firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 20 Sep 2022 10:13:07 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 8OjM01qkxiak61VaHq6Jl6pr1jRyT3hH6JSFl1FY2Hmak2PsmDv3cg==
Age: 1524
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 861cfa99de956423d917ed0ddbea4b9c
ad65dbc394b48b04a45c205f56af296c8d008db4
5c706b2718b1698995f4feb91223779aef4bf6dc967c31f9ef9a93873197d5f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5C706B2718B1698995F4FEB91223779AEF4BF6DC967C31F9EF9A93873197D5F9"
Last-Modified: Sun, 18 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15007
Expires: Tue, 20 Sep 2022 14:48:39 GMT
Date: Tue, 20 Sep 2022 10:38:32 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 20 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: KLmkuVGu9nknWfV7AsHnxlhlyR0X9tjpyj4bDiPXBcy5ow-0zw_PLw==
age: 21799
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 10:38:32 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
bgmgroundin.com/
200 OK 38 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (437), with CRLF line terminators
Hash 5260c0d59919e8c0492a2ff964bf079c
22401c14b692d3775bff926bd76dc56f2df4d03c
f5dcb571805234ec84224be4a8680c60e78973822034766673a9222b17d421bc
Analyzer Verdict Alert openphish Tencent
fortinet Phishing
GET / HTTP/1.1
Host: bgmgroundin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 10:38:32 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s%2BlNX9hG0oa%2F94CIEDaHbqX7f1ppLZUZYvapkEGLkVLLl%2FlFd2jZqwmCFjWqQcBapplIkYBIxsm6Rn7QRMN%2B4j7x27CLYaenoxpi5VdvtCTAZ36FVFu1kNDKp7s5fSIqhR8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74d9ee993c121c0a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
bgmgroundin.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
200 OK 655 B URL HTTP/1.1 bgmgroundin.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
File type HTML document, ASCII text, with very long lines (1238)
Hash bc3ba461c8a309acf61b6d9c41cb6236
88482306ecc9258d5e9cbb9ba5314dab223a5db4
31331f1b1519882d2f2fb60367708fd56a7a1ec0bddd0554c635547179c7dc8f
Analyzer Verdict Alert openphish Tencent
fortinet Phishing
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: bgmgroundin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bgmgroundin.com/
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 10:38:33 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 15 Sep 2022 13:38:19 GMT
ETag: W/"63232acb-4d7"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1vpixfhLTdMT40QALwwnT%2Ba%2Bf4%2BVA0n0PHzmoMZnIvc8GTBS9Qe8YHGycDjK0hEZbmo1f3tei4WXtMmGfVPxx6LElKk2xvc3I4CPikZZZwFzW0qalRJWaNTByLhNwkjtdA4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74d9eea06af61c0a-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Thu, 22 Sep 2022 10:38:33 GMT
Cache-Control: max-age=172800, public
Content-Encoding: gzip
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 20 Sep 2022 10:03:22 GMT
Cache-Control: max-age=3600
Expires: Tue, 20 Sep 2022 10:49:47 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: LfV64Bt82z5TxhiBqQtFGv6qPXH0AnBpMq-zQXECYyRBOXeOdPzUQA==
Age: 2111
ocsp.digicert.com/
200 OK 471 B IP
Hash edf07cd621f733b0eb50c632387ebf4f
61a082d26501c2c8d481b1676d0de2e585269613
e5c4324e4c55824b86f48bf0b9a1d317a82e7d3c19bdea7a91d78ce98d68a980
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3052
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 10:38:33 GMT
Last-Modified: Tue, 20 Sep 2022 09:47:41 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
bgmgroundin.com/oversea_web/static/js/x-midas/foXpt24MxhVpLTWmFsULBWJ0hD79nV7v9xWmNlTyU3Bqe4AEdEhMwu9wQOZRznaiasaltyxZa4hdYZdpZTVP_4fNAGKEXIYBcBqHZ0gpIMU~.js
404 Not Found 238 B URL HTTP/1.1 bgmgroundin.com/oversea_web/static/js/x-midas/foXpt24MxhVpLTWmFsULBWJ0hD79nV7v9xWmNlTyU3Bqe4AEdEhMwu9wQOZRznaiasaltyxZa4hdYZdpZTVP_4fNAGKEXIYBcBqHZ0gpIMU~.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f5945c4d5e4298d818d50d70865f2857
f35c3593933af2db1933093809ef78f45b9b7144
d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38
Analyzer Verdict Alert openphish Tencent
fortinet Phishing
GET /oversea_web/static/js/x-midas/foXpt24MxhVpLTWmFsULBWJ0hD79nV7v9xWmNlTyU3Bqe4AEdEhMwu9wQOZRznaiasaltyxZa4hdYZdpZTVP_4fNAGKEXIYBcBqHZ0gpIMU~.js HTTP/1.1
Host: bgmgroundin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bgmgroundin.com/
HTTP/1.1 404 Not Found
Date: Tue, 20 Sep 2022 10:38:33 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pF8o4VSZl%2F48IQD10EM8S94QUgmVHOT2JK0a6nePNGDtDu8ZBz6I%2FBp5SizDZCR9iMqVMm8pCg1lho%2FHI03kxaZfm%2F4GXqtHcdS7pQnnwXn%2F4bd1bBi%2Bwpujw7vGxzkchnA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74d9ee9f592bb529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: vK2zh8IKy9+nbrCFvjU1Pw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: r/siInD37RjM44TJf7FuYwWTKRI=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe5ffc0bb967bf39c053d24cdfae521a
87bc50876b1600714e2c29608bf4af00fbfbd23e
ceaf52d90eaf692a8da9f6c353d09011e26d8e2b971ec4c17fcbcab8676c70c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEAF52D90EAF692A8DA9F6C353D09011E26D8E2B971EC4C17FCBCAB8676C70C3"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19956
Expires: Tue, 20 Sep 2022 16:11:10 GMT
Date: Tue, 20 Sep 2022 10:38:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe5ffc0bb967bf39c053d24cdfae521a
87bc50876b1600714e2c29608bf4af00fbfbd23e
ceaf52d90eaf692a8da9f6c353d09011e26d8e2b971ec4c17fcbcab8676c70c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEAF52D90EAF692A8DA9F6C353D09011E26D8E2B971EC4C17FCBCAB8676C70C3"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19956
Expires: Tue, 20 Sep 2022 16:11:10 GMT
Date: Tue, 20 Sep 2022 10:38:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe5ffc0bb967bf39c053d24cdfae521a
87bc50876b1600714e2c29608bf4af00fbfbd23e
ceaf52d90eaf692a8da9f6c353d09011e26d8e2b971ec4c17fcbcab8676c70c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEAF52D90EAF692A8DA9F6C353D09011E26D8E2B971EC4C17FCBCAB8676C70C3"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19956
Expires: Tue, 20 Sep 2022 16:11:10 GMT
Date: Tue, 20 Sep 2022 10:38:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe5ffc0bb967bf39c053d24cdfae521a
87bc50876b1600714e2c29608bf4af00fbfbd23e
ceaf52d90eaf692a8da9f6c353d09011e26d8e2b971ec4c17fcbcab8676c70c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEAF52D90EAF692A8DA9F6C353D09011E26D8E2B971EC4C17FCBCAB8676C70C3"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19956
Expires: Tue, 20 Sep 2022 16:11:10 GMT
Date: Tue, 20 Sep 2022 10:38:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe5ffc0bb967bf39c053d24cdfae521a
87bc50876b1600714e2c29608bf4af00fbfbd23e
ceaf52d90eaf692a8da9f6c353d09011e26d8e2b971ec4c17fcbcab8676c70c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEAF52D90EAF692A8DA9F6C353D09011E26D8E2B971EC4C17FCBCAB8676C70C3"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19956
Expires: Tue, 20 Sep 2022 16:11:10 GMT
Date: Tue, 20 Sep 2022 10:38:34 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2ed7323b395e757f7766ea0045efdaca
