{"report_id":"61277a38-bb89-4fa8-b849-ae14a6846d40","version":6,"status":"done","tags":[],"date":"2025-09-20T05:33:45Z","url":{"schema":"http","addr":"hanjugo.com/","fqdn":"hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"www.hanjugo.com/","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"title":"好看的韩剧tv_最新韩剧网_韩剧热播网 - 韩剧狗"},"submit":{"url":{"schema":"http","addr":"hanjugo.com/","fqdn":"hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T05:33:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-20T05:33:22Z","timestamp":1758346402,"ip_dst":{"addr":"172.18.0.25","port":42592,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 52","source":"{\"timestamp\":\"2025-09-20T05:33:22.247606+0000\",\"flow_id\":1125739862790190,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"202.95.11.151\",\"src_port\":443,\"dest_ip\":\"172.18.0.25\",\"dest_port\":42592,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400051,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 52\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2025-09-20T05:33:21.954414+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-20T05:33:27Z","timestamp":1758346407,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":59523,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-09-20T05:33:27.693711+0000\",\"flow_id\":202141505918415,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":59523,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-09-20T05:33:27.693711+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.hanjugo.com","ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":25,"received_data":655675,"sent_data":12799,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"pic.okzyw.xyz","ip":{"addr":"172.67.132.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":29598,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.zzfxfz.com","ip":{"addr":"173.239.250.3","port":443,"asn":197555,"as":"Smartmieten Tech Private Limited","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":3637917,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":24339,"sent_data":1537,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"hanjugo.com","ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":65820,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"zz.bdstatic.com","ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"domain_registered":"unknown","domain_rank":365334,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":768,"sent_data":422,"comment":"","tags":null,"fingerprints":null},{"fqdn":"wangwangzyimg.com","ip":{"addr":"173.249.235.82","port":443,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":6,"received_data":1322093,"sent_data":2910,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mzzyjpg.com","ip":{"addr":"67.21.69.242","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":3106547,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":31552,"sent_data":960,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sp0.baidu.com","ip":{"addr":"103.235.46.115","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":220073,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":116,"sent_data":482,"comment":"","tags":null,"fingerprints":null},{"fqdn":"polyfill-js.cn","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":240780,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":0,"sent_data":438,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-20T05:33:22Z","timestamp":1758346402,"ip_dst":{"addr":"172.18.0.25","port":42592,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 52","source":"{\"timestamp\":\"2025-09-20T05:33:22.247606+0000\",\"flow_id\":1125739862790190,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"202.95.11.151\",\"src_port\":443,\"dest_ip\":\"172.18.0.25\",\"dest_port\":42592,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400051,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 52\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2025-09-20T05:33:21.954414+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-20T05:33:27Z","timestamp":1758346407,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.25","port":59523,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-09-20T05:33:27.693711+0000\",\"flow_id\":202141505918415,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":59523,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-09-20T05:33:27.693711+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"api.zzfxfz.com/tj/tongji.js?v=2.201","fqdn":"api.zzfxfz.com","domain":"zzfxfz.com","tld":"com"},"ip":{"addr":"173.239.250.3","port":443,"asn":197555,"as":"Smartmieten Tech Private Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f15ec10cac64cf151e33daaec66d915","sha1":"47bda9dfbd46b661477ca508d5f52eb20de6f9af","sha256":"6f225008ac0d242c8b3087822890e03c8b0c16824c0ea87c2dff32ef332860f3","sha512":"14240de2aa75204ed81c2ea157506884fb7f12237b4b4fbdc2006abc1dc378783a95aeaa1693eccfb892aa8ae16a4ea7215b7e7ef1b3489c1897d12d63276996","ssdeep":"384:d24+W6N/MIQTMjPCWFbb2PSaWCNYKhQuZRZZ5HuIsq4vc/HMBvtj7pChNNfCm:0HPkvcCWFbb2KaW+hXrZZlurn7pCBKm","tlshash":"00a2099470e4a4a0039a34682e7f6187f06a7862618f4554f26ec1d9fcfcafdc16ae34","size":23128,"data":"","first_seen":"2025-08-22T04:37:12.285676Z","last_seen":"2025-12-22T08:40:47.14464Z","times_seen":490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/statics/js/layer/layer.js?v3.1.1","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0c975e34297f3e44e99c9d83555ffc1","sha1":"7e465bd79e65428cf07e5991196cff512ce44a4b","sha256":"691aad750624d84b17f2fbb73a4982860edd18837f3000c5b660ac82bf408e82","sha512":"1d9dcd7e1afe695e5716ea55f9a5a3e3aa45852722b4e1a2653ebd3f3a85c8b7a34b15264751f5ee26ea56ee49c8683a00d771197d8b32d9ea53d842d6db3b79","ssdeep":"384:41xCih92A3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:41EiV3i+WtXItqF13k8","tlshash":"56a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","size":22104,"data":"","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-05-20T20:05:37.944773Z","times_seen":5491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1724fd22b1d716a170f65d825698034","sha1":"72b22564fd959a9c2d4c8b7f3704acc8349ca72c","sha256":"3f0917ec7943fb8b1b52ac8522059129e8afb8580bffb3ed69aa0013cec4fb09","sha512":"db0011522301f19e2870f09eab2c98c9665df2328c5c1fa86a52fe747c8705ac23d3b79deb0a4fe67a77ae933fda3fb74bceca8d12883ab0990295a3ae6ba4cf","ssdeep":"","tlshash":"bce020611c140f23b655017df019f626335d91645402e262ff98fd77dcd0ba9785adf4","size":345,"data":"","first_seen":"2025-09-20T05:34:25.052759Z","last_seen":"2025-09-20T05:34:25.052759Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/statics/js/mytheme-site.js?v=2.8","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5972a478bec0b909aecf7c3c86b1d8d6","sha1":"701e983304ef64cb6026bcdd3d353b20d9488283","sha256":"e1996dbe087689523dd4e8eceb547ab151db5ff6eb1103e29a14d1c40ed0e1fb","sha512":"cb43261874c80d4b8c2615aab2ae40fe53072bbf6fe56e9cea5becd51927b7d4d389dcd72a10b530057b159c01518205abe782591b55fcc4c69e56c53983cf17","ssdeep":"3072:WzO+j027SoFThP2V/93iYbtIVKZTegpRE3YKd:gXjRS5pIVATegpRE3t","tlshash":"32c3e949b3513532429fb1a6512f420fb276646e680580bcb9b8dce66dbcc8d707bf78","size":129231,"data":"","first_seen":"2023-03-07T12:29:25Z","last_seen":"2026-05-20T19:23:46.075694Z","times_seen":824,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"040b02633cd45b9c20c8e541a3197832","sha1":"3dc373a2b0b6b040d18f9dda1924e9b03ad174e1","sha256":"6febf50b0b9392912731c35e2e8695be76cf8178ed388ed5f218aa3e29cb1e75","sha512":"c888961734eb4e3918284a1d2816991377d878dd1fe97a5d684443ee065e03b1fc3c61ff7d1a96a79c525fc9f9e7736492102405d0e5afc420f889393f62b4af","ssdeep":"","tlshash":"e1b0121c0d0d91034b4171c0069d0a4201fd3a60057fbd9d6506dc3cc98b1a4070cace","size":101,"data":"","first_seen":"2025-09-20T05:34:25.054482Z","last_seen":"2025-09-20T05:34:25.054482Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e27f31e695cc3f66be71d9d7e00263a","sha1":"66adf64ade394eb970f4d158ee31ee8fb0a427f0","sha256":"9891d9ad877637f5250c3e0731411a55920a89b9e42738d01e74a84a28d7814a","sha512":"431b5079cc6af515de0512120c09f4c37785a8bd4b8bcd6b6775636ab5acd455c1e309a693625aecf24f18c55cd0a3f4b5b076d03c32d7e7ad198b9fb52af124","ssdeep":"","tlshash":"b6e0ab3f0102133318af02f88c2e1f84e6b02e32a5478b69b2e655340399e2e8a8d4dd","size":410,"data":"","first_seen":"2023-05-15T05:14:13Z","last_seen":"2026-04-18T07:11:13.291337Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz.bdstatic.com/linksubmit/push.js","fqdn":"zz.bdstatic.com","domain":"bdstatic.com","tld":"com"},"ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9fc52ab67f035b8baf5d558714cc94d","sha1":"37062a6fb1ef410d496137d44275738ae743c747","sha256":"c31f2003f1c93ac1e34b09f376d97a65da6e110bf451cf1e0e50a7946c5e7212","sha512":"ebb0415852fbb5b964094e2e55a28b90f701dff1977c8b98c6f24d65d09067dc0c417d01492ca28a4be6747816d7c0bfac87b73a33725aee047a5d2f7ab83182","ssdeep":"","tlshash":"11e0cde86054c01c0dcb107135bb324ce7771d675a645545c04d9445396cb1f8247fe9","