{"report_id":"7b67a15c-86af-4571-ae93-2fb53de7826e","version":6,"status":"done","tags":[],"date":"2026-03-18T23:20:01Z","url":{"schema":"http","addr":"pdi.or.kr/","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":0,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"final":{"url":{"schema":"https","addr":"pdi.or.kr/","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"title":"PDI 소개","dom":{"size":49941,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8832)","md5":"39deb5cd50b64cced89257b0948bd516","sha1":"29cf4477173e61120f8e27fd833621c824777462","sha256":"f2831d1b0ac52d05ae0261433a51b52d37f697abcafc1d86e71d064dc05732a0","sha512":"1415c02fb5c29fb806d88c38d19513dbfb7373b1d602f27a6d582b15dccde286c5664af0051ee8ef7903416d74d005fd774f54ebb43bad35482d6dcd082e1ab7","ssdeep":"768:YUZdypJ3K8fFPg7cZDYkIka88Cf4wGUlAkAKHWo0sCT:Y0ypRldPecZDYkIkaVCf4wGUlAkAKHU","tlshash":"f72373f35c8c703e124eb2859989b518e2d7d116cf216a21b3fe626ddb81fe604b211f","dom_hash":"domhash4ea241413642bfd07c02a021f005cfc3","first_seen":"2026-03-18T23:20:05.757156Z","last_seen":"2026-03-18T23:20:05.757156Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pdi.or.kr/","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":0,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-22T23:20:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-15T22:34:11.913686Z","alert_count":0,"request_count":14,"received_data":3839312,"sent_data":7682,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pdi.or.kr","ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"domain_registered":"2018-03-15","domain_rank":0,"first_seen":"2026-02-26T16:52:01.36403Z","last_seen":"2026-02-26T16:52:01.36403Z","alert_count":90,"request_count":30,"received_data":832243,"sent_data":13655,"comment":"","tags":null,"fingerprints":[{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Contact Form 7:6.1.5","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]}]},{"fqdn":"cdn.rawgit.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2014-03-20","domain_rank":102096,"first_seen":"2017-01-30T05:42:07Z","last_seen":"2026-03-12T08:39:42.399872Z","alert_count":0,"request_count":1,"received_data":5725,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pdi.or.kr/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-11T22:29:18.082462Z","times_seen":310920,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-i18n-js-after","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"afe3a4ab24484626e1c972d3143a7701","sha1":"9157b61f0f0caf2f4fe7e0d44f79fee257746ea1","sha256":"d4343ba77d2dbb3acf13102a6674791902730a1e358e649821e8a3efd59f3731","sha512":"9658c5e4056352c0a8de74e2a66270df8f5bfd082c242a4d192bdb8fa740368719e173f5ccbeb866793e5dc6fbdb06b85d04b5520c5c7c5fd654a50cc85f537a","ssdeep":"","tlshash":"70f02b86f0973c80418b97705a63bd024581208bc17e880424d9ca206b724c0f4c231f","size":487,"data":"","first_seen":"2025-12-04T21:59:14.298918Z","last_seen":"2026-07-20T04:55:51.116125Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/themes/csid2017/js/alertify.min.js","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"797614ad4a8b443811179ff54f3d40b4","sha1":"4d6cb041cd12fc4e4e6dea44c9d6ae7bed49d783","sha256":"f2c8aaaccfbc09f578dd8dfc18125228bf25a272a4d0c2694804ecc2961c1755","sha512":"eaadc5c36894fc5dc33909ea4c7d75b26b60889846475b6ea1d9695444ba68ca18928f059349dc98930bc3a5bd4f54e419b4579e396e98b2915996c4b1d0e215","ssdeep":"192:YYPnr0+jc6sMRF0TRFeThFDW+woJ1NHTQ5bd+s8N:YkPsmyuygYxdyN","tlshash":"7ff132c572922f351f93536424efc407f0398473baea6c6061e2d9ed2b75c6c5027b6a","size":7541,"data":"","first_seen":"2023-03-12T09:05:14Z","last_seen":"2026-08-11T07:22:03.770334Z","times_seen":224,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/themes/csid2017/js/jquery.placeholder.js","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"0654b9120b2879e6735d7aeb51cf8ac1","sha1":"a5359150fd5f71ba0c87c3081133ce7f665e2a85","sha256":"a4a5a561303ace309f832edefc976224278837a25320f0422d546b6c5392e9a4","sha512":"40333f08eb2e8a1a03c85196dda668b879193ad1df0fce800ba5562a6dc23c0af2d6e678ddc71cae1aa52626383c3c8a45b7f2a29a2750a3c5b7322e057baabf","ssdeep":"192:f1NlcJn0t7rTlaEttVtX11gtYyGWhKIay:Fc1Sk","tlshash":"6de1ca0c7cfb72a4496bb07a6bdfc804717545234049da90b83c53556fa1ca8e7f1ee9","size":7293,"data":"","first_seen":"2025-10-10T22:56:45.204966Z","last_seen":"2026-03-18T23:20:05.768682Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-11T22:45:56.507754Z","times_seen":1014845,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/themes/csid2017/js/jquery.flexslider-min.js","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b544e8f01c6da9758821227f30b6348a","sha1":"b8835e351c2fcaecb62b667b8a02baadd6ccbc28","sha256":"df3f85779a6ccee916f58e95d0e385d2f439bb0345d2f83fe404f6649a391912","sha512":"3f8bd7c5766b54ab32a8cc9238e660e5fb911d4a832db8d59db2d93f96b63003036dbefc318e6c8e1ae1af8946e82df861218b961cee670b8e647e3eafe503ce","ssdeep":"384:ZJEnKirNBDVCPfh5FjTut2OO1F5WTI506zhkj:JirNr2h5FjTCO1at6k","tlshash":"96a2b411b3113a76dee723ae3d0fc6041ab2d585e409c87d757d42082ca85895bf7fba","size":22034,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-08-11T15:44:55.332514Z","times_seen":1863,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/contact-form-7-js-before","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1defa4ff68b108bc42c1b5bacc19e623","sha1":"02ae4ffab8d777534dd3df5a23f60d4af63766b9","sha256":"49640d3b5b4f27785875ea597a5d873df81c8ec3df96f87d0a370727525ee92d","sha512":"481f0aff69a9504583dfaf2a460ad012989f6d034f1d7eb964a73fbeea91beadffcc61ef4ceddf0efaaf6c0bcd52b9474e0fa64998a0f255c1721def9213cfee","ssdeep":"","tlshash":"d1f0229ac4e81c8620e6c5b802bc2201b652e00bca3f2e05b24e008c2fa4078e88438a","size":573,"data":"","first_seen":"2026-03-18T23:20:05.789491Z","last_seen":"2026-03-18T23:20:05.789491Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-includes/js/hoverIntent.min.js?ver=1.10.2","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","size":1499,"data":"","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-08-11T21:37:52.002738Z","times_seen":87959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-includes/js/wp-emoji-loader.min.js","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"61dc19c35a8e21f031bc959a017450cd","sha1":"97e71819dfe130c9574a0774235bdd120f6d5d9f","sha256":"c43a481456377148fb87a3d06164b5d2a0e8beb9c4479b9f865f24804cf71392","sha512":"a55b5f7e890746a29c8bcd48f82c00f48092eaba872217e686079034e240df49b7c962d1e791a63814be3ea04704a69bb35c431d3d220549c1e56a1197499dc4","ssdeep":"","tlshash":"b661979ae7763cdbb2f900f2697a0d47eb614435d6c8d438c9bda3141cb5893c274b46","size":3390,"data":"","first_seen":"2026-03-18T23:20:05.790761Z","last_seen":"2026-03-18T23:20:05.790761Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-11T22:45:56.523085Z","times_seen":929670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.5","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-08-11T22:38:35.799749Z","times_seen":226718,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/themes/csid2017/js/slick.min.js","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b53bdfc29e18f4d493d775a8023fbdc8","sha1":"e9fcbcc4fa70cba093b81d982a1b78509414cef7","sha256":"e02af7df9a190d88380e2dcec2050ecaa493ae2d23526dbeec67f6907df3a752","sha512":"027e1adc510cc91e416cef4245042a82c06c7318cceee34d99c71448448d56d5a7e77116c7907da0eed15673ef3c6e847187183e9d06bf78bf410e0a53307958","ssdeep":"768:G1t6WvsBZPKBt3FPmS3+EYykK1GPzpiN9sJTPdATgjZ7Nc4hC5orG1TsJ:X0tVUkkK1GPz6QrG1AJ","tlshash":"04139509d204372688eb12e57105c14ea3fbfababd12c0f076c987d6606d81d86e77f6","size":41953,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-08-11T20:02:34.594617Z","times_seen":19318,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/themes/csid2017/js/jquery-1.11.3.min.js","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b091a47f6b91e26c93a848092c6f3788","sha1":"52918af2d431e73464060b35d364640c8db75606","sha256":"329ab92b9276ef4e3148f69be6b208969bebdf2db3121a589caa172453fd9f10","sha512":"ab444102be476f0104eeff79c9b596174852b4fe8cbd0b5a0279d56f106a166ec39304636e09326213de000b102ce8f517bb268a9abb2955c56ee4f18b464ea8","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmS:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"6893d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95956,"data":"","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-08-09T21:02:50.879029Z","