8b91bc3069a3217bc719c27959d578b353b5d9dc
8daf8cb1464daa5f72bc4f1049adb4aba00b2c2dec11cb3ade3454ec2ebbfb63
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11832
x-amzn-requestid: 75065a71-5f2d-4987-915b-9bddc772c76a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugI_EsLIAMFdmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09f-1248d25405209da3353d4a4a;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: gLh2EBTPdXvFtZuYKH1NVZebvnz4Rhs-f_rZPtfJpIWNemEk0upeOQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:09:43 GMT
etag: "8b91bc3069a3217bc719c27959d578b353b5d9dc"
content-type: image/jpeg
age: 44931
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72c9eb8-103b-4d09-b405-97d1a7ae99a8.webp
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72c9eb8-103b-4d09-b405-97d1a7ae99a8.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 30fbdfee7ec4513a5ff3dfcb7282f816
a852edb64a7220532aa619ab2a440c3a7e11b97a
4adee59f97bea412c6a0a786d0a27e431a497198b9047a75841b0a530803bdfe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72c9eb8-103b-4d09-b405-97d1a7ae99a8.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9543
x-amzn-requestid: 17be04c9-54f0-4988-82dd-f13911a2a629
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugINHN1IAMF8iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09a-35496b4c21c23dec75257964;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -VBFetQNkmIiWeJtW5IOheaPLdDHM9iKhiGPzVcA3_KQk7Qha5VrXg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:14:25 GMT
age: 44649
etag: "a852edb64a7220532aa619ab2a440c3a7e11b97a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1a0fa4b1-080d-4839-8ea7-fbbab1c035fd.jpeg
200 OK 5.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1a0fa4b1-080d-4839-8ea7-fbbab1c035fd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 64211ecf2e40709b76075ad1c1754e33
b28b2d9687a6ea546f88e6397345bb3a73283f61
f6c264e2520ee31fae2ca0ea4c7a910d2c061239de98523c4d6a74efa317357a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1a0fa4b1-080d-4839-8ea7-fbbab1c035fd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5034
x-amzn-requestid: 5683c3e5-4daf-415a-b427-f7d5b148d549
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YuhZOFgcoAMF2QQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e2a1-4fac678b669ece211964f722;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:44:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: -PaZ5Ky2nFn2yUkHazlcRDS0v-7iiOpf5tfu9UVaoFw5qjctFUc2Vg==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:08:46 GMT
etag: "b28b2d9687a6ea546f88e6397345bb3a73283f61"
content-type: image/jpeg
age: 44988
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a6c4141-897e-4893-81f2-a7382686ab37.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a6c4141-897e-4893-81f2-a7382686ab37.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4653898fc83ae1b62d9b975658cc7fe9
adc6def18885ff49efd6b61c47d4b36eaca057b4
642a2e27f6635db0f9670cce2cba91f24f881db8f19d3f9b00e439f746fbc225
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a6c4141-897e-4893-81f2-a7382686ab37.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6961
x-amzn-requestid: 3177a5d3-6be5-426f-84ff-c044443c8627
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugHuHGZoAMFuwg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e097-00d08a4e1c0ebd3f62716843;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:19 GMT
x-amz-cf-pop: SEA73-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _dXQRIghNGF2FVKY8rbWdykpQd225TT_e645hfVwkq8SMhT5O16lFg==
via: 1.1 2a44ef7b9d28e74c78ffadeedcbb887c.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 21:53:49 GMT
age: 45885
etag: "adc6def18885ff49efd6b61c47d4b36eaca057b4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d3e70b2859ca89b353682d03f6b46b93
ebd83f29edd95217dfa4f4c7a94eddf34dd58b14
43ad8f8b0a664bbec39e0410c1201498a2d2e36e5bd7d5ece8d65b15230ec50b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10894
x-amzn-requestid: f7aad96e-af80-4db7-8bc1-d1e09a9b37e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeJQGHhOIAMFYuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322559a-538534e91448af217c59ab3d;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 22:28:42 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: P7aZQzmAvqn2rcHJUQjHo0Dcg8dsrqseey5mNOabfq1b857M4SUMDQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 10:06:02 GMT
age: 1952
etag: "ebd83f29edd95217dfa4f4c7a94eddf34dd58b14"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1af9c9-23b5-42e1-b7c6-655c21db6627.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1af9c9-23b5-42e1-b7c6-655c21db6627.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ca0c1a7f205ad07f1cce80b26448873
0e14f5062e40ce94346494ff947bfcf74b5e88c1
ebc960279032671136749823c126ec807334d9eaf2b019abcc63b41bcdbf4a7f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1af9c9-23b5-42e1-b7c6-655c21db6627.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9873
x-amzn-requestid: 7171299f-e6e3-40ef-a292-33779346e1ee
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugI-FDIIAMF-xg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09f-31f9413434a6b00e77e7709b;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: evL3aL1ULo6B2a8Rp6iILKCX7F14O9HMSbEqkEY3XHFhmMptE8FaVw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:09:44 GMT
age: 44930
etag: "0e14f5062e40ce94346494ff947bfcf74b5e88c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash ba459afd795f0024a37641f2a580814d
36953f02314d61af4b9f52f892ba2b629b55b5bb
c3d5d890efe1f49ee0eb2d6526d8b146531c7deb3061a39e3fd5db853c7da6da
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 10:38:35 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Sat, 24 Sep 2022 10:04:07 GMT
ETag: "36953f02314d61af4b9f52f892ba2b629b55b5bb"
Last-Modified: Tue, 20 Sep 2022 10:04:08 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1299
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74d9eeb13f521c06-OSL
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 8c428b197d5c79c4df9dcea21f37e6f6
cfdaf4691215695a9334fdce353de2ffe44a4b15
f39e36846038649dfd793dd5265233a1fd456cd290171061c0bcb576dbb52382
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Tue, 20 Sep 2022 10:38:35 GMT
Ali-Swift-Global-Savetime: 1663670315
Via: cache12.l2de2[25,24,200-0,M], cache12.l2de2[25,0], cache7.se1[47,47,200-0,M], cache7.se1[49,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 20 Sep 2022 10:38:35 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9b16636703157701530e
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 92dc6012dfc187cf3ba098a4a24e2114
268f36db6d5c3b4d1c83f876f5ecdf200795873f
4fe6f1cff0cef370aed7880d4c0b06eb714d2ed6cbe50fc7b0d23d2817ebafa4
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Tue, 20 Sep 2022 10:38:36 GMT
Ali-Swift-Global-Savetime: 1663670316
Via: cache11.l2de2[52,51,200-0,M], cache11.l2de2[53,0], cache7.se1[73,72,200-0,M], cache7.se1[74,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 20 Sep 2022 10:38:36 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9b16636703161641801e
