cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css
200 OK 19 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (52276)
Hash 5222e06b77a1692fa2520a219840e6be
8b4236206a8b86af3761a244277663046d7ff7ee
0934b1fc0d3a766d41d3adf5e7a115875e66e98ebba408d965a41cf3d2cb4ab5
GET /ajax/libs/font-awesome/6.4.2/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 11:49:35 GMT
content-type: text/css; charset=utf-8
content-length: 18778
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64cac444-495a"
last-modified: Wed, 02 Aug 2023 21:01:56 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1060906
expires: Sun, 24 Nov 2024 11:49:35 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7FpRo5cfsAVCWYaQ5RLuk42gTRtDqZgo4xjQMhXPU75nKJzD%2Fm3dvcJi3HfdEwFUCiNKJ8JzcPz7h9ed4Ux8NGXwNTQuSgsYFBZn1LUhHHsDkTqWxGhTerw7iCyJJ4tH6ORNYm6I"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 830c1112d986b515-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css
200 OK 5.8 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash e9365fe85b7e4db79a87015e52c3db6c
2e2b5eb6e08f0f3d11fe0ada97c962a23ba6a0d9
dec3e9f0190a504ed0c8f4a5e957c107206ba106cac4a1bbb6cbac6369a16d56
GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 11:49:35 GMT
content-type: text/css; charset=utf-8
content-length: 5845
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ed9-1149f"
last-modified: Mon, 04 May 2020 16:12:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 970424
expires: Sun, 24 Nov 2024 11:49:35 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JmlVK9wItnc2vLOZJwwYl7Vixd41ZZirmmdeEgZd%2FLsNrWjSKAibza8JLi40F8RQ4A41m6nAopqdDR1v0fIOBI71jXkobpusAGVEK%2BqWqB08ZDuRMkbmTlQwCRQdU63K%2Ftq4%2Fvsz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 830c111309a3b515-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
w2sw.jestersuit.com/img/ucAtas.png
200 OK 1.3 kB URL GET HTTP/3 w2sw.jestersuit.com/img/ucAtas.png
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerGoogle Trust Services LLC
Subjectjestersuit.com
Fingerprint12:7F:EA:52:90:B9:12:91:5E:CC:89:7B:24:2D:D5:5E:6E:08:A6:23
ValidityWed, 29 Nov 2023 18:06:54 GMT - Tue, 27 Feb 2024 18:06:53 GMT
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash d2c7b78c0e95d897ba6d795612b1a613
501bbce9b06683a3f4c033efe093cc60534ec2bd
55f0e2f20760b6b11253664df938bee1158390f88bfe8fb49eb126567123ca58
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /img/ucAtas.png HTTP/1.1
Host: w2sw.jestersuit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 11:49:36 GMT
content-type: image/png
content-length: 1318
cache-control: public, max-age=604800
expires: Tue, 12 Dec 2023 11:49:36 GMT
last-modified: Sat, 21 Aug 2021 22:12:10 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I53oZlDRJ29A4%2BIOt4qfEjTGNkcxe7SIzQvA4VHgUdxp4QShTuhyMweWndGNmq%2FkLPWxRMaIWGEtUuSjQ%2F8SRUYVwB6DCSQvhOuFtdbIhCMw2pbm2SslNZDphi5BMFncaow%2BwMIJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830c1112fc660afe-OSL
alt-svc: h3=":443"; ma=86400
w2sw.jestersuit.com/img/icon_2.jpg
200 OK 11 kB URL GET HTTP/3 w2sw.jestersuit.com/img/icon_2.jpg
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerGoogle Trust Services LLC
Subjectjestersuit.com
Fingerprint12:7F:EA:52:90:B9:12:91:5E:CC:89:7B:24:2D:D5:5E:6E:08:A6:23
ValidityWed, 29 Nov 2023 18:06:54 GMT - Tue, 27 Feb 2024 18:06:53 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 180x180, components 3\012- data
Hash 70582f310f8781e02be4f7be34de56bb
61ee722ac3d13a97fbd377d86f420e7360e7b860
58d894b5221c03b762b56acf22303c6dbcef9a6c6da2cb98d3a29bc239536bed
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /img/icon_2.jpg HTTP/1.1
Host: w2sw.jestersuit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 11:49:36 GMT
content-type: image/jpeg
content-length: 11007
cache-control: public, max-age=604800
expires: Tue, 12 Dec 2023 11:49:36 GMT
last-modified: Mon, 26 Dec 2022 01:51:48 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v03E%2FfS8OrPb%2B7MoSVhNC74ewrTJCNj7AMXYX%2FH4tAxyjBx3e7vnWLuXvEcL%2BohPDFC9cxRR%2BLsz5yvWQbhNPvsdxWExrTX8uamI%2BB1cTsCoe3WeoXQFueWKN1vUMkGPlaSkmb%2Bc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830c11131c830afe-OSL
alt-svc: h3=":443"; ma=86400
w2sw.jestersuit.com/img/x-text.png
200 OK 8.6 kB URL GET HTTP/3 w2sw.jestersuit.com/img/x-text.png
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerGoogle Trust Services LLC
Subjectjestersuit.com
Fingerprint12:7F:EA:52:90:B9:12:91:5E:CC:89:7B:24:2D:D5:5E:6E:08:A6:23
ValidityWed, 29 Nov 2023 18:06:54 GMT - Tue, 27 Feb 2024 18:06:53 GMT
File type PNG image data, 293 x 480, 8-bit/color RGBA, non-interlaced\012- data
Hash 3c13e1b6fa65bf352d8f27e85f1804f7
f0ef07e80a3fb4d3b68eda5b5fee5bdc5514cfa6
2cdd385f0a60fd8c89e06241d3f8e0849fe77c80630cb1d4d8173a40a70e7f9b
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /img/x-text.png HTTP/1.1
Host: w2sw.jestersuit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 11:49:36 GMT
content-type: image/png
content-length: 8553
cache-control: public, max-age=604800
expires: Tue, 12 Dec 2023 11:49:36 GMT
last-modified: Sat, 14 Oct 2023 16:01:54 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fNUipO5QyZJe1KiL5rVXtx%2BVgrPqz1iyOnqd48bmjN60ud1U3XuZNt0vD%2BSFe%2FRFNJP%2BmPjAP6B6L0voawkxfN2sZi109d8pAVcWs2CUA5MLgmd7DnYk6I6mx4dRShTOGyG6QZve"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830c11131c890afe-OSL
alt-svc: h3=":443"; ma=86400
w2sw.jestersuit.com/js/script.js
200 OK 1.7 kB URL GET HTTP/3 w2sw.jestersuit.com/js/script.js
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerGoogle Trust Services LLC
Subjectjestersuit.com
Fingerprint12:7F:EA:52:90:B9:12:91:5E:CC:89:7B:24:2D:D5:5E:6E:08:A6:23
ValidityWed, 29 Nov 2023 18:06:54 GMT - Tue, 27 Feb 2024 18:06:53 GMT
Hash 817f34206caf046c110a7f8faa3a1e2b
c8bd327389ddf31e2935eaf0d783311c1929b02a
ed9669b1952d2634e4536a00d8257f0e0e6e33d78ec25f75263cfd4ec5adc134
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /js/script.js HTTP/1.1
Host: w2sw.jestersuit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 11:49:36 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Tue, 12 Dec 2023 11:49:36 GMT
last-modified: Sun, 26 Mar 2023 15:34:22 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NifA6nezNJQonOVbK5kb43I8KXyxj0X2EWLRSFE6rbttTCFoHRord%2FEThRs9Th%2FzTFQt7VtbZjQscw0IWJWX0lqsqxykg4Xd0OzV51f7foyDRSigNf57pOPEDKvaRGDfBddPW8zQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830c11133cab0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
w2sw.jestersuit.com/img/season-Token.png
200 OK 30 kB URL GET HTTP/3 w2sw.jestersuit.com/img/season-Token.png
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerGoogle Trust Services LLC
Subjectjestersuit.com
Fingerprint12:7F:EA:52:90:B9:12:91:5E:CC:89:7B:24:2D:D5:5E:6E:08:A6:23
ValidityWed, 29 Nov 2023 18:06:54 GMT - Tue, 27 Feb 2024 18:06:53 GMT
File type PNG image data, 135 x 130, 8-bit/color RGBA, non-interlaced\012- data
Hash d02c9d4d558a113e2aebd45c7d8237dc
edd72f80a319adf3fec2f3f061c1b82d6bf59aa7
7fb8131422bba9cda088005359870721b090dcd043d3cea030367be68c6328a6
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /img/season-Token.png HTTP/1.1
Host: w2sw.jestersuit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 11:49:36 GMT
content-type: image/png
content-length: 29942
cache-control: public, max-age=604800
expires: Tue, 12 Dec 2023 11:49:36 GMT
last-modified: Sun, 01 Oct 2023 17:07:22 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CCMPdhiM%2B5FS9E5scM5hSIOf5sHmzymgBLWd0JyW55RGyrNxetGAQNoRG2Wj07Zem09rPDgjSTr3ZOLJMVnAJnohlI%2F5QsasMHO0xCaSUda1WuqXxIAv4ZCr8K02t%2FwjYZErNthY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830c1112fc650afe-OSL
alt-svc: h3=":443"; ma=86400
w2sw.jestersuit.com/img/facebook-text.png
200 OK 29 kB URL GET HTTP/3 w2sw.jestersuit.com/img/facebook-text.png
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerGoogle Trust Services LLC
Subjectjestersuit.com
Fingerprint12:7F:EA:52:90:B9:12:91:5E:CC:89:7B:24:2D:D5:5E:6E:08:A6:23
ValidityWed, 29 Nov 2023 18:06:54 GMT - Tue, 27 Feb 2024 18:06:53 GMT
File type PNG image data, 604 x 158, 8-bit/color RGBA, non-interlaced\012- data
Hash 74190b93fc4f5d88f0c8e6411ba20bd8
89ce2ecb660a90b8e6ed1b335443d7767c59f28a
092a3cd5f86b3f039feefdeb86694cd16ae545af214cfda614bdbbe2d1bde401
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /img/facebook-text.png HTTP/1.1
Host: w2sw.jestersuit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 11:49:36 GMT
content-type: image/png
content-length: 28789
cache-control: public, max-age=604800
expires: Tue, 12 Dec 2023 11:49:36 GMT
last-modified: Tue, 29 Nov 2022 01:26:26 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mFUyPvrnBYbcG55bKnPJYwItwdKEEyO1Z8xHocTFQlghQsMig%2BB%2Bstw09ZgLX9YoBr7KHdBN8asjWJc4DDNwgxyBSFPafZb7rqpKt8No5ZWSPklYM5Vqi%2BR8oyYdM8YodJv3QxD3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830c11130c7d0afe-OSL
alt-svc: h3=":443"; ma=86400
ocsp.digicert.cn/
471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 2c3a8956978f2ada22a7fc90d9ba8490
a80af58985551f937b4317136d61e78f9d175797
5489d79d91dd88e300e196ea521b8e81a653a76901b7170fce2a265f64c688d5
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Tue, 05 Dec 2023 11:49:37 GMT
Ali-Swift-Global-Savetime: 1701776977
Via: cache5.l2de2[52,51,200-0,M], cache5.l2de2[54,0], cache7.nl2[71,70,200-0,M], cache7.nl2[72,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 05 Dec 2023 11:49:37 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6309b17017769778435454e
cdn.midasbuy.com/oversea_web/static/css/buypage.c6deb7d4.css?max_age=864000
200 OK 14 kB URL GET HTTP/2 cdn.midasbuy.com/oversea_web/static/css/buypage.c6deb7d4.css?max_age=864000
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (43313), with no line terminators
Hash 9a8718dcf820a8718484b305ee5c95c1
d3d5dfa02876c249ce31c31847001260dfa34b35
98e0b03a88ae73940b4280ae996f4ce027c1a6b715d495b14873bafd0ba83a79
GET /oversea_web/static/css/buypage.c6deb7d4.css?max_age=864000 HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:37 GMT
content-type: text/css
content-length: 13829
cache-control: max-age=864000
expires: Fri, 15 Dec 2023 11:49:37 GMT
last-modified: Fri, 21 Oct 2022 12:53:18 GMT
content-encoding: gzip
x-nws-log-uuid: 4789b56d-84ee-491e-8ed0-5695768d43fe
x-cache-lookup: Hit From MemCache Gz
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/js/auto-report2.0.2.umd.js
200 OK 1.9 kB URL GET HTTP/2 cdn.midasbuy.com/oversea_web/static/js/auto-report2.0.2.umd.js
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (5710)
Hash 825268c675e6b2707712df40dec79b9e
cd048b18d7a47d9a103fa303ab0dc4c0cd556bac
f6e8f25939adc054f88f9bd13e23dd9fca56979f5981d2c1463c51e60b1dcfc4
GET /oversea_web/static/js/auto-report2.0.2.umd.js HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:37 GMT
content-type: application/javascript
content-length: 1930
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:37 GMT
last-modified: Mon, 22 Nov 2021 11:18:46 GMT
content-encoding: gzip
x-nws-log-uuid: 3072e4aa-d72d-49eb-99c5-d1cb153e4e8c
x-cache-lookup: Hit From MemCache Gz
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/js/loginSdk2.0.1.42f19978.js
200 OK 9.3 kB URL GET HTTP/2 cdn.midasbuy.com/oversea_web/static/js/loginSdk2.0.1.42f19978.js
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (20491)
Hash 08c856c4f1085a9cdb6221053588a5ca
036d3e02b42d75526ff66e11e9db9ad162ec5722
fbbbb3e8e0858e0d878663667f565583c9682c3ee18f575d0b46d22b8c3200b9
GET /oversea_web/static/js/loginSdk2.0.1.42f19978.js HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:37 GMT
content-type: application/javascript
content-length: 9329
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:37 GMT
last-modified: Wed, 27 Jul 2022 09:04:48 GMT
content-encoding: gzip
x-nws-log-uuid: 84f48ea6-9df9-4ce8-8532-a21313b43475
x-cache-lookup: Hit From MemCache Gz
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/js/footer.e4b5b316.js
200 OK 60 kB URL GET HTTP/2 cdn.midasbuy.com/oversea_web/static/js/footer.e4b5b316.js
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65389), with no line terminators
Hash 5b5bad023f01785b134ae477509e49e3
2f227549cf94bdda4256148f46a1873e7505e78d
43cd2d8341a24d06ba3e72abe5d70a94be43168b0fe20b39f720a3b7d766cd07
GET /oversea_web/static/js/footer.e4b5b316.js HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:37 GMT
content-type: application/javascript
content-length: 60087
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:37 GMT
last-modified: Mon, 10 Oct 2022 09:10:04 GMT
content-encoding: gzip
x-nws-log-uuid: 7ad29bed-a93b-4c68-8a93-4760293dc49a
x-cache-lookup: Hit From MemCache Gz
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/js/polyfills.343f3206.js
200 OK 39 kB URL GET HTTP/2 cdn.midasbuy.com/oversea_web/static/js/polyfills.343f3206.js
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (41984), with NEL line terminators
Hash 1efaa8aeb3b43018888d31d87d561b09
85118bb43ebe9d955eaecadb540eb64222e3eabc
49c8d7d9c05c2d50f76fa8ef8d050fad3ee1d1c1a820aa03cf3ed85808a7c27c
GET /oversea_web/static/js/polyfills.343f3206.js HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:37 GMT
content-type: application/javascript
content-length: 38697
