{"report_id":"833f9308-a24e-4c9d-a1e7-9d1b14051226","version":6,"status":"done","tags":[],"date":"2026-02-27T13:58:27Z","url":{"schema":"http","addr":"admin2.ondoc.co.kr","fqdn":"admin2.ondoc.co.kr","domain":"ondoc.co.kr","tld":"co.kr"},"ip":{"addr":"110.10.129.234","port":0,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"final":{"url":{"schema":"https","addr":"admin2.ondoc.co.kr/","fqdn":"admin2.ondoc.co.kr","domain":"ondoc.co.kr","tld":"co.kr"},"title":"Laravel","dom":{"size":27542,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (11594)","md5":"84b6db455e6aa3c9f3bc81d041497964","sha1":"9bac316c6ac119c4001519e69599decac45a8e67","sha256":"ea7736cb4a3fe07468147fa9b9ffe88dc6906c2fb21e18c09b4eeaac838faf91","sha512":"cca92c7be2a44c79ce11287f3ae7aa9617254cabfafd8c691d98ccf3209373738272db1b21b2fd7302fd1cc2688a0b9f4fd81f865e7e495a13014a7997ffe966","ssdeep":"384:zdj/FqOyjsrv8qNC4O3o3nmyNMPCg4APkKd/K:zdFqOyi8wqCvKVK","tlshash":"30c2f829a3a0046dbc8388f7faa07d147c0f62c3ef2f9ae6f5ad1110b7d59e58497458","dom_hash":"domhash9e6b21a77b3ed07b12574857dd13043f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"admin2.ondoc.co.kr","fqdn":"admin2.ondoc.co.kr","domain":"ondoc.co.kr","tld":"co.kr"},"ip":{"addr":"110.10.129.234","port":0,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-03T13:58:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin2.ondoc.co.kr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin2.ondoc.co.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.bunny.net","ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"1999-11-22","domain_rank":56787,"first_seen":"2022-03-21T07:38:02Z","last_seen":"2026-02-23T02:33:39.483805Z","alert_count":0,"request_count":3,"received_data":27768,"sent_data":1526,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"admin2.ondoc.co.kr","ip":{"addr":"110.10.129.234","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"domain_registered":"2021-10-05","domain_rank":0,"first_seen":"2026-02-12T15:50:42.243509Z","last_seen":"2026-02-25T10:48:04.689154Z","alert_count":4,"request_count":2,"received_data":28861,"sent_data":1646,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"admin2.ondoc.co.kr/","fqdn":"admin2.ondoc.co.kr","domain":"ondoc.co.kr","tld":"co.kr"},"ip":{"addr":"110.10.129.234","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-27T13:58:05.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.connectdoctor.co.kr","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 12:45:56 GMT","end":"Wed, 29 Apr 2026 12:45:55 GMT"},"fingerprint":{"sha1":"60:21:98:02:7D:83:9C:D8:F8:E5:BC:CE:D1:E2:E1:04:30:DC:FF:78","sha256":"0A:85:33:AA:BD:B6:48:B6:85:92:CF:9D:D3:7E:20:13:D3:40:6C:AB:63:2E:C3:4F:07:96:AC:7E:A5:33:67:21"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: admin2.ondoc.co.