size":308,"data":"","first_seen":"2023-03-07T01:18:58Z","last_seen":"2026-05-20T20:05:37.921278Z","times_seen":21970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/statics/js/jquery.min.js?v=3.3.1","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-05-21T16:41:25.511693Z","times_seen":130063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/static/js/home.js","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"68d3db298573f074a6edf21ab1130640","sha1":"141ab20c3340a5600fda086b625307363096b8ad","sha256":"3ded8d6ededb603e0d5a9df04def2cd34dc988ce0c90156d541c74173ee1e2aa","sha512":"1dadc0da1461043254194bdef1a3e8427378629dee0067233310d4079a72e1ef75d630b8906db87b129d1b9be8ecd67423b2ce37ef5f50a5e2482119f7ca5c43","ssdeep":"768:hR0cTTu8eMbZLbhpa6a/b7z9SsbhbeA5gr9GiSo5E7Iw4TQv7b:hRZXde96oRiG7b","tlshash":"2f03945d7af3142050b3317a4fbf59082276815f590ddd88fe2e11a48fc4a4dba66bbc","size":38808,"data":"","first_seen":"2025-09-20T05:34:25.03266Z","last_seen":"2025-09-20T05:34:25.03266Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/statics/js/jquery.autocomplete.js","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"202f979ba2963bd0c57b61fa4bb065c6","sha1":"c727ed1410d082dc8724dc2953fa2b24885aaf2a","sha256":"dab85f34a2dd8768004b9ab7ec62c7c221847de0818d5cbdddad4029c56061ce","sha512":"621fb2955da179a6fb0405e9135e7f39b93e5223da5c0cf2646f5ed544fc0117f8be928a84f61ddfca61bb8e43d5ed6ea62fc7e93f25a74a92870a684b74c1ea","ssdeep":"384:+O8MCaAlHqBlgr2q7rLXej2Jy7fwaoSXo0TviE:+K7qr7OtZTqE","tlshash":"a3b2fc0979e3226252a7707e8faf0008b676a157240cdd50bd1ca7d02f54a38b6f7fe9","size":25223,"data":"","first_seen":"2023-04-07T05:43:31Z","last_seen":"2026-05-20T16:38:30.41421Z","times_seen":607,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"34cad3ae38b03ffbbb791cb068af2481","sha1":"04f0b840981358198d68c5240f47cc8ae2b73073","sha256":"84ca98e2b16b91f0563cf3d61aa6778f5d0bf776595540ad1af80a8d5883c9cd","sha512":"8cd0c0310dc93a168618b5c3a14f036469b22cd7d0589ef847e422ffdefc81ac6088e9ebc2a0211046aee1f5e7bf0ba89bc4295163f17c375eaa201ab710fa8a","ssdeep":"","tlshash":"ec70000883a022a802008008e008082828083202a0038a088f0280000002288a2b0a28","size":25,"data":"","first_seen":"2023-03-07T13:44:15Z","last_seen":"2026-04-01T13:05:38.704568Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"72cad6886ea3bbc65424778f1f1b3a97","sha1":"fb70ba846ab26ca7cc03741dba6e05751ac026a1","sha256":"82b85c6925af4522cd379111243fb346c801b8c992f08651075ea3849ed566c9","sha512":"02e977cbe9fae9ebc6634924f8f7a32979e15a39cc5d380737ababcc45dfa4cb77ba56a14f9607b8884c730dfc644ee321fc8ba53b3fbbfb4f9c50526f2443f2","ssdeep":"","tlshash":"efe026aa29721674578019fa992ff92cf1ea617c0554e003f549fc120028eeb4e2aae5","size":343,"data":"","first_seen":"2023-03-08T15:50:43Z","last_seen":"2026-05-06T05:37:52.034707Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"a3d0912098df0d977ad7cf97e6b2ca5d","sha1":"5f9156af17a8c5cc672d35602b899f94fd990584","sha256":"c81a2769c16f0800980eff0491a902fe173fe591592ced19ef7004a22911ccf8","sha512":"00b7db45a854a3bd7a7787e24ea2fcb748d52224cf2dac4fdffb5fa16c8e367f3a0baf15ac65391692da68afed272348396b407300b4e77ebc41992ff3aeb528","ssdeep":"","tlshash":"7090021447616fd70654482de305510024d42701515021668b06472100439b5933531c","size":50,"data":"","first_seen":"2023-05-09T21:19:41Z","last_seen":"2026-04-01T13:05:38.709004Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/statics/js/mytheme-ui.js?v=2.8","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"013a0182adb4fce0f3c060117002d987","sha1":"79da829e2089283caf8d75ecdbde0058fcb623c2","sha256":"42fdcedbe3921346184cb77c96cb273af82999fd757cd0985b10be9b78e22701","sha512":"09515e8b1cc54bcafd4916a1bbba5d35a035bfc6ddbf6c4be5e96c4530140e96e2ea8863c6271bed8d660649afcc3fee3ef259f2f4c4e577e1b43bef5e7c7999","ssdeep":"384:WcLMQ7C/meCN719Mr8YLg4tD9fDRPvo9oKMdMTWoqJ/Ea2AWIm4Rg+YwrOBTECU2:WSJt9mtLXtD9fDRDWfNdymGTOcCcdy","tlshash":"45a285c8b34c616f90f33369d43e9944dc7ee833850185b9f8bda0a43bf59184366ea9","size":21720,"data":"","first_seen":"2023-05-15T05:14:13Z","last_seen":"2026-03-21T15:18:44.655922Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/statics/js/mytheme-cms.js?v=2.8","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"d252e88d0714d34e6c2bc046a571c7ee","sha1":"c3fc07c0f5cd6dbb4937f46cf323c5c8fa30ba5d","sha256":"74ca965386669eb824dcdb9b1fe2f35b776f099e63034533734818b33f11bd59","sha512":"6da2eff9a26634f8f042c74f5ff01aa7dcc2b27aa42e47da278362d2f1cee826f5a8c33a857059fac0b25fe93ca206783b8196e711423c10c8f91ed8f6e4a535","ssdeep":"192:WcZvLBPNTWgaDUvLyZIGn/5Q4hnONT9G5gJbhze5gr9IO0K:WcZvLBFTWgaDUvLyZBfENT9DJbhze5g9","tlshash":"b802f148b79d155810a733b4c8ba9108da3ed57782018b1dfc6d60a0bff5a9c6721fed","size":8642,"data":"","first_seen":"2023-03-07T13:44:15Z","last_seen":"2026-04-01T13:05:38.660372Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"b70b0bb6edfffa983420704eb038e861","sha1":"b904359a6983faf60fc7cad17c30baebbd147753","sha256":"2e2656e2d15551a4d34b8f04eaf665e6d2f4219e91514bf70529c96db2896e39","sha512":"5fc5c8cf9898cbeb4dbb48f59f9d3c414e6eefd6d997d9cf70d97ba24bcde4f437c86cb9554963a60bf511963ed46fd2f2188e9360a1400c73717fb0bf0d7a78","ssdeep":"","tlshash":"2bd02b5f2d0b58f03b4500a31378f508f0a2144a9424e001b0ed8c144f50fc044ad795","size":275,"data":"","first_seen":"2024-08-14T21:24:11Z","last_seen":"2026-05-20T18:45:47.792411Z","times_seen":1170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"ceb6367896774a4dfcd0d4a9749056ad","sha1":"9fdafcdf846d8c9c53d37d3c0ee109b98e5712d5","sha256":"87cd0055b97d9c98e2fc8b78e4adaf277608f399ac89c188a0d5f1025c5572b0","sha512":"c091021f5f4eea342d42ed5beebe11da51a3764edb0453fa3082eb45cd31d46af1d7fc569507a35c872a30f8d8a3af8e6fbbb52ebc26babc833bad70c77dcbb3","ssdeep":"","tlshash":"a59002625d115101a9400154901667a9920f50984980d590add0a0b51cc00606541950","size":48,"data":"","first_seen":"2025-08-02T12:50:07.319705Z","last_seen":"2025-09-20T05:34:25.060643Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"51d373533f74d3ceca9bcfae801984c6","sha1":"45cb91653b779514b990ca77fca54f58d9a76653","sha256":"c2afdb2aeb4e3abcf7f3d3a3a5368d3df904ee9da167e9e181983a09d7856b43","sha512":"7e63cfe941340315e9ed6ddbe2ddc4863e385395ac431358bf27ad243240234c0cfd1ba66527dcea10127e928fec98d3ba174da9bcff3ea2ce5e5518ff4d2d58","ssdeep":"","tlshash":"cba01201c4200d07ac38235c0445e8011782d3515510b0954694b4034cd160a519b4f1","size":86,"data":"","first_seen":"2025-09-20T05:34:25.061424Z","last_seen":"2025-09-20T05:34:25.061424Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"cda9a9fd3d3190149fb6a634d0bb4511","sha1":"8dd1fc67c1ee520fd61949e3ead25ce6f96d7ecd","sha256":"4d4947c86cb6a010ebaff5759b01f39d58a14f4ec08cedb801a844fde138bb2f","sha512":"63d76bf1f3afa3878514f7d1bafcb36e6edaf8cf9b29421a27caeda8c2696fc4ab37da56c2dbf22d4768abd00b400161c6f12e5dfc1234f72b9fff06ee27fdb6","ssdeep":"","tlshash":"609002541c5046356145009fb0349a5a77545164502295178588ec2aa030fd168198b0","size":51,"data":"","first_seen":"2025-08-02T12:50:07.322608Z","last_seen":"2025-09-20T05:34:25.063025Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"277f362581c9d168554a10ec18058e9d","sha1":"51312d4c03e8bd4c7f83623ff153747f2b5f3810","sha256":"25bce09b310f8bc7d9745cc97c222a7f0455a18b846445f5cc9ffb89f9f00b6f","sha512":"fb70c445af98c970929a85b16ea7bd33ecc9feaec64dc071ab6fca95b18334cc56564b4a57a4d9b4b32573c61dadea2d249ec32d37f331effc03181b847f608d","ssdeep":"","tlshash":"a690029111052306b015801ae5046616506c4564804712a1ff187ab597402b16ca5974","size":53,"data":"","first_seen":"2025-08-02T12:50:07.347566Z","last_seen":"2025-09-20T05:34:25.066309Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"12e3bfe7ee8891b3c34b79320b03cb1f","sha1":"8c6d61ef3e8b783df4602c7c2f2a21d067260ab3","sha256":"d476dfbfa4e229788ec52225974a5ef7e2061e35ace96d4926184a83103a0454","sha512":"7eeebba96ef408225da9d9840154fd8dc04958bb74fd41ae8910a7e5e454e0f28262aab970214876a4b79d90cd4347acfa9a753e7dc144bfbb05d086de9dd5d8","ssdeep":"","tlshash":"0ba002562c804530b59a447460a4e166372410552509d417da48e5368860ec72c25ed8","size":58,"data":"","first_seen":"2025-08-02T12:50:07.350225Z","last_seen":"2025-09-20T05:34:25.067099Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f02e02cf74c5027c896d91db9589b485","sha1":"431d6b1d6d457c6e446fdac45635b8099f863bea","sha256":"ec9098cf33ff0b57199e6e089fb8011c9a23e77ad1cb074edc43b861d937a07d","sha512":"1539b5177aeb4f439dd5731f5ebb4c367a30daa1b49cee7fb7c4ef6548d0a04543067e6e4ccf30da58283869e02bafd8c50850e9a8927626e22ed07a5f644c40","ssdeep":"","tlshash":"72a002551c0ecf5227966739f225552c740aa4245405c565e3571f75c1447bc744dd1a","size":61,"data":"","first_seen":"2025-08-02T12:50:07.327804Z","last_seen":"2025-09-20T05:34:25.067884Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"888f05ff5de48742b81488c7779e16b4","sha1":"a87b8f214cdfc0caff1b4419c1a1975a557377b8","sha256":"01266086a064c11e4e432d372f3fd81bd09e477bd2a4be35aeed1e7dcec03daa","sha512":"3bf7623ebed0dc999ba7201d7d40de8875ed9477df6e63b9560331f97853d4d048edb51a4930639ad5b85f76bb7603b33c6b3e1a1123c1631bc8f9ff695eb381","ssdeep":"","tlshash":"71a02208ca000300200800a3c0000328cc8003380203c8b2a03f30320ece0e003c203c","size":66,"data":"","first_seen":"2023-03-07T12:08:55Z","last_seen":"2026-05-20T16:38:30.429765Z","times_seen":572,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"www.hanjugo.com/template/mytheme/statics/css/mytheme-color1.css?v=2.8","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:23.