{"report_id":"1d598385-0656-4abd-8019-d8bdea28a9de","version":0,"status":"done","tags":[],"date":"2026-07-12T22:42:20Z","url":{"schema":"https","addr":"zmklg.q.hen360.com/","fqdn":"zmklg.q.hen360.com","domain":"hen360.com","tld":"com"},"ip":{"addr":"137.220.136.210","port":0,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"final":{"url":{"schema":"https","addr":"zmklg.q.hen360.com/","fqdn":"zmklg.q.hen360.com","domain":"hen360.com","tld":"com"},"title":"火绒安全","dom":{"size":5017,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"2c5d96bb1c271ca1c999ee01568a6214","sha1":"a1c4c45f63ecc71d91c06cbd2302500ad3826eee","sha256":"646ae1c2355c7c99e298d9aee9c0faeba94c4899e83c69aea7d9dc517c37e1ba","sha512":"e0301541a11acdb1a30a7e08316afd0f3539d355c23a875f11150bc7337e3b77133e5b3bd2fbc2b4e00556f9cdb1d3c0cf6a0632fb70261394043379348ee516","ssdeep":"96:nuQ1/HYRJn80V8A+vHzXMUZc2bxsrWOZnCK:uQaRJD8A0h+WOZnCK","tlshash":"53a176230862502e745371d2ef5e362c589f9827da93c54876fda7d40fccea885d222c","dom_hash":"domhash2b783f82ee0f93fe01dad27bc7be0ff0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"zmklg.q.hen360.com/","fqdn":"zmklg.q.hen360.com","domain":"hen360.com","tld":"com"},"ip":{"addr":"137.220.136.210","port":0,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T22:42:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"zmklg.q.hen360.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"zmklg.q.hen360.com","ip":{"addr":"137.220.136.210","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"domain_registered":"2015-10-28","domain_rank":0,"first_seen":"2026-07-09T20:11:20.202811Z","last_seen":"2026-07-09T20:11:20.202811Z","alert_count":10,"request_count":10,"received_data":1241864,"sent_data":4999,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zmklg.q.hen360.com/","fqdn":"zmklg.q.hen360.com","domain":"hen360.com","tld":"com"},"ip":{"addr":"137.220.136.210","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-07-18T13:43:14.929099Z","times_seen":89172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zmklg.q.hen360.com/","fqdn":"zmklg.q.hen360.com","domain":"hen360.com","tld":"com"},"ip":{"addr":"137.220.136.210","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ec1c9a8cef12bedf4cab5243fb81985","sha1":"1bec56335401b5a50a80f929d0837f6db38a3ef9","sha256":"f401bff4eb6a91d6aa7604661f96f26407ab642c5812f830d65469eca73b7d9e","sha512":"d7d3fdba9cb7efd6267c163fc3b8fa3ba6d5e38fc8193daaec4238c599075e53edd53a6cc9a1417f4f4f61bfe734f857cc8595baaf7fe7b63914b6a699f4ef4a","ssdeep":"","tlshash":"8ad05e9f29e62309d57b30617e1fa1282912705b4855ce417e4fbdd14f882384653659","size":254,"data":"","first_seen":"2026-07-12T22:42:25.064631Z","last_seen":"2026-07-12T22:42:25.064631Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zmklg.q.hen360.com/","fqdn":"zmklg.q.hen360.com","domain":"hen360.com","tld":"com"},"ip":{"addr":"137.220.136.210","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"c72c173da77b43876e4ad7b7ad8e8f00","sha1":"806cf7947cd82e35656c48f0626a202743e704dd","sha256":"f826acb141cf2e079af6b30f2461c21c0d40b63d363a16ba76459123f2b1041c","sha512":"74007c15b4c8459eff08f64cbf3d2997b34003a8ddfd1f601b9de0ea3d9a9d9f29f3be7efc39f661a058c7c0816c9fe61103d146a34fbbce7557624db4d3265e","ssdeep":"","tlshash":"a501f61c6af1106b845736aa9b9b801ad47ca6072144dedc7b2eef409f369744be878c","size":792,"data":"","first_seen":"2026-07-09T20:11:28.400227Z","last_seen":"2026-07-12T22:42:25.06682Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zmklg.q.hen360.com/","fqdn":"zmklg.q.hen360.com","domain":"hen360.com","tld":"com"},"ip":{"addr":"137.220.136.210","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"eval","is_inline":false,"md5":"79df120c8f3eec659f2e2deec85ac438","sha1":"0c13a53486e9eed0ec465d47021295ef59785228","sha256":"dbb0f5d6e0360df8b09ed319acbd7bf1ac483bcd9c1d35