{"report_id":"8546349d-cd9c-4cfe-9e46-e15b90dd59c0","version":6,"status":"done","tags":[],"date":"2026-04-08T21:22:39Z","url":{"schema":"http","addr":"view.khzwg.info","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":0,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"view.khzwg.info/","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"title":"PNUT兑换教程-顶级安全技术为您的资产保驾护航","dom":{"size":36722,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (33738), with no line terminators","md5":"198be584bcf526d7566fa8355d56b391","sha1":"9ce43cedcfba1a9c596bf0d964c5bd5e6c5bc2b2","sha256":"d2afe6d879e4552c4dd551288132b72527dd03f43bb346d1b991a1c47e16600c","sha512":"b19f475359d9bb2766fec776bbbfa9ad5e5c590f0b91e310e36e4985249350960a11f61ef99b76a69642fa1da21fa48435553c7dd0635abef6e53456712241ad","ssdeep":"192:MLxMmFKiBOY/7wkNO4RwgJpvD57Z81fzomH2QYE1T3uQRQtgK0Q:iMUBOY/7wYpOf5H2QYEJ3uQRmnl","tlshash":"71f23998706fd8db9b23668314992b8bbef3ff4d95b709812d77ce149b87a621705c00","dom_hash":"domhash105fe0aed92752840dee612d876e9b7f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"view.khzwg.info","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":0,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-13T21:22:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-08T21:22:24Z","timestamp":1775683344,"ip_dst":{"addr":"Client IP","port":43448,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"severity":"medium","alert":"ETPRO HUNTING HTTP 200 Stat Code with 404 in Body","source":"{\"timestamp\":\"2026-04-08T21:22:24.193099+0000\",\"flow_id\":1139836120198054,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"162.209.242.116\",\"src_port\":80,\"dest_ip\":\"172.18.0.22\",\"dest_port\":43448,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2847953,\"rev\":1,\"signature\":\"ETPRO HUNTING HTTP 200 Stat Code with 404 in Body\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2021_04_01\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_04_01\"]}},\"http\":{\"hostname\":\"view.khzwg.info\",\"url\":\"/skin/10/fonts/top-arrow.svg\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"image/svg+xml\",\"http_refer\":\"http://view.khzwg.info/skin/10/css/totop.css?v=6bf9c9c463875db9241bc2e09d0200\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":148},\"files\":[{\"filename\":\"/skin/10/fonts/top-arrow.svg\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":148,\"tx_id\":3}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":22,\"pkts_toclient\":33,\"bytes_toserver\":3914,\"bytes_toclient\":42004,\"start\":\"2026-04-08T21:22:19.060326+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"view.khzwg.info","ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-08T21:22:40.474167Z","last_seen":"2026-04-08T21:22:40.474167Z","alert_count":1,"request_count":43,"received_data":1265579,"sent_data":16789,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]}]},{"fqdn":"hm.baidu.com","ip":{"addr":"111.45.3.198","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":54491,"first_seen":"2012-05-26T08:38:45Z","last_seen":"2026-04-06T04:32:17.512298Z","alert_count":0,"request_count":2,"received_data":30874,"sent_data":1250,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/js/counterup.min.js?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef36cca760bf1cd76cfcd0e4dc10cef1","sha1":"ef38469f60d58850fe55c4de2ec7e289a2415d71","sha256":"26d40f8ffdf1b9bf286a954c6888a33cda0cd031e802d821fe0c0562e379ae29","sha512":"77c175276932891a30041ffcfe9016b2a525d304843a41b92804e4555e2c95f6e5abd55143a3320d95715a5dad59dfa63e1b826e94c1e0ceee53fc7d165810f5","ssdeep":"","tlshash":"37118cb93a0a298daa80e459f1efb0989176bdbc0c80884b91c558401fa5abc3b5b730","size":1067,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-09T08:19:03.973835Z","times_seen":9204,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/js/scrolltop.js?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cf87d9dac7f80531ff65d2e224b563e","sha1":"789502de70d25ee0c1ff9e9dea607da5b377ee14","sha256":"41f523e7eaf751b6c668b3e32d3c91525c6d214fbe152be488ff91906f1140d1","sha512":"72cca7db347a004de4c800fb5adf11e7916706231a5581b31d2ea6461044b824cf3b9e69afde393cb1fde734679596417db25653f3d3ced77285a575fc0728c3","ssdeep":"","tlshash":"9541be4b79a327480eaff9bdca9f134cb775e153ae059854b88c16b68f1043816d2f8c","size":2197,"data":"","first_seen":"2025-07-31T15:52:06.848334Z","last_seen":"2026-04-08T21:22:45.817032Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-04-09T08:01:39.495982Z","times_seen":103758,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/tj.js?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbbb51d7554c28651fe1feafd1118c9f","sha1":"9ec00cc410be9cbc0f4d433677151c61d4d8b7bb","sha256":"efaf36a3a67fdb4ca19e0710269325a7550c313b5ecbca0992d9fdbf3e492ef6","sha512":"cfca1aaf60cb1339075063aa5c840e94d28a69f65dd4092da01f6170b2e7558452cd24bde52e5cc8b58cec0b7d2c4675ce1c17b519f5700bde32643d2ddc62aa","ssdeep":"","tlshash":"e9d02e1f2c1468386366082811bfda8cb262948c50be990080ece8108aa0fea1c2e7c8","size":253,"data":"","first_seen":"2026-04-08T21:22:45.879794Z","last_seen":"2026-04-08T21:22:45.879794Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/js/bootstrap.min.js?