times_seen":18423,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","size":5314,"data":"","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-08-11T22:02:32.332172Z","times_seen":201005,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-08-11T22:38:35.878475Z","times_seen":233916,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/themes/csid2017/js/select2.min.js","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"206247de2e69feca540152f21355b017","sha1":"154e2d61636b7b66e914f970c45dca0d965e2d4b","sha256":"58ee90710484339bf01cbe1e00d51dfe6cf146a472c4fdd15a3fabe854b9a979","sha512":"7d9cbdb9d70cb426eb2af2c8c5684e51a1fa4d961d7638b304484449e4ecbf5970cd781c47a65a9615b27be0654ff290d0a21fca38aac1c7bb20a2ad447dbd85","ssdeep":"768:joA4SA2njm1T98RqqFtBg6GBokOl/NPwxDVQ3cx7TorpznDNGmZlj5DzQ:t9fnS1T98R9pkOZd3MeLhGAD8","tlshash":"d853a849b9537235426f20e6656f000e2137bb7eb00a99b8b458cdec5abdd14326bf3d","size":62834,"data":"","first_seen":"2023-03-07T01:28:34Z","last_seen":"2026-08-10T00:37:13.581447Z","times_seen":1485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/themes/csid2017/js/parallax.js","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d8030113085a472e5a480be2150774a","sha1":"99421a12353f0c384401bf511929fa9eebe9a2b7","sha256":"43a45a150e7ef4230528b8a05be250e3f8a05c2c7114492c113690dcde86f05f","sha512":"6e18f4cd8ad1a55c6bab2c3df1d27a2089adfdd07162b031e2ab98d0d355fc569a1358a046210f14d8a0c3f358f8015e4f864a5374d1111ef239da96ee188ac7","ssdeep":"192:LvfjIGjnVlpMoZmSNgILJNara2lLK4QeJr8AanBfdyEaZprOjYaGD:LMEnP4eBBo","tlshash":"ff42fd0917b71012d1abb2ad1fbf4209b235906b2c0bc91d3e9d21d89f91a3516b7ff8","size":12038,"data":"","first_seen":"2023-03-07T01:18:00Z","last_seen":"2026-08-11T08:01:13.63182Z","times_seen":426,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-08-11T22:29:18.041475Z","times_seen":204066,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/contact-form-7-js-translations","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3392e1b9d552a060580428d09fc50be8","sha1":"7ba50c10398caeb2fbb73e9a54db2a82b03d43be","sha256":"a16a52537c3ef9a6d1e611f857a6b7d7653d1f15aa094e8d0a2a81f9be24698f","sha512":"dc626c12930298d39da5b1d8595c449c9a67cf4a7f9fa3b19ae279ba658fe7d6f4a675e21b14d0fe7b1ed9a756843c131952c6e054fbeec748c4d754be1ecea3","ssdeep":"","tlshash":"c6211e48dcb59a2640a251f93aaeb5dcb195f650c2af5d43622e48092b5262cc9f3b0d","size":1141,"data":"","first_seen":"2026-03-18T23:20:05.791732Z","last_seen":"2026-03-18T23:20:05.791732Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/themes/csid2017/js/modernizr.min.js","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b891e45f64bd9f8151763f12059c59c","sha1":"5b8b1a25b127d33c5b4200d4ef10a13f3bfce0db","sha256":"9eac5c94896b13151766656bacc851b2302f4ee758af87273044ec045fb3a63c","sha512":"7e61b2f70d58fc941f7c69d9e33af99b3e402ecd4a3240fadc86d8c17554d6fd5113c7647ce69a8a1a91e4b0649f527cf8963b4d54e84d947a929a7321b124d5","ssdeep":"96:IDZTTeLlJl9MgvZtNannK2jc09balrF77i+jfFIqhkBrGKbOm1p2wuztdvC+z:U2/wivNSDt4RwmfFFkBrGKbLRuZdBz","tlshash":"40b1d8dd7541f422a36620b590bf050eb136a079184e8e80f219d9e8acb88fd076fe1f","size":5487,"data":"","first_seen":"2023-03-12T08:40:08Z","last_seen":"2026-08-04T12:33:34.207718Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/themes/csid2017/js/script.js","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e49fae6f072d7f7e7c8cde2e411e242","sha1":"13861fdcc7cfef008b8237256426a3cb0c1958fc","sha256":"32e21034f0111e909c45942b1aec0e2e57519380271a50f1adb6a381d0744ca0","sha512":"45c7a5659d9072e14c4075186d55f32c451eb762ba5e411e18024bf6baa7e3b131d218b1fd613de71dd1f46e1526cd5e0f313f747116f6d576f49776a1cc2b11","ssdeep":"","tlshash":"6141bb09fb6db13b047762a85eaff3865f6d05515a026437f8ee09547b8023f20cadac","size":2195,"data":"","first_seen":"2026-02-26T23:55:00.625085Z","last_seen":"2026-03-18T23:20:05.7769Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/theeluwin/NotoSansKR-Hestia@master/fonts/woff/NotoSansKR-Bold-Hestia.woff","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:47.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/theeluwin/NotoSansKR-Hestia@master/fonts/woff/NotoSansKR-Bold-Hestia.woff HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pdi.or.kr\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 244996\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff\r\nx-jsd-version: master\r\nx-jsd-version-type: branch\r\netag: W/\"3bd04-L6+am4f6D7R0WZ4DG9oArbqf1Ug\"\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 23:19:47 GMT\r\nage: 5329\r\nx-served-by: cache-fra-eddf8230081-FRA, cache-osl6544-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":244996,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 244996, version 1.0","md5":"bcacd0068ce611f413c4788810c65e59","sha1":"2faf9a9b87fa0fb474599e031bda00adba9fd548","sha256":"562442ee202c600f00a8df896b632c1d6a2fad85186cf32cc9b33075c91ca0cf","sha512":"72038701ad1e289f8b14fcdc5c72b94b88647549b79f7d88e74e62bac582087454c97af70fc067d11a1ece8ef573d4d0c0c9687cc8edcdcc2f715ddbf8071823","ssdeep":"6144:XyzEcPybKczAipp67pOY8KLU6Zd1C8JKfFtmZuvmp06rC8FLa0f:X8yb4ip47EY8n6v08JamOm7hN","tlshash":"86342327a722ebdb7ba00f38171827760390a222d3f3dd241ce3566512776b676d24d7","first_seen":"2023-04-15T21:22:07Z","last_seen":"2026-07-20T15:28:16.165846Z","times_seen":282,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:42.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:44 GMT\r\nServer: Server\r\nLast-Modified: Thu, 12 Mar 2026 03:08:39 GMT\r\nETag: \"161d-64ccb11b06dcc\"\r\nAccept-Ranges: bytes\r\nContent-Length: 5661\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5661,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-08-11T22:29:18.041475Z","times_seen":204066,"resource_available":true,"data":null}},"time_used":1343,"timings":{"blocked":1062,"dns":0,"connect":0,"send":0,"wait":280,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.5","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:42.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.5 HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:44 GMT\r\nServer: Server\r\nLast-Modified: Thu, 12 Mar 2026 03:14:08 GMT\r\nETag: \"30e0-64ccb25521e96\"\r\nAccept-Ranges: bytes\r\nContent-Length: 12512\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12512,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-08-11T22:38:35.799749Z","times_seen":226718,"resource_available":true,"data":null}},"time_used":1534,"timings":{"blocked":1237,"dns":0,"connect":0,"send":0,"wait":296,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/themes/csid2017/js/jquery.flexslider-min.js","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:42.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-content/themes/csid2017/js/jquery.flexslider-min.js HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:45 GMT\r\nServer: Server\r\nLast-Modified: Mon, 26 Mar 2018 13:52:50 GMT\r\nETag: \"5612-5685116efb080\"\r\nAccept-Ranges: bytes\r\nContent-Length: 22034\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22034,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21939)","md5":"b544e8f01c6da9758821227f30b6348a","sha1":"b8835e351c2fcaecb62b667b8a02baadd6ccbc28","sha256":"df3f85779a6ccee916f58e95d0e385d2f439bb0345d2f83fe404f6649a391912","sha512":"3f8bd7c5766b54ab32a8cc9238e660e5fb911d4a832db8d59db2d93f96b63003036dbefc318e6c8e1ae1af8946e82df861218b961cee670b8e647e3eafe503ce","ssdeep":"384:ZJEnKirNBDVCPfh5FjTut2OO1F5WTI506zhkj:JirNr2h5FjTCO1at6k","tlshash":"96a2b411b3113a76dee723ae3d0fc6041ab2d585e409c87d757d42082ca85895bf7fba","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-08-11T15:44:55.332514Z","times_seen":1863,"resource_available":true,"data":null}},"time_used":2894,"timings":{"blocked":1567,"dns":0,"connect":264,"send":0,"wait":265,"receive":264,"ssl":534},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/themes/csid2017/css/editor.css","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:44.