630137234487ce3dc3","sha512":"4719802a18583e6603f074f498f5edb1c1695f74595974a67a4950218bcabeecb1857b2108e3a9444a88b0c8c7943fbd94ad923db169f769b78b0e5012a4bc72","ssdeep":"96:s/lgkkdRcr2cOdX0MIy5Z2mKlt9jVJWx2YrAe7VfMXW6JcTTqhOS3KkBj775AwLW:smkkfcr2cCvIyv2mKz9jVEjAafMpcTT9","tlshash":"d4c1c82d3228261cdac137285c2526537aa3b8f5535d12a0993498752978baa20efff7","size":5890,"data":"","first_seen":"2024-07-29T13:24:13Z","last_seen":"2026-07-17T07:42:24.880648Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zmklg.q.hen360.com/static/js/jquery.min.js","fqdn":"zmklg.q.hen360.com","domain":"hen360.com","tld":"com"},"ip":{"addr":"137.220.136.210","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"e39d7f174407886a84c437f14182e57a","sha1":"77e9eed704c96c3eb0180d35c6ba430b3f69a43a","sha256":"c1bcc5f2066e4476e6dbab0b5a9b9700b86f4d6ebeb2900d73ee97e53753d4f9","sha512":"3e153156a11b21a66500b592b574bc2e2ebddd41014216177c0c2d5e6b31f2d0a742f68899527dbae47309df2922f81544450f73e3e2981c88cd9ecae0c570e7","ssdeep":"1536:Z4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RAfDknv+p0WzH/Io9Z7qABZnu0sFy:ZGsKXAI2p0WP9bDrstfa5","tlshash":"9393f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93106,"data":"","first_seen":"2023-03-07T01:15:08Z","last_seen":"2026-07-18T11:20:05.458643Z","times_seen":2407,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zmklg.q.hen360.com/","fqdn":"zmklg.q.hen360.com","domain":"hen360.com","tld":"com"},"ip":{"addr":"137.220.136.210","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"eval","is_inline":false,"md5":"01572eb8826352f534488bed3d488634","sha1":"206950b9b4883bf70443f5bfd8026e0601ba9382","sha256":"0e75a6bec550adf2c57f00cdfd8887bd40e2ffdd4ce682a159a8b443fe58b539","sha512":"1c6897601662cd0628db728561b729a20587257d74742f0098eaaab71836675b5b988a42f3223460cce674a93c8f54bae61401c2191a4618560e6a49e5b31239","ssdeep":"768:gIU2lW7fgU4CSjsreeTKrjejIxFnp9RPZjM9OTstNvA6:bJlW7fgU4C0eGtxZLGN46","tlshash":"baf219c661675481c3b678a088bb300f727676b614246a34f6d1d6dced989b8523ff3c","size":36514,"data":"","first_seen":"2024-07-29T13:24:13Z","last_seen":"2026-07-17T07:42:24.876909Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zmklg.q.hen360.com/static/js/jquery.min1.js","fqdn":"zmklg.q.hen360.com","domain":"hen360.com","tld":"com"},"ip":{"addr":"137.220.136.210","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"4abee76e8cd30dc659c3de38295cad1d","sha1":"99559bf88c32e3f312bbbdf9af9971085cfc3ccf","sha256":"86ee7b2a12251c2da549d75277d81b60a6639162b797c6daf87319b553cf82a6","sha512":"810acfb2aee1cad809bfb6f93122690d7df85d7afbe9354eeedc914a73cd39a6264de062f972cb39412db1c77e41ddb55f24833d627528997d0d383dabf238c1","ssdeep":"3072:ZGsKXAI2p0WPCbDrstfaG3kSSjwe9miv93AyWp:DKs6WwDCyKzSjwFsi","tlshash":"10f349deb292706243bb71fa006f110fb23619ae680d8424f169d8e97c74d49a17bf7d","size":160051,"data":"","first_seen":"2026-07-09T20:11:28.389189Z","last_seen":"2026-07-12T22:42:25.037702Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zmklg.q.hen360.com/","fqdn":"zmklg.q.hen360.com","domain":"hen360.com","tld":"com"},"ip":{"addr":"137.220.136.210","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"eval","is_inline":false,"md5":"b6f74c1b5190f99331dc3cfd7dce123b","sha1":"d81c5a3fd5a932ccb53a0f5d55a0e8b8f94ed789","sha256":"0f4c4ea09ee7ba5693426098dea32c44d49accb98314865172aa77c4bfee7098","sha512":"851b41f64d66cdd3c7ceb879960a63485fb49dfe160fc1a6207268460b40bb901c77416f19a8d4680c8989ba9ec42c2b85764e25d414395213486d5a74acf7c7","ssdeep":"","tlshash":"a9a002c87af1a6ca8396027a71aa4ac7d058146410584410e9e5c198395d4b7d2b3b6b","size":67,"data":"","first_seen":"2024-07-29T13:24:13Z","last_seen":"2026-07-17T07:42:24.908599Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zmklg.q.hen360.com/","fqdn":"zmklg.q.hen360.com","domain":"hen360.com","tld":"com"},"ip":{"addr":"137.220.136.210","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"eval","is_inline":false,"md5":"f3ea7a7b70862197022b153bf48ffa50","sha1":"6eacf3bd4fcab9cc21b3f2148e0ba132f9bc9b44","sha256":"04a66b2f563374b1041017125933923e426b9c5595c7c30abf9f1947010cb6a8","sha512":"99685f5971ac40e5ba1836637581b8712489e9fb59e7ae9212ba173e042b5453eaa2d971e568f38832bea08876f21c794a11610e9c9b871abc1c3fb5e500c941","ssdeep":"","tlshash":"23119b4e7d9930a825a70430913f921b3ab86ab3c94a84801b12cef47c70a9f9257fcd","size":977,"data":"","first_seen":"2024-07-29T13:24:13Z","last_seen":"2026-07-17T07:42:24.907146Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zmklg.q.hen360.com/","fqdn":"zmklg.q.hen360.com","domain":"hen360.com","tld":"com"},"ip":{"addr":"137.220.136.210","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"eval","is_inline":false,"md5":"76067128d5274895a32f810954b60f42","sha1":"59cc583083d44f8d05bd6ef983374742d70c1951","sha256":"901366b42c4c12e669e6372fd169a4131ae62671cedf7caf8bb7648ee32e9d9a","sha512":"5cb1c7ab164d64daac750ba67e7b8d0bdfaaae59772f6b8750e221b11e2912ba1f07a39f57f861af1bcb1772853637a6f815bf38f5762001ce304b9267fb065c","ssdeep":"","tlshash":"84f0e158b1da24a45af344950d1f1094dfbd5f314d4c80908613bc0189e9fd5516ae6c","size":557,"data":"","first_seen":"2025-03-07T11:02:32.443974Z","last_seen":"2026-07-17T07:42:24.878351Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj34 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"error","text":"map[actor:server1.conn0.watcher14.process7//obj36 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[message:map[configurable:true enumerable:true value:Failed to load the script ./assets/download/filename.js?v=2026712224152qQC51 writable:true] status:map[configurable:true enumerable:true value:false writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js","line_number":5,"column_number":127842},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj41 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj48 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj53 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj58 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj64 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj69 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj75 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj80 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj86 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj91 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj96 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj102 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj107 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj113 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj118 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj124 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj129 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj135 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj140 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj146 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj151 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj157 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj162 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj168 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj173 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj179 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj184 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj190 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj195 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj201 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj206 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj212 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj217 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj222 