce83e2c33b0cf60a9b9b4660e600c25c6421a6a8c821e36b66fed6c5fa83347222d4f","ssdeep":"1536:D6EaLldceqItxFZZZdPDeqIxs76vzN0zBZR6m9F9FiJN1gqR2:iLlqeqItxFZxeqIxsurN0zBZRhFeX1T2","tlshash":"b18360dcbac9f0790397a4a5496f304be029fd65640e8200d666e2e47c79a18907ff7e","first_seen":"2025-10-29T19:12:39.303934Z","last_seen":"2026-06-01T22:35:14.950795Z","times_seen":538,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eur.shein.com/bff-api/user/address/whole_country_list?_ver=1.1.8\u0026_lang=en","fqdn":"eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"GET /bff-api/user/address/whole_country_list?_ver=1.1.8\u0026_lang=en HTTP/1.1\r\nHost: eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\ntimezone: GMT+0\r\nbrand: shein\r\nchannel: pc\r\nappcurrency: EUR\r\napplanguage: en\r\ntoken: MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133\r\nsiteuid: eur\r\ncurrency: EUR\r\nlanguage: en\r\nx-oest: RTBEMzU0QzBfODEyN19GQjg0X3wxNzY1OTMzNjUzMjAyfDdBQUZfMkNBMzZFMzQ3NUM3\r\nx-requested-with: XMLHttpRequest\r\nx-csrf-token: \r\nx-request-by: bridgeX\r\nuber-trace-id: ffdaafa75d4b372f:ffdaafa75d4b372f:0:0\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=bGT3nZD3jLW0M1.Q5NQEZtGzzKI3jCb3GUYgYRzANWc-1765933650816-0.0.1.1-604800000; armorUuid=20251217090730b81a7034ed2e05669208be22d76a021f00ab25340db4938900; language=eur; sessionID_shein=s%3AwmvZzx0IebGKecQwGECFfMS7hktRJkzn.edpTfuWSr49X%2BKnF%2F4hhHhBmy8ETkabPoXOcjMH5IFk; AT=MDEwMDE.eyJiIjo3LCJnIjoxNzY1OTMzNjUwLCJyIjoiR2VKcXNBIiwidCI6MX0.2269d53340264133; sessionID=eyJ1c2VyIjp7ImVtYWlsIjoiIn19; sessionID.sig=ABilqfkjRO1cKVe4_Z7aCpKMcTM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 3059\r\ncontent-encoding: br\r\nfrsys: ja\r\ndisplay-language: en\r\nweb-language: eur\r\noest: RTBEM3wxNzY1OTMzNjUzMzE3fDU0QzBfODEyN19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nis-update-currency: 1\r\nsite-uid: eur\r\nexpress: 0\r\nappcurrency: EUR\r\npragma: no-cache\r\napp-language: en\r\nbiz-code: 0\r\ncache-control: no-cache, max-age=0, no-store\r\nx-lt-api-tag: bff-user\r\nx-gw-traceid: ffdaafa75d4b372f\r\nserver-timing: g;dur=8\r\nvia-shein-gateway: c-shein-pc!bff-user\r\nheader-cmdb-name: bff_user_eucentral_prod_cluster4\r\nheader-cmdb-name-origin: bff-user-eucentral-prod-cluster4\r\nheader-cmdb-sname: bff-user-eucentral-prod-cluster4\r\nheader-cmdb-app-name: bff_user\r\nheader-cmdb-app-name-origin: bff-user\r\nheader-cmdb-app-sname: bff-user\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18946,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e8a20dca8d1cb5e167ae05e42c708f02","sha1":"9e8def707af4fa046e5590221869bf8e4e90828c","sha256":"70ef3d2b5ee8b80b8cb52087c371889b67778bdc7d375062b91f4ee8e085b119","sha512":"9650e791f7f14380ca41a27844548536f4bddd8183901956be921b60a579e14a62130fd3224908017178017007b2e210a51e776b25a66d164c7d4e3910c1eef6","ssdeep":"96:Imjot9fWyD51lCIBpay0+SK67OmR4GmnJSFTuQg9MilaRgfu/QpvwkuoLPXS6LU9:wC8p35oOmGGmsTRullaRgfiyXn1UQA","tlshash":"cf82292905e49dafd5574ac63b43b81c30ae5293df891dac1dcedf86cf806e53011aea","first_seen":"2025-11-05T10:54:16.9035Z","last_seen":"2026-01-28T15:55:40.270297Z","times_seen":438,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sheinh5.ltwebstatic.com/ark/ark/client/css/SwiftPublicGoodsPlugin.dede152.chunk.css","fqdn":"sheinh5.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /ark/ark/client/css/SwiftPublicGoodsPlugin.dede152.chunk.css HTTP/1.1\r\nHost: sheinh5.