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-content/themes/csid2017/css/editor.css HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/wp-content/themes/csid2017/style.css?ver=6.9.4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:45 GMT\r\nServer: Server\r\nLast-Modified: Thu, 12 Apr 2018 16:57:50 GMT\r\nETag: \"1bad-569a9a7d99f80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 7085\r\nConnection: close\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7085,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"1ef8aa9bde2664665efda20e32e98a81","sha1":"854f004172ed2adb135d17d9cdcf4a1b4fc74bb5","sha256":"f7f3a089d3e0c730f0d77c80c031c4567bc942c82b1f19af720bf495102e45d4","sha512":"ecbec4d025cc35574bee0311f55ffe2bf78ada823d46b1f7aac4ef5335389f532a3d87c98473f77174cdfab4c08550c2f735008f56ae6be1e59dec3553e8e0cd","ssdeep":"96:t/3DRkLDTQuaggg47nROQKdvXoaroPbgGM2e:t/zRk/cZggfgdvBuUGw","tlshash":"aee10eb5e2401004a3bfd475ef01fbae614a8119d146b1fe94c1eeac95ce7d916e2b0f","first_seen":"2026-02-26T23:55:00.626328Z","last_seen":"2026-03-18T23:20:05.761689Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1701,"timings":{"blocked":1421,"dns":0,"connect":0,"send":0,"wait":279,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-18T23:19:37.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:39 GMT\r\nServer: Server\r\nExpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nCache-Control: no-cache, must-revalidate, max-age=0, no-store, private\r\nLink: \u003chttps://pdi.or.kr/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://pdi.or.kr/wp-json/wp/v2/pages/24\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\"\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Contact Form 7:6.1.5","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]}],"data":{"size":49936,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8832)","md5":"011592e784b7d39f66de724b0f5612ff","sha1":"94193975051919120d14fe8168862605cd8b5c89","sha256":"d9b6443838c644f5f95b68d0f0cb96d83c094f247e1a46ffe72f1afb71ae784a","sha512":"5d959f5dc281acb3734e70afdc507fa90b00558226548efef330bfc26d580cafe018a65ccec4fd5ea65a618d8e8c213465f6eecef4160b3092742f030fe52e3c","ssdeep":"768:utZdypJhC8YFzjkOdZDOkIka88Cf4wGUlAkAKHWo0sC3:ulypL9uzj3dZDOkIkaVCf4wGUlAkAKHU","tlshash":"9e2372f35c8c703e124eb2859989b518e2d7d156cf252a21b3fe626ddb81fe604b211f","first_seen":"2026-03-18T23:20:05.763221Z","last_seen":"2026-03-18T23:20:05.763221Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6639,"timings":{"blocked":1576,"dns":773,"connect":266,"send":0,"wait":2950,"receive":533,"ssl":538},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/themes/csid2017/images/brand-footer.png","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:42.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-content/themes/csid2017/images/brand-footer.png HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:47 GMT\r\nServer: Server\r\nLast-Modified: Wed, 04 Apr 2018 20:20:38 GMT\r\nETag: \"577-5690b8e639180\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1399\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1399,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 71 x 71, 8-bit/color RGBA, non-interlaced","md5":"ba0614a6ac4a17b2b7710f6bebe7a033","sha1":"855bf74c1e058a9af97dce65400e47c56645365c","sha256":"08676aba88127b643830a026d5dd64a272311e952147a956ef64f3c259e0d50b","sha512":"82596a2de53b85af6f48312bbb5c3bdaf69a53f4a59be22e84c4ecc00544d72307aef5265ffaab0862feb0ebaa82f1dd39c074ae14adb8c7d44182b02c69c66c","ssdeep":"","tlshash":"5f21e6dcd878a04b033d2a3f1c0a5acd0537218a3712eb1ca19de7a5c44c908afe83ec","first_seen":"2026-02-26T23:55:00.602339Z","last_seen":"2026-03-18T23:20:05.764144Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5165,"timings":{"blocked":4026,"dns":0,"connect":284,"send":0,"wait":283,"receive":0,"ssl":572},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/themes/csid2017/js/slick.min.js","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:42.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-content/themes/csid2017/js/slick.min.js HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:45 GMT\r\nServer: Server\r\nLast-Modified: Mon, 26 Mar 2018 13:52:51 GMT\r\nETag: \"a3e1-5685116fef2c0\"\r\nAccept-Ranges: bytes\r\nContent-Length: 41953\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41953,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32076)","md5":"b53bdfc29e18f4d493d775a8023fbdc8","sha1":"e9fcbcc4fa70cba093b81d982a1b78509414cef7","sha256":"e02af7df9a190d88380e2dcec2050ecaa493ae2d23526dbeec67f6907df3a752","sha512":"027e1adc510cc91e416cef4245042a82c06c7318cceee34d99c71448448d56d5a7e77116c7907da0eed15673ef3c6e847187183e9d06bf78bf410e0a53307958","ssdeep":"768:G1t6WvsBZPKBt3FPmS3+EYykK1GPzpiN9sJTPdATgjZ7Nc4hC5orG1TsJ:X0tVUkkK1GPz6QrG1AJ","tlshash":"04139509d204372688eb12e57105c14ea3fbfababd12c0f076c987d6606d81d86e77f6","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-08-11T20:02:34.594617Z","times_seen":19318,"resource_available":true,"data":null}},"time_used":3141,"timings":{"blocked":2599,"dns":0,"connect":0,"send":0,"wait":272,"receive":270,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/themes/csid2017/css/normalize.css","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:44.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-content/themes/csid2017/css/normalize.css HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/wp-content/themes/csid2017/style.css?ver=6.9.4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:44 GMT\r\nServer: Server\r\nLast-Modified: Sun, 29 Apr 2018 21:43:59 GMT\r\nETag: \"f4a-56b03a28125c0\"\r\nAccept-Ranges: bytes\r\nContent-Length: 3914\r\nConnection: close\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3914,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (538)","md5":"646efcc51ca3d8aeb6c416ef076cd2cf","sha1":"535e6c43f9cbc21b622fb125175de5e103f6366b","sha256":"510960580aaeff77123c5ab6376e6748dfb00206634efe5e2f30f0dbaa8e8dcb","sha512":"ffd6fce9a13aa1c6116404cf3417b9c3c440305e51a835f969e5c7652ec9ed8c2f12fe6f238007a8f871297526c18b4e4b0d64fc87bdcc142c316f61eaa47081","ssdeep":"","tlshash":"3981a725730436005773dba1b776afa861044117d10246edb6d0ac9fdece2bed1b2f15","first_seen":"2026-02-26T23:55:00.616711Z","last_seen":"2026-03-18T23:20:05.765787Z","times_seen":2,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/themes/csid2017/images/header-ico-search.png","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:46.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-content/themes/csid2017/images/header-ico-search.png HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/wp-content/themes/csid2017/style.css?ver=6.9.4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:48 GMT\r\nServer: Server\r\nLast-Modified: Mon, 26 Mar 2018 13:52:49 GMT\r\nETag: \"492-5685116e06e40\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1170\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1170,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 17 x 17, 8-bit/color RGBA, non-interlaced","md5":"47be3f7b39bf3feddf9dc4f8e07f8ee4","sha1":"0c9183cee0212357d42bd11e375bbb9590e28318","sha256":"98b0742abb25d26c143decb668049c224b997e096a65336d39996994e5c052d3","sha512":"b4dc5be495ff8a616e4e5cfd69dcaf20a532828df82da7f6d0ad47fccb6783a0503d54b52ffcc82ec9d11bff26cc125529380da7bc52d7d79b73d43a0c69d974","ssdeep":"","tlshash":"442167d6ffd02940728ea98028f380264913075099d0f5ba6fcfd82f58602b689265ef","first_seen":"2026-02-26T23:55:00.633615Z","last_seen":"2026-03-18T23:20:05.766533Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2032,"timings":{"blocked":958,"dns":2,"connect":266,"send":0,"wait":267,"receive":0,"ssl":536},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/theeluwin/NotoSansKR-Hestia@master/fonts/eot/NotoSansKR-Bold-Hestia.eot","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:47.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/theeluwin/NotoSansKR-Hestia@master/fonts/eot/NotoSansKR-Bold-Hestia.eot HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pdi.or.kr\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 240380\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/vnd.ms-fontobject\r\nx-jsd-version: master\r\nx-jsd-version-type: branch\r\netag: W/\"60de6-fcIEfRgFn5hlwpsVLqixgOMDYlA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 42730\r\ndate: Wed, 18 Mar 2026 23:19:47 GMT\r\nx-served-by: cache-fra-etou8220184-FRA, cache-osl6544-OSL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":396774,"size_decoded":0,"mime_type":"application/vnd.ms-fontobject","magic":"Embedded OpenType (EOT), Noto Sans KR Bold family","md5":"7c7e657adfa8d39218727a6879abb465","sha1":"7dc2047d18059f9865c29b152ea8b180e3036250","sha256":"3a2f5838e2dd5b1f4bfe8bf4a043c9aa28bcbf40ca746c9369c3694328f6be2c","sha512":"3e9a5dd5280afb6e0828cb5cc611e7082f0066e50b4d89dbd9359f37f8b219e76908aec00ced29e7532cfbd6f1921877ffa345dd844eb35a4a0bb13aa4f692a6","ssdeep":"6144:XkiKI5JU7+ThU8SF0j/2EjW89Y2zUB5ghyxFuOTjxS45epWYfyXubystq+rPaYcj:XkiDywU84qThyTxBDstq+rPi","tlshash":"e584cfda692cb104c7d9b3307903136813d550687abdf9f395dd84c27e66ea02f9eac2","first_seen":"2023-04-15T21:22:07Z","last_seen":"2026-07-20T15:28:16.059108Z","times_seen":245,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/theeluwin/NotoSansKR-Hestia@master/fonts/woff/NotoSansKR-Regular-Hestia.woff","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:47.