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj228 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj233 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj239 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj244 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj250 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj255 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj261 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj266 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj272 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj277 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj283 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj288 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj293 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj299 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj304 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.7016886176320791] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]","filename":"https://zmklg.q.hen360.com/static/js/jquery.min1.js line 5 \u003e eval","line_number":1,"column_number":199}]},"http":[{"url":{"schema":"https","addr":"zmklg.q.hen360.com/static/js/jquery.min1.js","fqdn":"zmklg.q.hen360.com","domain":"hen360.com","tld":"com"},"ip":{"addr":"137.220.136.210","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zmklg.q.hen360.com/","date":"2026-07-12T22:41:51.797Z","timestamp":1783896111797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zmklg.q.hen360.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 08:59:14 GMT","end":"Sun, 13 Sep 2026 08:59:13 GMT"},"fingerprint":{"sha1":"66:64:79:7C:96:35:3D:F3:41:D3:78:96:22:59:B3:73:1C:E8:63:9B","sha256":"B8:EC:E9:9D:B9:70:E0:94:4F:CE:77:0E:15:FD:7F:9C:7A:2F:DE:C7:AD:8D:67:1C:59:FD:FB:64:6C:B3:A9:9F"}}},"request":{"raw":"GET /static/js/jquery.min1.js HTTP/1.1\r\nHost: zmklg.q.hen360.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zmklg.q.hen360.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 22:41:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 23 Jul 2025 09:08:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6880a697-27133\"\r\nexpires: Mon, 13 Jul 2026 10:41:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":160051,"size_decoded":58605,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33404), with CRLF line terminators","md5":"4abee76e8cd30dc659c3de38295cad1d","sha1":"99559bf88c32e3f312bbbdf9af9971085cfc3ccf","sha256":"86ee7b2a12251c2da549d75277d81b60a6639162b797c6daf87319b553cf82a6","sha512":"810acfb2aee1cad809bfb6f93122690d7df85d7afbe9354eeedc914a73cd39a6264de062f972cb39412db1c77e41ddb55f24833d627528997d0d383dabf238c1","ssdeep":"3072:ZGsKXAI2p0WPCbDrstfaG3kSSjwe9miv93AyWp:DKs6WwDCyKzSjwFsi","tlshash":"10f349deb292706243bb71fa006f110fb23619ae680d8424f169d8e97c74d49a17bf7d","first_seen":"2026-07-09T20:11:28.389189Z","last_seen":"2026-07-12T22:42:25.037702Z","times_seen":3,"resource_available":true,"data":null}},"time_used":567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":567,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"zmklg.q.hen360.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zmklg.q.hen360.com/static/picture/taohao.png","fqdn":"zmklg.q.hen360.com","domain":"hen360.com","tld":"com"},"ip":{"addr":"137.220.136.210","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zmklg.q.hen360.com/","date":"2026-07-12T22:41:51.801Z","timestamp":1783896111801,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zmklg.q.hen360.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 08:59:14 GMT","end":"Sun, 13 Sep 2026 08:59:13 GMT"},"fingerprint":{"sha1":"66:64:79:7C:96:35:3D:F3:41:D3:78:96:22:59:B3:73:1C:E8:63:9B","sha256":"B8:EC:E9:9D:B9:70:E0:94:4F:CE:77:0E:15:FD:7F:9C:7A:2F:DE:C7:AD:8D:67:1C:59:FD:FB:64:6C:B3:A9:9F"}}},"request":{"raw":"GET /static/picture/taohao.png HTTP/1.1\r\nHost: zmklg.q.hen360.