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET /template/mytheme/statics/css/mytheme-color1.css?v=2.8 HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nCookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Mar 2020 15:57:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e739678-15b3\"\r\nexpires: Sat, 20 Sep 2025 17:33:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5555,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"810abb75426c770b9a9bd9c3217c0e22","sha1":"5dc67160305600cc1d6107f1abe978db77e16c0b","sha256":"43bff9d0f3f151303c9255bc38f0b4e107785ceb09adef04c2b61430bdf64a62","sha512":"abcbe29e8ba23da524bb8a921ca8a2796dbc292b5cd9c1dbd3be538d53729496b93b4e4119ba4f5302f8d800b94f0a5baf1b38fe1a1a3b70d23e3b9edb7892ef","ssdeep":"96:Ocjn0bE3rRf1WYaPvBiBcF1kx1LIpeC1TjOuCu4h1:OcDR3rHWZPvABcbkx1LIeC1TCuCu43","tlshash":"7eb1d025d243211b306bdf9d50a2da818bbf68d0c9012b7d787a30d4578d0dbbd7e6e6","first_seen":"2023-05-25T20:05:57Z","last_seen":"2026-04-01T13:05:38.67706Z","times_seen":21,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/template/mytheme/statics/css/mytheme-color.css?v=2.8","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:23.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET /template/mytheme/statics/css/mytheme-color.css?v=2.8 HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nCookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Mar 2020 15:16:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e738ce4-15bc\"\r\nexpires: Sat, 20 Sep 2025 17:33:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5564,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"5210adfb45b2985716298d2e6847374f","sha1":"8dc981dc0f376a22a2b3cb1a06f3feaf37d2319e","sha256":"b84a040fd55faaaf47283f1829aa8a90442bf0c1a30b9ff06f8cbee5636942eb","sha512":"f439529df8b4ee7160c5df9a8e0c6d3125aa18da05a95a2f38f2624bc4797b49c273cd6615524c7e08e4c2008890405da377848602cd73444ac0de0e44e7dfbf","ssdeep":"96:OcjD3bE3rRf140+PvBiO4Fxkx1LpWGeC1TjOuCu4hb:Oc/I3rH43PvAO4/kx1LpPeC1TCuCu4t","tlshash":"d4b1e021d247211b306bdf9d50a7da818baf68d0c9012b7d787a30e0578d0dbbd7e6d6","first_seen":"2023-05-25T20:05:57Z","last_seen":"2026-04-26T20:38:44.058897Z","times_seen":30,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/template/mytheme/statics/css/mytheme-color2.css?v=2.8","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:23.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET /template/mytheme/statics/css/mytheme-color2.css?v=2.8 HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nCookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Mar 2020 15:57:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e73967e-15a7\"\r\nexpires: Sat, 20 Sep 2025 17:33:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5543,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"82b7935d4453fc71df1e8304c4b1c304","sha1":"f3302f98f0eaae3277e9d461d5e2d38f5c22eb21","sha256":"e287d2012e677798fae823bd1d481cd935ffb35314d21bbe560b77925fa16433","sha512":"454b9e41defa1b87518d4d26420cb634ca1ea827fc3879342791bab537d6b65a4b7def474bc35eced39dd1471d298bfaba5865cf09f475897eac55a692626e00","ssdeep":"96:OcpI0bE3rRf1WYaPvBiIwF1kx1LIpeC1TjOuCu4h1:OcpIR3rHWZPvAIwbkx1LIeC1TCuCu43","tlshash":"aab1df21d243211b306bdb9d50a2da818baf68d0d9012b7d787a30e4578d0dbbd7e6e6","first_seen":"2023-05-25T20:05:57Z","last_seen":"2026-04-01T13:05:38.614529Z","times_seen":21,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/statics/js/mytheme-site.js?v=2.8","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:23.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET /statics/js/mytheme-site.js?v=2.8 HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nCookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 24 Feb 2019 11:20:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5c727dfa-1f8cf\"\r\nexpires: Sat, 20 Sep 2025 17:33:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":129231,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8746)","md5":"5972a478bec0b909aecf7c3c86b1d8d6","sha1":"701e983304ef64cb6026bcdd3d353b20d9488283","sha256":"e1996dbe087689523dd4e8eceb547ab151db5ff6eb1103e29a14d1c40ed0e1fb","sha512":"cb43261874c80d4b8c2615aab2ae40fe53072bbf6fe56e9cea5becd51927b7d4d389dcd72a10b530057b159c01518205abe782591b55fcc4c69e56c53983cf17","ssdeep":"3072:WzO+j027SoFThP2V/93iYbtIVKZTegpRE3YKd:gXjRS5pIVATegpRE3t","tlshash":"32c3e949b3513532429fb1a6512f420fb276646e680580bcb9b8dce66dbcc8d707bf78","first_seen":"2023-03-07T12:29:25Z","last_seen":"2026-05-20T19:23:46.075694Z","times_seen":824,"resource_available":true,"data":null}},"time_used":1656,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1656,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/img.php?url=https://i1.wp.com/img9.doubanio.com/view/photo/s_ratio_poster/public/p2920221426.jpg","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:27.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET /img.php?url=https://i1.wp.com/img9.doubanio.com/view/photo/s_ratio_poster/public/p2920221426.jpg HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nCookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:27 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\netag: W/\"668caa6a-e3b0\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21500,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (20403)","md5":"4f6afe5a232b3da03ebccd196718acc2","sha1":"9ea1d8c5aeb7d007e750a1b54cbfa6ee44bc150a","sha256":"5ba867e0f50db078389077d8d8517294f2da1eea500d50f522fb6e6f2d944ecf","sha512":"2a01d9271268a2d7efdda5ceadccee57dbe382caf57357480268786a97cc5798dce56f759722d5b3dfe721e440239c953eb60daa75df7677abcd8f5c570e46cf","ssdeep":"384:Qye7HzNL56DwmbkPPVZf4OR9uvs9WmT6VVwYdKiEESJBM6gBeBOZc0vnxE/+:cHJYDDQHVZHIs91TXESJBjgBSp00+","tlshash":"91a2e1e0839a5a83a75ec8b1071d2f9e802e90f7df4d986c6f1a7bf4d50e47105983e2","first_seen":"2024-10-21T08:04:59.577885Z","last_seen":"2026-05-13T23:42:05.070865Z","times_seen":93,"resource_available":false,"data":null}},"time_used":2627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2624,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wangwangzyimg.com/upload/vod/20250903-1/8a4e2bf9b985144f26cb730a996e5843.jpg","fqdn":"wangwangzyimg.com","domain":"wangwangzyimg.com","tld":"com"},"ip":{"addr":"173.249.235.82","port":443,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:27.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangwangzyimg3.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:19:31 GMT","end":"Mon, 19 Jan 2026 14:19:31 GMT"},"fingerprint":{"sha1":"33:32:18:DE:C9:14:AB:49:9E:13:FE:9F:23:E5:74:5B:98:0A:65:8C","sha256":"A9:8B:8D:A5:E3:34:A9:57:DD:CB:A3:2C:4C:AE:AA:9D:B2:4C:41:DD:C4:09:31:D6:ED:99:C5:AC:54:78:C0:82"}}},"request":{"raw":"GET /upload/vod/20250903-1/8a4e2bf9b985144f26cb730a996e5843.jpg HTTP/1.1\r\nHost: wangwangzyimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 83244\r\nlast-modified: Tue, 02 Sep 2025 17:43:28 GMT\r\nvary: Accept-Encoding\r\netag: \"68b72cc0-1452c\"\r\nexpires: Mon, 20 Oct 2025 04:09:45 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83244,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 559x799, components 3","md5":"f93d68ad83f9c41d24c4de126f524e55","sha1":"391d1cb70268f75485dee29145fe3bf9721ba619","sha256":"8386eff30cb7b9874e9b70737bf81995cb244c730f8a0b51958bc6d8853e1cdf","sha512":"7ec5dba3107b1607cc1b9d2efeaf6f313002ce1f62f78dd4b9a570a717e7485308d13c5a9d4f7408201238d970123314746de758d2bea8284eae14f98922d8a8","ssdeep":"1536:/+vH0hxBbC0JbY2DVb/8txDvrVyuFOPdzNxqdpy27i4Fx0CFWRe:mPexpCKbY2DVItBVDQPMdpdeY0CFb","tlshash":"5a8312874e9a69c2edf35ccebc308b3ea9bd90e23f95b4280434e40a8f75e11710da55","first_seen":"2025-09-20T05:34:24.998035Z","last_seen":"2025-09-20T05:34:24.998035Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1661,"timings":{"blocked":174,"dns":0,"connect":147,"send":0,"wait":489,"receive":143,"ssl":707},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/statics/css/mytheme-font.css?v=2.8","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:23.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET /statics/css/mytheme-font.css?v=2.8 HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nCookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 03 Nov 2016 03:08:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"581aaa16-7918\"\r\nexpires: Sat, 20 Sep 2025 17:33:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-05-21T15:06:05.944053Z","times_seen":275464,"resource_available":true,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wangwangzyimg.com/upload/vod/20250903-1/851b92da6020c2579777cfa67728ade2.jpg","fqdn":"wangwangzyimg.com","domain":"wangwangzyimg.com","tld":"com"},"ip":{"addr":"173.249.235.82","port":443,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:27.