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/theeluwin/NotoSansKR-Hestia@master/fonts/woff/NotoSansKR-Regular-Hestia.woff HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pdi.or.kr\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 242532\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff\r\nx-jsd-version: master\r\nx-jsd-version-type: branch\r\netag: W/\"3b364-I7n4DXEqiI/RuCplJHPHU60/ubw\"\r\naccept-ranges: bytes\r\nage: 7623\r\ndate: Wed, 18 Mar 2026 23:19:47 GMT\r\nx-served-by: cache-fra-eddf8230223-FRA, cache-osl6544-OSL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":242532,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 242532, version 1.0","md5":"476563b34cbe5da62bdd82a1e21c64fc","sha1":"23b9f80d712a888fd1b82a652473c753ad3fb9bc","sha256":"a8f62e9bfd32f37388ea5ec86104c819e3ebe9b2e11c700697f07ac97513837e","sha512":"d6e072d3de69026989e1d3e008e8932772dba00bcbf6c7d5fdf3f85110ee9348ddbbd59888393d509e0063838589ed45fa372154ed7e710515c7c9141f4e52f7","ssdeep":"6144:XW4hQVycjICWFmgMZtiENXlHoWxNc/e+TtIwDbWV3RJf4n:JmVjjNWFmXDiE3DcdJIwHCRJu","tlshash":"4a342377e26580eee4227bf5eab01777b5bc546fa60d0df792c415dcd227398a100e0a","first_seen":"2023-04-05T22:48:54Z","last_seen":"2026-07-25T04:30:06.631251Z","times_seen":447,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/themes/csid2017/js/jquery.placeholder.js","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:42.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-content/themes/csid2017/js/jquery.placeholder.js HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:45 GMT\r\nServer: Server\r\nLast-Modified: Mon, 26 Mar 2018 13:52:50 GMT\r\nETag: \"1c7d-5685116efb080\"\r\nAccept-Ranges: bytes\r\nContent-Length: 7293\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7293,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"0654b9120b2879e6735d7aeb51cf8ac1","sha1":"a5359150fd5f71ba0c87c3081133ce7f665e2a85","sha256":"a4a5a561303ace309f832edefc976224278837a25320f0422d546b6c5392e9a4","sha512":"40333f08eb2e8a1a03c85196dda668b879193ad1df0fce800ba5562a6dc23c0af2d6e678ddc71cae1aa52626383c3c8a45b7f2a29a2750a3c5b7322e057baabf","ssdeep":"192:f1NlcJn0t7rTlaEttVtX11gtYyGWhKIay:Fc1Sk","tlshash":"6de1ca0c7cfb72a4496bb07a6bdfc804717545234049da90b83c53556fa1ca8e7f1ee9","first_seen":"2025-10-10T22:56:45.204966Z","last_seen":"2026-03-18T23:20:05.768682Z","times_seen":3,"resource_available":true,"data":null}},"time_used":2870,"timings":{"blocked":2587,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/theeluwin/NotoSansKR-Hestia@master/stylesheets/NotoSansKR-Hestia.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:46.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/theeluwin/NotoSansKR-Hestia@master/stylesheets/NotoSansKR-Hestia.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pdi.or.kr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 436\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: master\r\nx-jsd-version-type: branch\r\netag: W/\"128b-Fzo6Rs1rV+307xD5mxEB3cwmU/k\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 23:19:46 GMT\r\nage: 15883\r\nx-served-by: cache-fra-eddf8230134-FRA, cache-osl6544-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4747,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8b9e08df63d854c1c9835ebc6eb2c2f9","sha1":"173a3a46cd6b57edf4ef10f99b1101ddcc2653f9","sha256":"06dccdf11da4a15eff6df6ae876c6f5ea49bcfcbd2a81e55fe627ff71ca7825f","sha512":"79a5485f1c829d67c07782453b6546757b4cca8736b638ae471e5671fa68a6d1dc4c9a7479c33b8ed23e715234d98e929f66b3a37007dd7f05312feb62223f29","ssdeep":"96:2GgFhBTfTcALTc2TLmgEqTSPTSsALTc3fTXGHgjzTxPTxsALTcQfTwG3gMyTLkTV:2pz3Lj3tOPOzLGfDG41P1zLNfUGOHkHJ","tlshash":"aca10397c6fa30343ec115ce32e724b5943780962645e7dee2b42a831d167ac22b977f","first_seen":"2023-05-07T22:33:11Z","last_seen":"2026-07-31T12:09:18.565485Z","times_seen":122,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/theeluwin/NotoSansKR-Hestia@master/fonts/eot/NotoSansKR-Regular-Hestia.eot","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:46.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/theeluwin/NotoSansKR-Hestia@master/fonts/eot/NotoSansKR-Regular-Hestia.eot HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pdi.or.kr\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 237998\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/vnd.ms-fontobject\r\nx-jsd-version: master\r\nx-jsd-version-type: branch\r\netag: W/\"60022-ecGfSOYRXi+ZFSK4Knc5GWFHkaE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 40494\r\ndate: Wed, 18 Mar 2026 23:19:47 GMT\r\nx-served-by: cache-fra-etou8220064-FRA, cache-osl6544-OSL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":393250,"size_decoded":0,"mime_type":"application/vnd.ms-fontobject","magic":"Embedded OpenType (EOT), Noto Sans KR Regular family","md5":"227c062c2c21568e8d802670f924e908","sha1":"79c19f48e6115e2f991522b82a773919614791a1","sha256":"9043053aa899f94e54a4b141c63a83ea1ab31c58afdb3b16c14cc1f538d805d7","sha512":"1945d748d50e6ef82210af3afb0f524950b314d50206f79c4671dfaa2bb58e764086b45ec2ea6e463100d2c87118fc4b4a4086208902ed1e1e2b2c5114610326","ssdeep":"12288:MkiH0Dk64RPLPsQi29VvVmCJl+unurZ7sa2lC:MjaczPVHvV9nEJ","tlshash":"7984bff7682d7408fbdab374b8472b1853e22845793df97f54caa9201c82a857f895c3","first_seen":"2023-04-05T22:48:54Z","last_seen":"2026-07-25T04:30:06.620383Z","times_seen":350,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:47.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.4 HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:47 GMT\r\nServer: Server\r\nLast-Modified: Thu, 12 Mar 2026 03:08:39 GMT\r\nETag: \"58ea-64ccb11b196ae\"\r\nAccept-Ranges: bytes\r\nContent-Length: 22762\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-11T22:29:18.082462Z","times_seen":310920,"resource_available":true,"data":null}},"time_used":1813,"timings":{"blocked":692,"dns":0,"connect":0,"send":0,"wait":280,"receive":279,"ssl":562},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/theeluwin/NotoSansKR-Hestia@master/fonts/eot/NotoSansKR-Light-Hestia.eot","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:47.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/theeluwin/NotoSansKR-Hestia@master/fonts/eot/NotoSansKR-Light-Hestia.eot HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pdi.or.kr\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 231447\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/vnd.ms-fontobject\r\nx-jsd-version: master\r\nx-jsd-version-type: branch\r\netag: W/\"60ffa-RhFyGQYfzLi/9N3r+PZLPyV/QBA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 23:19:47 GMT\r\nage: 2583\r\nx-served-by: cache-fra-etou8220026-FRA, cache-osl6544-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":397306,"size_decoded":0,"mime_type":"application/vnd.ms-fontobject","magic":"Embedded OpenType (EOT), Noto Sans KR Light family","md5":"41f3801b6487b5ef336ec0a553cb3e99","sha1":"46117219061fccb8bff4ddebf8f64b3f257f4010","sha256":"fe8347a5f7d6026f1747349ff9a4aab4728db102dd1c154d78b867b34f790186","sha512":"21b535bd08db49301cb0d26a28e50293a91144f8f65d0666bcb0a821cd1cf550a7f8e04117f19fc4e2e7b936a7ef1e158fd529901cfd8f31c43baeddde850f70","ssdeep":"12288:uTkiEMXdbg2KibSs6i/2yd1trv4KtHLK0U+GppOih:qjA2Kx8vE0URbOC","tlshash":"9184aef7161e2904e7ebb334f70b276913f1a484382ed5bb42ed18119e49eca7a44cc6","first_seen":"2023-05-14T10:33:23Z","last_seen":"2026-05-17T21:02:31.508135Z","times_seen":101,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/xeicon@2.3.3/xeicon.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:42.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/xeicon@2.3.3/xeicon.