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zmklg.q.hen360.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 22:41:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Jun 2026 17:27:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a21b599-11eeb\"\r\nexpires: Tue, 11 Aug 2026 22:41:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73451,"size_decoded":73643,"mime_type":"image/png","magic":"PNG image data, 601 x 197, 8-bit/color RGBA, non-interlaced","md5":"5f05f18dda5b501c980844c8d977c6e0","sha1":"850367e5594a91a4310c15c761d6901ac636b75c","sha256":"a9d68dcdf0c2dad33adf7bd9fae9ec5cdc83c80aa105db9de65b9ae95e551116","sha512":"bf183b7fcb6a766261b90df53da888a3f2c61beb8e2427076701ffe01c5aca969903693bed2297976be30585362c35f4fc5f6dc3105723b9141c91c1cc7f67ad","ssdeep":"1536:Il6NSBjPO7FuezBQHQMXejgD01B8/nwYiJjPazuPgfg0PfjZdeKo:IPBjoZuH68C8grCusg073+","tlshash":"08730241cb86765dd85c4ff37eab0486149d06db209c506ce2f3d2ca2fb4c4d9abda92","first_seen":"2026-04-22T14:55:46.924569Z","last_seen":"2026-07-12T22:42:25.040164Z","times_seen":3,"resource_available":false,"data":null}},"time_used":821,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":821,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"zmklg.q.hen360.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zmklg.q.hen360.com/assets/download/filename.js?v=2026712224152qQC51","fqdn":"zmklg.q.hen360.com","domain":"hen360.com","tld":"com"},"ip":{"addr":"137.220.136.210","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zmklg.q.hen360.com/","date":"2026-07-12T22:41:52.688Z","timestamp":1783896112688,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zmklg.q.hen360.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 08:59:14 GMT","end":"Sun, 13 Sep 2026 08:59:13 GMT"},"fingerprint":{"sha1":"66:64:79:7C:96:35:3D:F3:41:D3:78:96:22:59:B3:73:1C:E8:63:9B","sha256":"B8:EC:E9:9D:B9:70:E0:94:4F:CE:77:0E:15:FD:7F:9C:7A:2F:DE:C7:AD:8D:67:1C:59:FD:FB:64:6C:B3:A9:9F"}}},"request":{"raw":"GET /assets/download/filename.js?v=2026712224152qQC51 HTTP/1.1\r\nHost: zmklg.q.hen360.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zmklg.q.hen360.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 22:41:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\netag: \"6880a5a1-8a\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":292,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-07-18T13:45:18.917178Z","times_seen":312918,"resource_available":true,"data":null}},"time_used":662,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":662,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"zmklg.q.hen360.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zmklg.q.hen360.com/static/picture/favicon.ico","fqdn":"zmklg.q.hen360.com","domain":"hen360.com","tld":"com"},"ip":{"addr":"137.220.136.210","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zmklg.q.hen360.com/","date":"2026-07-12T22:41:53.295Z","timestamp":1783896113295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zmklg.q.hen360.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 08:59:14 GMT","end":"Sun, 13 Sep 2026 08:59:13 GMT"},"fingerprint":{"sha1":"66:64:79:7C:96:35:3D:F3:41:D3:78:96:22:59:B3:73:1C:E8:63:9B","sha256":"B8:EC:E9:9D:B9:70:E0:94:4F:CE:77:0E:15:FD:7F:9C:7A:2F:DE:C7:AD:8D:67:1C:59:FD:FB:64:6C:B3:A9:9F"}}},"request":{"raw":"GET /static/picture/favicon.ico HTTP/1.1\r\nHost: zmklg.q.hen360.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zmklg.q.hen360.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 22:41:53 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\netag: \"6880a5a1-8a\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":292,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-07-18T13:45:18.917178Z","times_seen":312918,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"zmklg.q.hen360.