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: text/css\r\nlast-modified: Tue, 28 Oct 2025 05:34:52 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 2714\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:33 GMT\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":15089,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14953)","md5":"8b9bba444537755e2d58229c4fbab1ec","sha1":"3813b419f1782e4d007278b2f8ac35665f699d75","sha256":"c1f9dfa8ba2c1bb2a10ada04489533b0df5547127d0c9171b48cb9de7dc26875","sha512":"3f5f3a1198bfd47bc7d9820a2244bfc5640e08b93a32d0d4f50f47baa920abc6d36dee76b8cbf7217916df0dda359955519019a44f150da442f9ab3c659ac72d","ssdeep":"384:YPSnitJEOnd/qDqjUsKLWRj+OvYAQu3L4juCWedw1NtLh0n7Qb8ttd:bOnd/qDqQsKLWRj+OvYAQu3UjuCWedws","tlshash":"72625617317c7029b87bc5b1bdc046a881a86657b3130bae3792b7a04e43dad3d3216b","first_seen":"2025-09-19T08:00:13.252883Z","last_seen":"2026-03-23T01:37:20.988708Z","times_seen":714,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zpnv-eur.shein.com/risk/verify/identity/validation/anti/spider","fqdn":"zpnv-eur.shein.com","domain":"shein.com","tld":"com"},"ip":{"addr":"23.33.119.43","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shein.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6B:5A:63:44:C5:A7:9F:28:86:97:03:58:45:9C:0F:61:54:0B:2A:B8","sha256":"F9:82:39:96:53:28:19:62:24:C5:AF:BD:55:3A:95:C1:58:F1:C7:C4:90:24:C1:6D:43:22:C3:11:10:68:31:FF"}}},"request":{"raw":"OPTIONS /risk/verify/identity/validation/anti/spider HTTP/1.1\r\nHost: zpnv-eur.shein.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: openresty\r\ncontent-security-policy: frame-ancestors *.shein.com https://www.shein.com.hk https://www.shein.com.vn https://www.shein.com.mx https://www.shein.co.uk https://www.shein.tw https://www.shein.se https://co.shein.com https://www.shein.com.co\r\nx-dns-prefetch-control: on\r\nx-xss-protection: 1; mode=block\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=7776000000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type\r\nx-gw-traceid: efe709891796a532\r\nserver-timing: g;dur=118\r\nvia-shein-gateway: c-shein-pc\r\nheader-cmdb-name: SheinPC_eucentral_prod_app02\r\nheader-cmdb-name-origin: SheinPC-eucentral-prod-app02\r\nheader-cmdb-sname: shein-pc-eucentral-prod-app02\r\nheader-cmdb-app-name: SheinPC\r\nheader-cmdb-app-name-origin: SheinPC\r\nheader-cmdb-app-sname: shein-pc\r\ntiming-allow-origin: *\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":41,"dns":41,"connect":1,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/js/analysis/sdk_analysis.b502a4c.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:35.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/js/analysis/sdk_analysis.b502a4c.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 12 Nov 2025 12:29:58 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 14857\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:35 GMT\r\ndate: Wed, 17 Dec 2025 01:07:35 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42606,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42570), with no line terminators","md5":"c10504ca5825351f2fe72398af121d71","sha1":"569f7473ec2ac12b47005cd2238e1dc02eb0129e","sha256":"a15a60527e0a794a1328fd4ebe13ea075a4e63d05da2ad2d3824ba8eaadf4aa0","sha512":"d21ef05bcd28998a87ef10363b16cb0fa76d6ff0371435271a5917023b4b621fcb7d26353c71eb897b8a2f05ab8efee82d6cbcfb71ae9676be8f514183a91b95","ssdeep":"768:mCFbM/m9RRBdX2IeNebgTC/XQ1KKGqVH/w7L12ZNV:lM/g12RVgwKKdxeLI","tlshash":"0e133b9eb382b53506f3b169c83b15057a352606ac8c94b4fa35acc17db85df4263f3a","first_seen":"2025-06-07T05:05:06.585476Z","last_seen":"2025-12-17T05:54:39.224297Z","times_seen":1027,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ltwebstatic.com/images3_pi/2024/11/12/ee/1731379114e4ea2a8a8cee579f76b89f7ad5fee5f2_thumbnail_420x.webp","fqdn":"img.