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 92dc6012dfc187cf3ba098a4a24e2114
268f36db6d5c3b4d1c83f876f5ecdf200795873f
4fe6f1cff0cef370aed7880d4c0b06eb714d2ed6cbe50fc7b0d23d2817ebafa4
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Tue, 20 Sep 2022 10:38:36 GMT
Ali-Swift-Global-Savetime: 1663670316
Via: cache14.l2de2[48,48,200-0,M], cache14.l2de2[49,0], cache8.se1[70,70,200-0,M], cache8.se1[71,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 20 Sep 2022 10:38:36 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9c16636703161695182e
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 92dc6012dfc187cf3ba098a4a24e2114
268f36db6d5c3b4d1c83f876f5ecdf200795873f
4fe6f1cff0cef370aed7880d4c0b06eb714d2ed6cbe50fc7b0d23d2817ebafa4
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Tue, 20 Sep 2022 10:38:36 GMT
Ali-Swift-Global-Savetime: 1663670316
Via: cache11.l2de2[46,46,200-0,M], cache11.l2de2[47,0], cache4.se1[69,69,200-0,M], cache4.se1[71,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 20 Sep 2022 10:38:36 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9816636703161742410e
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 92dc6012dfc187cf3ba098a4a24e2114
268f36db6d5c3b4d1c83f876f5ecdf200795873f
4fe6f1cff0cef370aed7880d4c0b06eb714d2ed6cbe50fc7b0d23d2817ebafa4
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Tue, 20 Sep 2022 10:38:36 GMT
Ali-Swift-Global-Savetime: 1663670316
Via: cache2.l2de2[49,49,200-0,M], cache2.l2de2[51,0], cache4.se1[71,71,200-0,M], cache4.se1[72,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 20 Sep 2022 10:38:36 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9816636703161762414e
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 92dc6012dfc187cf3ba098a4a24e2114
268f36db6d5c3b4d1c83f876f5ecdf200795873f
4fe6f1cff0cef370aed7880d4c0b06eb714d2ed6cbe50fc7b0d23d2817ebafa4
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Tue, 20 Sep 2022 10:38:36 GMT
Ali-Swift-Global-Savetime: 1663670316
Via: cache20.l2de2[52,52,200-0,M], cache20.l2de2[53,0], cache5.se1[75,75,200-0,M], cache5.se1[76,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Tue, 20 Sep 2022 10:38:36 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9916636703161795120e
cdn.midasbuy.com/oversea_web/static/css/media-f6bc833bbb.html.css
200 OK 21 kB URL HTTP/2 cdn.midasbuy.com/oversea_web/static/css/media-f6bc833bbb.html.css
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type ASCII text, with very long lines (65536), with no line terminators
Hash 16856c0e112045ee8f444e00bc3cb732
fe8651b02063981af4a12786d2f0a94b3ee63053
d774f07a90d5b99872198c0a892f8d722a734bd78c8d553e5299db8d628938c6
GET /oversea_web/static/css/media-f6bc833bbb.html.css HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bgmgroundin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: NWSs
date: Tue, 20 Sep 2022 10:38:36 GMT
content-type: text/css
content-length: 20706
cache-control: max-age=600
expires: Tue, 20 Sep 2022 10:48:36 GMT
last-modified: Fri, 02 Apr 2021 11:54:18 GMT
content-encoding: gzip
x-nws-log-uuid: 5d386df0-778f-44c9-9b7f-09b2ca3ece1b
x-cache-lookup: Hit From MemCache Gz
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/js/buypage.052bbaf6.js
200 OK 48 kB URL HTTP/2 cdn.midasbuy.com/oversea_web/static/js/buypage.052bbaf6.js
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type Unicode text, UTF-8 text, with very long lines (65487), with no line terminators
Hash 1ad01901b3fbfd646fcccee0a421a506
f03614a96dd6dfce69dfdee3b60b9872f9caf5e6
f1f3e3835d75d07a242dd39f889e5c2e2ce66b1f566e17fdb632f5eb2979e688
GET /oversea_web/static/js/buypage.052bbaf6.js HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bgmgroundin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 20 Sep 2022 10:38:36 GMT
content-type: application/javascript
content-length: 47711
cache-control: max-age=600
expires: Tue, 20 Sep 2022 10:48:36 GMT
last-modified: Wed, 10 Mar 2021 08:45:21 GMT
content-encoding: gzip
x-nws-log-uuid: 72be0687-e62b-46f1-8721-54d83b36b0b2
x-cache-lookup: Hit From Disktank3 Gz
accept-ranges: bytes
X-Firefox-Spdy: h2
3gimg.qq.com/tele_safe/static/tfg/pc/tfg.v1.0.18.js
200 OK 64 kB URL HTTP/2 3gimg.qq.com/tele_safe/static/tfg/pc/tfg.v1.0.18.js
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type Unicode text, UTF-8 text, with very long lines (47403), with NEL line terminators
Hash 8a34837795e4cdec2c6c73a4552ff290
a62522ee006fdb198bb896c43c3cb5b7bfc42dc8
b209750403ec33d58f44da1b1cd11625f4a38aef97d438c7bc0e4683ee4f873d
GET /tele_safe/static/tfg/pc/tfg.v1.0.18.js HTTP/1.1
Host: 3gimg.qq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bgmgroundin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Sat, 09 Apr 2022 02:31:37 GMT
content-encoding: gzip
etag: "9766758ab4540071f60a1dcde343d4e2d382b02e"
date: Sat, 17 Sep 2022 05:14:49 GMT
content-type: application/javascript
ip: 9.150.195.210
server: TencentCOS
x-cos-storage-class: STANDARD_IA
x-cos-hash-crc64ecma: 13594462328696689996
x-cos-object-type: normal
access-control-allow-credentials: true
access-control-allow-methods: *
access-control-allow-headers: *
content-length: 64381
accept-ranges: bytes
x-nws-log-uuid: 10103579040174015874
x-cache-lookup: Cache Hit
access-control-allow-origin: *
X-Firefox-Spdy: h2
cdn.midasbuy.com/images/apps/pubgm/guide001.png
200 OK 442 kB URL HTTP/2 cdn.midasbuy.com/images/apps/pubgm/guide001.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type PNG image data, 1338 x 754, 8-bit colormap, non-interlaced\012- data
Size 442 kB (442225 bytes)
Hash b79c6ea08e40d9d9533cd83db49587af
a33cabc012f0433bc6001b390313995aa35e0bdf
9fe15b168ab9a542ae9410fdfca0fa9101d64a4b0c40c64a8d976b26207ddd99
GET /images/apps/pubgm/guide001.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bgmgroundin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 20 Sep 2022 10:38:36 GMT
content-type: image/png
content-length: 442225
cache-control: max-age=600
expires: Tue, 20 Sep 2022 10:48:36 GMT
last-modified: Wed, 01 Dec 2021 10:12:01 GMT
x-nws-log-uuid: 3b9ef746-e513-4307-809d-7cd795dad8e1
x-cache-lookup: Hit From MemCache
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/css/vendor-87839280b2.html.css
200 OK 36 kB URL HTTP/2 cdn.midasbuy.com/oversea_web/static/css/vendor-87839280b2.html.css
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type ASCII text, with very long lines (65536), with no line terminators
Hash de38e9ea125cb741d20e2931dd1a4688
a02d6429a26cda558582bace903abcc4281b433e
9e5caa5a21f6440a822e11a2df244f50d833e23e4fd1bfe4d99f1b819cf69616
GET /oversea_web/static/css/vendor-87839280b2.html.css HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bgmgroundin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: NWSs
date: Tue, 20 Sep 2022 10:38:36 GMT
content-type: text/css
content-length: 36202
cache-control: max-age=600
expires: Tue, 20 Sep 2022 10:48:36 GMT
last-modified: Thu, 01 Apr 2021 02:25:50 GMT
content-encoding: gzip