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zmklg.q.hen360.com/static/js/jquery.min.js","fqdn":"zmklg.q.hen360.com","domain":"hen360.com","tld":"com"},"ip":{"addr":"137.220.136.210","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zmklg.q.hen360.com/","date":"2026-07-12T22:41:51.794Z","timestamp":1783896111794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zmklg.q.hen360.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 08:59:14 GMT","end":"Sun, 13 Sep 2026 08:59:13 GMT"},"fingerprint":{"sha1":"66:64:79:7C:96:35:3D:F3:41:D3:78:96:22:59:B3:73:1C:E8:63:9B","sha256":"B8:EC:E9:9D:B9:70:E0:94:4F:CE:77:0E:15:FD:7F:9C:7A:2F:DE:C7:AD:8D:67:1C:59:FD:FB:64:6C:B3:A9:9F"}}},"request":{"raw":"GET /static/js/jquery.min.js HTTP/1.1\r\nHost: zmklg.q.hen360.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zmklg.q.hen360.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 22:41:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 23 Jul 2025 09:08:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6880a697-16bb2\"\r\nexpires: Mon, 13 Jul 2026 10:41:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93106,"size_decoded":33611,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32072), with CRLF line terminators","md5":"e39d7f174407886a84c437f14182e57a","sha1":"77e9eed704c96c3eb0180d35c6ba430b3f69a43a","sha256":"c1bcc5f2066e4476e6dbab0b5a9b9700b86f4d6ebeb2900d73ee97e53753d4f9","sha512":"3e153156a11b21a66500b592b574bc2e2ebddd41014216177c0c2d5e6b31f2d0a742f68899527dbae47309df2922f81544450f73e3e2981c88cd9ecae0c570e7","ssdeep":"1536:Z4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RAfDknv+p0WzH/Io9Z7qABZnu0sFy:ZGsKXAI2p0WP9bDrstfa5","tlshash":"9393f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-07T01:15:08Z","last_seen":"2026-07-18T11:20:05.458643Z","times_seen":2407,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"zmklg.q.hen360.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zmklg.q.hen360.com/static/css/index.css?v=1","fqdn":"zmklg.q.hen360.com","domain":"hen360.com","tld":"com"},"ip":{"addr":"137.220.136.210","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zmklg.q.hen360.com/","date":"2026-07-12T22:41:51.796Z","timestamp":1783896111796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zmklg.q.hen360.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 08:59:14 GMT","end":"Sun, 13 Sep 2026 08:59:13 GMT"},"fingerprint":{"sha1":"66:64:79:7C:96:35:3D:F3:41:D3:78:96:22:59:B3:73:1C:E8:63:9B","sha256":"B8:EC:E9:9D:B9:70:E0:94:4F:CE:77:0E:15:FD:7F:9C:7A:2F:DE:C7:AD:8D:67:1C:59:FD:FB:64:6C:B3:A9:9F"}}},"request":{"raw":"GET /static/css/index.css?v=1 HTTP/1.1\r\nHost: zmklg.q.hen360.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zmklg.q.hen360.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 22:41:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Jul 2025 09:11:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6880a738-7d7\"\r\nexpires: Mon, 13 Jul 2026 10:41:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2007,"size_decoded":1319,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"c72d4673780928f9f95a887298396b14","sha1":"2a20190737360a68af516594fb91b6482167c969","sha256":"99e7baf58dc5d0e632b768a3bfaf100f80748646a347274d6e71775498a6efb7","sha512":"713d9d87f95e248f689792ece7cb97a22e98e654f1cd5176fd26653807e4d4612dc11d2a171b0e10a685bc565560ce8ec3e7778c3a0f1575280ade7af524342c","ssdeep":"","tlshash":"034101900e371800f96b959c3be65ae4636c8c83d90fcd397bc17688cf9619860b1b4d","first_seen":"2026-07-09T20:11:28.395419Z","last_seen":"2026-07-12T22:42:25.051737Z","times_seen":3,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"zmklg.q.hen360.