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:37 GMT
last-modified: Tue, 07 Mar 2023 19:08:52 GMT
content-encoding: gzip
x-nws-log-uuid: 6f25b6cc-a615-4175-a61e-6cafdbcc26d7
x-cache-lookup: Hit From MemCache Gz
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/js/default.71c7960f.js
200 OK 31 kB URL GET HTTP/2 cdn.midasbuy.com/oversea_web/static/js/default.71c7960f.js
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65389), with no line terminators
Hash fa135684cca37d8cdb430479aeda7237
037dca7ec66d0ea4561501a1bcba3b9dac8abdf4
38989b13cbdb33fb5cd2b273423f122312f37d5996f2da4722cbeefe21a258b4
GET /oversea_web/static/js/default.71c7960f.js HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:37 GMT
content-type: application/javascript
content-length: 31156
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:37 GMT
last-modified: Mon, 28 Nov 2022 11:27:25 GMT
content-encoding: gzip
x-nws-log-uuid: 9f4c8ba9-3d4d-4d9c-b7a5-22d15c823167
x-cache-lookup: Hit From MemCache Gz
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/js/buypage.21333a60.js
200 OK 92 kB URL GET HTTP/2 cdn.midasbuy.com/oversea_web/static/js/buypage.21333a60.js
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65440), with no line terminators
Hash d718c2b90df395bf2b6acbbd5b577c3f
258797f880d8e83168418452acd5ef6c0aacc48d
9fe6db302410bbf6ed854a6bda9db89f0b7951719fe1a4d6d819467459ac4f72
GET /oversea_web/static/js/buypage.21333a60.js HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:37 GMT
content-type: application/javascript
content-length: 91578
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:37 GMT
last-modified: Wed, 28 Sep 2022 10:48:08 GMT
content-encoding: gzip
x-nws-log-uuid: eb4e49f6-b5dd-4eb1-ad37-c76b24e4c34f
x-cache-lookup: Hit From MemCache Gz
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/images/apps/pubgm/1599546030876PIvqwGaa.png
200 OK 23 kB URL GET HTTP/2 cdn.midasbuy.com/images/apps/pubgm/1599546030876PIvqwGaa.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type PNG image data, 176 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 8ace3e800a42dab3b5005957fe832725
0ec4560b0ae9b3db0a92af3da3e823bf1c0abab3
9d52dca805b5ef33f989d9d425ec8a11f8b726c98fbaca9d41d0c11c1f5fa3d0
GET /images/apps/pubgm/1599546030876PIvqwGaa.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:37 GMT
content-type: image/png
content-length: 22824
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:37 GMT
last-modified: Thu, 17 Dec 2020 08:04:24 GMT
x-nws-log-uuid: 33cbfad9-9acc-4fb7-8f13-74c97e815e30
x-cache-lookup: Hit From MemCache
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/images/apps/pubgm/1599546007887MVeNUtB6.png
200 OK 20 kB URL GET HTTP/2 cdn.midasbuy.com/images/apps/pubgm/1599546007887MVeNUtB6.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type PNG image data, 176 x 82, 8-bit/color RGBA, non-interlaced\012- data
Hash 11262da1eccfbe361ce841429d7c6109
da7a1fe341a0239db239e374e4651d4617ca1551
65bb6c9a5a42adff26d1fe20756614c49fbaad40f3929e3898f3a760a04cd2bc
GET /images/apps/pubgm/1599546007887MVeNUtB6.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:37 GMT
content-type: image/png
content-length: 20407
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:37 GMT
last-modified: Thu, 17 Dec 2020 08:04:24 GMT
x-nws-log-uuid: 9c631e17-a0d1-4bcf-b0db-3c8e8827cb00
x-cache-lookup: Hit From MemCache
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/images/apps/pubgm/1599546041426W8hmErMS.png
200 OK 28 kB URL GET HTTP/2 cdn.midasbuy.com/images/apps/pubgm/1599546041426W8hmErMS.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type PNG image data, 176 x 86, 8-bit/color RGBA, non-interlaced\012- data
Hash 2b38e95ee41668ded718611d1bb7fadb
841cd4c8bbf7c302684ab09838efd1b1cfeea817
83456ddf216212a3a5961bb3f687e2bab72c837200a78af6876c4ef1da705065
GET /images/apps/pubgm/1599546041426W8hmErMS.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:37 GMT
content-type: image/png
content-length: 27837
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:37 GMT
last-modified: Thu, 17 Dec 2020 08:04:24 GMT
x-nws-log-uuid: 15bdd6d5-f9c8-4b51-90cb-688bfe307c6e
x-cache-lookup: Hit From MemCache
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/images/apps/pubgm/1599546052747L5gSu7VB.png
200 OK 33 kB URL GET HTTP/2 cdn.midasbuy.com/images/apps/pubgm/1599546052747L5gSu7VB.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type PNG image data, 176 x 113, 8-bit/color RGBA, non-interlaced\012- data
Hash 30cf930aa533bbed8bcfd57f005b62b7
a7835e3a608934e3a3dcbbd14789e2836969b7e2
ec9e1d5b10a89779cfb363004a640bbf95421a286d1deee187be01959f5a50c6
GET /images/apps/pubgm/1599546052747L5gSu7VB.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:37 GMT
content-type: image/png
content-length: 32824
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:37 GMT
last-modified: Thu, 17 Dec 2020 08:04:24 GMT
x-nws-log-uuid: af31c63d-0af5-4945-8244-db8cdf5a35fe
x-cache-lookup: Hit From MemCache
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.cn/
471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 2c3a8956978f2ada22a7fc90d9ba8490
a80af58985551f937b4317136d61e78f9d175797
5489d79d91dd88e300e196ea521b8e81a653a76901b7170fce2a265f64c688d5
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Tue, 05 Dec 2023 11:49:38 GMT
Ali-Swift-Global-Savetime: 1701776978
Via: cache9.l2de2[201,201,200-0,M], cache9.l2de2[204,0], cache7.nl2[218,218,200-0,M], cache7.nl2[219,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 05 Dec 2023 11:49:38 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6309b17017769778445455e
cdn.midasbuy.com/images/apps/pubgm/1599546061912PLgMlY23.png
200 OK 40 kB URL GET HTTP/2 cdn.midasbuy.com/images/apps/pubgm/1599546061912PLgMlY23.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type PNG image data, 176 x 131, 8-bit/color RGBA, non-interlaced\012- data
Hash 5403aecda5c624c460a7baf90f7f1145
46a62be7e7a398c358c7fe9f2605f9d551a3b4e5
e585e21100d4c2dfd20708ac23c62faf66451a6eed5c8af72c348d635aac542b
GET /images/apps/pubgm/1599546061912PLgMlY23.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:37 GMT
content-type: image/png
content-length: 39489
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:37 GMT
last-modified: Thu, 17 Dec 2020 08:04:24 GMT
x-nws-log-uuid: 645f8114-44fa-4839-a503-9e72e3fe0b33
x-cache-lookup: Hit From MemCache
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/images/apps/pubgm/1599546071746KqkIhrzG.png
200 OK 55 kB URL GET HTTP/2 cdn.midasbuy.com/images/apps/pubgm/1599546071746KqkIhrzG.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type PNG image data, 176 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 7760087792ff8cfe29b8de58c2a417c8
3bc983a6be59707192ad3b4608461dd9fb48d08e
5e1ed74d48a857034a509b63602360ea0b39ce7c15c4df9db42619fde5815bb0
GET /images/apps/pubgm/1599546071746KqkIhrzG.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:37 GMT
content-type: image/png
content-length: 54572
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:37 GMT
last-modified: Thu, 17 Dec 2020 08:04:24 GMT
x-nws-log-uuid: b60f6231-77a8-4d47-940f-592f1fe10871
x-cache-lookup: Hit From MemCache
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/css/vendor.afc3f335.css?max_age=864000
200 OK 235 kB URL GET HTTP/2 cdn.midasbuy.com/oversea_web/static/css/vendor.afc3f335.css?max_age=864000
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 235 kB (234940 bytes)
Hash 18921c7b2a95a87a1a189d46d32238fb
07d24b940264f91eb6dfb875c7dca2d9069725c1
792f51b7df80cf64ce739ea2f858628def16033f1c632fb7bb3deee7e47717b7
GET /oversea_web/static/css/vendor.afc3f335.css?max_age=864000 HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:37 GMT
content-type: text/css
content-length: 234940
cache-control: max-age=864000
expires: Fri, 15 Dec 2023 11:49:37 GMT
last-modified: Wed, 28 Sep 2022 10:45:20 GMT
content-encoding: gzip
x-nws-log-uuid: 2b4760e4-5429-4fe2-994d-197ee4da5ca1
x-cache-lookup: Hit From MemCache Gz
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.cn/
471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 2c3a8956978f2ada22a7fc90d9ba8490
a80af58985551f937b4317136d61e78f9d175797
5489d79d91dd88e300e196ea521b8e81a653a76901b7170fce2a265f64c688d5
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Tue, 05 Dec 2023 11:49:38 GMT
Ali-Swift-Global-Savetime: 1701776978
Via: cache5.l2de2[278,278,200-0,M], cache5.l2de2[279,0], cache8.nl2[287,287,200-0,M], cache8.nl2[288,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 05 Dec 2023 11:49:38 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6309c17017769778527986e
ocsp.digicert.cn/
471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash d29c8a00d67f3a00f9ca8749a7f6f597
40dc39bbbfd54811e834e75043b93bef6801c9cb
6b11987cc7e10da183bf2b6a35b2c7e05844acb59437e2cdb150cd9ab5c4ea12
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Tue, 05 Dec 2023 11:49:38 GMT
Ali-Swift-Global-Savetime: 1701776978
Via: cache4.l2de2[278,278,200-0,M], cache4.l2de2[279,0], cache7.nl2[286,286,200-0,M], cache7.nl2[288,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 05 Dec 2023 11:49:38 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6309b17017769779565635e
cdn.midasbuy.com/oversea_web/static/css/media.ac7e56d9.css?max_age=864000
200 OK 50 kB URL GET HTTP/2 cdn.midasbuy.com/oversea_web/static/css/media.ac7e56d9.css?max_age=864000
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash c4baf1666daee66d71a55b1fc10260ca
c1f39628aab11607c01dfe1475f4406fd868bbff
05d11f7958b571ee1637d67da1ea766f5e9863ba735ba0619c7085fbba1d420b
GET /oversea_web/static/css/media.ac7e56d9.css?max_age=864000 HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:38 GMT
content-type: text/css
content-length: 49706
cache-control: max-age=864000
expires: Fri, 15 Dec 2023 11:49:37 GMT
last-modified: Fri, 21 Oct 2022 12:53:20 GMT
content-encoding: gzip
x-nws-log-uuid: 59e90023-81f2-4031-9553-648d1bf284f3
x-cache-lookup: Hit From MemCache Gz
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/js/midas.runtimev1.js
200 OK 109 kB URL GET HTTP/2 cdn.midasbuy.com/oversea_web/static/js/midas.runtimev1.js
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Size 109 kB (109236 bytes)
Hash a418994e3e4b4d6d608a87bb3190823d
a76ecd1c8a6b22e94bb9c205c52ea51c08aaed9c
e41a623a73d2b33ce30626d1ba9342ebf7b921d2f28ab368ac7cf7dc91efdbdc
GET /oversea_web/static/js/midas.runtimev1.js HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:38 GMT
content-type: application/javascript
content-length: 109236
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:37 GMT
last-modified: Tue, 22 Nov 2022 14:30:27 GMT
content-encoding: gzip
x-nws-log-uuid: c5d69596-51a2-4b1d-9c5f-3f6d0ea85d0b
x-cache-lookup: Hit From MemCache Gz
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn-go.cn/aegis/aegis-sdk/latest/aegis.min.js?_bid=3977
200 OK 22 kB URL GET HTTP/2 cdn-go.cn/aegis/aegis-sdk/latest/aegis.min.js?_bid=3977
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subjectcdnv4-go.cn
FingerprintD9:17:47:8F:C2:C5:1C:83:3D:A6:04:BE:67:85:F2:A5:9F:88:99:7A
ValidityWed, 15 Feb 2023 00:00:00 GMT - Fri, 15 Mar 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (64995)
Hash 36c8c97b0241c7050ef3d2dd0fe121a9
9e713c93a04a0674d9e41b78a26c317bcbb98872
723507397a0043fcddcc9c54b19abb143b15264f4c3797c636d3b8f1b1132900
GET /aegis/aegis-sdk/latest/aegis.min.js?_bid=3977 HTTP/1.1
Host: cdn-go.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:38 GMT
content-type: application/javascript
content-length: 22050
cache-control: max-age=666
expires: Tue, 05 Dec 2023 12:00:43 GMT
last-modified: Wed, 15 Nov 2023 07:55:29 GMT
content-encoding: gzip
x-nws-log-uuid: 78eb571c-408f-4584-8311-0b425f7ac12a
vary: Origin
is-immutable-in-the-future: false
access-control-allow-origin: *
timing-allow-origin: *
x-cache-lookup: Hit From MemCache Gz
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/js/x-midas/kEc9hjFh5DQJbz_iPEWrfFxadMVk4PbLDS-5P8jE73pfdUuDwNGKNVZjdEztcHdofAVaHXo6zRGXgLwuvsK_afAEj6w_mKyiUmq-7AesIRU~.js?max_age=31536000
200 OK 20 kB URL GET HTTP/2 cdn.midasbuy.com/js/x-midas/kEc9hjFh5DQJbz_iPEWrfFxadMVk4PbLDS-5P8jE73pfdUuDwNGKNVZjdEztcHdofAVaHXo6zRGXgLwuvsK_afAEj6w_mKyiUmq-7AesIRU~.js?max_age=31536000
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (55927), with no line terminators
Hash 76aef1f13d66f80f2a8bef356c92e609
9295556b8f9e695699cb0def7fec3f6c424e9cb8
2ab08d983fd6007359e6d1ab6c80dc87b34c0d1bccf702dea67e6d20b824a872
GET /js/x-midas/kEc9hjFh5DQJbz_iPEWrfFxadMVk4PbLDS-5P8jE73pfdUuDwNGKNVZjdEztcHdofAVaHXo6zRGXgLwuvsK_afAEj6w_mKyiUmq-7AesIRU~.js?max_age=31536000 HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:38 GMT
content-type: application/javascript
content-length: 20219
cache-control: max-age=31536000
expires: Wed, 04 Dec 2024 11:49:37 GMT
last-modified: Wed, 24 Mar 2021 09:43:44 GMT
content-encoding: gzip
x-nws-log-uuid: 08e5fe93-7f27-4e67-aefe-9bfddd0c384c
x-cache-lookup: Hit From MemCache Gz
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/h5/overseah5/js/midas-oversea-h5page.js
200 OK 8.9 kB URL GET HTTP/2 cdn.midasbuy.com/h5/overseah5/js/midas-oversea-h5page.js