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangwangzyimg3.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:19:31 GMT","end":"Mon, 19 Jan 2026 14:19:31 GMT"},"fingerprint":{"sha1":"33:32:18:DE:C9:14:AB:49:9E:13:FE:9F:23:E5:74:5B:98:0A:65:8C","sha256":"A9:8B:8D:A5:E3:34:A9:57:DD:CB:A3:2C:4C:AE:AA:9D:B2:4C:41:DD:C4:09:31:D6:ED:99:C5:AC:54:78:C0:82"}}},"request":{"raw":"GET /upload/vod/20250903-1/851b92da6020c2579777cfa67728ade2.jpg HTTP/1.1\r\nHost: wangwangzyimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 399616\r\nlast-modified: Tue, 02 Sep 2025 17:37:35 GMT\r\nvary: Accept-Encoding\r\netag: \"68b72b5f-61900\"\r\nexpires: Mon, 20 Oct 2025 04:39:14 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":399616,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x1600, components 3","md5":"111022944ab846acf1ee14b3e99c25ac","sha1":"533c2ff99e657aec2799ed1ec5809ad8ead955bd","sha256":"40531ed56b6854e81b0a0260ca2c890e24660bd0a73acfd301d95537a254382e","sha512":"ab8da04a283a77debbf8770ac97d82506ac2f31a5650da547b2a44dd44a66a9c81f44b5f64880aaa4bac253d31fc22bd3fb583dc0b1ec06c26cb4e56cf99cb6e","ssdeep":"12288:0I/tR7IkDTKhJbFt/m0U/yn1gb/Eyodw8:0I/PJOhlm08yn1gb8yodw8","tlshash":"2784236099f144d2cfafff30554dcffd63569f06200219f49a22b9dfe0522564aeac8a","first_seen":"2025-09-20T05:34:25.001331Z","last_seen":"2025-09-20T05:34:25.001331Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2140,"timings":{"blocked":-1,"dns":19,"connect":146,"send":0,"wait":554,"receive":487,"ssl":933},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wangwangzyimg.com/upload/vod/20250903-1/a849528be4bb8011f193132e1035406f.jpg","fqdn":"wangwangzyimg.com","domain":"wangwangzyimg.com","tld":"com"},"ip":{"addr":"173.249.235.82","port":443,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:27.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangwangzyimg3.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:19:31 GMT","end":"Mon, 19 Jan 2026 14:19:31 GMT"},"fingerprint":{"sha1":"33:32:18:DE:C9:14:AB:49:9E:13:FE:9F:23:E5:74:5B:98:0A:65:8C","sha256":"A9:8B:8D:A5:E3:34:A9:57:DD:CB:A3:2C:4C:AE:AA:9D:B2:4C:41:DD:C4:09:31:D6:ED:99:C5:AC:54:78:C0:82"}}},"request":{"raw":"GET /upload/vod/20250903-1/a849528be4bb8011f193132e1035406f.jpg HTTP/1.1\r\nHost: wangwangzyimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 282873\r\nlast-modified: Tue, 02 Sep 2025 17:37:49 GMT\r\nvary: Accept-Encoding\r\netag: \"68b72b6d-450f9\"\r\nexpires: Mon, 20 Oct 2025 04:09:45 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":282873,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1120x1600, components 3","md5":"c293de25ab401a631cbc6607c5f6f78b","sha1":"089b37e2760d311f262a22d7e8bf70184cf2b99e","sha256":"c39184123abaf50d63777bee2155d8444eb27b8cf1a86744bad5c9e8081d9003","sha512":"751ff6fed223b6e5ccfcdce0262d5fad48340b13bf278dc009d0e7b79ba7b7f29235a4a05a3655bad8ba85e5d7582d5b3963baf1c6b19a82554cdbe122f8dcc2","ssdeep":"6144:hNZ3wGFCgq+zppQWODeBrH7EUMlaHCpmJyYYn3nD6qn8:n1wGYgq+MaH4/IiPYC3WD","tlshash":"a954238bb2783af86487633c169de830fa274c159ef93f32bc4251d907a9ca8516495f","first_seen":"2025-09-20T05:34:25.003262Z","last_seen":"2025-09-20T05:34:25.003262Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2037,"timings":{"blocked":27,"dns":0,"connect":144,"send":0,"wait":528,"receive":395,"ssl":943},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/img.php?url=https://i2.wp.com/img1.doubanio.com/view/photo/s_ratio_poster/public/p2924034650.jpg","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:27.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET /img.php?url=https://i2.wp.com/img1.doubanio.com/view/photo/s_ratio_poster/public/p2924034650.jpg HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nCookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:27 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\netag: W/\"668caa6a-e3b0\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21500,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (20403)","md5":"4f6afe5a232b3da03ebccd196718acc2","sha1":"9ea1d8c5aeb7d007e750a1b54cbfa6ee44bc150a","sha256":"5ba867e0f50db078389077d8d8517294f2da1eea500d50f522fb6e6f2d944ecf","sha512":"2a01d9271268a2d7efdda5ceadccee57dbe382caf57357480268786a97cc5798dce56f759722d5b3dfe721e440239c953eb60daa75df7677abcd8f5c570e46cf","ssdeep":"384:Qye7HzNL56DwmbkPPVZf4OR9uvs9WmT6VVwYdKiEESJBM6gBeBOZc0vnxE/+:cHJYDDQHVZHIs91TXESJBjgBSp00+","tlshash":"91a2e1e0839a5a83a75ec8b1071d2f9e802e90f7df4d986c6f1a7bf4d50e47105983e2","first_seen":"2024-10-21T08:04:59.577885Z","last_seen":"2026-05-13T23:42:05.070865Z","times_seen":93,"resource_available":false,"data":null}},"time_used":3732,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3729,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/statics/js/jquery.min.js?v=3.3.1","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:23.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET /statics/js/jquery.min.js?v=3.3.1 HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nCookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 02 Aug 2018 10:24:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5b62dbd6-1538f\"\r\nexpires: Sat, 20 Sep 2025 17:33:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-05-21T16:41:25.511693Z","times_seen":130063,"resource_available":true,"data":null}},"time_used":1092,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1092,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/favicon.ico","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:29.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nCookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3; HWTOKEN=2215907fc15fed24a5175cac4639039e56b6e51179dcf9a7750c83da956aea81; HWIDHASH=368bd146823a86b9efeed6e8013edd0f; HWPID=57e4WMfBpqf_J5PEs2C40vHzM8ik1zaCRXoKJpXYviM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:29 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Tue, 06 Aug 2024 16:41:54 GMT\r\netag: \"66b25252-10be\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"29110dc043df4370b34f6d3e232d6952","sha1":"842fd48994da0e42a5a0ffc7e48d9c61c089e358","sha256":"bc6c2fdb89507187cca6189b9a8575fe33a11299f6c78ffcd636685ad1fa83ba","sha512":"48cb554a87544d8c8ef756917c4021e19805b8823b3b28ba3014305769d650540e1cd5453bdfb9086fe947108f1da3768a7fb6d3d578679b4b13eed1bca4812a","ssdeep":"48:p6NQISfWBu7FBV110SJZHpOqu3JH4hBNlGgMYOHqzpHfi4v:pANSJZHpOqu3JH4hBNlGJYvpNv","tlshash":"dc9181aa678a9244d9a2e23ac70471d377b13c8f2411360b28697e3b7e5edcb95f1310","first_seen":"2023-05-09T21:19:41Z","last_seen":"2026-05-10T06:01:52.173635Z","times_seen":143,"resource_available":false,"data":null}},"time_used":2576,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2575,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/template/mytheme/statics/css/mytheme-color3.css?v=2.8","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:23.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET /template/mytheme/statics/css/mytheme-color3.css?v=2.8 HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nCookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Mar 2020 15:57:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e739684-159f\"\r\nexpires: Sat, 20 Sep 2025 17:33:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5535,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"7328809d83e34d7307b1644ec69cd5f6","sha1":"cf35420e51636ff30351e1818d2805a07a485225","sha256":"8144b8309e781eac9363366e1a92f63aaf0728db8cd6cc19ce58347eedf6a896","sha512":"e7f0458904fb532971b9cff929365349dace95d7edcaec3f0ec2617756fba900a1a1551428efb77c3f3b3b9e93c6b84f29ecfd55272443a50d66f31e47b7d41d","ssdeep":"96:OcSDbE3rRf140+PvBiO1FFxkx1LIGeC1TjOuCu4hb:OcSM3rH43PvAO1F/kx1LBeC1TCuCu4t","tlshash":"66b1f021d203211b306bdf9d50a6da858baf68d0c8012b7d787a30e4578d0dbbd7e6e6","first_seen":"2023-05-25T20:05:58Z","last_seen":"2026-04-01T13:05:38.627615Z","times_seen":23,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/statics/js/jquery.autocomplete.js","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:23.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET /statics/js/jquery.autocomplete.js HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nCookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 20 Jun 2019 10:01:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d0b5982-6288\"\r\nexpires: Sat, 20 Sep 2025 17:33:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25224,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"202f979ba2963bd0c57b61fa4bb065c6","sha1":"c727ed1410d082dc8724dc2953fa2b24885aaf2a","sha256":"dab85f34a2dd8768004b9ab7ec62c7c221847de0818d5cbdddad4029c56061ce","sha512":"621fb2955da179a6fb0405e9135e7f39b93e5223da5c0cf2646f5ed544fc0117f8be928a84f61ddfca61bb8e43d5ed6ea62fc7e93f25a74a92870a684b74c1ea","ssdeep":"384:+O8MCaAlHqBlgr2q7rLXej2Jy7fwaoSXo0TviE:+K7qr7OtZTqE","tlshash":"a3b2fc0979e3226252a7707e8faf0008b676a157240cdd50bd1ca7d02f54a38b6f7fe9","first_seen":"2023-04-07T05:43:31Z","last_seen":"2026-05-20T16:38:30.41421Z","times_seen":607,"resource_available":true,"data":null}},"time_used":2525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/statics/js/layer/theme/default/layer.css?v=3.1.1","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:25.