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zmklg.q.hen360.com/static/picture/18885211718935735.jpg","fqdn":"zmklg.q.hen360.com","domain":"hen360.com","tld":"com"},"ip":{"addr":"137.220.136.210","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zmklg.q.hen360.com/","date":"2026-07-12T22:41:51.802Z","timestamp":1783896111802,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zmklg.q.hen360.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 08:59:14 GMT","end":"Sun, 13 Sep 2026 08:59:13 GMT"},"fingerprint":{"sha1":"66:64:79:7C:96:35:3D:F3:41:D3:78:96:22:59:B3:73:1C:E8:63:9B","sha256":"B8:EC:E9:9D:B9:70:E0:94:4F:CE:77:0E:15:FD:7F:9C:7A:2F:DE:C7:AD:8D:67:1C:59:FD:FB:64:6C:B3:A9:9F"}}},"request":{"raw":"GET /static/picture/18885211718935735.jpg HTTP/1.1\r\nHost: zmklg.q.hen360.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zmklg.q.hen360.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 22:41:51 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 23 Jul 2025 09:08:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6880a697-c771\"\r\nexpires: Tue, 11 Aug 2026 22:41:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51057,"size_decoded":50960,"mime_type":"image/jpeg","magic":"PNG image data, 324 x 324, 8-bit/color RGBA, non-interlaced","md5":"a7173e8b3761997b47c8eaf7f247acb5","sha1":"ae4ae5422a5510ecb4a31adbcc45c927b17de65c","sha256":"de20ab48eb6ab7870fcff73b7ff967df154eb58f36a30c375383fa67ba2f9778","sha512":"75268e999a4030886f305b337a83a8ad7fcb8c76f6099112f459b8fd8a92d2921545bb8e97f7c2d116e93a4adebfb9dcd99d723ca6e0920476139dc1773fb4d8","ssdeep":"1536:xeii1pNRZdHiX4ZDGO6Uy7SHGWTqbncrZu:Qzp73R6O6T7dWmbncrZu","tlshash":"7433f1add372651a0366ce7c28fe290f69a2d4f15e121cde680bcf07723a1965e6d4c2","first_seen":"2026-07-09T20:11:28.391493Z","last_seen":"2026-07-12T22:42:25.053344Z","times_seen":3,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":820,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"zmklg.q.hen360.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zmklg.q.hen360.com/static/picture/ic_windows.svg","fqdn":"zmklg.q.hen360.com","domain":"hen360.com","tld":"com"},"ip":{"addr":"137.220.136.210","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zmklg.q.hen360.com/","date":"2026-07-12T22:41:51.806Z","timestamp":1783896111806,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zmklg.q.hen360.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 08:59:14 GMT","end":"Sun, 13 Sep 2026 08:59:13 GMT"},"fingerprint":{"sha1":"66:64:79:7C:96:35:3D:F3:41:D3:78:96:22:59:B3:73:1C:E8:63:9B","sha256":"B8:EC:E9:9D:B9:70:E0:94:4F:CE:77:0E:15:FD:7F:9C:7A:2F:DE:C7:AD:8D:67:1C:59:FD:FB:64:6C:B3:A9:9F"}}},"request":{"raw":"GET /static/picture/ic_windows.svg HTTP/1.1\r\nHost: zmklg.q.hen360.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zmklg.q.hen360.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 22:41:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 826\r\nlast-modified: Wed, 23 Jul 2025 09:08:40 GMT\r\netag: \"6880a698-33a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":826,"size_decoded":1266,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"72e59aa71bc10c2b6f556834bff477f6","sha1":"0347f8d57e6e75e7e54798ec841da1e8117db6b0","sha256":"4a02425b412e8ec5284b815dc1ca00195a041c04271a85b2aa95c8297c84798d","sha512":"5e468e4297af3224fae500b597a54f1b3778696cfb50cf1f9ecb92f3181b3b8c1c9a413f769ad413ce96d6c8991a8a0537cd1de6ba301dca60935fb3f144adef","ssdeep":"","tlshash":"d4016845920d9cae652472e1f6b3c546ee144401cfb170c8f45f507770292d03ceaf8b","first_seen":"2025-07-20T12:07:16.716601Z","last_seen":"2026-07-12T22:42:25.05617Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1074,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":816,"receive":258,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"zmklg.q.hen360.