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (57318), with no line terminators
Hash e1113cde8b4411578de64674335c1aad
f7f7e851d6e4b59be5dc90ad32fa8efe82177d4d
a7ca0cd38fc1898212f5bd5884c7f308fcdf918bb45e7b2c715604fc7ee97d53
GET /h5/overseah5/js/midas-oversea-h5page.js HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:38 GMT
content-type: application/javascript
content-length: 8854
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:37 GMT
last-modified: Fri, 24 Nov 2023 09:44:32 GMT
content-encoding: gzip
x-nws-log-uuid: ea936295-535c-41f8-8a33-d9624b3ff6a0
x-cache-lookup: Hit From MemCache Gz
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.cn/
471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 2c3a8956978f2ada22a7fc90d9ba8490
a80af58985551f937b4317136d61e78f9d175797
5489d79d91dd88e300e196ea521b8e81a653a76901b7170fce2a265f64c688d5
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Tue, 05 Dec 2023 11:49:38 GMT
Ali-Swift-Global-Savetime: 1701776978
Via: cache26.l2de2[494,493,200-0,M], cache26.l2de2[498,0], cache8.nl2[520,520,200-0,M], cache8.nl2[521,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 05 Dec 2023 11:49:38 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6309c17017769778507984e
ocsp.digicert.cn/
471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 2c3a8956978f2ada22a7fc90d9ba8490
a80af58985551f937b4317136d61e78f9d175797
5489d79d91dd88e300e196ea521b8e81a653a76901b7170fce2a265f64c688d5
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Tue, 05 Dec 2023 11:49:38 GMT
Ali-Swift-Global-Savetime: 1701776978
Via: cache10.l2de2[529,529,200-0,M], cache10.l2de2[530,0], cache7.nl2[541,541,200-0,M], cache7.nl2[542,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 05 Dec 2023 11:49:38 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6309b17017769778435452e
i.ibb.co/pZDr8sd/Twitter-Hide-Password.png
200 OK 28 kB URL GET HTTP/2 i.ibb.co/pZDr8sd/Twitter-Hide-Password.png
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerLet's Encrypt
Subjectibb.co
FingerprintCC:72:96:95:90:7F:15:8E:AC:C5:40:3A:D2:6F:83:A3:DF:5E:72:56
ValidityMon, 09 Oct 2023 14:39:49 GMT - Sun, 07 Jan 2024 14:39:48 GMT
File type PNG image data, 656 x 656, 8-bit/color RGBA, non-interlaced\012- data
Hash 8d1f08b46884df302bf7300fc234832c
5735d57b6fa211c400d439095d5ff2f5bb57e691
e4cff1f68b85c3343554090b3479273a54e5eed2dbb3e56ceb9f86c4ebe8b0e7
GET /pZDr8sd/Twitter-Hide-Password.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 11:49:38 GMT
content-type: image/png
content-length: 28029
last-modified: Tue, 17 Jan 2023 04:04:57 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
i.ibb.co/PYpHF6b/Twitter-Show-Password.png
200 OK 28 kB URL GET HTTP/2 i.ibb.co/PYpHF6b/Twitter-Show-Password.png
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerLet's Encrypt
Subjectibb.co
FingerprintCC:72:96:95:90:7F:15:8E:AC:C5:40:3A:D2:6F:83:A3:DF:5E:72:56
ValidityMon, 09 Oct 2023 14:39:49 GMT - Sun, 07 Jan 2024 14:39:48 GMT
File type PNG image data, 656 x 656, 8-bit/color RGBA, non-interlaced\012- data
Hash 2fd203703821d5ce5d18bee2a51b779a
a78d7b1369ce8bc34de57909af142043cae446f0
6b82611fa96f118128b0db9692dd982ca0fe79b1b4d8048946880600cc4f97c8
GET /PYpHF6b/Twitter-Show-Password.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 11:49:38 GMT
content-type: image/png
content-length: 28355
last-modified: Tue, 17 Jan 2023 04:04:57 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/apps/activity/js/api/api.global.js
200 OK 8.2 kB URL GET HTTP/2 cdn.midasbuy.com/apps/activity/js/api/api.global.js
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (26778), with no line terminators
Hash 0b49585fe79b47b620dab57044a5bb2e
2e93b35efd19fd2f15f3b0fb7b0e056d12fd74b8
f961d9db1ab1867c1db2ed1fde6088cb1b97df612bc913c216ec16f5bcaa3e16
GET /apps/activity/js/api/api.global.js HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:38 GMT
content-type: application/javascript
content-length: 8228
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:38 GMT
last-modified: Fri, 10 Nov 2023 03:20:42 GMT
content-encoding: gzip
x-nws-log-uuid: af66b372-9186-410a-85a5-ab126bc8d0c5
x-cache-lookup: Hit From MemCache Gz
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/images/new-user-icon723b1902.png
200 OK 1.9 kB URL GET HTTP/2 cdn.midasbuy.com/images/new-user-icon723b1902.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced\012- data
Hash 723b190253572be857ace6f62bfe9a4c
fff04a6f473db94364a4625a0dec6bdf22db128a
dfd2e7c94a93c8549c8a5e670d9cd5b4c7f3251c3a1e9ac32f119df54edd4fd0
GET /images/new-user-icon723b1902.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: image/png
content-length: 1871
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:38 GMT
last-modified: Tue, 19 Jan 2021 03:11:03 GMT
x-nws-log-uuid: d96a9da3-9455-4a74-a5af-3c68400da675
x-cache-lookup: Hit From MemCache
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/images/pc-logo.png
200 OK 5.4 kB URL GET HTTP/2 cdn.midasbuy.com/oversea_web/static/images/pc-logo.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type PNG image data, 442 x 88, 8-bit/color RGBA, non-interlaced\012- data
Hash 5f404ea4792424375fa4b16a520555ed
8a3e448779780a80af9adc5081e4fa793e51f436
607b00f0fd839eb7f8250d7c4d0c0b4a31a08b32b2b8b5cbdd9fe3125b2eb985
GET /oversea_web/static/images/pc-logo.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: image/png
content-length: 5403
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:38 GMT
last-modified: Tue, 05 Dec 2023 10:07:08 GMT
x-nws-log-uuid: 2efebfc2-1624-4617-a80a-8e9d829e4aed
x-cache-lookup: Hit From MemCache
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/images/big-new-close-icon.png
200 OK 373 B URL GET HTTP/2 cdn.midasbuy.com/oversea_web/static/images/big-new-close-icon.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash ac6d8315af721860a75fff92418d6526
5c42e591ee0612a12d15c42e3bee0a8bd2f981b0
fea99403dd834e7b61ee51fd481e0d4fcbca047aadd57c15d405513e0b7e8a99
GET /oversea_web/static/images/big-new-close-icon.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: image/png
content-length: 373
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:38 GMT
last-modified: Tue, 05 Dec 2023 10:06:22 GMT
x-nws-log-uuid: 198745f5-f19d-4f89-9ce0-63cb7376d38e
x-cache-lookup: Hit From MemCache
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/images/id1.b4f71acc.jpg
200 OK 149 kB URL GET HTTP/2 cdn.midasbuy.com/images/id1.b4f71acc.jpg
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2208x1242, components 3\012- data
Size 149 kB (148738 bytes)
Hash b4f71acc61cd5b5cd7457a5eec303dd6
616ca7933c96325344eec3e2d6e9cffaf49c17e6
e5fbbee5437f62f721aca275dcdfcb5eeabf5f14488d7679b7d594c5b1c36eff
GET /images/id1.b4f71acc.jpg HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: image/jpeg
content-length: 148738
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:38 GMT
last-modified: Tue, 29 Nov 2022 03:52:14 GMT
x-nws-log-uuid: 526deb10-36b7-464f-a535-19cc16eece61
x-cache-lookup: Hit From MemCache
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/images/id2.0864fee3.jpg
200 OK 80 kB URL GET HTTP/2 cdn.midasbuy.com/images/id2.0864fee3.jpg
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2208x1242, components 3\012- data
Hash 0864fee3a5e4c241cf860aad923ce41d
706d688392294837ff534741f3eb2c4ea1bb445e
45e617c297151aaf9d8ebf4a8bbe2595726791f93b4bb6928eba951be165f7c2
GET /images/id2.0864fee3.jpg HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: image/jpeg
content-length: 79603
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:38 GMT
last-modified: Tue, 29 Nov 2022 03:52:29 GMT
x-nws-log-uuid: 676b20bf-d31c-4ad8-83c3-f305f88a01c3
x-cache-lookup: Hit From MemCache
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/images/footer/footer-fb-new.png
200 OK 2.9 kB URL GET HTTP/2 cdn.midasbuy.com/oversea_web/static/images/footer/footer-fb-new.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced\012- data
Hash 9be2c56c1a42fab7e2f5b764573dea4d
16f58f9b1f5fd465d3a8bc765b972eadb5166f24
cc8830f258c471b9cb15d69cda554d5181bd680996dd0041e3b9986b3b0769bf
GET /oversea_web/static/images/footer/footer-fb-new.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: image/png
content-length: 2899
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:38 GMT
last-modified: Tue, 13 Jul 2021 11:45:46 GMT
x-nws-log-uuid: d2230ad4-ea26-4299-9592-25c2844c3529
x-cache-lookup: Hit From MemCache
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/images/footer/footer-ins-new.png
200 OK 7.6 kB URL GET HTTP/2 cdn.midasbuy.com/oversea_web/static/images/footer/footer-ins-new.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced\012- data
Hash cc70b37c298ba08069f3c91b1df297fe
d7c87f6337f5a48f94190eca6a1b74eef9323f38
f2ad27dbb5397878470e88c31ca3c398f490f9e720ba0ca649ec6bf137f4d6bc
GET /oversea_web/static/images/footer/footer-ins-new.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: image/png
content-length: 7625
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:38 GMT
last-modified: Tue, 13 Jul 2021 11:45:46 GMT
x-nws-log-uuid: 8dd136d7-9cc3-496d-bff7-d8a97157359e
x-cache-lookup: Hit From MemCache
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/images/footer/footer-twitter-new.png
200 OK 5.2 kB URL GET HTTP/2 cdn.midasbuy.com/oversea_web/static/images/footer/footer-twitter-new.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced\012- data
Hash e13a1bb9c094e0f585719ee363feaa31
09cc870cb5cb04adde778ea6c5f1184840844689
d6a605020cfb1091630b300b918363d2b61333c9f68c498eb6a73f323b35e1a7
GET /oversea_web/static/images/footer/footer-twitter-new.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: image/png
content-length: 5151
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:38 GMT
last-modified: Tue, 13 Jul 2021 11:45:46 GMT
x-nws-log-uuid: 2496c636-25c1-4d21-a39f-d938765f44e4
x-cache-lookup: Hit From MemCache
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/images/footer/footer-youtube-new.png
200 OK 4.0 kB URL GET HTTP/2 cdn.midasbuy.com/oversea_web/static/images/footer/footer-youtube-new.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced\012- data
Hash b6f18fca57bb1657d719961d350bda7c
1e99ce9e9852ea8615b1c8c6f361058019d92dab
0e888a266c4ad5136be1cf650faf222ed0d644c54d83068f0dfabc0fae53e90c
GET /oversea_web/static/images/footer/footer-youtube-new.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: image/png
content-length: 3955
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:38 GMT
last-modified: Tue, 13 Jul 2021 11:45:46 GMT
x-nws-log-uuid: 7c9ed98f-9a77-482b-a82f-f1d5647d2644
x-cache-lookup: Hit From MemCache
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/images/Discord.8277bca0.png
200 OK 5.2 kB URL GET HTTP/2 cdn.midasbuy.com/images/Discord.8277bca0.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced\012- data
Hash 8277bca0aac01af0b679d71f4de55459
e06892977682cd5f57c31245ff7cc8efb14c92f0
25157739816315d396c664fd1f45336d8ab8bf9d768aa911e93cbebc95614a58
GET /images/Discord.8277bca0.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: image/png
content-length: 5224
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:38 GMT
last-modified: Fri, 22 Apr 2022 08:25:18 GMT
x-nws-log-uuid: e285b7a8-e43e-4b7b-a2d5-d9850d4c8b13
x-cache-lookup: Hit From MemCache
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/images/footer/footer-email-subscribe.png
200 OK 3.3 kB URL GET HTTP/2 cdn.midasbuy.com/oversea_web/static/images/footer/footer-email-subscribe.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced\012- data
Hash 150e097b432034e3fedf6443b4551a16
a4299dadb4feda18e484362ce6892c52b507d5e6
b9ca6c3a516ec9dfbe4f33e318d560f265836d51627cb9fa3d881062a2fd98e2
GET /oversea_web/static/images/footer/footer-email-subscribe.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: image/png
content-length: 3349
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:38 GMT
last-modified: Tue, 05 Dec 2023 10:06:48 GMT
x-nws-log-uuid: 4c40a66c-ea57-419a-9b54-d0f86b2c2bba
x-cache-lookup: Hit From MemCache
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/images/footer-tiktok-white.7743a9ae.png
200 OK 2.1 kB URL GET HTTP/2 cdn.midasbuy.com/images/footer-tiktok-white.7743a9ae.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced\012- data
Hash 7743a9aef9d3b6d89f6567e7514036d4
08fea638e8c8f7641edaae510c80879686ddeb77
f10cdb32b8d7212970310db9166bb421eaea8128f1767604c22001fac1d5aa97
GET /images/footer-tiktok-white.7743a9ae.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: image/png
content-length: 2135
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:38 GMT
last-modified: Mon, 26 Sep 2022 03:12:26 GMT
x-nws-log-uuid: ba3616a1-ab37-4d9c-8a53-c2ed79d6e456
x-cache-lookup: Hit From MemCache
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/images/footer-reddit.d66cdc0d.png
200 OK 5.0 kB URL GET HTTP/2 cdn.midasbuy.com/images/footer-reddit.d66cdc0d.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced\012- data
Hash d66cdc0d92659b0e64d7aefab70a60f6
f8dcf359bb72ed8aa3ef84a6d3f79102869a82f0
642703b53950fc841394918d79cbabec6060242e45c8ded41d324e7d6dce8924
GET /images/footer-reddit.d66cdc0d.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: image/png