x-nws-log-uuid: 60196856-d339-491e-b16b-baac4ac88752
x-cache-lookup: Hit From MemCache Gz
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/css/game_recharge_ticket_new-c9585b8432.html.css
200 OK 3.1 kB URL HTTP/2 cdn.midasbuy.com/oversea_web/static/css/game_recharge_ticket_new-c9585b8432.html.css
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type ASCII text, with very long lines (17999), with no line terminators
Hash 053c2bfc207a143e1eda8dfe42fcbaca
922c6d61943ce7826a64cf30b6876a2edf5edf6a
31bf5fce5aa7dc1c21608e8179bb580765270e8bd86de5482ba8a4aee7cc0ba6
GET /oversea_web/static/css/game_recharge_ticket_new-c9585b8432.html.css HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bgmgroundin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: NWSs
date: Tue, 20 Sep 2022 10:38:36 GMT
content-type: text/css
content-length: 3106
cache-control: max-age=600
expires: Tue, 20 Sep 2022 10:48:36 GMT
last-modified: Thu, 08 Apr 2021 09:43:27 GMT
content-encoding: gzip
x-nws-log-uuid: fbe502ad-7724-4653-9597-5a4255471b6a
x-cache-lookup: Hit From MemCache Gz
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/js/header.bbcf2110.js
200 OK 18 kB URL HTTP/2 cdn.midasbuy.com/oversea_web/static/js/header.bbcf2110.js
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type Unicode text, UTF-8 text, with very long lines (46187), with NEL line terminators
Hash 493a3307cf580b5a836d2baf8e0dcd87
b0e5683b251c38060f2086e1abb0204071000375
144a3f1bae789f0a2cc849f82979d5621429eb3a91f18ba6d5aeb8d53e21d4d8
GET /oversea_web/static/js/header.bbcf2110.js HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bgmgroundin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: NWSs
date: Tue, 20 Sep 2022 10:38:36 GMT
content-type: application/javascript
content-length: 18232
cache-control: max-age=600
expires: Tue, 20 Sep 2022 10:48:36 GMT
last-modified: Wed, 10 Mar 2021 08:45:22 GMT
content-encoding: gzip
x-nws-log-uuid: bfaaf5c7-4378-41b7-9657-14d828050ec3
x-cache-lookup: Hit From MemCache Gz
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/images/apps/pubgm/guide002.png
200 OK 448 kB URL HTTP/2 cdn.midasbuy.com/images/apps/pubgm/guide002.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type PNG image data, 1338 x 750, 8-bit colormap, non-interlaced\012- data
Size 448 kB (448284 bytes)
Hash 597f725d1acdadf8ac263021465ed51b
47d931fbbf164780a8a71cdfd9d3cb53b5ca583a
46101013f8555231d5e1e2bb9b09c402a334d29323094101d6caff277afd5c31
GET /images/apps/pubgm/guide002.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bgmgroundin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 20 Sep 2022 10:38:36 GMT
content-type: image/png
content-length: 448284
cache-control: max-age=600
expires: Tue, 20 Sep 2022 10:48:36 GMT
last-modified: Wed, 01 Dec 2021 10:12:19 GMT
x-nws-log-uuid: db51d6a4-f7bc-44e3-adc7-d91b27b8c2b8
x-cache-lookup: Hit From MemCache
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/js/production.midas.runtime.js
200 OK 92 kB URL HTTP/2 cdn.midasbuy.com/oversea_web/static/js/production.midas.runtime.js
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type ASCII text, with very long lines (32077)
Hash 952643514d71972f6df35e4b8e8482fb
b0ac29d75ac0835e4e30810942558d9b1562966f
cf6214a3a22e442208e57b7ae26a0f5bab6b941aa7d4d15eca703f02b8e0fd9a
GET /oversea_web/static/js/production.midas.runtime.js HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bgmgroundin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: NWSs
date: Tue, 20 Sep 2022 10:38:36 GMT
content-type: application/javascript
content-length: 92388
cache-control: max-age=600
expires: Tue, 20 Sep 2022 10:48:36 GMT
last-modified: Tue, 20 Sep 2022 09:51:22 GMT
content-encoding: gzip
x-nws-log-uuid: 020a2a1f-cde1-4b75-8238-735e52878ae5
x-cache-lookup: Hit From MemCache Gz
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/h5/overseah5/js/midas-oversea-h5page.js
200 OK 8.1 kB URL HTTP/2 cdn.midasbuy.com/h5/overseah5/js/midas-oversea-h5page.js
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type Unicode text, UTF-8 text, with very long lines (57711), with no line terminators
Hash 4ba959cd0365357b3c6ae40b503bd4bb
7ea8f79de0a31b06ac6c49097e7a561a1ae8209e
62ea8cd57bfa4795ea46569333f06a1bd7c44648e9d8052841e83b5076ccafa7
GET /h5/overseah5/js/midas-oversea-h5page.js HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bgmgroundin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: NWSs
date: Tue, 20 Sep 2022 10:38:36 GMT
content-type: application/javascript
content-length: 8077
cache-control: max-age=600
expires: Tue, 20 Sep 2022 10:48:36 GMT
last-modified: Thu, 02 Jun 2022 10:42:17 GMT
content-encoding: gzip
x-nws-log-uuid: ab0673eb-12cd-4819-9dcc-9ddd4f6bb8ba
x-cache-lookup: Hit From MemCache Gz
accept-ranges: bytes
X-Firefox-Spdy: h2
kepler.captcha.qcloud.com/tencent-kepler.js?appId=9865970
200 OK 57 kB URL HTTP/1.1 kepler.captcha.qcloud.com/tencent-kepler.js?appId=9865970
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type Unicode text, UTF-8 text, with very long lines (65489), with no line terminators
Hash 1b75d80aec6b42ea2bd3dd7a614285e2
f08ca6b401628706324caf14a3997995d332cb64
b118a19c3320176bb54941329d784beda5b814667ac5fc2b2ba363a70e8aa765
GET /tencent-kepler.js?appId=9865970 HTTP/1.1
Host: kepler.captcha.qcloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bgmgroundin.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 10:38:36 GMT
Content-Type: text/javascript
Content-Length: 56621
Connection: keep-alive
Content-Encoding: gzip
Server: tencent http server
Accept-Ranges: bytes
P3P: CP=CAO PSA OUR
Cache-Control: max-age=600
www.midasbuy.com/oversea_web/static/images/big-new-close-icon.png
200 OK 396 B URL HTTP/2 www.midasbuy.com/oversea_web/static/images/big-new-close-icon.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash fe283af4d8973303b3c88122f5de5aa3
d90f66de4a3f4bc3da8965bcdfdc9185f6103bcf
a71399ae5345a2a9e04ebc66f0a50a7703264858632fa3f6bd7efc6a31c05af5
GET /oversea_web/static/images/big-new-close-icon.png HTTP/1.1
Host: www.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bgmgroundin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 19 May 2020 08:36:36 GMT
content-encoding: gzip
etag: "5ec39a94-175"
server: nginx
date: Thu, 30 Jun 2022 06:20:40 GMT
content-type: image/png
expires: Sat, 30 Jul 2022 06:20:40 GMT
cache-control: max-age=2592000
content-length: 396
accept-ranges: bytes
x-nws-log-uuid: 16455863301060720011
x-cache-lookup: Cache Hit
X-Firefox-Spdy: h2
www.midasbuy.com/oversea_web/static/images/pc-logo.png
200 OK 5.4 kB URL HTTP/2 www.midasbuy.com/oversea_web/static/images/pc-logo.png
IP
File type PNG image data, 442 x 88, 8-bit/color RGBA, non-interlaced\012- data
Hash d4b222d824ad52cd77c1eb76e96b77dd
81ed6d1d6f885d529f30add9e76e1dec27d61757
c96e7ada49314f46576365e190183fefabdcdbbf7737b648a7b36f4aa6b46444
GET /oversea_web/static/images/pc-logo.png HTTP/1.1
Host: www.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bgmgroundin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Fri, 18 Oct 2019 06:55:12 GMT
content-encoding: gzip