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET /statics/js/layer/theme/default/layer.css?v=3.1.1 HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nCookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 05 Dec 2017 03:57:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5a261924-381f\"\r\nexpires: Sat, 20 Sep 2025 17:33:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14367,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14367), with no line terminators","md5":"3d2e0d91c5c0b96abb8dbdc2234aba77","sha1":"9d55e153b30fd7414fada5718e20918e9c7f65e7","sha256":"e3144d018a6a24f733c6fc2a2ee603fb583f0030585e9d4b71bec471b78e31fc","sha512":"42bf3eff281998d088ce012b9a5910f72951c91715595572bb968fbfc5fa2b1cddacef3ca683a1734eb41114b302b6a4dad8b7432c5877b3563a080a2547ae05","ssdeep":"96:mp+Ntha8qNEp+wRY1vUPXiK6nMLPD2OtLzXyPHL/LztJDzyv2OQ7KGx1jyd2/SWz:1WmLr2OtSrzzt42OQ7KGx1jCWR2b+RcU","tlshash":"2e5221e144811299b0278721d6dc7eba32f88d43e5630daef257381f874c6dba2b6647","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-05-21T11:35:29.216001Z","times_seen":6342,"resource_available":false,"data":null}},"time_used":1755,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1755,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mzzyjpg.com/upload/vod/20241223-1/0bd683f1fb1166ba4130c0a219af0c93.webp","fqdn":"mzzyjpg.com","domain":"mzzyjpg.com","tld":"com"},"ip":{"addr":"67.21.69.242","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:27.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mzzyjpg.com","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 09 Apr 2025 09:48:59 GMT","end":"Sun, 10 May 2026 09:48:59 GMT"},"fingerprint":{"sha1":"5C:10:7F:BC:BE:3D:48:FA:9E:3F:BD:B3:3F:2B:78:39:FE:EB:4F:E0","sha256":"80:37:78:EE:33:E9:18:FA:BA:46:76:F7:00:A5:69:1B:21:19:67:CF:D1:53:94:BA:14:BD:E9:75:FE:7B:92:D4"}}},"request":{"raw":"GET /upload/vod/20241223-1/0bd683f1fb1166ba4130c0a219af0c93.webp HTTP/1.1\r\nHost: mzzyjpg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15552\r\nlast-modified: Mon, 23 Dec 2024 10:16:24 GMT\r\netag: \"67693878-3cc0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15552,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 270x390, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ee92eb92527e94260a391bdcb7e1ed1f","sha1":"83968ddc3d576e7aee930e6e5fe4b1168af9e4b8","sha256":"17b15c245b6d24fdb13a9cbad2ae191d8ee82c49f8f6021cb22d440bf05ebddb","sha512":"b7c4f8d674bf031d68b93a776cd7ecbabc5109c86f18ee618cd80df59a8103d3b26ea46e2de5be6400523d1b7aa8454a207c1883b8b0feeb9f600addf1bf5222","ssdeep":"384:JJ9Zi7x/AxlfrSQkZLeiAF/w1K76PDjPS+droZ1LZ:zimfWQkxen6+6PvKoMD","tlshash":"5c62b00e868a326bf12400a9af109f376c1164c1ae7fda24a59952d64974d39ac637b3","first_seen":"2025-09-20T05:34:25.011889Z","last_seen":"2025-09-20T05:34:25.011889Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2098,"timings":{"blocked":749,"dns":1,"connect":145,"send":0,"wait":583,"receive":22,"ssl":595},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wangwangzyimg.com/upload/vod/20250903-1/7d05536eb59cad91ded88f68c6452b38.jpg","fqdn":"wangwangzyimg.com","domain":"wangwangzyimg.com","tld":"com"},"ip":{"addr":"173.249.235.82","port":443,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:27.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangwangzyimg3.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:19:31 GMT","end":"Mon, 19 Jan 2026 14:19:31 GMT"},"fingerprint":{"sha1":"33:32:18:DE:C9:14:AB:49:9E:13:FE:9F:23:E5:74:5B:98:0A:65:8C","sha256":"A9:8B:8D:A5:E3:34:A9:57:DD:CB:A3:2C:4C:AE:AA:9D:B2:4C:41:DD:C4:09:31:D6:ED:99:C5:AC:54:78:C0:82"}}},"request":{"raw":"GET /upload/vod/20250903-1/7d05536eb59cad91ded88f68c6452b38.jpg HTTP/1.1\r\nHost: wangwangzyimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 392680\r\nlast-modified: Tue, 02 Sep 2025 17:43:38 GMT\r\nvary: Accept-Encoding\r\netag: \"68b72cca-5fde8\"\r\nexpires: Mon, 20 Oct 2025 04:09:43 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":392680,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x1600, components 3","md5":"ea9e546a8429e797365dcab9efb86eba","sha1":"c7b9fdcdbbb76e36038e6b91665730bf8d24765f","sha256":"aa92ab944d613e372a16066f3551fd85d95427d499950204e0782ccc05025a28","sha512":"55960eb9c530c3a8e88cfeb8ba8d1a410fcc3f3545a8d71343e8ebcaf1a6dfe42a00bac8197937908ce1f01d960e47bebd6cbbaf1856c9eb4697105f0e11a861","ssdeep":"6144:aPNU2UkZ5zEIbj38/jA5mJWFjq6HBydFwrzdFP1avc3xVvgGO11KaU78k8s72tR9:aPNUzwZEI3yjsmIKFaHP0vccGOrKxT3i","tlshash":"e384231a8ba4b307fad94fb9eaf32f85007c966c459606fb38d70e6f41d0e52ed44461","first_seen":"2025-09-20T05:34:25.01353Z","last_seen":"2025-09-20T05:34:25.01353Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2104,"timings":{"blocked":26,"dns":0,"connect":146,"send":0,"wait":516,"receive":463,"ssl":952},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/statics/js/mytheme-ui.js?v=2.8","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:23.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET /statics/js/mytheme-ui.js?v=2.8 HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nCookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Apr 2020 12:16:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5ea6cd17-54f3\"\r\nexpires: Sat, 20 Sep 2025 17:33:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21747,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"013a0182adb4fce0f3c060117002d987","sha1":"79da829e2089283caf8d75ecdbde0058fcb623c2","sha256":"42fdcedbe3921346184cb77c96cb273af82999fd757cd0985b10be9b78e22701","sha512":"09515e8b1cc54bcafd4916a1bbba5d35a035bfc6ddbf6c4be5e96c4530140e96e2ea8863c6271bed8d660649afcc3fee3ef259f2f4c4e577e1b43bef5e7c7999","ssdeep":"384:WcLMQ7C/meCN719Mr8YLg4tD9fDRPvo9oKMdMTWoqJ/Ea2AWIm4Rg+YwrOBTECU2:WSJt9mtLXtD9fDRDWfNdymGTOcCcdy","tlshash":"45a285c8b34c616f90f33369d43e9944dc7ee833850185b9f8bda0a43bf59184366ea9","first_seen":"2023-05-15T05:14:13Z","last_seen":"2026-03-21T15:18:44.655922Z","times_seen":58,"resource_available":true,"data":null}},"time_used":2532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.okzyw.xyz/upload/vod/20250919-1/e4b7421bad96af1ec1a9cf58fa316a02.jpg","fqdn":"pic.okzyw.xyz","domain":"okzyw.xyz","tld":"xyz"},"ip":{"addr":"172.67.132.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:27.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okzyw.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 18:54:28 GMT","end":"Sun, 16 Nov 2025 19:52:46 GMT"},"fingerprint":{"sha1":"23:29:FD:74:E2:D0:8C:6C:03:C4:7B:B6:42:81:E9:0B:5B:0A:95:4D","sha256":"9F:12:FB:DA:1E:AB:E6:DA:FC:61:A4:78:A7:B8:86:19:66:73:68:F3:62:A0:B7:1C:15:2E:DF:6B:3B:D4:85:11"}}},"request":{"raw":"GET /upload/vod/20250919-1/e4b7421bad96af1ec1a9cf58fa316a02.jpg HTTP/1.1\r\nHost: pic.okzyw.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 05:33:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28891\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Sep 2025 03:09:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68ccc962-70db\"\r\nexpires: Mon, 20 Oct 2025 05:33:27 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sCJxNkf5pJIf6LCHopC931cRwpycSgSUfJjVtYDW5wXmLw6ldqa06gdR0neLRoYm1qALe30%2Fm3jSDeMNJDZ2dTI%2BYcukpySbmPK%2B2rk%3D\"}]}\r\ncf-ray: 981ef2b54f1d75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28891,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x384, components 3","md5":"8f9904d91b1226a3c80d306c92c419b6","sha1":"259869d8b50394904910e84db190e2dd64605b83","sha256":"3c21b8b6b326985ded2de105671eb7c2073313e5f50462fead53a5bf87807b30","sha512":"c8e529a4a6cef8790c6d305ffb825b5b08a81809db7d423d434b64fd615d63cbb6281e2069808bd9211807ba54996ef2e1e1a0f178c4ee060e0cd52f0f60daee","ssdeep":"768:CgSx1MKfT9+pYzCFo44g/uJ0a59iQ+ZyEwfKQrin:9M2yBzVzviQ+dwfKUin","tlshash":"b3d2e07053510b27eff0107389ab653442fb5b16b5e293b52a1090828d75cbda67ed8e","first_seen":"2025-09-20T05:34:25.016106Z","last_seen":"2025-09-20T05:34:25.016106Z","times_seen":1,"resource_available":false,"data":null}},"time_used":694,"timings":{"blocked":-1,"dns":54,"connect":1,"send":0,"wait":378,"receive":239,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://www.hanjugo.com/","fqdn":"sp0.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.115","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:28.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://www.hanjugo.com/ HTTP/1.1\r\nHost: sp0.