content-length: 5043
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:38 GMT
last-modified: Mon, 26 Sep 2022 03:12:26 GMT
x-nws-log-uuid: e15be4bc-511b-4781-9156-b25896a9e493
x-cache-lookup: Hit From MemCache
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/images/2880x600.d5b80993.png
200 OK 567 kB URL GET HTTP/2 cdn.midasbuy.com/images/2880x600.d5b80993.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type PNG image data, 2880 x 600, 8-bit colormap, non-interlaced\012- data
Size 567 kB (566621 bytes)
Hash d5b809932879a48954e346193b95622c
64d31efd47450e0e87310e3af4bcad626a935e7e
3e6adb0fa2b0851ddc64ad8459a0476d5081dd52d9891cf529fc7600e42c85b9
GET /images/2880x600.d5b80993.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: image/png
content-length: 566621
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:38 GMT
last-modified: Mon, 13 Nov 2023 09:06:09 GMT
x-nws-log-uuid: ce6872ef-ddb7-4450-a246-135369029ae2
x-cache-lookup: Hit From Disktank3
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/images/1440_300.b6ab6487.jpg
200 OK 196 kB URL GET HTTP/2 cdn.midasbuy.com/images/1440_300.b6ab6487.jpg
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 1440x300, components 3\012- data
Size 196 kB (195821 bytes)
Hash b6ab648778a91ba0c8f4023c13137ad3
b97590356d279776480f291f29cb8b2cb80253ee
1fd1ccfacad1ce440d957fa5d48e28496c1fd582d0a818f690466867d67a698c
GET /images/1440_300.b6ab6487.jpg HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: image/jpeg
content-length: 195821
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:38 GMT
last-modified: Mon, 13 Nov 2023 09:13:35 GMT
x-nws-log-uuid: ff5e1c57-2e39-44c2-b9b5-947504fdc524
x-cache-lookup: Hit From MemCache
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/images/a1440_300-en.96f777eb.png
200 OK 742 kB URL GET HTTP/2 cdn.midasbuy.com/images/a1440_300-en.96f777eb.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type PNG image data, 1440 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size 742 kB (742158 bytes)
Hash 96f777ebae55ebc8ea887334be3056fe
7ed6d865b0e1dbcdaf52dcc906bd9f238f9f1962
48100abcf5d4f9e7aef8e78c16f413fc060ab02b85732d5d7567ae239b7b4c58
GET /images/a1440_300-en.96f777eb.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: image/png
content-length: 742158
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:38 GMT
last-modified: Fri, 12 May 2023 08:43:46 GMT
x-nws-log-uuid: b8993524-1814-4f6a-a5f7-9e61d80c605b
x-cache-lookup: Hit From Disktank3
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/images/1440_300.f6952937.jpg
200 OK 210 kB URL GET HTTP/2 cdn.midasbuy.com/images/1440_300.f6952937.jpg
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 1440x300, components 3\012- data
Size 210 kB (209515 bytes)
Hash f695293780a36d8612fc77f1b4f45590
e0c7f74930f6c270eaf951253f2f65a9437e1281
200fec7f75352d558b025e759c4f2f1a9cf745a75cd751031ca11a3559f33935
GET /images/1440_300.f6952937.jpg HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: image/jpeg
content-length: 209515
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:38 GMT
last-modified: Wed, 27 Sep 2023 03:35:41 GMT
x-nws-log-uuid: 23eecd32-b075-4b1e-836a-0f9a33a05465
x-cache-lookup: Hit From MemCache
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/images/1440x300.cc5d32dd.jpg
200 OK 243 kB URL GET HTTP/2 cdn.midasbuy.com/images/1440x300.cc5d32dd.jpg
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1440x300, components 3\012- data
Size 243 kB (242935 bytes)
Hash cc5d32dd20de0965872e31800ae3bc04
2590f20d41890849350628eaf4271eafb9f8f5b1
7075f0bedf865a53cb9359921c87d3894e3d177a02904496178ae51a2aa34cc4
GET /images/1440x300.cc5d32dd.jpg HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: image/jpeg
content-length: 242935
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:38 GMT
last-modified: Fri, 10 Jun 2022 08:09:37 GMT
x-nws-log-uuid: 8fb496b2-27d6-41e0-9b86-e0b596e123b2
x-cache-lookup: Hit From MemCache
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/images/1440x300.f87f9065.jpg
200 OK 234 kB URL GET HTTP/2 cdn.midasbuy.com/images/1440x300.f87f9065.jpg
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1440x300, components 3\012- data
Size 234 kB (233590 bytes)
Hash f87f9065dc3de9ad07acd1d7ed1f04e0
c34d923f1d6903f0888207697f342b2c5d4d38b6
434c60b8da0f90691d0753103ad6327fd54fb36c9d356883ed8d61747b3318f6
GET /images/1440x300.f87f9065.jpg HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: image/jpeg
content-length: 233590
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:38 GMT
last-modified: Fri, 10 Jun 2022 08:17:58 GMT
x-nws-log-uuid: b2a1e8ac-ae24-458b-a341-9743cc849259
x-cache-lookup: Hit From MemCache
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/images/906-1440x300-EN.a1471d2a.jpg
200 OK 247 kB URL GET HTTP/2 cdn.midasbuy.com/images/906-1440x300-EN.a1471d2a.jpg
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.0 (Windows), datetime=2022:12:20 17:59:54], baseline, precision 8, 1440x300, components 3\012- data
Size 247 kB (246563 bytes)
Hash a1471d2a6162211330042fede32762ae
92f51e8ed8ee29484025c00f5d9f5ef025e0f655
7b7135f1afc67eae5a2996f0a7e1dbc4d2545dbac06cd8bac5c4b06869d6dc40
GET /images/906-1440x300-EN.a1471d2a.jpg HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: image/jpeg
content-length: 246563
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:38 GMT
last-modified: Thu, 16 Feb 2023 13:18:00 GMT
x-nws-log-uuid: 3028047c-a160-44ed-9038-c0ca1aa3be7c
x-cache-lookup: Hit From MemCache
access-control-allow-origin: https://www.midasbuy.com
timing-allow-origin: https://www.midasbuy.com
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/images/card-bg.2ef5f06c.png
200 OK 5.1 kB URL GET HTTP/2 cdn.midasbuy.com/oversea_web/static/images/card-bg.2ef5f06c.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type PNG image data, 326 x 480, 1-bit colormap, non-interlaced\012- data
Hash 04fbb1d37cbd34be7b86e86462ccd14d
a15b60ac83c29447dce0e28908c93bb835fe3d6f
29cbcd6976d4b5bd40e95317c0d8363f2a17cc8eb7f0dbed399d6b55a56a3d23
GET /oversea_web/static/images/card-bg.2ef5f06c.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.midasbuy.com/oversea_web/static/css/buypage.c6deb7d4.css?max_age=864000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: image/png
content-length: 5132
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:38 GMT
last-modified: Tue, 05 Dec 2023 10:06:23 GMT
x-nws-log-uuid: decc5acb-cca8-46b9-8684-87b4022ed211
timing-allow-origin: https://cdn.midasbuy.com
access-control-allow-origin: https://cdn.midasbuy.com
x-cache-lookup: Hit From MemCache
accept-ranges: bytes
X-Firefox-Spdy: h2
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midas.api.call.init.ok|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|36=|50=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0|51=&r=0.26626580440831227
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midas.api.call.init.ok|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|36=|50=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0|51=&r=0.26626580440831227
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midas.api.call.init.ok|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|36=|50=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0|51=&r=0.26626580440831227 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html;charset=utf-8
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-27=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, h3-Q039=":443"; ma=2592000, quic=":443"; ma=2592000; v="39,43,46"
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:38 GMT
content-length: 29
eo-log-uuid: 2207715413812655645
eo-cache-status: MISS
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/images/card-active-bg.1b560d1d.png
200 OK 18 kB URL GET HTTP/2 cdn.midasbuy.com/oversea_web/static/images/card-active-bg.1b560d1d.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type PNG image data, 326 x 480, 8-bit colormap, non-interlaced\012- data
Hash 7daa40becff7598817e3e1d74bd937ef
08fc0ec3a1da6ee35200b7ab05c5988af106dc48
b1bebd01158df070e1f2d8ed17d3bf9544504b7afe4879547417828499eb8246
GET /oversea_web/static/images/card-active-bg.1b560d1d.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.midasbuy.com/oversea_web/static/css/buypage.c6deb7d4.css?max_age=864000
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: image/png
content-length: 17521
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:39 GMT
last-modified: Tue, 05 Dec 2023 10:06:23 GMT
x-nws-log-uuid: 84b3f4a8-db86-4830-8b59-02e734d1121a
timing-allow-origin: https://cdn.midasbuy.com
access-control-allow-origin: https://cdn.midasbuy.com
x-cache-lookup: Hit From MemCache
accept-ranges: bytes
X-Firefox-Spdy: h2
w2sw.jestersuit.com/font/DINMITTELSCHRIFTSTD.woff
200 OK 25 kB URL GET HTTP/3 w2sw.jestersuit.com/font/DINMITTELSCHRIFTSTD.woff
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerGoogle Trust Services LLC
Subjectjestersuit.com
Fingerprint12:7F:EA:52:90:B9:12:91:5E:CC:89:7B:24:2D:D5:5E:6E:08:A6:23
ValidityWed, 29 Nov 2023 18:06:54 GMT - Tue, 27 Feb 2024 18:06:53 GMT
File type Web Open Font Format, TrueType, length 24996, version 1.40\012- data
Hash 2018d35e708e07985693c6bc12a59861
12faf69d54217b30d4458fffad689e758b8a91c6
c2293fa86d99d0f1f06b2ac7f85ae0517e4a3bacfd9946de7b012f04aa2d831c
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /font/DINMITTELSCHRIFTSTD.woff HTTP/1.1
Host: w2sw.jestersuit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: font/woff
content-length: 24996
cache-control: public, max-age=604800
expires: Tue, 12 Dec 2023 11:49:39 GMT
last-modified: Mon, 15 Mar 2021 17:36:22 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xKX8ttQSa4p886lNqsrS7mpUDFPutLUyZK6H3ZLm1bpnlRDeD8MgYQI4NHFSz4RfriOF69ZXZvHVYjqHEVAQoHXNAIFhW6W%2FcCtaOP2gL0Wpmfv4Lxfc%2B%2BWheCpc94Usliws3%2FJM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830c1128fc790afe-OSL
alt-svc: h3=":443"; ma=86400
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.req.getFingerPrint.start|8=test_id%3D%26bucket_id%3D%26order_refer%3D|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984739|29=046123862290262841666404955068&rr=0.790835286697465
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.req.getFingerPrint.start|8=test_id%3D%26bucket_id%3D%26order_refer%3D|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984739|29=046123862290262841666404955068&rr=0.790835286697465
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.req.getFingerPrint.start|8=test_id%3D%26bucket_id%3D%26order_refer%3D|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984739|29=046123862290262841666404955068&rr=0.790835286697465 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:39 GMT
content-length: 29
eo-log-uuid: 9608007956663339482
eo-cache-status: MISS
X-Firefox-Spdy: h2
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D44|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984783|29=046123862290262841666404955068&rr=0.2912346401558673
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D44|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984783|29=046123862290262841666404955068&rr=0.2912346401558673
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D44|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984783|29=046123862290262841666404955068&rr=0.2912346401558673 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:40 GMT
content-length: 29
eo-log-uuid: 4172265432599486717
eo-cache-status: MISS
X-Firefox-Spdy: h2
w2sw.jestersuit.com/receivemsg?buy_type_key=CURRENT_BUY_ITEM_SAVE_page_042772519878282667
404 Not Found 4.5 kB URL GET HTTP/3 w2sw.jestersuit.com/receivemsg?buy_type_key=CURRENT_BUY_ITEM_SAVE_page_042772519878282667
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerGoogle Trust Services LLC
Subjectjestersuit.com
Fingerprint12:7F:EA:52:90:B9:12:91:5E:CC:89:7B:24:2D:D5:5E:6E:08:A6:23
ValidityWed, 29 Nov 2023 18:06:54 GMT - Tue, 27 Feb 2024 18:06:53 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1377), with CRLF, LF line terminators
Hash bb8d9bcb8497cf77fba2a9eeb7d161fb
2ec9df312956f8215a0370b72a44ea73c59b94c4
10f01a52ec48369d6ce63688989db4998e4ea7648825d679d382903f6e9b90e2
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /receivemsg?buy_type_key=CURRENT_BUY_ITEM_SAVE_page_042772519878282667 HTTP/1.1
Host: w2sw.jestersuit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u4va5hEkKMkUA7CkoZUVvv8EToFwHGPsOftDLvdw09E6lzHS2inV7npZ150pJLtSi91XlnJmwhTdpFrSmaHweO3be32fI%2Fai3jtAAyddit8uOmKblAagJ4PI61MGJrBO9zZd1kFG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830c11285c180afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.req.getFingerPrint.start|8=test_id%3D%26bucket_id%3D%26order_refer%3D|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984810|29=046123862290262841666404955068&rr=0.6343405651312224
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.req.getFingerPrint.start|8=test_id%3D%26bucket_id%3D%26order_refer%3D|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984810|29=046123862290262841666404955068&rr=0.6343405651312224