etag: "5da961d0-151b"
server: nginx
date: Thu, 30 Jun 2022 06:20:40 GMT
content-type: image/png
expires: Sat, 30 Jul 2022 06:20:40 GMT
cache-control: max-age=2592000
content-length: 5426
accept-ranges: bytes
x-nws-log-uuid: 11231429703187100940
x-cache-lookup: Cache Hit
X-Firefox-Spdy: h2
i.ibb.co/SRNXbB7/coins.png
200 OK 12 kB URL HTTP/2 i.ibb.co/SRNXbB7/coins.png
IP
File type PNG image data, 200 x 176, 8-bit colormap, non-interlaced\012- data
Hash 52495b60e6ab6ae75fc46f1c61756274
cc117deeda4881fd8bc603f1397a9606df6e6d3b
c442f760be7613d058ec178fea8b3bff2984830afa8ec523b006f52f2a41dba2
GET /SRNXbB7/coins.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bgmgroundin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 10:38:36 GMT
content-type: image/png
content-length: 11507
last-modified: Mon, 14 Feb 2022 16:35:48 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
midas.gtimg.cn/oversea_web/static/images/flag/world.2556fe97306bdec1268d8b8a935b56c5.jpg
200 OK 22 kB URL HTTP/2 midas.gtimg.cn/oversea_web/static/images/flag/world.2556fe97306bdec1268d8b8a935b56c5.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=2040, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=3471], baseline, precision 8, 22x13, components 3\012- data
Hash 2556fe97306bdec1268d8b8a935b56c5
921f418284527e287e00fd4223595db666b227a1
3dd04893dcf4fb0b4eabdc3a2d5bec009f6a81d3ee066501ed1cdda9705c9cd8
GET /oversea_web/static/images/flag/world.2556fe97306bdec1268d8b8a935b56c5.jpg HTTP/1.1
Host: midas.gtimg.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bgmgroundin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: X2S_Platform
x-nws-log-uuid: b1674f8d-4725-40ec-b79b-937f48cdda5f
server_ip: 203.205.136.85
content-type: image/jpeg
content-length: 21503
last-modified: Wed, 17 Jul 2019 09:21:05 GMT
x-verify-code: a965555672a45e97857023b2cfaec129
x-nws-uuid-verify: 018920d605788ea8298abdc5d655cde0
x-cache-lookup: Hit From Upstream
x-daa-tunnel: hop_count=1
cache-control: max-age=600
expires: Tue, 20 Sep 2022 10:48:37 GMT
date: Tue, 20 Sep 2022 10:38:37 GMT
X-Firefox-Spdy: h2
bgmgroundin.com/img/product/5.png
200 OK 40 kB URL HTTP/1.1 bgmgroundin.com/img/product/5.png
IP
File type PNG image data, 176 x 131, 8-bit/color RGBA, non-interlaced\012- data
Hash 5403aecda5c624c460a7baf90f7f1145
46a62be7e7a398c358c7fe9f2605f9d551a3b4e5
e585e21100d4c2dfd20708ac23c62faf66451a6eed5c8af72c348d635aac542b
Analyzer Verdict Alert openphish Tencent
GET /img/product/5.png HTTP/1.1
Host: bgmgroundin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bgmgroundin.com/
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 10:38:37 GMT
Content-Type: image/png
Content-Length: 39489
Connection: keep-alive
Last-Modified: Tue, 16 Mar 2021 07:35:00 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Tm%2F6t3bzUUKmJqvVAWsIIGnK%2BpBL%2FlK8J4d7h7PRjX7Pcu5lRuT3uyJypnK6TdCpUbEdAMzR5A4S%2BNFLJ7EcvYk3jMWijUvBpWhB%2B6oMz9XH3itks%2B8zXTB%2FT%2FaU2tEW%2FFs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74d9eeb879e51c0a-OSL
alt-svc: h2=":443"; ma=60
bgmgroundin.com/img/product/2.png
200 OK 23 kB URL HTTP/1.1 bgmgroundin.com/img/product/2.png
IP
File type PNG image data, 176 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 8ace3e800a42dab3b5005957fe832725
0ec4560b0ae9b3db0a92af3da3e823bf1c0abab3
9d52dca805b5ef33f989d9d425ec8a11f8b726c98fbaca9d41d0c11c1f5fa3d0
Analyzer Verdict Alert openphish Tencent
GET /img/product/2.png HTTP/1.1
Host: bgmgroundin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bgmgroundin.com/
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 10:38:37 GMT
Content-Type: image/png
Content-Length: 22824
Connection: keep-alive
Last-Modified: Tue, 16 Mar 2021 07:34:50 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tkzNrsQtO0kCntqpROQoPEdQrG51sPe9LEVHQGYLJoYR7eM3YqyfY%2BwJTBZFcpTk9H6Vu6RZeHxP9LfgWYLSAyjF8u8mKXz%2F%2Fwd4YADVDYEzC3%2BpFfCBpIMJ37SgTmaK9MY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74d9eeb889f3b50c-OSL
alt-svc: h2=":443"; ma=60
bgmgroundin.com/oversea_web/static/js/x-midas/foXpt24MxhVpLTWmFsULBWJ0hD79nV7v9xWmNlTyU3Bqe4AEdEhMwu9wQOZRznaiasaltyxZa4hdYZdpZTVP_4fNAGKEXIYBcBqHZ0gpIMU~.js
404 Not Found 238 B URL HTTP/1.1 bgmgroundin.com/oversea_web/static/js/x-midas/foXpt24MxhVpLTWmFsULBWJ0hD79nV7v9xWmNlTyU3Bqe4AEdEhMwu9wQOZRznaiasaltyxZa4hdYZdpZTVP_4fNAGKEXIYBcBqHZ0gpIMU~.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f5945c4d5e4298d818d50d70865f2857
f35c3593933af2db1933093809ef78f45b9b7144
d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38
Analyzer Verdict Alert openphish Tencent
fortinet Phishing
GET /oversea_web/static/js/x-midas/foXpt24MxhVpLTWmFsULBWJ0hD79nV7v9xWmNlTyU3Bqe4AEdEhMwu9wQOZRznaiasaltyxZa4hdYZdpZTVP_4fNAGKEXIYBcBqHZ0gpIMU~.js HTTP/1.1
Host: bgmgroundin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bgmgroundin.com/
HTTP/1.1 404 Not Found
Date: Tue, 20 Sep 2022 10:38:37 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 4
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BAHcmAJPUaelMpOriS5j0PcXw06oEkIQNSoLrMmWA%2FKTWFcVO0eNl93B685SObzbphy%2BB433QrU8%2BeFZPYFlEIAMrIYRYt4K9a7o4CLcbdlwEzu724PEYBVo3kLxDkahMc4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74d9eebbcd141c0a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
bgmgroundin.com/img/product/4.png
200 OK 33 kB URL HTTP/1.1 bgmgroundin.com/img/product/4.png
IP
File type PNG image data, 176 x 113, 8-bit/color RGBA, non-interlaced\012- data
Hash 30cf930aa533bbed8bcfd57f005b62b7
a7835e3a608934e3a3dcbbd14789e2836969b7e2
ec9e1d5b10a89779cfb363004a640bbf95421a286d1deee187be01959f5a50c6
Analyzer Verdict Alert openphish Tencent
GET /img/product/4.png HTTP/1.1
Host: bgmgroundin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bgmgroundin.com/
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 10:38:37 GMT
Content-Type: image/png
Content-Length: 32824
Connection: keep-alive
Last-Modified: Tue, 16 Mar 2021 07:34:56 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vcwJQ6NwxicutizU2UQS6%2FeH8pMwn3kyzs97igEcO4BYixGdtB4baf0RVO3jwW1a9GUFpcsmutO%2FtVX%2BpATPYFL6pdxPY7xpeQVObXSZuwCqngnXD2zxRcGBfdBOT%2BHC5cU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74d9eeb87a02b529-OSL
alt-svc: h2=":443"; ma=60
bgmgroundin.com/img/product/1.png
200 OK 20 kB URL HTTP/1.1 bgmgroundin.com/img/product/1.png
IP
File type PNG image data, 176 x 82, 8-bit/color RGBA, non-interlaced\012- data
Hash 11262da1eccfbe361ce841429d7c6109
da7a1fe341a0239db239e374e4651d4617ca1551
65bb6c9a5a42adff26d1fe20756614c49fbaad40f3929e3898f3a760a04cd2bc
Analyzer Verdict Alert openphish Tencent
GET /img/product/1.png HTTP/1.1
Host: bgmgroundin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bgmgroundin.com/
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 10:38:37 GMT
Content-Type: image/png
Content-Length: 20407
Connection: keep-alive
Last-Modified: Tue, 16 Mar 2021 07:34:48 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hQLlWgd5T64DQ5n0Px8rlumGscsHrcaprxRSFrGghC0pR0%2FIf4khZZUFtHnH3N0Dq9EcjQ7sXlsSnQRne8NgLimGE9azyk09CUVaJ%2BsIgK1ymGWsT%2Bw9bTBeia9ue81iOJs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74d9eeb87aceb51d-OSL