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"104.18.28.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:36.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:CB:B9:F9:79:EB:8F:27:66:C6:8E:BD:74:39:91:14:A9:A6:90:A5","sha256":"61:80:F1:9E:1F:F5:CF:AE:3E:53:7D:5C:DB:1B:33:A6:DE:3B:08:E6:90:EC:A3:37:1F:C9:73:3C:3C:17:1C:5C"}}},"request":{"raw":"GET /images3_pi/2024/11/12/ee/1731379114e4ea2a8a8cee579f76b89f7ad5fee5f2_thumbnail_420x.webp HTTP/1.1\r\nHost: img.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 17 Dec 2025 01:07:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 33938\r\ncf-ray: 9af28647eb03569b-OSL\r\nlast-modified: Thu, 11 Dec 2025 04:24:17 GMT\r\netag: \"693a4771-8492\"\r\nexpires: Wed, 24 Dec 2025 01:07:36 GMT\r\ncache-control: public, max-age=604800\r\nage: 416072\r\nedge-cache-tag: 2025121213\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: uber-trace-id\r\naccess-control-allow-origin: *\r\nclient-ipver: ipv4\r\nclient-ipaddr: 91.90.42.154\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33938,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bfbac2da85d75714b0c05070d99635ae","sha1":"e98fbbe6f153036152a1583c698d35892b832dfe","sha256":"bb9ab69f9ce99f4158c3dc285ed7998ff0cb68ec22e89645920bb591c0df59ef","sha512":"fa854e5cb079d7f92b7d070b256a0142bb3fcf117e95830632523f20499580c3364cc392bce95db12c6647fdf85b6dbe2d3cb418836c429c412c58e4eec993db","ssdeep":"768:EYyfffeGZVzVt0476nGIyF+08JpknXTyg5xMcUIZ5/et/l3:EDFZVf0M6nlJoTGIP/el1","tlshash":"c8e2e123cb7381c2ce24ea35c0f852daf06ae36ec1765b4b5c746568dbc81422a473f6","first_seen":"2025-12-12T09:43:05.2645Z","last_seen":"2025-12-17T01:08:43.072385Z","times_seen":6,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:38.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"POST /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nds-access-site: shein\r\nds-access-token: 4bc3a2dd3549401b817438eede7e78da\r\nds-from-terminal: pc\r\nx-oest: RTBEMzU0QzBfODEyfDE3NjU5MzM2NTc5MzJ8N19GQjg0XzdBQUZfMkNBMzZFMzQ3NUM3\r\nContent-Length: 2021\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2021,"data":"{\"activity_name\":\"expose_navigation_menu\",\"activity_param\":{\"first_menu_content\":\"Curve\",\"first_menu_hole\":\"4\",\"second_menu_content\":\"Curve\",\"second_menu_hole\":\"4\",\"second_node_id\":\"110000036\",\"src_identifier\":\"fc=Curve`sc=Curve`tc=0`oc=0`ps=tab04navbar04`jc=itemPicking_017172964\",\"second_content_list\":\"/RecommendSelection/Curve-sc-017172964.html?ici=eur_tab04navbar04\u0026src_module=topcat\u0026src_identifier=fc%3DCurve%60sc%3DCurve%60tc%3D0%60oc%3D0%60ps%3Dtab04navbar04%60jc%3DitemPicking_017172964\u0026adp=\u0026src_tab_page_id=page_ad_landing1765933653032\",\"is_slidebar\":false,\"third_menu_content\":\"\",\"third_menu_hole\":\"\",\"fourth_menu_content\":\"\",\"fourth_menu_hole\":\"\",\"src_module\":\"topcat\"},\"device_type\":\"pc\",\"home_site\":\"shein\",\"sub_site\":\"eur\",\"language\":\"en\",\"system_language\":\"en-US\",\"money_type\":\"\",\"device_country\":\"\",\"app_versions\":\"\",\"network_type\":\"\",\"ip\":\"\",\"screen_pixel\":\"1280*1024\",\"screen_size\":\"\",\"device_class\":\"1\",\"device_brand\":\"\",\"device_name\":\"\",\"device_model\":\"\",\"os_type\":\"1\",\"os_name\":\"Windows\",\"os_versions\":\"10\",\"browser_name\":\"Firefox\",\"browser_versions\":\"134