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.req.getFingerPrint.start|8=test_id%3D%26bucket_id%3D%26order_refer%3D|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984810|29=046123862290262841666404955068&rr=0.6343405651312224 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-27=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, h3-Q039=":443"; ma=2592000, quic=":443"; ma=2592000; v="39,43,46"
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:40 GMT
content-length: 29
eo-log-uuid: 9444425007759587683
eo-cache-status: MISS
X-Firefox-Spdy: h2
w2sw.jestersuit.com/apps/activity/api/activity-initialize/many-valid-events?appid=1450015065&country=ot&supportEmbed=1
404 Not Found 1.5 kB URL GET HTTP/3 w2sw.jestersuit.com/apps/activity/api/activity-initialize/many-valid-events?appid=1450015065&country=ot&supportEmbed=1
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerGoogle Trust Services LLC
Subjectjestersuit.com
Fingerprint12:7F:EA:52:90:B9:12:91:5E:CC:89:7B:24:2D:D5:5E:6E:08:A6:23
ValidityWed, 29 Nov 2023 18:06:54 GMT - Tue, 27 Feb 2024 18:06:53 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1377), with CRLF, LF line terminators
Hash 4c4b8981d238ac1488e51dc64d49a00d
30086de2519b3c8c6d82aee5c71a55b92b6f6af5
f81846cb67e0bde2a9e05460dfed0793a7ec40b33e4a5902c7ceb9a76e364159
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /apps/activity/api/activity-initialize/many-valid-events?appid=1450015065&country=ot&supportEmbed=1 HTTP/1.1
Host: w2sw.jestersuit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kTYCPCyY%2BN2OEGRuGIpJtF2AX%2FwJXa8mxjNfSU%2F8yZBmz8vxQ2koj3EzWdBkG3%2FH8mhQMJJWeWTphOZIYAQV93mOH4aBQGwKQYEmh0439cSLrcvTcFh43EK1mGEXmlzIETB0f74u"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830c112b3df40afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D1|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984811|29=046123862290262841666404955068&rr=0.9299451718200427
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D1|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984811|29=046123862290262841666404955068&rr=0.9299451718200427
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D1|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984811|29=046123862290262841666404955068&rr=0.9299451718200427 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-27=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, h3-Q039=":443"; ma=2592000, quic=":443"; ma=2592000; v="39,43,46"
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:40 GMT
content-length: 29
eo-log-uuid: 2079557093586313959
eo-cache-status: MISS
X-Firefox-Spdy: h2
ocsp.digicert.cn/
471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 1c58f7542408b94fb2cd73f82b74aff8
bbda289d7d2658d1889c8586541cd7af8241d571
b50ded167222b41d9dc3662187ad52ed9f7981cc31c9909e3a9e89ec43d978c0
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Tue, 05 Dec 2023 11:49:41 GMT
Ali-Swift-Global-Savetime: 1701776981
Via: cache5.l2de2[537,536,200-0,M], cache5.l2de2[537,0], cache8.nl2[544,543,200-0,M], cache8.nl2[545,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 05 Dec 2023 11:49:41 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6309c17017769806094691e
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init.result|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26result%3Dv0.1.12%252C211|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984811|29=046123862290262841666404955068&rr=0.09134175884281492
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init.result|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26result%3Dv0.1.12%252C211|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984811|29=046123862290262841666404955068&rr=0.09134175884281492
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init.result|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26result%3Dv0.1.12%252C211|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984811|29=046123862290262841666404955068&rr=0.09134175884281492 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:40 GMT
content-length: 29
eo-log-uuid: 1469761325041781572
eo-cache-status: MISS
X-Firefox-Spdy: h2
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D0|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984812|29=046123862290262841666404955068&rr=0.6578067966452021
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D0|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984812|29=046123862290262841666404955068&rr=0.6578067966452021
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D0|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984812|29=046123862290262841666404955068&rr=0.6578067966452021 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:41 GMT
content-length: 29
eo-log-uuid: 13932303450536077300
eo-cache-status: MISS
X-Firefox-Spdy: h2
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init.result|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26result%3Dv0.1.12%252C211|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984812|29=046123862290262841666404955068&rr=0.4235081172137676
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init.result|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26result%3Dv0.1.12%252C211|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984812|29=046123862290262841666404955068&rr=0.4235081172137676
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init.result|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26result%3Dv0.1.12%252C211|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984812|29=046123862290262841666404955068&rr=0.4235081172137676 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-27=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, h3-Q039=":443"; ma=2592000, quic=":443"; ma=2592000; v="39,43,46"
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:41 GMT
content-length: 29
eo-log-uuid: 15270469021740549247
eo-cache-status: MISS
X-Firefox-Spdy: h2
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.req.getFingerPrint.start|8=test_id%3D%26bucket_id%3D%26order_refer%3D|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984814|29=046123862290262841666404955068&rr=0.12980730601474033
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.req.getFingerPrint.start|8=test_id%3D%26bucket_id%3D%26order_refer%3D|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984814|29=046123862290262841666404955068&rr=0.12980730601474033
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.req.getFingerPrint.start|8=test_id%3D%26bucket_id%3D%26order_refer%3D|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984814|29=046123862290262841666404955068&rr=0.12980730601474033 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:41 GMT
content-length: 29
eo-log-uuid: 528486190815841685
eo-cache-status: MISS
X-Firefox-Spdy: h2
www.pubgmobile.com/en/images/nav_language.svg
200 OK 675 B URL GET HTTP/2 www.pubgmobile.com/en/images/nav_language.svg
IP
ASN #20940 Akamai International B.V.
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subjectwetv.acc.qq.com
Fingerprint5C:D9:77:1B:16:32:99:FE:C5:2E:BD:E3:86:D8:71:22:B0:1B:6A:3F
ValidityMon, 30 Oct 2023 00:00:00 GMT - Wed, 30 Oct 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, Unicode text, UTF-8 text, with very long lines (1107), with no line terminators
Hash d8ba211bb1be1a15bf5b0143ca1b009a
215203609a551dcaccf6e434508623f302635f86
a441182568ad88fa9c54384de94a77f64148d3d54df66ea1beff4a11100967c6
GET /en/images/nav_language.svg HTTP/1.1
Host: www.pubgmobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: image/svg+xml
last-modified: Mon, 21 Mar 2022 13:24:18 GMT
etag: "62387c82-45b"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:41 GMT
content-length: 675
X-Firefox-Spdy: h2
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D0|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984815|29=046123862290262841666404955068&rr=0.3675531122804485
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D0|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984815|29=046123862290262841666404955068&rr=0.3675531122804485
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D0|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984815|29=046123862290262841666404955068&rr=0.3675531122804485 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-27=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, h3-Q039=":443"; ma=2592000, quic=":443"; ma=2592000; v="39,43,46"
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:41 GMT
content-length: 29
eo-log-uuid: 14108484005216929312
eo-cache-status: MISS
X-Firefox-Spdy: h2
kepler.captcha.qcloud.com/tencent-kepler.js?appId=9865970
200 OK 57 kB URL GET HTTP/1.1 kepler.captcha.qcloud.com/tencent-kepler.js?appId=9865970
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subjectapr02-2023-1.ias.qcloud.com
Fingerprint69:EC:64:F0:FC:97:7D:F3:2A:AE:4B:99:04:81:E3:72:37:5C:6D:10
ValiditySat, 01 Apr 2023 00:00:00 GMT - Tue, 02 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65489), with no line terminators
Hash 30260e9420743e2eec32089394a9b063
60e943115d041ce5d4fe628bd9a25933f1b926da
2bc44ec886542faf19965c1aad8d5b273f052d76585cc5fd934ce59f1d24ebe2
GET /tencent-kepler.js?appId=9865970 HTTP/1.1
Host: kepler.captcha.qcloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 11:49:41 GMT
Content-Type: text/javascript
Content-Length: 56621
Connection: keep-alive
Content-Encoding: gzip
Server: tencent http server
Accept-Ranges: bytes
P3P: CP=CAO PSA OUR
Cache-Control: max-age=600
ocsp.digicert.cn/
471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash f1164c261720d2a3d85ae5478593edf6
c40d004d0f61c92863794596c5d8c79ac1cbaab3
0fe65fcebe4f9ef0e29014ec905e10e5499b909a749313e118723b48193f0465
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Tue, 05 Dec 2023 11:49:41 GMT
Ali-Swift-Global-Savetime: 1701776982
Via: cache10.l2de2[48,47,200-0,M], cache10.l2de2[49,0], cache7.nl2[56,56,200-0,M], cache7.nl2[57,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 05 Dec 2023 11:49:41 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff6309b17017769819394165e
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init.result|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26result%3Dv0.1.12%252C211|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984815|29=046123862290262841666404955068&rr=0.9110057550122478
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init.result|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26result%3Dv0.1.12%252C211|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984815|29=046123862290262841666404955068&rr=0.9110057550122478
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init.result|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26result%3Dv0.1.12%252C211|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984815|29=046123862290262841666404955068&rr=0.9110057550122478 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:41 GMT
content-length: 29
eo-log-uuid: 2358615529846583737
eo-cache-status: MISS
X-Firefox-Spdy: h2
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.req.getFingerPrint.start|8=test_id%3D%26bucket_id%3D%26order_refer%3D|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984820|29=046123862290262841666404955068&rr=0.4457535075923039
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.req.getFingerPrint.start|8=test_id%3D%26bucket_id%3D%26order_refer%3D|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984820|29=046123862290262841666404955068&rr=0.4457535075923039
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.req.getFingerPrint.start|8=test_id%3D%26bucket_id%3D%26order_refer%3D|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984820|29=046123862290262841666404955068&rr=0.4457535075923039 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:42 GMT
content-length: 29
eo-log-uuid: 13145964984514372767
eo-cache-status: MISS
X-Firefox-Spdy: h2
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D0|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984820|29=046123862290262841666404955068&rr=0.9450262279388725
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D0|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984820|29=046123862290262841666404955068&rr=0.9450262279388725
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D0|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984820|29=046123862290262841666404955068&rr=0.9450262279388725 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:42 GMT
content-length: 29
eo-log-uuid: 9379617002465675197
eo-cache-status: MISS
X-Firefox-Spdy: h2
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init.result|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26result%3Dv0.1.12%252C211|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984820|29=046123862290262841666404955068&rr=0.9346297822342334
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init.result|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26result%3Dv0.1.12%252C211|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984820|29=046123862290262841666404955068&rr=0.9346297822342334