alt-svc: h2=":443"; ma=60
bgmgroundin.com/img/product/3.png
200 OK 28 kB URL HTTP/1.1 bgmgroundin.com/img/product/3.png
IP
File type PNG image data, 176 x 86, 8-bit/color RGBA, non-interlaced\012- data
Hash 2b38e95ee41668ded718611d1bb7fadb
841cd4c8bbf7c302684ab09838efd1b1cfeea817
83456ddf216212a3a5961bb3f687e2bab72c837200a78af6876c4ef1da705065
Analyzer Verdict Alert openphish Tencent
GET /img/product/3.png HTTP/1.1
Host: bgmgroundin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bgmgroundin.com/
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 10:38:37 GMT
Content-Type: image/png
Content-Length: 27837
Connection: keep-alive
Last-Modified: Tue, 16 Mar 2021 07:34:54 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dnVGy0ENnHFA%2Bkp%2BzhB5L%2FW6nkUPLT%2FAWt15u22GZEgHH7pYtQkJ0UmeoXmPcPWjGK54M4AW2cn7wXHRxLkzmDQL7Guu8vw1CT%2FsJUy%2FFAU2AXymCHNdlT41No%2BTWk6%2Bnhk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74d9eeb889f21c12-OSL
alt-svc: h2=":443"; ma=60
cdn.midasbuy.com/oversea_web/static/images/pc-logo-5f404ea479.png
200 OK 5.4 kB URL HTTP/2 cdn.midasbuy.com/oversea_web/static/images/pc-logo-5f404ea479.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type PNG image data, 442 x 88, 8-bit/color RGBA, non-interlaced\012- data
Hash 5f404ea4792424375fa4b16a520555ed
8a3e448779780a80af9adc5081e4fa793e51f436
607b00f0fd839eb7f8250d7c4d0c0b4a31a08b32b2b8b5cbdd9fe3125b2eb985
GET /oversea_web/static/images/pc-logo-5f404ea479.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.midasbuy.com/oversea_web/static/css/vendor-87839280b2.html.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 20 Sep 2022 10:38:37 GMT
content-type: image/png
content-length: 5403
cache-control: max-age=600
expires: Tue, 20 Sep 2022 10:48:37 GMT
last-modified: Tue, 27 Apr 2021 10:57:35 GMT
x-nws-log-uuid: 7527cabe-d56c-4005-891a-c969e0989c66
x-cache-lookup: Hit From MemCache
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/images/pc-fb-eade39686c.png
200 OK 2.4 kB URL HTTP/2 cdn.midasbuy.com/oversea_web/static/images/pc-fb-eade39686c.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash eade39686c453acaf33a01a6e36268fc
ce7fb98da8caaa54fe9d73dec432dd45835aa70d
528ec4ee6f56ace1dd9c394fa067175b7192828bc3b68e264e7494448f31b27e
GET /oversea_web/static/images/pc-fb-eade39686c.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.midasbuy.com/oversea_web/static/css/vendor-87839280b2.html.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 20 Sep 2022 10:38:37 GMT
content-type: image/png
content-length: 2407
cache-control: max-age=600
expires: Tue, 20 Sep 2022 10:48:37 GMT
last-modified: Tue, 27 Apr 2021 10:57:35 GMT
x-nws-log-uuid: 7f61ec4d-572e-4a66-ac99-33a8c9a862b5
x-cache-lookup: Hit From MemCache
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/images/1920X240.f37ecf7b.jpg
200 OK 207 kB URL HTTP/2 cdn.midasbuy.com/images/1920X240.f37ecf7b.jpg
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x240, components 3\012- data
Size 207 kB (206687 bytes)
Hash f37ecf7b4dbfec74574c246c0edda052
c5312e439df1fb2124a14f20cbadafa1f2d3089f
26870ed737ea8229686642ee2eaaea9204c9805c3f70df5d99fe758b92ce3c23
GET /images/1920X240.f37ecf7b.jpg HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bgmgroundin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 20 Sep 2022 10:38:37 GMT
content-type: image/jpeg
content-length: 206687
cache-control: max-age=600
expires: Tue, 20 Sep 2022 10:48:37 GMT
last-modified: Thu, 18 Aug 2022 07:08:23 GMT
x-nws-log-uuid: 13965dcb-613a-4479-ad5a-223a4a187467
x-cache-lookup: Hit From MemCache
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/images/help-3511261f22.png
200 OK 768 B URL HTTP/2 cdn.midasbuy.com/oversea_web/static/images/help-3511261f22.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 3511261f2219959016bf0a8e8b9f9fcd
282b2905a6d1be9088d93d895f5a20303606a4a1
58a9d84a82320ae57c1f150a1c32d868459335083c0095c36504a1acb0fad2ea
GET /oversea_web/static/images/help-3511261f22.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.midasbuy.com/oversea_web/static/css/vendor-87839280b2.html.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 20 Sep 2022 10:38:37 GMT
content-type: image/png
content-length: 768
cache-control: max-age=600
expires: Tue, 20 Sep 2022 10:48:37 GMT
last-modified: Tue, 27 Apr 2021 10:57:29 GMT
x-nws-log-uuid: 722ecc14-3b52-4321-8965-24af24b3742f
x-cache-lookup: Hit From MemCache
accept-ranges: bytes
X-Firefox-Spdy: h2
bgmgroundin.com/img/product/6.png
200 OK 55 kB URL HTTP/1.1 bgmgroundin.com/img/product/6.png
IP
File type PNG image data, 176 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 7760087792ff8cfe29b8de58c2a417c8
3bc983a6be59707192ad3b4608461dd9fb48d08e
5e1ed74d48a857034a509b63602360ea0b39ce7c15c4df9db42619fde5815bb0
Analyzer Verdict Alert openphish Tencent
GET /img/product/6.png HTTP/1.1
Host: bgmgroundin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bgmgroundin.com/
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 10:38:37 GMT
Content-Type: image/png
Content-Length: 54572
Connection: keep-alive
Last-Modified: Tue, 16 Mar 2021 07:35:02 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PpcD7A%2FFOvS9V%2FSWiE%2FnikA3yGN3YdzVzE9fDfBeb4zUc3J7aP%2BiIOrAGCDG0AIKHdLBrDYiup0nrxzcHBJ5LVAXjplVIdB8hN0DJAnONGbRCjorqALoaqSesY66q7b1cT0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74d9eeb87aecb4f7-OSL
alt-svc: h2=":443"; ma=60
cdn.midasbuy.com/oversea_web/static/images/list-active-new-0f7ecf2cdd.svg
200 OK 615 B URL HTTP/2 cdn.midasbuy.com/oversea_web/static/images/list-active-new-0f7ecf2cdd.svg
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document, Unicode text, UTF-8 text
Hash 0f7ecf2cddefd1c786fd11e60a3f183a
59911a60b5049a6d980646cc27b24fde94d0763f
362a7ee07b4a9bf9f2ce90cf4de3ed1535b38c0a2d55c8db4c921c068d46f313
GET /oversea_web/static/images/list-active-new-0f7ecf2cdd.svg HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.midasbuy.com/oversea_web/static/css/vendor-87839280b2.html.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 20 Sep 2022 10:38:37 GMT
content-type: image/svg+xml
content-length: 615
cache-control: max-age=600
expires: Tue, 20 Sep 2022 10:48:37 GMT
last-modified: Tue, 27 Apr 2021 10:57:31 GMT
x-nws-log-uuid: 0c6b1271-6611-4c94-971b-2e9e3e8b36b5
x-cache-lookup: Hit From MemCache
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/images/codmicon/card-active-bg-c8325e2e0e.png
200 OK 114 kB URL HTTP/2 cdn.midasbuy.com/oversea_web/static/images/codmicon/card-active-bg-c8325e2e0e.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type PNG image data, 326 x 480, 8-bit/color RGBA, non-interlaced\012- data
Size 114 kB (113890 bytes)
Hash c8325e2e0e5cde4df1581a63800f7086
8219f8045bb6441c7b8fdb92c94595c7327918c0
9b66bc540c283d4587d4bd6df50a100bf1f18158655e24234f103f0bc419e9e3
GET /oversea_web/static/images/codmicon/card-active-bg-c8325e2e0e.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.midasbuy.com/oversea_web/static/css/game_recharge_ticket_new-c9585b8432.html.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 20 Sep 2022 10:38:37 GMT