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Fri, 27 Feb 2026 13:58:06 GMT\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6Im1CL0VRSEJ4Uk1vOFRreWJlQ2M2Z3c9PSIsInZhbHVlIjoiWVBWVW1FRSswTEhCS2VLMkgyeXovUytkeWl3QVBjYjJDalZNSzREVmNOTlpXS3U2TVJXU09PdW13SlFTUzlsbWs5RmRmOUZJY1loYUsyUllMY2QzbTJTYUYyTjFoWTcra1BDbWdyWERwcTBXM0NERHJXZ2tlWkNhamxYampLeXYiLCJtYWMiOiI3YTY2MjRkZjZiMDMzMDk4N2FmMTZjZGIwNGVlYWE5YjZmMzBmYzdlMDY5MjY0YjljODI2ZTcyN2QzYWIwMjA0IiwidGFnIjoiIn0%3D; expires=Sat, 27 Feb 2027 13:58:06 GMT; Max-Age=31536000; path=/; secure; samesite=lax\n_session=eyJpdiI6IkdyaGJWRWRSWVJhZjZWN3JLdXQwbmc9PSIsInZhbHVlIjoiR1JIWFdma3hHY05hSXhhZWE1RHlkbnJkNHh3UWRLcEluUnNuNU5pL09lNlhaV1JINGhNT3BEdVNxSzZkUWJkWWMweGV5ZU02YkwyY25mbi9zQ1NvMGo4RlVkZHNKRXRCNEtBSjZudDAvQTRDUDUreDZpZzIrR2J1R0prTGdoZmEiLCJtYWMiOiI3NzQ0NDU0YmE4MDJmMzAxNjYwODdlOWZkMWRiYWZjYjFmYzkyNzMxNGMwZmM4YmNkZjFhNzMwMTQwMjljMTNlIiwidGFnIjoiIn0%3D; expires=Sat, 27 Feb 2027 13:58:06 GMT; Max-Age=31536000; path=/; httponly; samesite=lax\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27515,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (11594)","md5":"445146a070a72ae5f621816a4904a39d","sha1":"5933f9c06ca19c408aa4668022d5effa3e93bc6c","sha256":"b66814663d1b5b1493d2bbb1ad23813dd4feb2885b9d4d4f1baacecb1d369308","sha512":"7440a8819e6096ee507f9857c23cef56dc3ca67c371381761952224268ab9306f636aa108a64285e86e9fc62f223d5f037b3139bea8487af6d1d8430474b6158","ssdeep":"384:1b/FqOyjsrv8qNC4O3o3nmyNMNs74A3knd/F:17FqOyi8wus4nVF","tlshash":"6cc2e729a3a0047dbc8388f7fa607d147c0f62c3ef2f9ae6f5ad1110bbd59a58497458","first_seen":"2026-02-27T13:58:29.280573Z","last_seen":"2026-02-27T14:30:42.005551Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1380,"timings":{"blocked":522,"dns":22,"connect":245,"send":0,"wait":336,"receive":0,"ssl":253},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin2.ondoc.co.kr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin2.ondoc.co.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/css?family=figtree:400,600\u0026display=swap","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://admin2.ondoc.co.kr/","date":"2026-02-27T13:58:07.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:04:21 GMT","end":"Fri, 22 May 2026 03:04:20 GMT"},"fingerprint":{"sha1":"4B:2A:86:15:05:FF:29:84:62:F8:36:DC:E9:F9:21:E0:E0:25:D6:B7","sha256":"DF:9D:6C:C0:B2:8C:6F:83:63:FA:A4:69:D0:8C:35:1D:15:3D:19:AF:3F:15:46:FF:C6:C1:B1:20:89:A9:CD:CF"}}},"request":{"raw":"GET /css?family=figtree:400,600\u0026display=swap HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin2.ondoc.co.kr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 13:58:07 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-SE1-725\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 01 Feb 2026 00:21:41 GMT\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/01/2026 00:21:41\r\ncdn-edgestorageid: 725\r\ncdn-requestid: 687f7f6674d18eff408a76858f391b5c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2072,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f19813b9258714eeae27f99442a4e041","sha1":"9f057eda631d27463e2873be610237ddc2516f9d","sha256":"106f8684a79f36724f5d35d4014e3ad344a357c5be2d519e46bdd36f8330ea11","sha512":"594cd3ddc67d07192ffa97ddb6e20f8f141cd97f787e7fefc4ee1fdae16ec9c321dcfe78e1e238f38685c77fd7431da8a81e096e0e844eac6a0a88af4352f6d1","ssdeep":"","tlshash":"af41f0f14c9a308493871e6323c6bd075f1fa116604566b5ae261cd84df8d3ac393bae","first_seen":"2025-02-18T20:49:20.715098Z","last_seen":"2026-06-06T04:23:27.481392Z","times_seen":145,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":30,"dns":10,"connect":7,"send":0,"wait":9,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin2.ondoc.co.kr/favicon.ico","fqdn":"admin2.ondoc.co.kr","domain":"ondoc.co.kr","tld":"co.kr"},"ip":{"addr":"110.10.129.234","port":443,"asn":9318,"as":"SK