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=600, s-maxage=600\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/plain; charset=utf-8\r\netag: W/\"28-CwBLBguYffxx60XTU8MoY2j//d8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 248\r\ndate: Wed, 18 Mar 2026 23:19:42 GMT\r\nx-served-by: cache-fra-etou8220198-FRA, cache-osl6520-OSL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 44\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T22:57:34.772395Z","times_seen":17845104,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":21,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/themes/csid2017/style.css?ver=6.9.4","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:42.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-content/themes/csid2017/style.css?ver=6.9.4 HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:43 GMT\r\nServer: Server\r\nLast-Modified: Mon, 14 Sep 2020 08:30:29 GMT\r\nETag: \"90e3-5af41d8d31340\"\r\nAccept-Ranges: bytes\r\nContent-Length: 37091\r\nConnection: close\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37091,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (333)","md5":"525d5f7119aa8aaf68552f5f8e3a04e7","sha1":"4ec6ed34be9ffd4fda01737e6ba72843c2d2c423","sha256":"b9d8385d9d391b266884ca795a3c330a19c2ef4c9f5454ba86ec5959f14368f3","sha512":"7270aa05e230f7224cb780f79891caf2a2bc3fd75dadfe29b7e5998132b6f41f573309af68079c70be0eb7f3e1185780afd82c79e7ef4ee76ae54368ec04c686","ssdeep":"768:f1OD3qYO3iAeQ8EzOZlMQf3bm04DxiJvZ1ZrFeNGKwgt2WZadkZtmsKpK3:nv8SObMQf3bm04DxiJvzRFeNGKwgQav5","tlshash":"f4f29715f6913004f21bd1a3be92eb8df3228147e24355f9b9f69a0ac7cf58905b374a","first_seen":"2026-02-26T23:55:00.600093Z","last_seen":"2026-03-18T23:20:05.772512Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2102,"timings":{"blocked":743,"dns":3,"connect":269,"send":0,"wait":270,"receive":270,"ssl":545},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:42.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:43 GMT\r\nServer: Server\r\nLast-Modified: Thu, 12 Mar 2026 03:08:39 GMT\r\nETag: \"3509-64ccb11b0db2d\"\r\nAccept-Ranges: bytes\r\nContent-Length: 13577\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-11T22:45:56.523085Z","times_seen":929670,"resource_available":true,"data":null}},"time_used":1986,"timings":{"blocked":808,"dns":1,"connect":292,"send":0,"wait":293,"receive":1,"ssl":588},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/eng/wp-content/themes/csid2017/images/brand.png","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:42.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /eng/wp-content/themes/csid2017/images/brand.png HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:47 GMT\r\nServer: Server\r\nLast-Modified: Mon, 14 Sep 2020 08:06:07 GMT\r\nETag: \"207d-5af4181aeb9c0\"\r\nAccept-Ranges: bytes\r\nContent-Length: 8317\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8317,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 482 x 78, 8-bit/color RGBA, non-interlaced","md5":"eb350193705e598aa5c0965b3755a0d3","sha1":"e2fe5fa7bc76377be8e9a7b286c86cc329f69ba1","sha256":"668895d94dc8456d044ab726babc55070ab80413506786fa779a4e32ba78472e","sha512":"98112a9dc8d6e9420e3158217bc2963b651acc840330f5a4c23753e73b897ae89ae90f07bd23d2da11afc901bdb6e53d9f21a790c61da1742d7bde1c201119f5","ssdeep":"192:Gd0x3mPQ7fw33XBaeB4hq+NjnVIzB8ymG5bI:Gd0FmPQLwHQeB4hq+N7VAB8ymG58","tlshash":"2b02af8a0cfcd743cd1889da5cec82dd645b01e3e1e4b53a963ed99f58c50a8832d74e","first_seen":"2026-02-26T23:55:00.618392Z","last_seen":"2026-03-18T23:20:05.773873Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5184,"timings":{"blocked":4050,"dns":0,"connect":281,"send":0,"wait":282,"receive":1,"ssl":569},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:42.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:44 GMT\r\nServer: Server\r\nLast-Modified: Thu, 12 Mar 2026 03:08:39 GMT\r\nETag: \"14c2-64ccb11b0759c\"\r\nAccept-Ranges: bytes\r\nContent-Length: 5314\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5314,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-08-11T22:02:32.332172Z","times_seen":201005,"resource_available":true,"data":null}},"time_used":1373,"timings":{"blocked":1093,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:42.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:45 GMT\r\nServer: Server\r\nLast-Modified: Thu, 12 Mar 2026 03:14:08 GMT\r\nETag: \"348c-64ccb2551f39d\"\r\nAccept-Ranges: bytes\r\nContent-Length: 13452\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13452,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-08-11T22:38:35.878475Z","times_seen":233916,"resource_available":true,"data":null}},"time_used":2419,"timings":{"blocked":1334,"dns":0,"connect":269,"send":0,"wait":270,"receive":1,"ssl":545},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/uploads/2018/04/about_03.jpg","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:42.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-content/uploads/2018/04/about_03.jpg HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:47 GMT\r\nServer: Server\r\nLast-Modified: Thu, 12 Apr 2018 17:33:48 GMT\r\nETag: \"27de2-569aa287a1700\"\r\nAccept-Ranges: bytes\r\nContent-Length: 163298\r\nConnection: close\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":163298,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 858x370, components 3","md5":"bffac06ab1b94ebca8bba25d1b077c12","sha1":"26f054729e400ee4c784c3cd012273d2f0d44d6e","sha256":"87e37393b4e364d706d6f2b57f2cbdd749b2e8ca3a548638f136cd69e8c0540a","sha512":"b84fa5b1c6cc33605190a7cd1556f05c08c00d93fb1654f4b065962bdaf91507ae18a1c609e5db624c4cc4e5634bd7857f1505140a0875e47b1a55831cd2f4ff","ssdeep":"3072:45anM/JUiVS+/TKCowHP43qRDRnoJ0jEhNiGrkyBFXqzRgffE5byWg6Fp1:45aAdSmTOwvqqRDRoJ0jqiGr/XZffE5v","tlshash":"76f312420a4fba30b6e40a19e73143136ac14cb95db9d18e09dde01e7bfe85b59d8b78","first_seen":"2026-02-26T23:55:00.639983Z","last_seen":"2026-03-18T23:20:05.775875Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5078,"timings":{"blocked":3996,"dns":0,"connect":0,"send":0,"wait":270,"receive":812,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/themes/csid2017/js/script.js","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:42.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-content/themes/csid2017/js/script.js HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:45 GMT\r\nServer: Server\r\nLast-Modified: Tue, 03 Apr 2018 21:25:10 GMT\r\nETag: \"893-568f857563980\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2195\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2195,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"4e49fae6f072d7f7e7c8cde2e411e242","sha1":"13861fdcc7cfef008b8237256426a3cb0c1958fc","sha256":"32e21034f0111e909c45942b1aec0e2e57519380271a50f1adb6a381d0744ca0","sha512":"45c7a5659d9072e14c4075186d55f32c451eb762ba5e411e18024bf6baa7e3b131d218b1fd613de71dd1f46e1526cd5e0f313f747116f6d576f49776a1cc2b11","ssdeep":"","tlshash":"6141bb09fb6db13b047762a85eaff3865f6d05515a026437f8ee09547b8023f20cadac","first_seen":"2026-02-26T23:55:00.625085Z","last_seen":"2026-03-18T23:20:05.7769Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2882,"timings":{"blocked":2600,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/theeluwin/NotoSansKR-Hestia@master/fonts/woff/NotoSansKR-Light-Hestia.woff","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:47.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/theeluwin/NotoSansKR-Hestia@master/fonts/woff/NotoSansKR-Light-Hestia.woff HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pdi.or.kr\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 237368\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff\r\nx-jsd-version: master\r\nx-jsd-version-type: branch\r\netag: W/\"39f38-oFQzj9gBBqOdV2omASdwGbFaaeA\"\r\naccept-ranges: bytes\r\nage: 37004\r\ndate: Wed, 18 Mar 2026 23:19:47 GMT\r\nx-served-by: cache-fra-etou8220164-FRA, cache-osl6544-OSL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":237368,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 237368, version 1.0","md5":"07341155e80be4d85145a11bccc49c22","sha1":"a054338fd80106a39d576a2601277019b15a69e0","sha256":"37cf17bc258911f202bec93438fa8e462300ad9b550eae719c625e750160f5b5","sha512":"f2612b13d4b2afed0d3d259c0ad03645d19e89478eacb33bf9f1b540f1b28eecafd554e39b571e009eef66fdba368bf6f75c2fee511ec26a83e7a37b5e6b0ccf","ssdeep":"6144:Y37shN2P39kOP7ElRBxOuCHqybffioNXojgA97jC/nOx9z:OPk+ElRzLCHvbnioNXmRkOH","tlshash":"6a3412b9adad1a9d420cb5ecc66d6ab79ffb76a580435be0190d6380b360ccdb137406","first_seen":"2023-05-14T10:33:23Z","last_seen":"2026-05-23T15:35:29.667796Z","times_seen":117,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/theeluwin/NotoSansKR-Hestia@master/fonts/eot/NotoSansKR-Regular-Hestia.eot","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:47.