.0\",\"session_id\":\"bi_1765933653037_61177\",\"channel\":\"affiliate_af_b_33_121_0\",\"origin_otherid\":\"\",\"traffic_source\":\"https%3A%2F%2Fonelink.shein.com%2F\",\"market\":\"\",\"start_time\":\"1765933653032\",\"end_time\":\"\",\"environment\":\"production\",\"device_id\":\"\",\"device_idfa\":\"\",\"device_idfv\":\"\",\"device_aaid\":\"\",\"referer\":\"https%3A%2F%2Feur.shein.com%2Fark%2F2812%3Fonelink%3D13%2F4s0r28uoh4d8%26requestId%3Dolw-5ag0n5ca69ld%26url_from%3Daffiliate_af_b_33_121_0%26affiliateID%3Daf_b_sub_13300%26click_id%3Dd0e56b0a85344d81ae746ea548d5e9a1%26cdn_rsite%3Dcf%26ref%3Dwww%26rep%3Ddir%26ret%3Deur\",\"sdk_version\":\"1.1.15\",\"login\":\"0\",\"member_id\":\"\",\"ugid\":\"\",\"page_param\":{\"ad_activity_name\":\"newuserprice\",\"scene_id\":\"m_app\",\"platfrom_nm\":\"swift\"},\"tab_page_id\":\"page_ad_landing1765933653032\",\"page_id\":\"6342\",\"page_name\":\"page_ad_landing\",\"log_id\":\"80bd092d-43ef-4f3a-b5b4-edaabf9802bc\",\"seq\":\"9\",\"timestamp\":\"1765933657918\",\"local_time\":\"2025/12/17 01:07:37\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"common.ltwebstatic.com/dist_bundle/xjqHR52UWJdjKJ0x6QrCsus66rNXR9/2.0.13/1/main.js","fqdn":"common.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:32.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /dist_bundle/xjqHR52UWJdjKJ0x6QrCsus66rNXR9/2.0.13/1/main.js HTTP/1.1\r\nHost: common.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Jul 2023 02:45:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: br\r\ncontent-length: 55781\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:32 GMT\r\ndate: Wed, 17 Dec 2025 01:07:32 GMT\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":183214,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65474)","md5":"ff0cfcaddf4e485ef61f0b4bde284cbc","sha1":"105d41a1a3ea6383ddf8abfc5d8db70023ec5d5c","sha256":"e891c199244540f8a6135ff5f06b313cdc6a6e5c0624dc08818483af4db32d61","sha512":"e144d4382c4d7c6bf002f4d08e207ebc9e83640d8742d808dbd0d9e6b2115ac7c42577940a4f5b946f8d01f1b0b1f0c29115eebde93dd5228a592afb765b3791","ssdeep":"3072:EOu0KUgplejzOvntvHQq+rN1PJzjCpimzaf:EX0KUgplejSlHx+rTJ+ojf","tlshash":"650409fa30dff1aa53ea1f33409f30c74e2c5a23a54c6509926cf5d4a8746abd163e19","first_seen":"2023-09-22T19:47:07Z","last_seen":"2026-06-03T06:21:04.397512Z","times_seen":1771,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":4,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shein.ltwebstatic.com/svgicons/2024/07/23/17217174554167681959.svg","fqdn":"shein.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eur.shein.com/ark/2812?onelink=13/4s0r28uoh4d8\u0026requestId=olw-5ag0n5ca69ld\u0026url_from=affiliate_af_b_33_121_0\u0026affiliateID=af_b_sub_13300\u0026click_id=d0e56b0a85344d81ae746ea548d5e9a1\u0026cdn_rsite=cf\u0026ref=www\u0026rep=dir\u0026ret=eur","date":"2025-12-17T01:07:33.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /svgicons/2024/07/23/17217174554167681959.svg HTTP/1.1\r\nHost: shein.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 23 Jul 2024 06:50:55 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 676\r\ncache-control: max-age=2592000\r\nexpires: Fri, 16 Jan 2026 01:07:33 GMT\r\ndate: Wed, 17 Dec 2025 01:07:33 GMT\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1390,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ccfb16aaa1c64a208ce5f7f1b335bb12","sha1":"817f188b43f487d04172404acfc36e8a4e4ec094","sha256":"15ae68f695966e4874cabea89e5b943bc993dd030246f965dd73748fde507bae","sha512":"d13ab2439ab1d6e82f856f31d535944424c0ab86df0d90678930c1c93f677eeddedd739e07521782728a7076618a73c53a945bb6ee451a6ea4a12f1c644fe598","ssdeep":"","tlshash":"fc21017990fd944d9626c0a8eaa4cc122f1cc1f3b201010dfc9d1f7a8766887f45f2b8","first_seen":"2025-07-18T12:09:05.98137Z","last_seen":"2026-06-01T22:35:14.826972Z","times_seen":821,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc.ltwebstatic.com/she_dist/assets/45509-065d9de286ad4b38.js","fqdn":"sc.ltwebstatic.com","domain":"ltwebstatic.com","tld":"com"},"ip":{"addr":"23.33.119.