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init.result|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26result%3Dv0.1.12%252C211|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984820|29=046123862290262841666404955068&rr=0.9346297822342334 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-27=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, h3-Q039=":443"; ma=2592000, quic=":443"; ma=2592000; v="39,43,46"
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:42 GMT
content-length: 29
eo-log-uuid: 3339226868775842875
eo-cache-status: MISS
X-Firefox-Spdy: h2
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D0|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984947|29=046123862290262841666404955068&rr=0.16491312979059114
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D0|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984947|29=046123862290262841666404955068&rr=0.16491312979059114
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D0|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984947|29=046123862290262841666404955068&rr=0.16491312979059114 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:42 GMT
content-length: 29
eo-log-uuid: 12130171420652354691
eo-cache-status: MISS
X-Firefox-Spdy: h2
w2sw.jestersuit.com/css/style.css
200 OK 1.2 kB URL GET HTTP/3 w2sw.jestersuit.com/css/style.css
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerGoogle Trust Services LLC
Subjectjestersuit.com
Fingerprint12:7F:EA:52:90:B9:12:91:5E:CC:89:7B:24:2D:D5:5E:6E:08:A6:23
ValidityWed, 29 Nov 2023 18:06:54 GMT - Tue, 27 Feb 2024 18:06:53 GMT
File type ASCII text, with CRLF line terminators
Hash 999ff4e9134d9874a0c62809ec103db8
becc70cc6cbb91d64a48ff9c5988060984e9e79b
06ae0f90b1dd132f350dfe995e0802a50f527cf96fe147f2d065250e3afd630f
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /css/style.css HTTP/1.1
Host: w2sw.jestersuit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 11:49:36 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Tue, 12 Dec 2023 11:49:35 GMT
last-modified: Wed, 01 Mar 2023 18:45:12 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qn0bZa8AqTZNCHG%2F7cQmtcGW3cPqkgeGUM3zM6x0anlQHAOei2enTAtqyZgMan0BpENp%2FEYVuSuENo8Z1bXTw0nM6%2F7dD7g8d8gW3DkbDDoFU92DcMt34IH%2FxdptAYuAvTR7sYMU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830c1112bc1f0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init.result|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26result%3Dv0.1.12%252C211|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984947|29=046123862290262841666404955068&rr=0.12126558692458866
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init.result|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26result%3Dv0.1.12%252C211|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984947|29=046123862290262841666404955068&rr=0.12126558692458866
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init.result|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26result%3Dv0.1.12%252C211|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984947|29=046123862290262841666404955068&rr=0.12126558692458866 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:43 GMT
content-length: 29
eo-log-uuid: 14843999516955074632
eo-cache-status: MISS
X-Firefox-Spdy: h2
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D0|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985014|29=046123862290262841666404955068&rr=0.5554208116412171
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D0|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985014|29=046123862290262841666404955068&rr=0.5554208116412171
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D0|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985014|29=046123862290262841666404955068&rr=0.5554208116412171 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:43 GMT
content-length: 29
eo-log-uuid: 6517084323226052689
eo-cache-status: MISS
X-Firefox-Spdy: h2
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init.result|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26result%3Dv0.1.12%252C211|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985014|29=046123862290262841666404955068&rr=0.02920042135613743
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init.result|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26result%3Dv0.1.12%252C211|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985014|29=046123862290262841666404955068&rr=0.02920042135613743
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init.result|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26result%3Dv0.1.12%252C211|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985014|29=046123862290262841666404955068&rr=0.02920042135613743 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:43 GMT
content-length: 29
eo-log-uuid: 11273834013808494086
eo-cache-status: MISS
X-Firefox-Spdy: h2
kepler.captcha.qcloud.com/getwt
200 OK 358 B URL POST HTTP/1.1 kepler.captcha.qcloud.com/getwt
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subjectapr02-2023-1.ias.qcloud.com
Fingerprint69:EC:64:F0:FC:97:7D:F3:2A:AE:4B:99:04:81:E3:72:37:5C:6D:10
ValiditySat, 01 Apr 2023 00:00:00 GMT - Tue, 02 Apr 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (358), with no line terminators
Hash 0d64cd0218bedda9f7d186c5e855f8e1
6173c89de69b9dcf297a3fe4562416efe8b29ab4
6073d510e3e27d3b189b743cef8ba0fb58ddb49c4d7ee3ddf2696cba668d2166
POST /getwt HTTP/1.1
Host: kepler.captcha.qcloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 525
Origin: https://w2sw.jestersuit.com
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 11:49:43 GMT
Content-Type: text/json
Content-Length: 358
Connection: keep-alive
Server: tencent http server
Accept-Ranges: bytes
Pragma: No-cache
Access-Control-Allow-Origin: *
P3P: CP=CAO PSA OUR
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.pageview.cookie_preference|13=1|8=test_id%3D%26bucket_id%3D%26order_refer%3D|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985089|29=046123862290262841666404955068&rr=0.9371960322863874
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.pageview.cookie_preference|13=1|8=test_id%3D%26bucket_id%3D%26order_refer%3D|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985089|29=046123862290262841666404955068&rr=0.9371960322863874
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.pageview.cookie_preference|13=1|8=test_id%3D%26bucket_id%3D%26order_refer%3D|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985089|29=046123862290262841666404955068&rr=0.9371960322863874 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:43 GMT
content-length: 29
eo-log-uuid: 6436016093436228190
eo-cache-status: MISS
X-Firefox-Spdy: h2
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.pageview.topupv2|13=2|8=test_id%3D%26bucket_id%3D%26order_refer%3D|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985235|29=046123862290262841666404955068&rr=0.5608055738267596
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.pageview.topupv2|13=2|8=test_id%3D%26bucket_id%3D%26order_refer%3D|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985235|29=046123862290262841666404955068&rr=0.5608055738267596
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.pageview.topupv2|13=2|8=test_id%3D%26bucket_id%3D%26order_refer%3D|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985235|29=046123862290262841666404955068&rr=0.5608055738267596 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:43 GMT
content-length: 29
eo-log-uuid: 8942868102939286068
eo-cache-status: MISS
X-Firefox-Spdy: h2
cdn.midasbuy.com/js/benchmark.enc.js?v=2
200 OK 205 B URL GET HTTP/2 cdn.midasbuy.com/js/benchmark.enc.js?v=2
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (362), with no line terminators
Hash 7940855fdd8f367ca7df55400edacbf9
254307f85011800da008590d739e5e6890a2dbb5
d29915df2f9a5a5f10009cb53fd18a2e678b90519e4087dbf1186f103e3808ad
GET /js/benchmark.enc.js?v=2 HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 05 Dec 2023 11:49:44 GMT
content-type: application/javascript
content-length: 205
cache-control: max-age=600
expires: Tue, 05 Dec 2023 11:59:43 GMT
last-modified: Tue, 14 Jun 2022 02:29:46 GMT
content-encoding: gzip
x-nws-log-uuid: b5134d02-1502-4fec-9151-8f0553997576
x-cache-lookup: Hit From MemCache Gz
accept-ranges: bytes
X-Firefox-Spdy: h2
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.pageview.topupv2|13=3|8=test_id%3D%26bucket_id%3D%26order_refer%3D|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985242|29=046123862290262841666404955068&rr=0.361995036160895
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.pageview.topupv2|13=3|8=test_id%3D%26bucket_id%3D%26order_refer%3D|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985242|29=046123862290262841666404955068&rr=0.361995036160895
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.pageview.topupv2|13=3|8=test_id%3D%26bucket_id%3D%26order_refer%3D|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985242|29=046123862290262841666404955068&rr=0.361995036160895 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-27=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, h3-Q039=":443"; ma=2592000, quic=":443"; ma=2592000; v="39,43,46"
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:44 GMT
content-length: 29
eo-log-uuid: 16706835670496645180
eo-cache-status: MISS
X-Firefox-Spdy: h2
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D3|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985640|29=046123862290262841666404955068&rr=0.5737405930087109
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D3|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985640|29=046123862290262841666404955068&rr=0.5737405930087109
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D3|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985640|29=046123862290262841666404955068&rr=0.5737405930087109 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-27=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, h3-Q039=":443"; ma=2592000, quic=":443"; ma=2592000; v="39,43,46"
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:44 GMT
content-length: 29
eo-log-uuid: 1286159472602740902
eo-cache-status: MISS
X-Firefox-Spdy: h2
aegis.qq.com/speed/performance?dnsLookup=0&tcp=17&ssl=14&ttfb=264&contentDownload=246&domParse=3729&resourceDownload=4695&firstScreenTiming=4335&id=xEyy0TQ9LxaDmGDWQg&uin=uv_046123862290262841666404955068&version=1.42.25&aid=9c2e7f16-d794-4364-9525-43b5aa8e3555&env=production&platform=3&netType=100&vp=1280%20*%201024&sr=1280%20*%201024&sessionId=session-1701776984272&from=https%3A%2F%2Fw2sw.jestersuit.com%2F&referer=
204 No Content 0 B URL GET HTTP/2 aegis.qq.com/speed/performance?dnsLookup=0&tcp=17&ssl=14&ttfb=264&contentDownload=246&domParse=3729&resourceDownload=4695&firstScreenTiming=4335&id=xEyy0TQ9LxaDmGDWQg&uin=uv_046123862290262841666404955068&version=1.42.25&aid=9c2e7f16-d794-4364-9525-43b5aa8e3555&env=production&platform=3&netType=100&vp=1280%20*%201024&sr=1280%20*%201024&sessionId=session-1701776984272&from=https%3A%2F%2Fw2sw.jestersuit.com%2F&referer=
IP
ASN #45090 Shenzhen Tencent Computer Systems Company Limited
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subjectaegis.qq.com
Fingerprint6E:DF:69:16:AB:63:66:34:A8:93:C8:23:10:9E:BD:C5:28:AC:AF:46
ValidityWed, 08 Mar 2023 00:00:00 GMT - Sun, 07 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /speed/performance?dnsLookup=0&tcp=17&ssl=14&ttfb=264&contentDownload=246&domParse=3729&resourceDownload=4695&firstScreenTiming=4335&id=xEyy0TQ9LxaDmGDWQg&uin=uv_046123862290262841666404955068&version=1.42.25&aid=9c2e7f16-d794-4364-9525-43b5aa8e3555&env=production&platform=3&netType=100&vp=1280%20*%201024&sr=1280%20*%201024&sessionId=session-1701776984272&from=https%3A%2F%2Fw2sw.jestersuit.com%2F&referer= HTTP/1.1
Host: aegis.qq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://w2sw.jestersuit.com
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Tue, 05 Dec 2023 11:49:44 GMT
server: openresty
access-control-allow-origin: *
X-Firefox-Spdy: h2
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init.result|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26result%3Dv0.1.12%252C211|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985640|29=046123862290262841666404955068&rr=0.42805870963972403
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init.result|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26result%3Dv0.1.12%252C211|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985640|29=046123862290262841666404955068&rr=0.42805870963972403
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init.result|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26result%3Dv0.1.12%252C211|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985640|29=046123862290262841666404955068&rr=0.42805870963972403 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:44 GMT
content-length: 29
eo-log-uuid: 3355668971547623971
eo-cache-status: MISS
X-Firefox-Spdy: h2
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.encrypt|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D23|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985664|29=046123862290262841666404955068&rr=0.13447347924708353