content-type: image/png
content-length: 113890
cache-control: max-age=600
expires: Tue, 20 Sep 2022 10:48:37 GMT
last-modified: Tue, 27 Apr 2021 10:57:14 GMT
x-nws-log-uuid: 024e82cf-675a-463d-a99e-c6417fe7dcab
x-cache-lookup: Hit From MemCache
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/images/codmicon/card-bg-097257145b.png
200 OK 46 kB URL HTTP/2 cdn.midasbuy.com/oversea_web/static/images/codmicon/card-bg-097257145b.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type PNG image data, 326 x 480, 8-bit/color RGBA, non-interlaced\012- data
Hash 097257145b436869d2c0978b4cdd3454
d486c55eb3764f83f22550d72b0b932c8812826a
1c27de241af0b7402928d9d99af6288c1570d31a781dd0637a35fa51d8b7088b
GET /oversea_web/static/images/codmicon/card-bg-097257145b.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.midasbuy.com/oversea_web/static/css/game_recharge_ticket_new-c9585b8432.html.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 20 Sep 2022 10:38:37 GMT
content-type: image/png
content-length: 45735
cache-control: max-age=600
expires: Tue, 20 Sep 2022 10:48:37 GMT
last-modified: Tue, 27 Apr 2021 10:57:14 GMT
x-nws-log-uuid: f0c659a2-1c2a-4bd9-8428-85f0e60d33d7
x-cache-lookup: Hit From MemCache
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.midasbuy.com/oversea_web/static/images/arrow-icon-54d438045f.png
200 OK 360 B URL HTTP/2 cdn.midasbuy.com/oversea_web/static/images/arrow-icon-54d438045f.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 54d438045f0281be67ce99d4961caa5e
c862dda6d99691930cba1d401629e31358cadb52
a521b418fd37d48c7a770e7c9438bf56c8a564df2ae8a77c60865f0614361ec7
GET /oversea_web/static/images/arrow-icon-54d438045f.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.midasbuy.com/oversea_web/static/css/vendor-87839280b2.html.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 20 Sep 2022 10:38:37 GMT
content-type: image/png
content-length: 360
cache-control: max-age=600
expires: Tue, 20 Sep 2022 10:48:37 GMT
last-modified: Tue, 27 Apr 2021 10:57:08 GMT
x-nws-log-uuid: d8683314-10ef-496e-8679-130c24497406
x-daa-tunnel: hop_count=1
x-cache-lookup: Hit From Upstream, Hit From Disktank3
accept-ranges: bytes
X-Firefox-Spdy: h2
bgmgroundin.com/img/ucAtas.png
200 OK 1.3 kB URL HTTP/1.1 bgmgroundin.com/img/ucAtas.png
IP
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash d2c7b78c0e95d897ba6d795612b1a613
501bbce9b06683a3f4c033efe093cc60534ec2bd
55f0e2f20760b6b11253664df938bee1158390f88bfe8fb49eb126567123ca58
Analyzer Verdict Alert openphish Tencent
GET /img/ucAtas.png HTTP/1.1
Host: bgmgroundin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bgmgroundin.com/
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 10:38:37 GMT
Content-Type: image/png
Content-Length: 1318
Connection: keep-alive
Last-Modified: Tue, 16 Mar 2021 07:34:18 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jsKlmV50ya%2B6j59hDu%2FEr7zc8QE1xD1fEoeS6jqgnbFwXXq0Yk9bVC3kE8hyZs3D%2FrHKoVzovgm8iARIuWBO52vIr%2BlSU1QyaMtYwIJoXfNC6iMvyBBRnn4e7qv9rDabWY0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74d9eebbce15b50c-OSL
alt-svc: h2=":443"; ma=60
cdn.midasbuy.com/oversea_web/static/images/feedback-icon-d5219efc94.png
200 OK 1.3 kB URL HTTP/2 cdn.midasbuy.com/oversea_web/static/images/feedback-icon-d5219efc94.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type PNG image data, 20 x 16, 8-bit/color RGBA, interlaced\012- data
Hash d5219efc94471d4bb43fc126151b89ed
ee8a891c098f366da2d881851c35e322fcc91865
62a6940b8ff01e27be4e854346e4f734bed11d64c1378b70b30f0385c645a575
GET /oversea_web/static/images/feedback-icon-d5219efc94.png HTTP/1.1
Host: cdn.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.midasbuy.com/oversea_web/static/css/vendor-87839280b2.html.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: NWSs
date: Tue, 20 Sep 2022 10:38:37 GMT
content-type: image/png
content-length: 1272
cache-control: max-age=600
expires: Tue, 20 Sep 2022 10:48:37 GMT
last-modified: Tue, 27 Apr 2021 10:57:27 GMT
x-nws-log-uuid: 7b55147c-ebec-4733-9d4d-48c94e710afc
x-cache-lookup: Hit From MemCache
accept-ranges: bytes
X-Firefox-Spdy: h2
bgmgroundin.com/oversea_web/static/receiveMsg.html?buy_type_key=CURRENT_BUY_ITEM_SAVE_page_07259904300352177
404 Not Found 245 B URL HTTP/1.1 bgmgroundin.com/oversea_web/static/receiveMsg.html?buy_type_key=CURRENT_BUY_ITEM_SAVE_page_07259904300352177
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash bb58045e693f1b3dee82b8d743307e01
f32e2fc403bf9f1c5d0bb2c06ca9e2c0f8af8252
856d35da5931d2f04d36b9d4367a7868d106cfc8a59edf17f511ff5dd25aed82
GET /oversea_web/static/receiveMsg.html?buy_type_key=CURRENT_BUY_ITEM_SAVE_page_07259904300352177 HTTP/1.1
Host: bgmgroundin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bgmgroundin.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 404 Not Found
Date: Tue, 20 Sep 2022 10:38:37 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FCFOwOZaXuHSOesdnUQzfkrxDuMpvJOgEg5OSh1g8QNie7ShgyrSCJkMXHRk3FnKnTMRBGnQE6nOv74L8WSUur%2F02JHOtO0T8GChsFWXGveJqu5kWEf87bhMlasJri1Tv0E%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74d9eebcbeffb529-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
bgmgroundin.com/font/DINMITTELSCHRIFTSTD.woff
200 OK 25 kB URL HTTP/1.1 bgmgroundin.com/font/DINMITTELSCHRIFTSTD.woff
IP
File type Web Open Font Format, TrueType, length 24996, version 1.40\012- data
Hash 2018d35e708e07985693c6bc12a59861
12faf69d54217b30d4458fffad689e758b8a91c6
c2293fa86d99d0f1f06b2ac7f85ae0517e4a3bacfd9946de7b012f04aa2d831c
Analyzer Verdict Alert openphish Tencent
fortinet Phishing
GET /font/DINMITTELSCHRIFTSTD.woff HTTP/1.1
Host: bgmgroundin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://bgmgroundin.com/
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 10:38:38 GMT
Content-Type: font/woff
Content-Length: 24996
Connection: keep-alive
Last-Modified: Mon, 15 Mar 2021 16:36:22 GMT
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YO%2BABqtbLPBTtIbk6Le6cBISeOeGS1T0iCygEHxn0PJv7i6RhVStECrdo%2FImyvr3BvHGJSWxNuhivzTMC3SeS8bgvrmX9XUvsRdPg5J6DsNWT2Tqmk7GouLRFpWORMkqK20%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74d9eebd0e631c12-OSL
alt-svc: h2=":443"; ma=60
bgmgroundin.com/favicon.ico
404 Not Found 238 B URL HTTP/1.1 bgmgroundin.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f5945c4d5e4298d818d50d70865f2857
f35c3593933af2db1933093809ef78f45b9b7144
d2a3f46998410a6fa09375f2813da63aa04bbc6caae20e770da12530ba881b38
Analyzer Verdict Alert openphish Tencent
GET /favicon.ico HTTP/1.1
Host: bgmgroundin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bgmgroundin.com/
HTTP/1.1 404 Not Found