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:34.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ltwebstatic.com","organization":"ROADGET BUSINESS PTE. LTD."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:9D:9E:53:F4:05:AF:7B:58:7E:18:D5:D3:C0:8A:F0:BA:74:6A:25","sha256":"8F:3E:1D:84:A0:15:3A:42:75:AC:86:4B:1F:FD:07:DE:AD:5A:CF:D6:45:9A:A4:19:50:4A:6D:41:A1:4F:7E:9E"}}},"request":{"raw":"GET /she_dist/assets/45509-065d9de286ad4b38.js HTTP/1.1\r\nHost: sc.ltwebstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eur.shein.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 09 Dec 2025 12:53:39 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-length: 15327\r\ncache-control: max-age=604800\r\nexpires: Wed, 24 Dec 2025 01:07:34 GMT\r\ndate: Wed, 17 Dec 2025 01:07:34 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nclient-ipaddr: 91.90.42.154\r\nclient-ipver: ipv4\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53003,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52634)","md5":"0942b5cc9c7965ae007df606ba9437b8","sha1":"b4eba44da5abdfd69f514fde6b2f55ff8066ad00","sha256":"4f73eb01567bdba78e963bf3c276f67bb2008ce80214ef623b14feaf5c7f6d59","sha512":"6f646e48151842bb8ed307af9e9c6e1ce40e2c43ddcc70353fe482d56a7b27602b83f9bc0e83d9b9edb550209bf48b96ecc3b8ae3428ed5d595bb3a34a953b6a","ssdeep":"1536:Sk7WQXTaR3vkdY4LV/YN2UogEDefc1SQP:1SQXTaRKYN2UA6fySQP","tlshash":"46330a49522d52530fd88435f63a5323e33e466132068a18f22be9f9135decaf52ef76","first_seen":"2025-12-09T15:42:57.717213Z","last_seen":"2025-12-17T05:54:39.349622Z","times_seen":17,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.srmdata-eur.com/msg","fqdn":"www.srmdata-eur.com","domain":"srmdata-eur.com","tld":"com"},"ip":{"addr":"35.207.175.7","port":443,"asn":15169,"as":"GOOGLE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://eur.shein.com/iframe_login","date":"2025-12-17T01:07:38.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.srmdata-eur.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"57:10:7E:16:88:0E:64:F8:2C:F5:17:CF:D8:E3:F5:2D:32:40:49:05","sha256":"F9:CD:CC:2C:B3:ED:25:D6:1E:9B:83:7D:DA:F4:07:BC:3B:FC:1D:79:5B:C2:40:C1:D6:43:3E:35:9C:72:71:FE"}}},"request":{"raw":"OPTIONS /msg HTTP/1.1\r\nHost: www.srmdata-eur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: client-ugid,content-type,ds-access-site,ds-access-token,smdeviceid,x-oest\r\nReferer: https://eur.shein.com/\r\nOrigin: https://eur.shein.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Wed, 17 Dec 2025 01:07:38 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,ds-access-site,ds-access-token,Content-Type,appname,apptype,SmDeviceId, X-Report-Source,X-Report-Type,Content-Version,Ds-from-terminal,Client-Ipaddr,Client-Ipver,Client-Member-Id,Client-Cookie-Id,Client-Ugid,Client-Env,x-oest\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-max-age: 1728000\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-03T17:55:46.471571Z","times_seen":16085743,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}