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.encrypt|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D23|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985664|29=046123862290262841666404955068&rr=0.13447347924708353
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.encrypt|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D23|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985664|29=046123862290262841666404955068&rr=0.13447347924708353 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-27=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, h3-Q039=":443"; ma=2592000, quic=":443"; ma=2592000; v="39,43,46"
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:44 GMT
content-length: 29
eo-log-uuid: 14002708744986594472
eo-cache-status: MISS
X-Firefox-Spdy: h2
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.vue_component_error_captured|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26msg%3D%255Bobject%2520Object%255D%2520at%2520created%2520hook%2520(Promise%252Fasync)%26level%3Dglobal_error_handler|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985909|29=046123862290262841666404955068&rr=0.40776967506165973
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.vue_component_error_captured|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26msg%3D%255Bobject%2520Object%255D%2520at%2520created%2520hook%2520(Promise%252Fasync)%26level%3Dglobal_error_handler|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985909|29=046123862290262841666404955068&rr=0.40776967506165973
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.vue_component_error_captured|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26msg%3D%255Bobject%2520Object%255D%2520at%2520created%2520hook%2520(Promise%252Fasync)%26level%3Dglobal_error_handler|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776985909|29=046123862290262841666404955068&rr=0.40776967506165973 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-27=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, h3-Q039=":443"; ma=2592000, quic=":443"; ma=2592000; v="39,43,46"
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:45 GMT
content-length: 29
eo-log-uuid: 6321744146953466827
eo-cache-status: MISS
X-Firefox-Spdy: h2
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.timer.page.topupv2|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D4678%26html%3D510%26dns%3D0%26tcp%3D17%26res%3D4072|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776989955|29=046123862290262841666404955068&rr=0.33906414662323536
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.timer.page.topupv2|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D4678%26html%3D510%26dns%3D0%26tcp%3D17%26res%3D4072|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776989955|29=046123862290262841666404955068&rr=0.33906414662323536
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.timer.page.topupv2|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D4678%26html%3D510%26dns%3D0%26tcp%3D17%26res%3D4072|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776989955|29=046123862290262841666404955068&rr=0.33906414662323536 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-27=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, h3-Q039=":443"; ma=2592000, quic=":443"; ma=2592000; v="39,43,46"
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:45 GMT
content-length: 29
eo-log-uuid: 9526210737707339043
eo-cache-status: MISS
X-Firefox-Spdy: h2
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.timer.page.topupv2|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D4678%26html%3D510%26dns%3D0%26tcp%3D17%26res%3D4072|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776989956|29=046123862290262841666404955068&rr=0.505886233399904
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.timer.page.topupv2|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D4678%26html%3D510%26dns%3D0%26tcp%3D17%26res%3D4072|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776989956|29=046123862290262841666404955068&rr=0.505886233399904
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.timer.page.topupv2|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26times%3D4678%26html%3D510%26dns%3D0%26tcp%3D17%26res%3D4072|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776989956|29=046123862290262841666404955068&rr=0.505886233399904 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:45 GMT
content-length: 29
eo-log-uuid: 12932090563248160499
eo-cache-status: MISS
X-Firefox-Spdy: h2
kepler.captcha.qcloud.com/getwt
200 OK 358 B URL POST HTTP/1.1 kepler.captcha.qcloud.com/getwt
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subjectapr02-2023-1.ias.qcloud.com
Fingerprint69:EC:64:F0:FC:97:7D:F3:2A:AE:4B:99:04:81:E3:72:37:5C:6D:10
ValiditySat, 01 Apr 2023 00:00:00 GMT - Tue, 02 Apr 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (358), with no line terminators
Hash 46f75270426b4c7bfd400cb6e738bf9e
4ce8b519c03396b4dd4137e75f97774b60a38258
58d8fdcb563ded825bc9e05b1585c968ffb6ce0db99b7ad18183d0d36daff6cc
POST /getwt HTTP/1.1
Host: kepler.captcha.qcloud.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 653
Origin: https://w2sw.jestersuit.com
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 11:49:45 GMT
Content-Type: text/json
Content-Length: 358
Connection: keep-alive
Server: tencent http server
Accept-Ranges: bytes
Pragma: No-cache
Access-Control-Allow-Origin: *
P3P: CP=CAO PSA OUR
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.benchmark.pv|8=test_id%3D%26bucket_id%3D%26order_refer%3D|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776990999|29=046123862290262841666404955068&rr=0.9612514257866658
200 OK 29 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.benchmark.pv|8=test_id%3D%26bucket_id%3D%26order_refer%3D|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776990999|29=046123862290262841666404955068&rr=0.9612514257866658
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.benchmark.pv|8=test_id%3D%26bucket_id%3D%26order_refer%3D|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776990999|29=046123862290262841666404955068&rr=0.9612514257866658 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:45 GMT
content-length: 29
eo-log-uuid: 12067026389322567482
eo-cache-status: MISS
X-Firefox-Spdy: h2
site-assets.fontawesome.com/releases/v6.1.1/css/all.css
200 OK 498 kB URL GET HTTP/2 site-assets.fontawesome.com/releases/v6.1.1/css/all.css
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.fontawesome.com
Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D
ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT
File type ASCII text, with very long lines (65360)
Size 498 kB (498160 bytes)
Hash 325672b036bab9b57f6873aed5eccc43
264f5db348311950380ad1bca79754ff593d87e2
a35f901d01118e5649091bd03ac5784a7db52e111fb3806524c412f3d1dcfc5d
GET /releases/v6.1.1/css/all.css HTTP/1.1
Host: site-assets.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 11:49:35 GMT
content-type: text/css
x-amz-id-2: Y1TmNuBPJ2aktX68kJThHqHYS+UBzLzvigLuxqSKGropAjQHJXqctJ8cMj8EZaj3hWZqBw7vjseo/ptPWK0rIs/nC5bnGezhyLprTTXGcJA=
x-amz-request-id: 9ZNBHYHZ9G1WY9FS
last-modified: Tue, 22 Mar 2022 15:39:41 GMT
etag: W/"325672b036bab9b57f6873aed5eccc43"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 1071257
vary: Accept-Encoding
server: cloudflare
cf-ray: 830c11131d1ab4ee-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
w2sw.jestersuit.com/apps/login/home/ot?hidePop=1
404 Not Found 2.3 kB URL GET HTTP/3 w2sw.jestersuit.com/apps/login/home/ot?hidePop=1
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerGoogle Trust Services LLC
Subjectjestersuit.com
Fingerprint12:7F:EA:52:90:B9:12:91:5E:CC:89:7B:24:2D:D5:5E:6E:08:A6:23
ValidityWed, 29 Nov 2023 18:06:54 GMT - Tue, 27 Feb 2024 18:06:53 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2369), with no line terminators
Hash 78ebc095c86a6477ee2b76cdb1cdadd3
6bdc01bc3081c22a28985fbd98427a6dfc9c2126
4cf6af074f70ba55d48c2bb33f7ca641525b26d8368f0391362112f975709f8a
GET /apps/login/home/ot?hidePop=1 HTTP/1.1
Host: w2sw.jestersuit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eu0ZtRA%2B%2F9yO1z89PGkZUPYmbBQ5PoHv8bIppdplAD1Z5dlHD0YEiQMjCTO3AeP%2FyXu7inokrU8JaVCBNsJz48VDneGTSjvHDd2D%2B7YXr5h65GGfDCF%2B8eCoifbw1IsVICrvO8bd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830c11275b1e0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init.result|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26result%3Dv0.1.12%252C211|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984784|29=046123862290262841666404955068&rr=0.6338518100478545
200 OK 0 B URL GET HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init.result|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26result%3Dv0.1.12%252C211|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984784|29=046123862290262841666404955068&rr=0.6338518100478545
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subject*.midasbuy.com
FingerprintD4:89:34:AA:C5:6C:89:48:80:03:B1:43:1C:5A:BF:98:5E:5E:4E:78
ValidityTue, 11 Apr 2023 00:00:00 GMT - Sat, 11 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.custom.xmidas.init.result|8=test_id%3D%26bucket_id%3D%26order_refer%3D%26result%3Dv0.1.12%252C211|4=uv_046123862290262841666404955068|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=https%3A%2F%2Fw2sw.jestersuit.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(Windows%2520NT%252010.0%253B%2520Win64%253B%2520x64%253B%2520rv%253A105.0)%2520Gecko%252F20100101%2520Firefox%252F105.0|38=0348384880898043871649691398854|6=1701776984784|29=046123862290262841666404955068&rr=0.6338518100478545 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html;charset=utf-8
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-27=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, h3-Q039=":443"; ma=2592000, quic=":443"; ma=2592000; v="39,43,46"
server: nginx
content-encoding: gzip
date: Tue, 05 Dec 2023 11:49:40 GMT
content-length: 29
eo-log-uuid: 17152143891381856344
eo-cache-status: MISS
X-Firefox-Spdy: h2
w2sw.jestersuit.com/cdn-cgi/challenge-platform/h/b/jsd/r/830c110dc97756b9
200 OK 0 B URL POST HTTP/3 w2sw.jestersuit.com/cdn-cgi/challenge-platform/h/b/jsd/r/830c110dc97756b9
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerGoogle Trust Services LLC
Subjectjestersuit.com
Fingerprint12:7F:EA:52:90:B9:12:91:5E:CC:89:7B:24:2D:D5:5E:6E:08:A6:23
ValidityWed, 29 Nov 2023 18:06:54 GMT - Tue, 27 Feb 2024 18:06:53 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing Tencent
POST /cdn-cgi/challenge-platform/h/b/jsd/r/830c110dc97756b9 HTTP/1.1
Host: w2sw.jestersuit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12195
Origin: https://w2sw.jestersuit.com
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 11:49:40 GMT
content-type: text/plain; charset=UTF-8
set-cookie: cf_clearance=6WFfSc7yQLiUixoHD5YMIPNcTO1NzufEGpM3onYD8XA-1701776980-0-1-730ca2d2.73a07051.5b213570-0.2.1701776980; path=/; expires=Wed, 04-Dec-24 11:49:40 GMT; domain=.jestersuit.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FjN20cGi9Axrd%2BmTSae2Gp%2BpW5HzByAzt%2BdX1OjBniSQt73osBWdN6eZYz6IcHru2j17AuHXdNNzq5nguGSTmqxM%2FGTtokxcS60UmBGf2py32coEBjVey1Mcko1o5SFFqAsoLyfE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830c112d3f850afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css2?family=Roboto:wght@300;400&display=swap
200 OK 4.5 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Roboto:wght@300;400&display=swap
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (4666), with no line terminators
Hash 8addbe4695cf89a9f2c9209922cfbb14
d979256bac2d4f77862f772413025fb7b7899a8e
d42ddb20ea4b624899478090824c2293296240ebad893da67fcfd7fcbee16cda
GET /css2?family=Roboto:wght@300;400&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 05 Dec 2023 11:49:36 GMT
date: Tue, 05 Dec 2023 11:49:36 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
aegis.qq.com/collect/whitelist?id=xEyy0TQ9LxaDmGDWQg&uin=uv_046123862290262841666404955068&version=1.42.25&aid=9c2e7f16-d794-4364-9525-43b5aa8e3555&env=production&platform=3&netType=100&vp=1280%20*%201024&sr=1280%20*%201024&sessionId=session-1701776984272&from=https%3A%2F%2Fw2sw.jestersuit.com%2F&referer=
0 B URL GET aegis.qq.com/collect/whitelist?id=xEyy0TQ9LxaDmGDWQg&uin=uv_046123862290262841666404955068&version=1.42.25&aid=9c2e7f16-d794-4364-9525-43b5aa8e3555&env=production&platform=3&netType=100&vp=1280%20*%201024&sr=1280%20*%201024&sessionId=session-1701776984272&from=https%3A%2F%2Fw2sw.jestersuit.com%2F&referer=
IP
Requested by https://w2sw.jestersuit.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect/whitelist?id=xEyy0TQ9LxaDmGDWQg&uin=uv_046123862290262841666404955068&version=1.42.25&aid=9c2e7f16-d794-4364-9525-43b5aa8e3555&env=production&platform=3&netType=100&vp=1280%20*%201024&sr=1280%20*%201024&sessionId=session-1701776984272&from=https%3A%2F%2Fw2sw.jestersuit.com%2F&referer= HTTP/1.1
Host: aegis.qq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://w2sw.jestersuit.com
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
w2sw.jestersuit.com/favicon.ico
404 Not Found 1.2 kB URL GET HTTP/3 w2sw.jestersuit.com/favicon.ico