Date: Tue, 20 Sep 2022 10:38:39 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6ZROj1KuHjsuW1K6Ux0e9zPXmbgPQZv614NL5S0eOA5UFQ3Lj9vh%2BOad5MWBawijWEZmpYjtnX0I4ZfIJRoFqwvDuA7eLewvca9zQrlTkiS3kRv4%2FUGbo5A5jhZ046dCPVA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74d9eec42914b4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.req.getFingerPrint.start|8=|4=uv_0404447576727409831615827099757|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=http%3A%2F%2Fbgmgroundin.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0|38=1663670317466|6=1663670317466|29=0404447576727409831615827099757&rr=0.4794894049813405
200 OK 9 B URL HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.req.getFingerPrint.start|8=|4=uv_0404447576727409831615827099757|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=http%3A%2F%2Fbgmgroundin.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0|38=1663670317466|6=1663670317466|29=0404447576727409831615827099757&rr=0.4794894049813405
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.req.getFingerPrint.start|8=|4=uv_0404447576727409831615827099757|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=http%3A%2F%2Fbgmgroundin.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0|38=1663670317466|6=1663670317466|29=0404447576727409831615827099757&rr=0.4794894049813405 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bgmgroundin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 10:38:39 GMT
content-type: application/json; charset=utf-8
content-length: 9
x-powered-by: Express
access-control-allow-origin: *
etag: W/"9-Tm1b9Y1xk2BRjszLBzJI0Ck900Y"
X-Firefox-Spdy: h2
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.req.getFingerPrint.start|8=|4=uv_0404447576727409831615827099757|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=http%3A%2F%2Fbgmgroundin.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0|38=1663670317464|6=1663670317464|29=0404447576727409831615827099757&rr=0.6138448533326252
200 OK 9 B URL HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.req.getFingerPrint.start|8=|4=uv_0404447576727409831615827099757|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=http%3A%2F%2Fbgmgroundin.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0|38=1663670317464|6=1663670317464|29=0404447576727409831615827099757&rr=0.6138448533326252
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.req.getFingerPrint.start|8=|4=uv_0404447576727409831615827099757|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=http%3A%2F%2Fbgmgroundin.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0|38=1663670317464|6=1663670317464|29=0404447576727409831615827099757&rr=0.6138448533326252 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bgmgroundin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 10:38:39 GMT
content-type: application/json; charset=utf-8
content-length: 9
x-powered-by: Express
access-control-allow-origin: *
etag: W/"9-Tm1b9Y1xk2BRjszLBzJI0Ck900Y"
X-Firefox-Spdy: h2
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midas.api.call.init.ok|25=http%3A%2F%2Fbgmgroundin.com%2F|36=|50=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0|51=&r=0.5652629811529634
200 OK 9 B URL HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midas.api.call.init.ok|25=http%3A%2F%2Fbgmgroundin.com%2F|36=|50=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0|51=&r=0.5652629811529634
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midas.api.call.init.ok|25=http%3A%2F%2Fbgmgroundin.com%2F|36=|50=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0|51=&r=0.5652629811529634 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bgmgroundin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 10:38:39 GMT
content-type: application/json; charset=utf-8
content-length: 9
x-powered-by: Express
access-control-allow-origin: *
etag: W/"9-Tm1b9Y1xk2BRjszLBzJI0Ck900Y"
X-Firefox-Spdy: h2
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.pageview.topupv2|13=1|8=|4=uv_0404447576727409831615827099757|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=http%3A%2F%2Fbgmgroundin.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0|38=1663670317555|6=1663670317555|29=0404447576727409831615827099757&rr=0.07566351877447142
200 OK 9 B URL HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.pageview.topupv2|13=1|8=|4=uv_0404447576727409831615827099757|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=http%3A%2F%2Fbgmgroundin.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0|38=1663670317555|6=1663670317555|29=0404447576727409831615827099757&rr=0.07566351877447142
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.pageview.topupv2|13=1|8=|4=uv_0404447576727409831615827099757|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=http%3A%2F%2Fbgmgroundin.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0|38=1663670317555|6=1663670317555|29=0404447576727409831615827099757&rr=0.07566351877447142 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bgmgroundin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 10:38:39 GMT
content-type: application/json; charset=utf-8
content-length: 9
x-powered-by: Express
access-control-allow-origin: *
etag: W/"9-Tm1b9Y1xk2BRjszLBzJI0Ck900Y"
X-Firefox-Spdy: h2
report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.timer.page.topupv2|8=times%3D5990%26html%3D394%26dns%3D7%26tcp%3D0%26res%3D5496|4=uv_0404447576727409831615827099757|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=http%3A%2F%2Fbgmgroundin.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0|38=1663670319681|6=1663670319681|29=0404447576727409831615827099757&rr=0.8670473363322517
200 OK 9 B URL HTTP/2 report1.midasbuy.com/cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.timer.page.topupv2|8=times%3D5990%26html%3D394%26dns%3D7%26tcp%3D0%26res%3D5496|4=uv_0404447576727409831615827099757|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=http%3A%2F%2Fbgmgroundin.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0|38=1663670319681|6=1663670319681|29=0404447576727409831615827099757&rr=0.8670473363322517
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type JSON data\012- , ASCII text, with no line terminators
Hash 7356645231da9cfecc34610420982100
4e6d5bf58d719360518ecccb073248d0293dd346
2c2237045b54bb664bd76b7d6f1da237fd50de74712edf261e90c1c0d7f2e822
GET /cgi-bin/log_data.fcg?num=1&record0=21=midasbuy.timer.page.topupv2|8=times%3D5990%26html%3D394%26dns%3D7%26tcp%3D0%26res%3D5496|4=uv_0404447576727409831615827099757|51=mds_hkweb_pc-v2-android-midasweb-midasbuy|31=oversea_web_v2_ot|43=|24=1450015065|23=v2|25=http%3A%2F%2Fbgmgroundin.com%2F|26=pc|3=|36=|50=Mozilla%252F5.0%2520(X11%253B%2520Linux%2520x86_64%253B%2520rv%253A96.0)%2520Gecko%252F20100101%2520Firefox%252F96.0|38=1663670319681|6=1663670319681|29=0404447576727409831615827099757&rr=0.8670473363322517 HTTP/1.1
Host: report1.midasbuy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bgmgroundin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 10:38:39 GMT
content-type: application/json; charset=utf-8
content-length: 9
x-powered-by: Express
access-control-allow-origin: *
etag: W/"9-Tm1b9Y1xk2BRjszLBzJI0Ck900Y"
X-Firefox-Spdy: h2
172.67.149.51
93.184.220.29
47.246.44.205
101.33.10.29
23.36.77.32
104.18.20.226
129.226.107.210
119.28.164.142
43.152.54.143
51.210.32.132