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zmklg.q.hen360.com/static/picture/desktop_music.png","fqdn":"zmklg.q.hen360.com","domain":"hen360.com","tld":"com"},"ip":{"addr":"137.220.136.210","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zmklg.q.hen360.com/","date":"2026-07-12T22:41:51.808Z","timestamp":1783896111808,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zmklg.q.hen360.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 08:59:14 GMT","end":"Sun, 13 Sep 2026 08:59:13 GMT"},"fingerprint":{"sha1":"66:64:79:7C:96:35:3D:F3:41:D3:78:96:22:59:B3:73:1C:E8:63:9B","sha256":"B8:EC:E9:9D:B9:70:E0:94:4F:CE:77:0E:15:FD:7F:9C:7A:2F:DE:C7:AD:8D:67:1C:59:FD:FB:64:6C:B3:A9:9F"}}},"request":{"raw":"GET /static/picture/desktop_music.png HTTP/1.1\r\nHost: zmklg.q.hen360.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zmklg.q.hen360.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 22:41:51 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 23 Jul 2025 09:08:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6880a698-cffdf\"\r\nexpires: Tue, 11 Aug 2026 22:41:51 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":851935,"size_decoded":836393,"mime_type":"image/png","magic":"PNG image data, 2228 x 1312, 8-bit/color RGBA, non-interlaced","md5":"def546ce410e0727fb5566c27e42ee86","sha1":"211104479296ff91b3fe60269e9bf890256f2bee","sha256":"448e45b6891451b2c83d390d22aa04ffbed99ad0c7b938bfbc93a2b828e8f7b7","sha512":"15bb8603e5af047b1b9cbf9566230a9a666b29f634c4738da70659856816413f60d0a7fdd86b1215a0c6653d7075e52d6148d4d83d98e90fb6bae0028e69188c","ssdeep":"24576:Hgv4bqYdlOIkbP2BDVYY09tnaIZ0EYpXe9t+ZG:HgghdkMDVYb6rSt+Y","tlshash":"9105234c8079c929dc3791b54b849f07ff3b2146b1c5c548f782faee99d1fb84a2249a","first_seen":"2026-07-09T20:11:28.396267Z","last_seen":"2026-07-12T22:42:25.058717Z","times_seen":3,"resource_available":false,"data":null}},"time_used":815,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":815,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"zmklg.q.hen360.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zmklg.q.hen360.com/","fqdn":"zmklg.q.hen360.com","domain":"hen360.com","tld":"com"},"ip":{"addr":"137.220.136.210","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T22:41:49.774Z","timestamp":1783896109774,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zmklg.q.hen360.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 08:59:14 GMT","end":"Sun, 13 Sep 2026 08:59:13 GMT"},"fingerprint":{"sha1":"66:64:79:7C:96:35:3D:F3:41:D3:78:96:22:59:B3:73:1C:E8:63:9B","sha256":"B8:EC:E9:9D:B9:70:E0:94:4F:CE:77:0E:15:FD:7F:9C:7A:2F:DE:C7:AD:8D:67:1C:59:FD:FB:64:6C:B3:A9:9F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zmklg.q.hen360.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 22:41:51 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 11 Jul 2026 07:35:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a51f25a-12f3\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4851,"size_decoded":2401,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"6b20533a4a27e72ea1cac424e6a814f4","sha1":"ceb820730f1da1c554c9770b7bd9cffcdb7a2bc9","sha256":"577e2c44649ec653e14eeeede93f0c2e5c22c3dc23cdecef1fbaa9f6f82cead8","sha512":"58820f002c0b0545812ee3e0a6b7ef0f77ceeb2b450dcd62c1ed4d91f853025d9bff3e7e34478721b27c22d61d2bdcb7a879236b6eb217fb1849621539041e20","ssdeep":"96:1o5/HYRJodQL0b8A+vHIYpUZc2bxsrQOZnCS:1oWRJoOm8ASi+QOZnCS","tlshash":"13a177232822502e345771e2ae5e362c64df5823da93c50876fdabd44fcdda8c5d326c","first_seen":"2026-07-12T22:42:25.060443Z","last_seen":"2026-07-12T22:42:25.060443Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1792,"timings":{"blocked":-1,"dns":755,"connect":258,"send":0,"wait":257,"receive":0,"ssl":522},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"zmklg.q.hen360.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}