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 0\r\nContent-Type: text/plain; charset=utf-8\r\nDate: Sat, 20 Sep 2025 05:33:30 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T17:23:37.112312Z","times_seen":15507115,"resource_available":true,"data":null}},"time_used":3611,"timings":{"blocked":1638,"dns":832,"connect":265,"send":0,"wait":333,"receive":1,"ssl":539},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.zzfxfz.com/tj/tongji.js?v=2.201","fqdn":"api.zzfxfz.com","domain":"zzfxfz.com","tld":"com"},"ip":{"addr":"173.239.250.3","port":443,"asn":197555,"as":"Smartmieten Tech Private Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:26.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"api.fhyob.com","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Mon, 21 Apr 2025 15:03:04 GMT","end":"Fri, 22 May 2026 15:03:04 GMT"},"fingerprint":{"sha1":"80:9A:FF:5A:CD:87:8F:3E:08:29:7C:12:27:D1:4F:06:44:6A:A7:47","sha256":"82:7F:A2:96:CF:6D:8A:1B:B2:09:B6:23:EF:04:CC:15:C2:65:FD:57:38:4C:30:1F:47:7D:ED:4A:27:B4:61:2E"}}},"request":{"raw":"GET /tj/tongji.js?v=2.201 HTTP/1.1\r\nHost: api.zzfxfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 05:33:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 20 Aug 2025 14:38:10 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"68a5ddd2-5a58\"\r\nserver: cdn\r\nstrict-transport-security: max-age=31536000;\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23128,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23126)","md5":"7f15ec10cac64cf151e33daaec66d915","sha1":"47bda9dfbd46b661477ca508d5f52eb20de6f9af","sha256":"6f225008ac0d242c8b3087822890e03c8b0c16824c0ea87c2dff32ef332860f3","sha512":"14240de2aa75204ed81c2ea157506884fb7f12237b4b4fbdc2006abc1dc378783a95aeaa1693eccfb892aa8ae16a4ea7215b7e7ef1b3489c1897d12d63276996","ssdeep":"384:d24+W6N/MIQTMjPCWFbb2PSaWCNYKhQuZRZZ5HuIsq4vc/HMBvtj7pChNNfCm:0HPkvcCWFbb2KaW+hXrZZlurn7pCBKm","tlshash":"00a2099470e4a4a0039a34682e7f6187f06a7862618f4554f26ec1d9fcfcafdc16ae34","first_seen":"2025-08-22T04:37:12.285676Z","last_seen":"2025-12-22T08:40:47.14464Z","times_seen":490,"resource_available":true,"data":null}},"time_used":2305,"timings":{"blocked":1080,"dns":316,"connect":144,"send":0,"wait":144,"receive":0,"ssl":618},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/statics/img/load.png","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:27.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET /statics/img/load.png HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nCookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 732\r\nlast-modified: Wed, 19 Mar 2025 13:41:28 GMT\r\netag: \"67dac988-2dc\"\r\nexpires: Mon, 20 Oct 2025 05:33:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":732,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 325, 8-bit/color RGB, non-interlaced","md5":"5071d1144053d910b023b60cea59b358","sha1":"7aa78e3ca6094c0f9805db4ac90f431897335401","sha256":"636040aaf4b19d2e351955fef6a7bab4071fe82f937ba8b2c05c34a7c460e67e","sha512":"3ad69fb5794c39fdf88d7987be73121d3f0022d2c4f02c02290adc8680a016f2a5ef533deec430468c1b65e2ef13ac60f400b308f43f22f8df26755e09211c2f","ssdeep":"","tlshash":"f90109d41380eb35a15fbdc3abcba50d63b9c33ac5c13615026d5984ae7991f622831f","first_seen":"2025-09-20T05:34:25.023009Z","last_seen":"2025-09-20T05:34:25.023009Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hanjugo.com/","fqdn":"hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-20T05:33:21.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:22 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://www.hanjugo.com/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65589,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T17:23:37.112312Z","times_seen":15507115,"resource_available":true,"data":null}},"time_used":1857,"timings":{"blocked":796,"dns":8,"connect":293,"send":0,"wait":265,"receive":0,"ssl":490},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/statics/css/mytheme-site.css?v=2.8","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:23.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET /statics/css/mytheme-site.css?v=2.8 HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nCookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 Apr 2020 06:18:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e8ebe1a-2760\"\r\nexpires: Sat, 20 Sep 2025 17:33:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10080,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"65c1f1a008cd6cd656bd1a19506867c0","sha1":"35018038e7baef98fcc26f98320d68bc05681257","sha256":"77e029a88d5f3946be4c4fa6f816ed1c215ee7a394c4526b7ee6d6eb20908348","sha512":"f094626c60b59e174b75742192430656c5cf091423ff7afde868f8fbea7818892113b401fda748a896d66a7eaaaa7d620898799adb77f2ac4a5cbf9275483962","ssdeep":"192:Oc3zcdOuBhBY1uutpirL5lZCsxT+efWs6NRkWBpitMGSRb+z51NnFnVvdFJUtn/x:Oc3zHtaLbZzq7","tlshash":"4e22b11556133104b17aabd3faa35f5a7a16ac02e24181fdbd60382ec6ce9138bf175f","first_seen":"2025-09-20T05:34:25.025257Z","last_seen":"2026-03-28T14:37:57.063852Z","times_seen":9,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/statics/js/mytheme-cms.js?v=2.8","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:23.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET /statics/js/mytheme-cms.js?v=2.8 HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nCookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Dec 2019 03:11:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5de723fc-21c2\"\r\nexpires: Sat, 20 Sep 2025 17:33:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8642,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"d252e88d0714d34e6c2bc046a571c7ee","sha1":"c3fc07c0f5cd6dbb4937f46cf323c5c8fa30ba5d","sha256":"74ca965386669eb824dcdb9b1fe2f35b776f099e63034533734818b33f11bd59","sha512":"6da2eff9a26634f8f042c74f5ff01aa7dcc2b27aa42e47da278362d2f1cee826f5a8c33a857059fac0b25fe93ca206783b8196e711423c10c8f91ed8f6e4a535","ssdeep":"192:WcZvLBPNTWgaDUvLyZIGn/5Q4hnONT9G5gJbhze5gr9IO0K:WcZvLBFTWgaDUvLyZBfENT9DJbhze5g9","tlshash":"b802f148b79d155810a733b4c8ba9108da3ed57782018b1dfc6d60a0bff5a9c6721fed","first_seen":"2023-03-07T13:44:15Z","last_seen":"2026-04-01T13:05:38.660372Z","times_seen":68,"resource_available":true,"data":null}},"time_used":2530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/statics/img/logo_min.png","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:23.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET /statics/img/logo_min.png HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nCookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 19 Mar 2025 13:26:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67dac60d-536\"\r\nexpires: Mon, 20 Oct 2025 05:33:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1334,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"2d7f08805ef9cf193a6d053f56dda402","sha1":"1dce9e7dc82c61a97e3736f0fb9ec9cacb2cbffe","sha256":"8fd14b1e771bb3ae717052b0dfee4960553bec6867f12ab3e024d2d7d423ac7e","sha512":"85afe30aba1cd7737d88fd68838927c695dd3afc0d2fd04335f41fce187701acb06f567d9a82e03db823d7eaee23ced7b608ae03d7ec078ec69f862aebd4663e","ssdeep":"","tlshash":"db21a5fc03aa242c8cdba4a1285735c0e3d1b4ca620b6d09fc2df8c505f6b0a53aa365","first_seen":"2025-09-20T05:34:25.028386Z","last_seen":"2025-09-20T05:34:25.028386Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-20T05:33:23.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65589,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (58205)","md5":"a141e5b002362a6386dd56a86e924198","sha1":"b15911ce6bdeb65ddd2904b7fc79e6e55f711d90","sha256":"83212aead2a52523278fa4b70758eb579b09f07249454fc799fcb9229efc0c65","sha512":"261d709cec9539ac5ca1492dc1baef4b715b55bd50d6803d642ee6021cf39bbc0aa51c901c423f780cbe70a1eef791926d166c00657183615bb7b9e3f93d7f19","ssdeep":"1536:RlCalRIimnoK5Tfvg2ZUx1D4+fZSyJLOAJmQWPI95vBIEBzC0U3tBRcN:rnl6EP","tlshash":"035386b6c8e22b3b99774ada84da9b18f1d353acc5234e12b7fc56641bcbd50f41240b","first_seen":"2025-09-20T05:34:25.030082Z","last_seen":"2025-09-20T05:34:25.030082Z","times_seen":1,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":502,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/static/js/home.js","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:23.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET /static/js/home.js HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nCookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Jun 2025 01:16:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685c9f6e-9798\"\r\nexpires: Sat, 20 Sep 2025 17:33:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38808,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2677)","md5":"68d3db298573f074a6edf21ab1130640","sha1":"141ab20c3340a5600fda086b625307363096b8ad","sha256":"3ded8d6ededb603e0d5a9df04def2cd34dc988ce0c90156d541c74173ee1e2aa","sha512":"1dadc0da1461043254194bdef1a3e8427378629dee0067233310d4079a72e1ef75d630b8906db87b129d1b9be8ecd67423b2ce37ef5f50a5e2482119f7ca5c43","ssdeep":"768:hR0cTTu8eMbZLbhpa6a/b7z9SsbhbeA5gr9GiSo5E7Iw4TQv7b:hRZXde96oRiG7b","tlshash":"2f03945d7af3142050b3317a4fbf59082276815f590ddd88fe2e11a48fc4a4dba66bbc","first_seen":"2025-09-20T05:34:25.03266Z","last_seen":"2025-09-20T05:34:25.03266Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2530,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/statics/img/logo.png","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:23.