Broadband Co Ltd","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://admin2.ondoc.co.kr/","date":"2026-02-27T13:58:07.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.connectdoctor.co.kr","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 12:45:56 GMT","end":"Wed, 29 Apr 2026 12:45:55 GMT"},"fingerprint":{"sha1":"60:21:98:02:7D:83:9C:D8:F8:E5:BC:CE:D1:E2:E1:04:30:DC:FF:78","sha256":"0A:85:33:AA:BD:B6:48:B6:85:92:CF:9D:D3:7E:20:13:D3:40:6C:AB:63:2E:C3:4F:07:96:AC:7E:A5:33:67:21"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: admin2.ondoc.co.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://admin2.ondoc.co.kr/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im1CL0VRSEJ4Uk1vOFRreWJlQ2M2Z3c9PSIsInZhbHVlIjoiWVBWVW1FRSswTEhCS2VLMkgyeXovUytkeWl3QVBjYjJDalZNSzREVmNOTlpXS3U2TVJXU09PdW13SlFTUzlsbWs5RmRmOUZJY1loYUsyUllMY2QzbTJTYUYyTjFoWTcra1BDbWdyWERwcTBXM0NERHJXZ2tlWkNhamxYampLeXYiLCJtYWMiOiI3YTY2MjRkZjZiMDMzMDk4N2FmMTZjZGIwNGVlYWE5YjZmMzBmYzdlMDY5MjY0YjljODI2ZTcyN2QzYWIwMjA0IiwidGFnIjoiIn0%3D; _session=eyJpdiI6IkdyaGJWRWRSWVJhZjZWN3JLdXQwbmc9PSIsInZhbHVlIjoiR1JIWFdma3hHY05hSXhhZWE1RHlkbnJkNHh3UWRLcEluUnNuNU5pL09lNlhaV1JINGhNT3BEdVNxSzZkUWJkWWMweGV5ZU02YkwyY25mbi9zQ1NvMGo4RlVkZHNKRXRCNEtBSjZudDAvQTRDUDUreDZpZzIrR2J1R0prTGdoZmEiLCJtYWMiOiI3NzQ0NDU0YmE4MDJmMzAxNjYwODdlOWZkMWRiYWZjYjFmYzkyNzMxNGMwZmM4YmNkZjFhNzMwMTQwMjljMTNlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 27 Feb 2026 13:58:07 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 0\r\nLast-Modified: Fri, 30 Jun 2023 15:18:14 GMT\r\nConnection: keep-alive\r\nETag: \"649ef236-0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-09T00:17:25.723561Z","times_seen":16254457,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin2.ondoc.co.kr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"admin2.ondoc.co.kr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/figtree/files/figtree-latin-600-normal.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://admin2.ondoc.co.kr/","date":"2026-02-27T13:58:07.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:04:21 GMT","end":"Fri, 22 May 2026 03:04:20 GMT"},"fingerprint":{"sha1":"4B:2A:86:15:05:FF:29:84:62:F8:36:DC:E9:F9:21:E0:E0:25:D6:B7","sha256":"DF:9D:6C:C0:B2:8C:6F:83:63:FA:A4:69:D0:8C:35:1D:15:3D:19:AF:3F:15:46:FF:C6:C1:B1:20:89:A9:CD:CF"}}},"request":{"raw":"GET /figtree/files/figtree-latin-600-normal.