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerGoogle Trust Services LLC
Subjectjestersuit.com
Fingerprint12:7F:EA:52:90:B9:12:91:5E:CC:89:7B:24:2D:D5:5E:6E:08:A6:23
ValidityWed, 29 Nov 2023 18:06:54 GMT - Tue, 27 Feb 2024 18:06:53 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1276), with no line terminators
Hash 24b426fea67958554911ff4c943fdfe4
b92889146d4c1bbddccabe58ca15c814ea066f72
335fd88e127ff1b19e6c5af3c801186182f064e4c6747b9a76a0b3988553716c
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /favicon.ico HTTP/1.1
Host: w2sw.jestersuit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Cookie: cf_clearance=6WFfSc7yQLiUixoHD5YMIPNcTO1NzufEGpM3onYD8XA-1701776980-0-1-730ca2d2.73a07051.5b213570-0.2.1701776980; tKeplerToken=tid024bXtckBU08lZt83KVVp1VC7QvD5zdQlZdx0MAzSplQ*; kepler_fp=kfp1TtqMp0iNE4X3uIiBntM-cRWtH8EwcK_yOJ_Eq2A261fQghrESXns-Q**; kepler_ticket=wt2fyL2G8cdVSIziy_AEjRP2tCYme_UrzN0zCgpzlhF2B1-KRsFrgXohVCap3pcMMgSEDhpYu-X7QnVLi9HUh06R2HsynOIVOPCTBTXngVQi5wVMpo7Fkz-hpV-RKCFp2YtckeNVcur1r72zRoHDJC6GC9iO4Muf-OH
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 05 Dec 2023 11:49:46 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UJiYEYqOzGlEXDF0pdt39BVlJVmIibu5gpfUJTf1VK4xK7f5GYB56lONfMpXpHuywqwaE4jDRG1uhbL4dDqK7YKWUSJCMvv9PUOwudDYxSr6YiA4j98wqBTMV3pZ%2BF%2BxLi8w%2BSmL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830c11517a4e0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
aegis.qq.com/collect/pv?id=xEyy0TQ9LxaDmGDWQg&uin=uv_046123862290262841666404955068&version=1.42.25&aid=9c2e7f16-d794-4364-9525-43b5aa8e3555&env=production&platform=3&netType=100&vp=1280%20*%201024&sr=1280%20*%201024&sessionId=session-1701776984272&from=https%3A%2F%2Fw2sw.jestersuit.com%2F&referer=
204 No Content 0 B URL GET HTTP/2 aegis.qq.com/collect/pv?id=xEyy0TQ9LxaDmGDWQg&uin=uv_046123862290262841666404955068&version=1.42.25&aid=9c2e7f16-d794-4364-9525-43b5aa8e3555&env=production&platform=3&netType=100&vp=1280%20*%201024&sr=1280%20*%201024&sessionId=session-1701776984272&from=https%3A%2F%2Fw2sw.jestersuit.com%2F&referer=
IP
ASN #45090 Shenzhen Tencent Computer Systems Company Limited
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subjectaegis.qq.com
Fingerprint6E:DF:69:16:AB:63:66:34:A8:93:C8:23:10:9E:BD:C5:28:AC:AF:46
ValidityWed, 08 Mar 2023 00:00:00 GMT - Sun, 07 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect/pv?id=xEyy0TQ9LxaDmGDWQg&uin=uv_046123862290262841666404955068&version=1.42.25&aid=9c2e7f16-d794-4364-9525-43b5aa8e3555&env=production&platform=3&netType=100&vp=1280%20*%201024&sr=1280%20*%201024&sessionId=session-1701776984272&from=https%3A%2F%2Fw2sw.jestersuit.com%2F&referer= HTTP/1.1
Host: aegis.qq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://w2sw.jestersuit.com
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Tue, 05 Dec 2023 11:49:43 GMT
server: openresty
access-control-allow-origin: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-max-age: 86400
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2
w2sw.jestersuit.com/css/twitter.css
200 OK 3.4 kB URL GET HTTP/3 w2sw.jestersuit.com/css/twitter.css
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerGoogle Trust Services LLC
Subjectjestersuit.com
Fingerprint12:7F:EA:52:90:B9:12:91:5E:CC:89:7B:24:2D:D5:5E:6E:08:A6:23
ValidityWed, 29 Nov 2023 18:06:54 GMT - Tue, 27 Feb 2024 18:06:53 GMT
File type ASCII text, with very long lines (3660), with no line terminators
Hash dfb6c08b36b924d86a4e512876ff1d7a
7dc6a62d29fcd946fdab7c17dd7a1208d848a131
f3dd67af37604518d5807046682c460333abe8679420916242006914d6efdcb3
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /css/twitter.css HTTP/1.1
Host: w2sw.jestersuit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 11:49:36 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Tue, 12 Dec 2023 11:49:36 GMT
last-modified: Wed, 01 Mar 2023 19:10:24 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fFllBdiaOnpdZ7ZwbDVofzszX7SiV95VkfMOhOA00GG%2BRCjPnClIb5L8M%2FzYFuJMWOeVqJFkPASF2EIq1tu5iaXnm99lL%2BdGeM60G4pg5MrXOqRZ2q7bH%2FuJyii0M0l4q76jy0Hy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830c1112bc220afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 31 kB URL GET HTTP/2 stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 11:49:35 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"269550530cc127b6aa5a35925a7de6ce"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 10/31/2023 18:48:06
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 722
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: dd809c84048d5afa8e77adc8acacd559
cdn-cache: HIT
cf-cache-status: HIT
age: 1151150
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 830c111319f356b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
200 OK 210 kB URL User Request GET HTTP/2 IP
Certificate IssuerGoogle Trust Services LLC
Subjectjestersuit.com
Fingerprint12:7F:EA:52:90:B9:12:91:5E:CC:89:7B:24:2D:D5:5E:6E:08:A6:23
ValidityWed, 29 Nov 2023 18:06:54 GMT - Tue, 27 Feb 2024 18:06:53 GMT
Size 210 kB (209927 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing Tencent
GET / HTTP/1.1
Host: w2sw.jestersuit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 11:49:35 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jVQ4%2BBlXLBTm3ne0HZxUsQtRelqzSE%2BlBN4RfrnfIanJOJSv3m0R9sRbyWQBzHOIJUmkNzM%2B3CFH4wVpDgGg239pY55ycAOBHpbzL7kN%2B41eNMv7NBLjmDa7K4elCwY6nLETndG2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830c110dc97756b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
aegis.qq.com/speed?id=xEyy0TQ9LxaDmGDWQg&uin=uv_046123862290262841666404955068&version=1.42.25&aid=9c2e7f16-d794-4364-9525-43b5aa8e3555&env=production&platform=3&netType=100&vp=1280%20*%201024&sr=1280%20*%201024&sessionId=session-1701776984272&from=https%3A%2F%2Fw2sw.jestersuit.com%2F&referer=
0 B URL POST aegis.qq.com/speed?id=xEyy0TQ9LxaDmGDWQg&uin=uv_046123862290262841666404955068&version=1.42.25&aid=9c2e7f16-d794-4364-9525-43b5aa8e3555&env=production&platform=3&netType=100&vp=1280%20*%201024&sr=1280%20*%201024&sessionId=session-1701776984272&from=https%3A%2F%2Fw2sw.jestersuit.com%2F&referer=
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerDigiCert Inc
Subjectaegis.qq.com
Fingerprint6E:DF:69:16:AB:63:66:34:A8:93:C8:23:10:9E:BD:C5:28:AC:AF:46
ValidityWed, 08 Mar 2023 00:00:00 GMT - Sun, 07 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /speed?id=xEyy0TQ9LxaDmGDWQg&uin=uv_046123862290262841666404955068&version=1.42.25&aid=9c2e7f16-d794-4364-9525-43b5aa8e3555&env=production&platform=3&netType=100&vp=1280%20*%201024&sr=1280%20*%201024&sessionId=session-1701776984272&from=https%3A%2F%2Fw2sw.jestersuit.com%2F&referer= HTTP/1.1
Host: aegis.qq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------307821473136139088161109183671
Content-Length: 52765
Origin: https://w2sw.jestersuit.com
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
w2sw.jestersuit.com/interface/getLoginInfoV2?encrypt_msg=tLbpsD3F91MAuui%2Bh3kD4VDxHYnCFIe0O6atcPXpOXg%3D&ctoken_ver=1.0.1&ctoken=d356f0bae5ca9abd01785bf204c57fbcd775c5620d0e24f80fdf59ab34b681638959674f474b5999ba66516ca547b0c7&_r=0.3525284141409918
404 Not Found 2.3 kB URL GET HTTP/3 w2sw.jestersuit.com/interface/getLoginInfoV2?encrypt_msg=tLbpsD3F91MAuui%2Bh3kD4VDxHYnCFIe0O6atcPXpOXg%3D&ctoken_ver=1.0.1&ctoken=d356f0bae5ca9abd01785bf204c57fbcd775c5620d0e24f80fdf59ab34b681638959674f474b5999ba66516ca547b0c7&_r=0.3525284141409918
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerGoogle Trust Services LLC
Subjectjestersuit.com
Fingerprint12:7F:EA:52:90:B9:12:91:5E:CC:89:7B:24:2D:D5:5E:6E:08:A6:23
ValidityWed, 29 Nov 2023 18:06:54 GMT - Tue, 27 Feb 2024 18:06:53 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2369), with no line terminators
Hash e299527a4e5b7655b474644a1066b558
50dad90d0c85da2b2c6ad47c3ddeb9c8bcd2a56f
30cc95d70df39f5e11969ebd98e80f73024cd755f7c0d3b3d9df032bb0ff2b1b
GET /interface/getLoginInfoV2?encrypt_msg=tLbpsD3F91MAuui%2Bh3kD4VDxHYnCFIe0O6atcPXpOXg%3D&ctoken_ver=1.0.1&ctoken=d356f0bae5ca9abd01785bf204c57fbcd775c5620d0e24f80fdf59ab34b681638959674f474b5999ba66516ca547b0c7&_r=0.3525284141409918 HTTP/1.1
Host: w2sw.jestersuit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: text/html
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rDvlRXy6Fx1mzC3dN4YcvzpnLnocggSWL8loKlMTS9IVgj0MgYEr2kREBw%2Faf7g4RSWmFKF3FvBH5kKWuJ0aq%2ByAtaHUm20Rc6lnoyM98NWr9b3d4tJIgceiZCuV0rcDbfe%2Fpoyp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830c112bdeb30afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
aegis.qq.com/collect?id=xEyy0TQ9LxaDmGDWQg&uin=uv_046123862290262841666404955068&version=1.42.25&aid=9c2e7f16-d794-4364-9525-43b5aa8e3555&env=production&platform=3&netType=100&vp=1280%20*%201024&sr=1280%20*%201024&sessionId=session-1701776984272&from=https%3A%2F%2Fw2sw.jestersuit.com%2F&referer=
0 B URL OPTIONS aegis.qq.com/collect?id=xEyy0TQ9LxaDmGDWQg&uin=uv_046123862290262841666404955068&version=1.42.25&aid=9c2e7f16-d794-4364-9525-43b5aa8e3555&env=production&platform=3&netType=100&vp=1280%20*%201024&sr=1280%20*%201024&sessionId=session-1701776984272&from=https%3A%2F%2Fw2sw.jestersuit.com%2F&referer=
IP
Requested by https://w2sw.jestersuit.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /collect?id=xEyy0TQ9LxaDmGDWQg&uin=uv_046123862290262841666404955068&version=1.42.25&aid=9c2e7f16-d794-4364-9525-43b5aa8e3555&env=production&platform=3&netType=100&vp=1280%20*%201024&sr=1280%20*%201024&sessionId=session-1701776984272&from=https%3A%2F%2Fw2sw.jestersuit.com%2F&referer= HTTP/1.1
Host: aegis.qq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://w2sw.jestersuit.com/
Origin: https://w2sw.jestersuit.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
w2sw.jestersuit.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
302 Found 7.3 kB URL GET HTTP/3 w2sw.jestersuit.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerGoogle Trust Services LLC
Subjectjestersuit.com
Fingerprint12:7F:EA:52:90:B9:12:91:5E:CC:89:7B:24:2D:D5:5E:6E:08:A6:23
ValidityWed, 29 Nov 2023 18:06:54 GMT - Tue, 27 Feb 2024 18:06:53 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: w2sw.jestersuit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Tue, 05 Dec 2023 11:49:39 GMT
vary: accept-encoding
access-control-allow-origin: *
cache-control: max-age=300, public
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lC7UFtkO0rmGTP2k6TIymorr68%2BkY5JqMghH3ThlHAHLsKwhJM2pDz2oR1EeBFnqz8RPMMCsEBT%2FhHvqabCyPfEy7IkK273%2BFaerMEpm3Jaf4gI4qj2BVBsTqmSmhDqwm6A6AaW6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830c112b3df20afe-OSL
alt-svc: h3=":443"; ma=86400
w2sw.jestersuit.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js
200 OK 7.3 kB URL GET HTTP/3 w2sw.jestersuit.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerGoogle Trust Services LLC
Subjectjestersuit.com
Fingerprint12:7F:EA:52:90:B9:12:91:5E:CC:89:7B:24:2D:D5:5E:6E:08:A6:23
ValidityWed, 29 Nov 2023 18:06:54 GMT - Tue, 27 Feb 2024 18:06:53 GMT
File type ASCII text, with very long lines (7314), with no line terminators
Hash 5ec38cc0234d8b2bf55f7291e4f0be5d
883765c84cf8a8044ef9cf116f9de364743cbed7
8db6295327073f5765c0eea9c2bd6355ae1280bc588b5a5ff8a8e45f9bad0bb6
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/56d3063b/main.js HTTP/1.1
Host: w2sw.jestersuit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 11:49:39 GMT
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
vary: accept-encoding
cache-control: max-age=14400, public
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=878ST0uKLrJZ%2FPZzSP7xgPcpuUjPXJESBGg4qHuE%2BTfCKy0GU%2BTf2zOlCR2zF4I1DGkg9atKOKLHvW8vK6JKhNiCYp87MMjBTZza9tYcRwScoDOF1MCVQPyXiZSxr9ijBPZ%2BCsh5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830c112b9e5c0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
w2sw.jestersuit.com/css/facebook.css
200 OK 3.8 kB URL GET HTTP/3 w2sw.jestersuit.com/css/facebook.css
IP
Requested by https://w2sw.jestersuit.com/
Certificate IssuerGoogle Trust Services LLC
Subjectjestersuit.com
Fingerprint12:7F:EA:52:90:B9:12:91:5E:CC:89:7B:24:2D:D5:5E:6E:08:A6:23
ValidityWed, 29 Nov 2023 18:06:54 GMT - Tue, 27 Feb 2024 18:06:53 GMT
File type ASCII text, with very long lines (4072), with no line terminators
Hash a280ae1dc690f654fb16a82c523df665
b81ffc0f7aceb5fc65123d90edb60a3a393c74e0
680fb2f89e77518140446783435a736a0ccbd0fc2f35c71f0178ae9cfc57f62d
Analyzer Verdict Alert OpenPhish phishing Tencent
GET /css/facebook.css HTTP/1.1
Host: w2sw.jestersuit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w2sw.jestersuit.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 11:49:36 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Tue, 12 Dec 2023 11:49:35 GMT
last-modified: Wed, 01 Mar 2023 19:00:52 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fZRZn%2FcfNmL5lF0aGHrHuIVuaCrwrtZjDjlnNU%2Fi79oqoeWlykLvkqAQ%2FjFbi9rvprJjL%2Bp1MaNNo0ZUAh11ULqa9SaDYyQUhHpPo1BIPXktXXQp0YGTCmIfbWHwUrRIhTzy859y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830c1112bc210afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
172.67.220.235
47.246.48.205
101.33.10.29
95.101.11.144
104.18.10.207
43.137.221.145
162.19.58.159
124.156.190.80
43.159.119.48