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET /statics/img/logo.png HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nCookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 19 Mar 2025 13:31:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67dac722-5f0\"\r\nexpires: Mon, 20 Oct 2025 05:33:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1520,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 162 x 58, 8-bit/color RGBA, non-interlaced","md5":"cbeef0231340b70af1af10a7f44281b4","sha1":"ce946373009d5b87e37eb1e0bd433476dacd7c56","sha256":"6429e6914a35f5867b779a7c162450ae99598b1000dd09d5cddcbdc600705b96","sha512":"ac831ac596ae7a094a23d02f4c77e358b1ac693544e3ce593fa7d4d322d2493b04a7260468c97e04157cd6109b6c37a62d7e1ff2cf0dba550b54fc9b275d2d73","ssdeep":"","tlshash":"0331d5e8290333a1af898f8667c6a5e189b3021a5c422c8790c02879fcc1316e83cea0","first_seen":"2025-09-20T05:34:25.035208Z","last_seen":"2025-09-20T05:34:25.035208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wangwangzyimg.com/upload/vod/20250903-1/eef93e04611f5a01e60069cff9fa431c.jpg","fqdn":"wangwangzyimg.com","domain":"wangwangzyimg.com","tld":"com"},"ip":{"addr":"173.249.235.82","port":443,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:27.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangwangzyimg3.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:19:31 GMT","end":"Mon, 19 Jan 2026 14:19:31 GMT"},"fingerprint":{"sha1":"33:32:18:DE:C9:14:AB:49:9E:13:FE:9F:23:E5:74:5B:98:0A:65:8C","sha256":"A9:8B:8D:A5:E3:34:A9:57:DD:CB:A3:2C:4C:AE:AA:9D:B2:4C:41:DD:C4:09:31:D6:ED:99:C5:AC:54:78:C0:82"}}},"request":{"raw":"GET /upload/vod/20250903-1/eef93e04611f5a01e60069cff9fa431c.jpg HTTP/1.1\r\nHost: wangwangzyimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 78728\r\nlast-modified: Tue, 02 Sep 2025 17:37:45 GMT\r\nvary: Accept-Encoding\r\netag: \"68b72b69-13388\"\r\nexpires: Mon, 20 Oct 2025 04:39:14 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78728,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 559x799, components 3","md5":"b739a31d4f8f5508b6b8b8a6d585b42e","sha1":"eb782435422fa3b892c4360b65c3c5951c67e87d","sha256":"e82be7f1eed8fb57c34f00bc71bcf2dc02e701d0fdc3ffe8b4d8ec500a589013","sha512":"5b4323f166b42036984a0d9056c755bd3052cf4c75fd6fa4c78263d809d590ebce34e8b30f73a28abd201cea85b52ddbc9b6ee3eebe4afe363da7418d405a206","ssdeep":"1536:sCa/yHiNlz7Hzkt2UtkSlw42h4I1lhje9W/682pQEowLXPK:ztHinQt2UaiwRh4Yhje9WYpbS","tlshash":"d77312e5312b59be8ecb71f887ba55061c9845bef283fe5db0a257300d90d83f51a493","first_seen":"2025-09-20T05:34:25.037284Z","last_seen":"2025-09-20T05:34:25.037284Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1491,"timings":{"blocked":2,"dns":7,"connect":144,"send":0,"wait":144,"receive":332,"ssl":862},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/statics/css/mytheme-ui.css?v=2.8","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:23.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET /statics/css/mytheme-ui.css?v=2.8 HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nCookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Mar 2020 15:19:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e738d9a-8a13\"\r\nexpires: Sat, 20 Sep 2025 17:33:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35347,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (1893), with CRLF, LF line terminators","md5":"f33db73044d52eb1adadb42d2327c8d7","sha1":"16bfc972568a770be6ebe766935d07cf3248ede7","sha256":"15acf88852e3462f8e7a2a0ea86d92acaaa4f8014a2a7ecb87db12ecd88e6aa5","sha512":"f9514a098eff8f1622bd622c0f9546adab3456115375f469c3bdeeceff3773c3c7815c3df5f4d235cc6a80a4c2edb33aa5aafdf23a952d49d16d8f05694a1036","ssdeep":"384:OcWr5rIYx9qClS8pYpUulnTXJgiOnU/dol1nG04zI3AnSEUvOitG41Z+:ONRNx908pYeu5TXJgiOUF6LuNf74u","tlshash":"d6f26851a6213d08902f5b52b7a39b9fae1b5452b33214febd703c45c78f9a702f16ca","first_seen":"2025-09-20T05:34:25.039477Z","last_seen":"2026-03-28T14:37:57.001764Z","times_seen":8,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/statics/js/layer/layer.js?v3.1.1","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:23.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET /statics/js/layer/layer.js?v3.1.1 HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nCookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 05 Dec 2017 03:57:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5a261924-5664\"\r\nexpires: Sat, 20 Sep 2025 17:33:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22116,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22020)","md5":"d0c975e34297f3e44e99c9d83555ffc1","sha1":"7e465bd79e65428cf07e5991196cff512ce44a4b","sha256":"691aad750624d84b17f2fbb73a4982860edd18837f3000c5b660ac82bf408e82","sha512":"1d9dcd7e1afe695e5716ea55f9a5a3e3aa45852722b4e1a2653ebd3f3a85c8b7a34b15264751f5ee26ea56ee49c8683a00d771197d8b32d9ea53d842d6db3b79","ssdeep":"384:41xCih92A3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:41EiV3i+WtXItqF13k8","tlshash":"56a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-05-20T20:05:37.944773Z","times_seen":5491,"resource_available":true,"data":null}},"time_used":1377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/statics/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:26.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET /statics/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/statics/css/mytheme-font.css?v=2.8\r\nCookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:26 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\nlast-modified: Thu, 03 Nov 2016 03:08:04 GMT\r\netag: \"581aaa14-12d68\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-05-21T17:20:55.242579Z","times_seen":475600,"resource_available":true,"data":null}},"time_used":2847,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":769,"receive":2078,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zz.bdstatic.com/linksubmit/push.js","fqdn":"zz.bdstatic.com","domain":"bdstatic.com","tld":"com"},"ip":{"addr":"157.255.63.48","port":443,"asn":136958,"as":"China Unicom Guangdong IP network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:26.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /linksubmit/push.js HTTP/1.1\r\nHost: zz.bdstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: JSP3/2.0.14\r\ndate: Sat, 20 Sep 2025 05:33:28 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Wed, 12 Feb 2025 00:44:26 GMT\r\netag: \"67abeeea-134\"\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\nage: 7420\r\naccept-ranges: bytes\r\ntracecode: 17882383210184983306092011\r\nohc-global-saved-time: Sat, 20 Sep 2025 03:29:48 GMT\r\nohc-cache-hit: gz5un58 [2], zhuzuncache61 [1]\r\nohc-response-time: 1 0 0 0 0 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":308,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (308), with no line terminators","md5":"f9fc52ab67f035b8baf5d558714cc94d","sha1":"37062a6fb1ef410d496137d44275738ae743c747","sha256":"c31f2003f1c93ac1e34b09f376d97a65da6e110bf451cf1e0e50a7946c5e7212","sha512":"ebb0415852fbb5b964094e2e55a28b90f701dff1977c8b98c6f24d65d09067dc0c417d01492ca28a4be6747816d7c0bfac87b73a33725aee047a5d2f7ab83182","ssdeep":"","tlshash":"11e0cde86054c01c0dcb107135bb324ce7771d675a645545c04d9445396cb1f8247fe9","first_seen":"2023-03-07T01:18:58Z","last_seen":"2026-05-20T20:05:37.921278Z","times_seen":21970,"resource_available":true,"data":null}},"time_used":2817,"timings":{"blocked":1285,"dns":314,"connect":250,"send":0,"wait":250,"receive":0,"ssl":714},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/statics/img/play.png","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:27.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET /statics/img/play.png HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/statics/css/mytheme-ui.css?v=2.8\r\nCookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Jan 2018 02:24:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5a693fc2-999\"\r\nexpires: Mon, 20 Oct 2025 05:33:27 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2457,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"10a11cc31a1fe5126ae5f1e359679cbb","sha1":"7d30dcc97bb4aed52948a5b040b4fa63149a405e","sha256":"82b4aac50bdda11a5069442a4a6f593f4f3debbc2a4499b919d61691301c5537","sha512":"d7450ead731c96bfee0add5b6188dc42f91dfece950e075201038eae233360171b593466c6a46ad6b5209154fa91cd082713dc422b9882a9926b922a43c72c77","ssdeep":"","tlshash":"b2510b45c392bc8393abb44251e6a462952758c1df5d20b9688fc91b94602fdd60d7cb","first_seen":"2023-05-02T05:56:41Z","last_seen":"2026-05-20T04:27:37.334245Z","times_seen":1069,"resource_available":false,"data":null}},"time_used":2273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hanjugo.com/statics/css/mytheme-color.css?v=2.8","fqdn":"www.hanjugo.com","domain":"hanjugo.com","tld":"com"},"ip":{"addr":"202.95.11.151","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:23.