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://admin2.ondoc.co.kr\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 13:58:07 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 11544\r\nserver: BunnyCDN-SE1-725\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"69869043-2d18\"\r\nlast-modified: Sat, 07 Feb 2026 01:07:15 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 318\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/08/2026 15:47:07\r\ncdn-edgestorageid: 725\r\ncdn-requestid: 3226127527cdfe165b474c2d2ebd19d3\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":11544,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11544, version 1.0","md5":"4376f5953b85ba06b1325423ae04ce03","sha1":"cdc20e286bd4c89290565d08c691693951f2df51","sha256":"367d713287918784702563518f59239989da815c80d3c7337686b9816635a08b","sha512":"b03f276330b4b8eae6a38f6132e76a291d14103dcbdcc57270c66a0e30554413039d96b003c2c8a63bbae6201399a66638e5f88737c2b28ae1c3227fbfe22849","ssdeep":"192:K8oh8QtcasqnFWlsABFCQK3DRE7pTAT16IomT4OI9C3Jnr5+uHGQ1P+1rpH1yIjR:oh/tcInafhwi79yU6/qY+iGaAr3ZQtDA","tlshash":"7932bfe11f59440fcad0a473b17726740ced296efb3a7ba529ae741b8c185d3c8490ea","first_seen":"2025-05-16T11:25:33.804118Z","last_seen":"2026-06-08T06:37:31.266811Z","times_seen":664,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":22,"dns":1,"connect":7,"send":0,"wait":8,"receive":2,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/figtree/files/figtree-latin-400-normal.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://admin2.ondoc.co.kr/","date":"2026-02-27T13:58:07.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 03:04:21 GMT","end":"Fri, 22 May 2026 03:04:20 GMT"},"fingerprint":{"sha1":"4B:2A:86:15:05:FF:29:84:62:F8:36:DC:E9:F9:21:E0:E0:25:D6:B7","sha256":"DF:9D:6C:C0:B2:8C:6F:83:63:FA:A4:69:D0:8C:35:1D:15:3D:19:AF:3F:15:46:FF:C6:C1:B1:20:89:A9:CD:CF"}}},"request":{"raw":"GET /figtree/files/figtree-latin-400-normal.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://admin2.ondoc.co.kr\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 13:58:07 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 11384\r\nserver: BunnyCDN-SE1-725\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"6986903c-2c78\"\r\nlast-modified: Sat, 07 Feb 2026 01:07:08 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 344\r\ncdn-proxyver: 1.45\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/16/2026 10:40:33\r\ncdn-edgestorageid: 725\r\ncdn-requestid: 4ed988c8c690ae8f5917852ba50222bf\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":11384,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11384, version 1.0","md5":"7bfd10a3def31af4d402da24e37d21b1","sha1":"6f0c09bac74d5eaa63962309a305c097f06c6dab","sha256":"8f98dd642986f1fa39c45b89665a57372897c235b36028e0e4a136e43dc5f8ab","sha512":"2ab8b679319f9429adff476485facb4e33cfc5d938670d510fd3e2d650806a9873b9aaeb3a35d2f3bff8f68812cf3dfb3f639071acf3a2dadf093b57b8dfdb72","ssdeep":"192:fJ3wS/6q1YLYydZfdinMsfX+LpyglupLebs+pF7aJtALHH7g7ggqUfCANS59:fJwwyrdPEfngluuGJq7g7g8CZ","tlshash":"b432be616a9321a3e539ba70c3f5773f1aae9835afc0c609d71546461c0a7412cdbcab","first_seen":"2025-05-16T11:25:33.859224Z","last_seen":"2026-06-08T08:50:32.642876Z","times_seen":951,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":22,"dns":1,"connect":9,"send":0,"wait":14,"receive":2,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}