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/theeluwin/NotoSansKR-Hestia@master/fonts/eot/NotoSansKR-Regular-Hestia.eot HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pdi.or.kr\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 237998\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/vnd.ms-fontobject\r\nx-jsd-version: master\r\nx-jsd-version-type: branch\r\netag: W/\"60022-ecGfSOYRXi+ZFSK4Knc5GWFHkaE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 23:19:47 GMT\r\nage: 40494\r\nx-served-by: cache-fra-etou8220064-FRA, cache-osl6544-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":393250,"size_decoded":0,"mime_type":"application/vnd.ms-fontobject","magic":"Embedded OpenType (EOT), Noto Sans KR Regular family","md5":"227c062c2c21568e8d802670f924e908","sha1":"79c19f48e6115e2f991522b82a773919614791a1","sha256":"9043053aa899f94e54a4b141c63a83ea1ab31c58afdb3b16c14cc1f538d805d7","sha512":"1945d748d50e6ef82210af3afb0f524950b314d50206f79c4671dfaa2bb58e764086b45ec2ea6e463100d2c87118fc4b4a4086208902ed1e1e2b2c5114610326","ssdeep":"12288:MkiH0Dk64RPLPsQi29VvVmCJl+unurZ7sa2lC:MjaczPVHvV9nEJ","tlshash":"7984bff7682d7408fbdab374b8472b1853e22845793df97f54caa9201c82a857f895c3","first_seen":"2023-04-05T22:48:54Z","last_seen":"2026-07-25T04:30:06.620383Z","times_seen":350,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/theeluwin/NotoSansKR-Hestia@master/fonts/woff/NotoSansKR-Light-Hestia.woff","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:47.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/theeluwin/NotoSansKR-Hestia@master/fonts/woff/NotoSansKR-Light-Hestia.woff HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pdi.or.kr\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 237368\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff\r\nx-jsd-version: master\r\nx-jsd-version-type: branch\r\netag: W/\"39f38-oFQzj9gBBqOdV2omASdwGbFaaeA\"\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 23:19:47 GMT\r\nage: 37004\r\nx-served-by: cache-fra-etou8220164-FRA, cache-osl6544-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":237368,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 237368, version 1.0","md5":"07341155e80be4d85145a11bccc49c22","sha1":"a054338fd80106a39d576a2601277019b15a69e0","sha256":"37cf17bc258911f202bec93438fa8e462300ad9b550eae719c625e750160f5b5","sha512":"f2612b13d4b2afed0d3d259c0ad03645d19e89478eacb33bf9f1b540f1b28eecafd554e39b571e009eef66fdba368bf6f75c2fee511ec26a83e7a37b5e6b0ccf","ssdeep":"6144:Y37shN2P39kOP7ElRBxOuCHqybffioNXojgA97jC/nOx9z:OPk+ElRzLCHvbnioNXmRkOH","tlshash":"6a3412b9adad1a9d420cb5ecc66d6ab79ffb76a580435be0190d6380b360ccdb137406","first_seen":"2023-05-14T10:33:23Z","last_seen":"2026-05-23T15:35:29.667796Z","times_seen":117,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/uploads/2021/04/cropped-brand_eng-32x32.png","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:47.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-content/uploads/2021/04/cropped-brand_eng-32x32.png HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:48 GMT\r\nServer: Server\r\nLast-Modified: Thu, 08 Apr 2021 03:44:20 GMT\r\nETag: \"37e-5bf6ddcc82d00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 894\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":894,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"47a3a6c3c9d397a6472cec468474e3bd","sha1":"268e1c4d926e408ed86cfb0efebf5a7939c5c1ab","sha256":"bacbaee9c1dd91054938875931b0015bf7bd1756579ef4249c035dc317653daa","sha512":"7ef4c18e5f9af6d581e3d2d5db9ce33093e0f29e861fa05bdcfaecc13a6b252fd58c707cf3108e644e758f978bb819e05c4b34ba3f67ae6a73fc2cb43c443771","ssdeep":"","tlshash":"b011e6b2f0c07d730e4b1a75c5aa000258964c1f0833a74d01e8cc7e64f29c4e7ca3ca","first_seen":"2026-02-26T23:55:00.64271Z","last_seen":"2026-03-18T23:20:05.779797Z","times_seen":2,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":188,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-includes/css/dist/block-library/style.min.css?ver=6.9.4","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:42.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.9.4 HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:43 GMT\r\nServer: Server\r\nLast-Modified: Thu, 12 Mar 2026 03:08:39 GMT\r\nETag: \"1d23e-64ccb11aef2e1\"\r\nAccept-Ranges: bytes\r\nContent-Length: 119358\r\nConnection: close\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":119358,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55871)","md5":"b592e353685f2eabaf8f935e377a95a0","sha1":"30d4a0ff9561f9c96a0a29cce379dfbde9749a65","sha256":"3b44e208bba827e614cf1e36e639e3c7cfb849771fb17e99bb38e14022d30d16","sha512":"193686fe6c1766b540e311015484745ad2ceddb9ffc3f883ac3ae66f1d29e32bca94ba11d40f3d0f6689c306f7760ae167d8af73a22778aba93a772e076a9cd4","ssdeep":"3072:WoeJBCCUQg5MG7x+qehvP0xdclkWwbFpPu:CfUQg5MG7x+qehvP0xdclkWiF0","tlshash":"cfc3621417b4dcf935ffa73a5e4ee258a107aa41c68a67e6e066d190718ca490cf3f0f","first_seen":"2026-02-03T19:45:02.649878Z","last_seen":"2026-08-11T21:34:28.886801Z","times_seen":50268,"resource_available":false,"data":null}},"time_used":2912,"timings":{"blocked":909,"dns":45,"connect":278,"send":0,"wait":279,"receive":838,"ssl":561},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:42.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:43 GMT\r\nServer: Server\r\nLast-Modified: Thu, 12 Mar 2026 03:08:39 GMT\r\nETag: \"15601-64ccb11b0df15\"\r\nAccept-Ranges: bytes\r\nContent-Length: 87553\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-11T22:45:56.507754Z","times_seen":1014845,"resource_available":true,"data":null}},"time_used":2485,"timings":{"blocked":786,"dns":1,"connect":278,"send":0,"wait":279,"receive":559,"ssl":578},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/theeluwin/NotoSansKR-Hestia@master/fonts/eot/NotoSansKR-Light-Hestia.eot","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:46.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/theeluwin/NotoSansKR-Hestia@master/fonts/eot/NotoSansKR-Light-Hestia.eot HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pdi.or.kr\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 231447\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/vnd.ms-fontobject\r\nx-jsd-version: master\r\nx-jsd-version-type: branch\r\netag: W/\"60ffa-RhFyGQYfzLi/9N3r+PZLPyV/QBA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 23:19:47 GMT\r\nage: 2583\r\nx-served-by: cache-fra-etou8220026-FRA, cache-osl6544-OSL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":397306,"size_decoded":0,"mime_type":"application/vnd.ms-fontobject","magic":"Embedded OpenType (EOT), Noto Sans KR Light family","md5":"41f3801b6487b5ef336ec0a553cb3e99","sha1":"46117219061fccb8bff4ddebf8f64b3f257f4010","sha256":"fe8347a5f7d6026f1747349ff9a4aab4728db102dd1c154d78b867b34f790186","sha512":"21b535bd08db49301cb0d26a28e50293a91144f8f65d0666bcb0a821cd1cf550a7f8e04117f19fc4e2e7b936a7ef1e158fd529901cfd8f31c43baeddde850f70","ssdeep":"12288:uTkiEMXdbg2KibSs6i/2yd1trv4KtHLK0U+GppOih:qjA2Kx8vE0URbOC","tlshash":"9184aef7161e2904e7ebb334f70b276913f1a484382ed5bb42ed18119e49eca7a44cc6","first_seen":"2023-05-14T10:33:23Z","last_seen":"2026-05-17T21:02:31.508135Z","times_seen":101,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/uploads/2021/04/cropped-brand_eng-192x192.png","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:47.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-content/uploads/2021/04/cropped-brand_eng-192x192.png HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:48 GMT\r\nServer: Server\r\nLast-Modified: Thu, 08 Apr 2021 03:44:20 GMT\r\nETag: \"1f3f-5bf6ddcc82d00\"\r\nAccept-Ranges: bytes\r\nContent-Length: 7999\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7999,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"4f0d8bf7c3a9a4964c8d5d17a913d9f0","sha1":"22d074023022955c10f5e1e933d0548178525499","sha256":"6b059618e4da2f4d142de7c50a8bbe227941a74ddfffbc42d57bb8349353f1bc","sha512":"7914a728137ac4c831f473cde1b5e30f70c7d5b0feef21d528029988815bd5c6fc03c1814132f7f168cf82954569ca4554ce569a976287464049867a8e0942f6","ssdeep":"192:tRuucjB+ZO1TAUEkOX97tD07Qvwgzc+sHqDg2G:nuuQ+0lOX9761Kc+sHebG","tlshash":"86f1bfc98aac67adc622e422dc4df1b9641e455e3cfbf2d78a7c484b82c8bfe1005711","first_seen":"2026-02-26T23:55:00.627848Z","last_seen":"2026-03-18T23:20:05.78213Z","times_seen":2,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":184,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/themes/csid2017/js/jquery-1.11.3.min.js","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:42.