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hanjugo.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 17 Jul 2025 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"D2:C7:62:F0:E5:3C:AB:C3:B5:DB:E8:4B:37:42:4C:52:0C:46:D6:D7","sha256":"E6:9D:5C:4B:C8:CE:58:21:59:63:C1:B6:2C:86:F3:CE:64:F4:B5:BA:F3:6D:B8:D2:0D:F4:BC:F5:FB:4E:9A:03"}}},"request":{"raw":"GET /statics/css/mytheme-color.css?v=2.8 HTTP/1.1\r\nHost: www.hanjugo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nCookie: PHPSESSID=oi4jr2vh7aur059j99tjni91b3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Mar 2020 15:16:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e738ce4-15bc\"\r\nexpires: Sat, 20 Sep 2025 17:33:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5564,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"5210adfb45b2985716298d2e6847374f","sha1":"8dc981dc0f376a22a2b3cb1a06f3feaf37d2319e","sha256":"b84a040fd55faaaf47283f1829aa8a90442bf0c1a30b9ff06f8cbee5636942eb","sha512":"f439529df8b4ee7160c5df9a8e0c6d3125aa18da05a95a2f38f2624bc4797b49c273cd6615524c7e08e4c2008890405da377848602cd73444ac0de0e44e7dfbf","ssdeep":"96:OcjD3bE3rRf140+PvBiO4Fxkx1LpWGeC1TjOuCu4hb:Oc/I3rH43PvAO4/kx1LpPeC1TCuCu4t","tlshash":"d4b1e021d247211b306bdf9d50a7da818baf68d0c9012b7d787a30e0578d0dbbd7e6d6","first_seen":"2023-05-25T20:05:57Z","last_seen":"2026-04-26T20:38:44.058897Z","times_seen":30,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mzzyjpg.com/upload/vod/20241222-1/672c4d3d48fca9c3350961cff828bb07.webp","fqdn":"mzzyjpg.com","domain":"mzzyjpg.com","tld":"com"},"ip":{"addr":"67.21.69.242","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:27.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mzzyjpg.com","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Wed, 09 Apr 2025 09:48:59 GMT","end":"Sun, 10 May 2026 09:48:59 GMT"},"fingerprint":{"sha1":"5C:10:7F:BC:BE:3D:48:FA:9E:3F:BD:B3:3F:2B:78:39:FE:EB:4F:E0","sha256":"80:37:78:EE:33:E9:18:FA:BA:46:76:F7:00:A5:69:1B:21:19:67:CF:D1:53:94:BA:14:BD:E9:75:FE:7B:92:D4"}}},"request":{"raw":"GET /upload/vod/20241222-1/672c4d3d48fca9c3350961cff828bb07.webp HTTP/1.1\r\nHost: mzzyjpg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15452\r\nlast-modified: Sun, 22 Dec 2024 11:44:03 GMT\r\netag: \"6767fb83-3c5c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15452,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5d2f61615b84c378fa8b94eab4e4e9d5","sha1":"ba165e9451dfaacb36b93d2a659eaf78f43be623","sha256":"129945ebf89ec78965076765bba72d8d50524cbaa131771976af63e72036ddd1","sha512":"5e27ad1e0645730d355a956ac401c3ac86e0505b31aeff71da4737f329f9961534b0c5b540aed753042c39f6c8cb751f06af3a290b509c3ae8c11053d1f43290","ssdeep":"384:CYNg7vOhl6mcvoViVQiGVR4hQKoaDNjdpU6zeIjJ:CYyyX6LgNbUQNaRxj","tlshash":"af62bff53b7d5862c9d0ea3848b2137573c53e567732eac06954ae0e40c99e07aca29f","first_seen":"2025-09-20T05:34:25.047275Z","last_seen":"2025-09-20T05:34:25.047275Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1044,"timings":{"blocked":606,"dns":0,"connect":0,"send":0,"wait":437,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wangwangzyimg.com/upload/vod/20240721-1/fe822342edda57d6f737a4984406e945.jpg","fqdn":"wangwangzyimg.com","domain":"wangwangzyimg.com","tld":"com"},"ip":{"addr":"173.249.235.82","port":443,"asn":11878,"as":"TZULO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:27.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangwangzyimg3.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Thu, 19 Dec 2024 14:19:31 GMT","end":"Mon, 19 Jan 2026 14:19:31 GMT"},"fingerprint":{"sha1":"33:32:18:DE:C9:14:AB:49:9E:13:FE:9F:23:E5:74:5B:98:0A:65:8C","sha256":"A9:8B:8D:A5:E3:34:A9:57:DD:CB:A3:2C:4C:AE:AA:9D:B2:4C:41:DD:C4:09:31:D6:ED:99:C5:AC:54:78:C0:82"}}},"request":{"raw":"GET /upload/vod/20240721-1/fe822342edda57d6f737a4984406e945.jpg HTTP/1.1\r\nHost: wangwangzyimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 20 Sep 2025 05:33:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 82411\r\nlast-modified: Sun, 21 Jul 2024 12:34:48 GMT\r\nvary: Accept-Encoding\r\netag: \"669d0068-141eb\"\r\nexpires: Mon, 20 Oct 2025 05:25:58 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: max-age=2592000, public, max-age=15768000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82411,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 559x799, components 3","md5":"90d788b24cb82736a69d35ed8e64c1fc","sha1":"dc8b65133d025c3ef7db9d6420ea464ed50ebe5c","sha256":"77f48eda100421bf95994af6017eeed2b99b12642b88efb6841785efe48c7bee","sha512":"7294d3472398ca19267476fc525970e9ef402c79dab289b324ad183dacfc1cfdb215fa3cfe9963387db4cbdf45bc2761e138a8b0296ec2bdbdaf9f2760a57982","ssdeep":"1536:/E71IJCtP9AKqV0buNs/0ss9QQOv/PMf2OzejOVkAUOUrRe/j3YoHYe01WFEdr:c5IvaR/0s6Wklk2URs7ooHZ6W+Z","tlshash":"a7831232e6b7773dfa143a681fb43d6f55d1168b3623fa40ab17666437508a9ceb80c0","first_seen":"2025-09-20T05:34:25.049316Z","last_seen":"2025-09-20T05:34:25.049316Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1902,"timings":{"blocked":-1,"dns":25,"connect":147,"send":0,"wait":596,"receive":243,"ssl":888},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polyfill-js.cn/v3/polyfill.min.js?features=default","fqdn":"polyfill-js.cn","domain":"polyfill-js.cn","tld":"cn"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:26.984Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /v3/polyfill.min.js?features=default HTTP/1.1\r\nHost: polyfill-js.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T17:23:37.112312Z","times_seen":15507115,"resource_available":true,"data":null}},"time_used":1631,"timings":{"blocked":0,"dns":1088,"connect":267,"send":0,"wait":0,"receive":0,"ssl":274},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.zzfxfz.com/api/v1/api2/statistics/start?s=fcf9350cb5dc58381864c455015804d0\u0026d=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\u0026t=1758346407740","fqdn":"api.zzfxfz.com","domain":"zzfxfz.com","tld":"com"},"ip":{"addr":"173.239.250.3","port":443,"asn":197555,"as":"Smartmieten Tech Private Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.hanjugo.com/","date":"2025-09-20T05:33:27.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"api.fhyob.com","organization":""},"issuer":{"commonName":"SSL.com RSA SSL subCA","organization":"SSL Corporation"},"validity":{"start":"Mon, 21 Apr 2025 15:03:04 GMT","end":"Fri, 22 May 2026 15:03:04 GMT"},"fingerprint":{"sha1":"80:9A:FF:5A:CD:87:8F:3E:08:29:7C:12:27:D1:4F:06:44:6A:A7:47","sha256":"82:7F:A2:96:CF:6D:8A:1B:B2:09:B6:23:EF:04:CC:15:C2:65:FD:57:38:4C:30:1F:47:7D:ED:4A:27:B4:61:2E"}}},"request":{"raw":"GET /api/v1/api2/statistics/start?s=fcf9350cb5dc58381864c455015804d0\u0026d=bHF2ZE9xVFVTcUo2N2RKOTd0aFpxd1g1bCt3TUUxNEVTMjEzMVJ3ZlpKaXNjWlQ5aVlzRTMzdnVtK2ZvdXpYL2JtMzZhald2T3B0NE82THBnQmRoa2ZyY0w3RlVUdzBZa1dyaEdpQlEzSzVubUJ0eEZzcHR6N1RSMGJFM1BhVy9BY2pCbGNPTHZNMTEybk9WV1NvTnV2b1lkWEJPbStyT1FjWE8yUXNoV3E5a3hudlRzVFRBeFBNQWtPeGxQZEw4MDhCaEJJNFVHZUU1dGxVazN5bFJnd0VFSS9iejdGeG93TUx1NWZwTllaVVFGYjhpMnJhZitPVzNSNzZRazEzQWFpWUNxZEY0dkx2dElYNDFIZWsrSmhQNUQ2THoxT2ozS2tZUXpqSy9CMFJYT2lMN3pCbEJZd3ZiaHhLM2NPcUxmNFc5aFlhNml6QWM1NkRPeUpOWjI2RkUzOFEra1NqSVFmWmtIZnRoNWw5OFFwU2pKQ0UybzY5eWowaHAwMVcxdXJwWmVlYWZWWFRMdkxHWEVJdWlQckRKODg4eDAraDROS01DU05BYVp2alFEeFk0Vi8yb3cxb3IzQmxXeWdINA==\u0026t=1758346407740 HTTP/1.1\r\nHost: api.zzfxfz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.hanjugo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.hanjugo.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 05:33:27 GMT\r\ncontent-type: application/json\r\ncontent-length: 102\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: https://www.hanjugo.com\r\naccess-control-allow-methods: POST,GET,DELETE,OPTIONS,HEAD\r\naccess-control-allow-headers: lang,signature,key,timestamp,secret,Content-Type,form-type,Content-Length,Accept-Encoding,X-Requested-with, x-token,x_token,x-user-id,x-c,x-xsrf-token, Origin, Authorization\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 10080\r\nset-cookie: HWIDHASH=368bd146823a86b9efeed6e8013edd0f; expires=Sun, 15-Aug-2027 16:12:27 GMT; path=/; httponly\r\nserver: cdn\r\nstrict-transport-security: max-age=31536000;\r\nx-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"843f912e15f988c3408cacccf1246920","sha1":"33961ffab492c03c823cd1649a31193155878f52","sha256":"54ae9124b03ded6bc8e08db3f0cecff19279df9a7bc50f78aad160383df8d2db","sha512":"2026cd1890cef80a50feedbf17e399f4fc286b37a0353806312a12acc03b41679712fbce54bf0572e26fa59e1b3d9083faed0582e7eeadf87998affb8fb1167b","ssdeep":"","tlshash":"3eb0123c981203f113391256331440339c2c9158ec02311e6034010811350b1a627c9b","first_seen":"2025-09-20T05:34:25.051061Z","last_seen":"2025-09-20T05:34:25.051061Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}