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-content/themes/csid2017/js/jquery-1.11.3.min.js HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:42 GMT\r\nServer: Server\r\nLast-Modified: Wed, 04 Apr 2018 02:54:59 GMT\r\nETag: \"176d4-568fcf2da66c0\"\r\nAccept-Ranges: bytes\r\nContent-Length: 95956\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95956,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"b091a47f6b91e26c93a848092c6f3788","sha1":"52918af2d431e73464060b35d364640c8db75606","sha256":"329ab92b9276ef4e3148f69be6b208969bebdf2db3121a589caa172453fd9f10","sha512":"ab444102be476f0104eeff79c9b596174852b4fe8cbd0b5a0279d56f106a166ec39304636e09326213de000b102ce8f517bb268a9abb2955c56ee4f18b464ea8","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmS:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"6893d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:10:10Z","last_seen":"2026-08-09T21:02:50.879029Z","times_seen":18423,"resource_available":true,"data":null}},"time_used":849,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":570,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/themes/csid2017/js/parallax.js","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:42.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-content/themes/csid2017/js/parallax.js HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:43 GMT\r\nServer: Server\r\nLast-Modified: Wed, 04 Apr 2018 02:42:13 GMT\r\nETag: \"2f06-568fcc5322b40\"\r\nAccept-Ranges: bytes\r\nContent-Length: 12038\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12038,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"1d8030113085a472e5a480be2150774a","sha1":"99421a12353f0c384401bf511929fa9eebe9a2b7","sha256":"43a45a150e7ef4230528b8a05be250e3f8a05c2c7114492c113690dcde86f05f","sha512":"6e18f4cd8ad1a55c6bab2c3df1d27a2089adfdd07162b031e2ab98d0d355fc569a1358a046210f14d8a0c3f358f8015e4f864a5374d1111ef239da96ee188ac7","ssdeep":"192:LvfjIGjnVlpMoZmSNgILJNara2lLK4QeJr8AanBfdyEaZprOjYaGD:LMEnP4eBBo","tlshash":"ff42fd0917b71012d1abb2ad1fbf4209b235906b2c0bc91d3e9d21d89f91a3516b7ff8","first_seen":"2023-03-07T01:18:00Z","last_seen":"2026-08-11T08:01:13.63182Z","times_seen":426,"resource_available":true,"data":null}},"time_used":2052,"timings":{"blocked":877,"dns":1,"connect":292,"send":0,"wait":292,"receive":1,"ssl":588},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-includes/js/hoverIntent.min.js?ver=1.10.2","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:42.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:45 GMT\r\nServer: Server\r\nLast-Modified: Thu, 12 Mar 2026 03:08:39 GMT\r\nETag: \"5db-64ccb11b167ce\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1499\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1499,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1464)","md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-08-11T21:37:52.002738Z","times_seen":87959,"resource_available":true,"data":null}},"time_used":2606,"timings":{"blocked":1523,"dns":0,"connect":268,"send":0,"wait":269,"receive":0,"ssl":546},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/themes/csid2017/js/select2.min.js","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:42.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-content/themes/csid2017/js/select2.min.js HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:45 GMT\r\nServer: Server\r\nLast-Modified: Mon, 26 Mar 2018 13:52:51 GMT\r\nETag: \"f572-5685116fef2c0\"\r\nAccept-Ranges: bytes\r\nContent-Length: 62834\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62834,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32090)","md5":"206247de2e69feca540152f21355b017","sha1":"154e2d61636b7b66e914f970c45dca0d965e2d4b","sha256":"58ee90710484339bf01cbe1e00d51dfe6cf146a472c4fdd15a3fabe854b9a979","sha512":"7d9cbdb9d70cb426eb2af2c8c5684e51a1fa4d961d7638b304484449e4ecbf5970cd781c47a65a9615b27be0654ff290d0a21fca38aac1c7bb20a2ad447dbd85","ssdeep":"768:joA4SA2njm1T98RqqFtBg6GBokOl/NPwxDVQ3cx7TorpznDNGmZlj5DzQ:t9fnS1T98R9pkOZd3MeLhGAD8","tlshash":"d853a849b9537235426f20e6656f000e2137bb7eb00a99b8b458cdec5abdd14326bf3d","first_seen":"2023-03-07T01:28:34Z","last_seen":"2026-08-10T00:37:13.581447Z","times_seen":1485,"resource_available":true,"data":null}},"time_used":3410,"timings":{"blocked":2591,"dns":0,"connect":0,"send":0,"wait":274,"receive":545,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/themes/csid2017/css/slick.css","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:44.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-content/themes/csid2017/css/slick.css HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/wp-content/themes/csid2017/style.css?ver=6.9.4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:46 GMT\r\nServer: Server\r\nLast-Modified: Mon, 26 Mar 2018 13:52:49 GMT\r\nETag: \"6c1-5685116e06e40\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1729\r\nConnection: close\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1729,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"13b1b6672b8cfb0d9ae7f899f1c42875","sha1":"6e9d13342a11a8cfd9e42ee243eaeae01cda4e25","sha256":"d917660c3d6f7aad32ebc4b0012c6d0bb84a13e201a012e334bcca4b9f4686c9","sha512":"58859d7505bb6c77ecd60c080982285ee89f2dbf2008f904ed9fe0abb407937a4abb18cdb3413af119f973b220e1c5a0b995b9088bd1ae84e3d86ad2c6cbd465","ssdeep":"","tlshash":"a831f64845b389464416818d5fd7ca6d2bfff0131c29a199bacd53068fceae8e9c16b2","first_seen":"2023-04-05T05:38:02Z","last_seen":"2026-08-11T22:29:18.060421Z","times_seen":14742,"resource_available":false,"data":null}},"time_used":2763,"timings":{"blocked":1629,"dns":0,"connect":282,"send":0,"wait":283,"receive":0,"ssl":569},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.rawgit.com/theeluwin/NotoSansKR-Hestia/master/stylesheets/NotoSansKR-Hestia.css","fqdn":"cdn.rawgit.com","domain":"rawgit.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:45.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.rawgit.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 19:04:50 GMT","end":"Tue, 26 May 2026 19:04:49 GMT"},"fingerprint":{"sha1":"59:16:8A:CC:82:1A:FB:A5:E4:30:F4:20:0F:AF:DB:00:59:0E:D3:D5","sha256":"43:AB:D9:5B:F9:5B:6D:7F:1A:9C:71:62:E6:84:6A:B3:80:19:51:2B:09:99:BA:D9:EB:4E:83:32:3D:E5:62:BE"}}},"request":{"raw":"GET /theeluwin/NotoSansKR-Hestia/master/stylesheets/NotoSansKR-Hestia.css HTTP/1.1\r\nHost: cdn.rawgit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 18 Mar 2026 23:19:46 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 130\r\nlocation: https://cdn.jsdelivr.net/gh/theeluwin/NotoSansKR-Hestia@master/stylesheets/NotoSansKR-Hestia.css\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 201235\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nage: 32881\r\ncache-control: public, max-age=2592000\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-served-by: cache-fra-eddf8230229-FRA, cache-chi-kigq8000147-CHI\r\nx-cache: MISS, HIT\r\ncdn-proxyver: 1.43\r\ncdn-requestpullcode: 301\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 03/18/2026 23:19:46\r\ncdn-status: 301\r\ncdn-requesttime: 0\r\ncdn-requestid: 8c9acb8e4800985db476b6e37c43058b\r\ncdn-cache: EXPIRED\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4747,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T22:57:34.772395Z","times_seen":17845104,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":85,"dns":44,"connect":17,"send":0,"wait":139,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/theeluwin/NotoSansKR-Hestia@master/fonts/woff/NotoSansKR-Bold-Hestia.woff","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:47.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/theeluwin/NotoSansKR-Hestia@master/fonts/woff/NotoSansKR-Bold-Hestia.woff HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pdi.or.kr\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 244996\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff\r\nx-jsd-version: master\r\nx-jsd-version-type: branch\r\netag: W/\"3bd04-L6+am4f6D7R0WZ4DG9oArbqf1Ug\"\r\naccept-ranges: bytes\r\nage: 5329\r\ndate: Wed, 18 Mar 2026 23:19:47 GMT\r\nx-served-by: cache-fra-eddf8230081-FRA, cache-osl6544-OSL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":244996,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 244996, version 1.0","md5":"bcacd0068ce611f413c4788810c65e59","sha1":"2faf9a9b87fa0fb474599e031bda00adba9fd548","sha256":"562442ee202c600f00a8df896b632c1d6a2fad85186cf32cc9b33075c91ca0cf","sha512":"72038701ad1e289f8b14fcdc5c72b94b88647549b79f7d88e74e62bac582087454c97af70fc067d11a1ece8ef573d4d0c0c9687cc8edcdcc2f715ddbf8071823","ssdeep":"6144:XyzEcPybKczAipp67pOY8KLU6Zd1C8JKfFtmZuvmp06rC8FLa0f:X8yb4ip47EY8n6v08JamOm7hN","tlshash":"86342327a722ebdb7ba00f38171827760390a222d3f3dd241ce3566512776b676d24d7","first_seen":"2023-04-15T21:22:07Z","last_seen":"2026-07-20T15:28:16.165846Z","times_seen":282,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/theeluwin/NotoSansKR-Hestia@master/fonts/woff/NotoSansKR-Regular-Hestia.woff","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:47.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/theeluwin/NotoSansKR-Hestia@master/fonts/woff/NotoSansKR-Regular-Hestia.woff HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://pdi.or.kr\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 242532\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff\r\nx-jsd-version: master\r\nx-jsd-version-type: branch\r\netag: W/\"3b364-I7n4DXEqiI/RuCplJHPHU60/ubw\"\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 23:19:47 GMT\r\nage: 7623\r\nx-served-by: cache-fra-eddf8230223-FRA, cache-osl6544-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":242532,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 242532, version 1.0","md5":"476563b34cbe5da62bdd82a1e21c64fc","sha1":"23b9f80d712a888fd1b82a652473c753ad3fb9bc","sha256":"a8f62e9bfd32f37388ea5ec86104c819e3ebe9b2e11c700697f07ac97513837e","sha512":"d6e072d3de69026989e1d3e008e8932772dba00bcbf6c7d5fdf3f85110ee9348ddbbd59888393d509e0063838589ed45fa372154ed7e710515c7c9141f4e52f7","ssdeep":"6144:XW4hQVycjICWFmgMZtiENXlHoWxNc/e+TtIwDbWV3RJf4n:JmVjjNWFmXDiE3DcdJIwHCRJu","tlshash":"4a342377e26580eee4227bf5eab01777b5bc546fa60d0df792c415dcd227398a100e0a","first_seen":"2023-04-05T22:48:54Z","last_seen":"2026-07-25T04:30:06.631251Z","times_seen":447,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.5","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:42.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.5 HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:44 GMT\r\nServer: Server\r\nLast-Modified: Thu, 12 Mar 2026 03:14:08 GMT\r\nETag: \"b83-64ccb2551e7e5\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2947\r\nConnection: close\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2947,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"64ac31699f5326cb3c76122498b76f66","sha1":"cc0a5a1741b8257001f89b331378d8aa7c30094a","sha256":"4048fd0e6c44412465449ba4f5c7272349ee1574401cec755d6b8d9c0ccc28dd","sha512":"23ad865e63544ee039221161083510346b01b8be56fa7a83540036c51dceb3f0171adf8f932cf77a457240427c0c3ccbad1f9f371e977c5b6a01e9fe316a878f","ssdeep":"","tlshash":"d0510164660028504bff92db6ea9db047b6e7481cd1faf97b0c21a7c5b782851223e5e","first_seen":"2025-06-26T12:36:15.124007Z","last_seen":"2026-08-11T21:14:18.977277Z","times_seen":139414,"resource_available":false,"data":null}},"time_used":2554,"timings":{"blocked":1122,"dns":1,"connect":292,"send":0,"wait":267,"receive":0,"ssl":536},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/themes/csid2017/js/modernizr.min.js","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:42.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-content/themes/csid2017/js/modernizr.min.js HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:45 GMT\r\nServer: Server\r\nLast-Modified: Mon, 26 Mar 2018 13:52:50 GMT\r\nETag: \"156f-5685116efb080\"\r\nAccept-Ranges: bytes\r\nContent-Length: 5487\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5487,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5381)","md5":"3b891e45f64bd9f8151763f12059c59c","sha1":"5b8b1a25b127d33c5b4200d4ef10a13f3bfce0db","sha256":"9eac5c94896b13151766656bacc851b2302f4ee758af87273044ec045fb3a63c","sha512":"7e61b2f70d58fc941f7c69d9e33af99b3e402ecd4a3240fadc86d8c17554d6fd5113c7647ce69a8a1a91e4b0649f527cf8963b4d54e84d947a929a7321b124d5","ssdeep":"96:IDZTTeLlJl9MgvZtNannK2jc09balrF77i+jfFIqhkBrGKbOm1p2wuztdvC+z:U2/wivNSDt4RwmfFFkBrGKbLRuZdBz","tlshash":"40b1d8dd7541f422a36620b590bf050eb136a079184e8e80f219d9e8acb88fd076fe1f","first_seen":"2023-03-12T08:40:08Z","last_seen":"2026-08-04T12:33:34.207718Z","times_seen":26,"resource_available":true,"data":null}},"time_used":2541,"timings":{"blocked":1364,"dns":1,"connect":292,"send":0,"wait":293,"receive":0,"ssl":591},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pdi.or.kr/wp-content/themes/csid2017/js/alertify.min.js","fqdn":"pdi.or.kr","domain":"pdi.or.kr","tld":"or.kr"},"ip":{"addr":"146.56.175.219","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:42.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pdi.or.kr","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Tue, 09 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:B2:56:B1:6F:61:62:1F:A9:5F:C9:63:50:1F:5C:41:05:81:41:42","sha256":"5A:CE:42:C8:53:DF:56:D9:8F:99:7D:1C:22:E9:9B:FD:D6:5E:12:6E:BE:2D:7E:30:1B:DC:E8:BB:7F:96:8F:16"}}},"request":{"raw":"GET /wp-content/themes/csid2017/js/alertify.min.js HTTP/1.1\r\nHost: pdi.or.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pdi.or.kr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 18 Mar 2026 23:19:45 GMT\r\nServer: Server\r\nLast-Modified: Mon, 26 Mar 2018 13:52:50 GMT\r\nETag: \"1d75-5685116efb080\"\r\nAccept-Ranges: bytes\r\nContent-Length: 7541\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7541,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7502)","md5":"797614ad4a8b443811179ff54f3d40b4","sha1":"4d6cb041cd12fc4e4e6dea44c9d6ae7bed49d783","sha256":"f2c8aaaccfbc09f578dd8dfc18125228bf25a272a4d0c2694804ecc2961c1755","sha512":"eaadc5c36894fc5dc33909ea4c7d75b26b60889846475b6ea1d9695444ba68ca18928f059349dc98930bc3a5bd4f54e419b4579e396e98b2915996c4b1d0e215","ssdeep":"192:YYPnr0+jc6sMRF0TRFeThFDW+woJ1NHTQ5bd+s8N:YkPsmyuygYxdyN","tlshash":"7ff132c572922f351f93536424efc407f0398473baea6c6061e2d9ed2b75c6c5027b6a","first_seen":"2023-03-12T09:05:14Z","last_seen":"2026-08-11T07:22:03.770334Z","times_seen":224,"resource_available":true,"data":null}},"time_used":2595,"timings":{"blocked":1504,"dns":0,"connect":269,"send":0,"wait":270,"receive":0,"ssl":552},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"pdi.or.kr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"pdi.or.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/theeluwin/NotoSansKR-Hestia@master/fonts/eot/NotoSansKR-Bold-Hestia.eot","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.5.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pdi.or.kr/","date":"2026-03-18T23:19:47.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/theeluwin/NotoSansKR-Hestia@master/fonts/eot/NotoSansKR-Bold-Hestia.eot HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pdi.or.kr\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 240380\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/vnd.ms-fontobject\r\nx-jsd-version: master\r\nx-jsd-version-type: branch\r\netag: W/\"60de6-fcIEfRgFn5hlwpsVLqixgOMDYlA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 18 Mar 2026 23:19:47 GMT\r\nage: 42730\r\nx-served-by: cache-fra-etou8220184-FRA, cache-osl6544-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":396774,"size_decoded":0,"mime_type":"application/vnd.ms-fontobject","magic":"Embedded OpenType (EOT), Noto Sans KR Bold family","md5":"7c7e657adfa8d39218727a6879abb465","sha1":"7dc2047d18059f9865c29b152ea8b180e3036250","sha256":"3a2f5838e2dd5b1f4bfe8bf4a043c9aa28bcbf40ca746c9369c3694328f6be2c","sha512":"3e9a5dd5280afb6e0828cb5cc611e7082f0066e50b4d89dbd9359f37f8b219e76908aec00ced29e7532cfbd6f1921877ffa345dd844eb35a4a0bb13aa4f692a6","ssdeep":"6144:XkiKI5JU7+ThU8SF0j/2EjW89Y2zUB5ghyxFuOTjxS45epWYfyXubystq+rPaYcj:XkiDywU84qThyTxBDstq+rPi","tlshash":"e584cfda692cb104c7d9b3307903136813d550687abdf9f395dd84c27e66ea02f9eac2","first_seen":"2023-04-15T21:22:07Z","last_seen":"2026-07-20T15:28:16.059108Z","times_seen":245,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