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"67176c242e1bdc20603c878dee836df3","sha1":"27a71b00383d61ef3c489326b3564d698fc1227c","sha256":"56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4","sha512":"9fa75814e1b9f7db38fe61a503a13e60b82d83db8f4ce30351bd08a6b48c0d854baf472d891af23c443c8293380c2325c7b3361b708af9971aa0ea09a25cdd0a","ssdeep":"768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+","tlshash":"3533b649725078b201df9176913f460bb736788ea907816cb95d98ed2e7cd89322bf3c","size":51039,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-04-09T08:07:39.570766Z","times_seen":120788,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/js/magnific-popup.min.js?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","size":20216,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-09T08:00:16.758438Z","times_seen":55175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"42473865deb15b68009b58b2233aa5f7","sha1":"d414a1501f557994f49cc31b698db6e662b79a99","sha256":"3fb3f2205b5afc11fe5b8265506ef21be5c18360f587fcbbe7613c8e8b9f5b40","sha512":"780cd50911c06c1f7a4691e8027a4bdc78366015f8e6dafb164f7de081a20a4ece06752126e3a90f85e2d8ffcb6d27909100ae1c148a546aebc993c9eca0c689","ssdeep":"","tlshash":"a9f0abcd334adc9859c37caeb61b089c30580d269c9c8d38cc44641910d1a3715c36ef","size":443,"data":"","first_seen":"2026-04-08T21:22:45.907655Z","last_seen":"2026-04-08T21:22:45.907655Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/js/wow.min.js?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","size":8415,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-04-09T08:19:03.95091Z","times_seen":9842,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-04-09T08:01:39.495982Z","times_seen":103758,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?ce1ff6059ddc61e2f540c0a6d14bb59e","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.3.198","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c1f6a5e99bdcb762d68eb2c9207886f","sha1":"fed23af56829ae332145e749b8855b963bca8c89","sha256":"2093c80a189fa38f81be3ec203680e88675ee6964b0c6df008fc8c9f0cbb100e","sha512":"eddff4cae3718bbe72a51cd40179da4ea93957fd82b90998f5566b0ac6f90c1bfbd5ea4aa3f2fc5b495967633e696b500e20bd1b7ae39b9814f494371cf46225","ssdeep":"384:4FJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:4F4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"b9d2d9a9b282713293a324a5153f324ef07b5a54bd4968a4f11894c07d38fbb027bfdd","size":29892,"data":"","first_seen":"2026-04-08T21:22:45.887243Z","last_seen":"2026-04-08T21:22:45.887243Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/js/main.js?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f416025fb2d2c930d3dcd91417cce204","sha1":"41ab8a9bdb8c25b27116fe04040fb07a351616e9","sha256":"6dbaac1d45f3904298187b4e9e4ad744394ca03c9acd1b23b3d9cf0e6650e77e","sha512":"a145231aec5c51f33ab225cb6f60f3cce9cbbbd4b235698ef6bdadb7755cf8390d5fa1493fc8c17fed1181ffdac394c00f2b1bfef3cb8ab7d0d95b34f677191d","ssdeep":"","tlshash":"ee61bb06acf914211036e63d5fefa107d754d04bba85ae64788c0ad47fae2ad91fd7c0","size":3443,"data":"","first_seen":"2025-07-31T15:52:06.811052Z","last_seen":"2026-04-08T21:22:45.844274Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/js/swiper.min.js?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b117060487d6ec17a9af7c5604a2c149","sha1":"40a26a977cf1c6b060668c9680cf71a6c8e91e0d","sha256":"34200a216f42b734a9723a5367645bb517c31e036b42e2bf6a480c62880fc12c","sha512":"ed7117d767aaa81dc7633866334e0610334fa921f6f6e1076ebd1818398c657239a8a7d924f429a5bbf932ac9976ac0203d648c745a210f8a5000cc72d0d4c2b","ssdeep":"1536:nI2qg0G1fiPJWmb0vCqIA9GK8FEliAfmrGMy55T1s53V7gZxj8rvHgZsUOUBDBWf:V4b0akdSyBohgZu7HgZsUOUFBWqjxUx","tlshash":"41c3094eb390619511e36256529e9241a3b72409780ad0ac35b6cce7adbde4c13bfffc","size":121304,"data":"","first_seen":"2023-03-08T00:01:27Z","last_seen":"2026-04-08T21:22:45.835508Z","times_seen":955,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/js/owl.carousel.min.js?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7b9c97cd68ec336d01a79d5be48c58d","sha1":"1a99890b57c9859a622337ed0b2f989d6e30cc0e","sha256":"b394d33b2a7ec654a6b037ebfda6618341b3f897a362be624c923c2711b54a43","sha512":"968e18822c24c6c54827999ec766fe54750a9489d22b6a45b641854731ec00beb8fd93b9bda8823e67463f7a99ab587d333673821ae90cfdf7e92716ba050c4e","ssdeep":"768:JBA7PMMFA0tdlXKNSR4vlGRep2lcwJeL+C2jQdc7/CORUQuFBt33:HAIMFFdYMxAcLQDV","tlshash":"cb137346b3202d2a869b61a0663f160bb23a291ce414507d7d7da6de6d7dc4c213fbfc","size":42766,"data":"","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-04-09T07:28:40.009104Z","times_seen":16167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/js/jquery-1.12.4.min.js?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97163,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-09T08:00:49.366401Z","times_seen":68106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/js/meanmenu.min.js?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0444feb93a5bb35397275148613d7c07","sha1":"ffddb012374e39779bd5415080ab9e7ac5afa194","sha256":"eaf2ccc92a9f802623e6eb69af21a03fc6ba48b509201e2ded5165b58f22957e","sha512":"5126cb584686083ae2f01223a012efd657fa64fe1ab2d87ee7091050b83dcfedcb71971f9732c175b87f9afc41e828d6be578630728028a83a7c6da2cdde5a90","ssdeep":"","tlshash":"5e810066757084fc24bf64e6f43ee33636f7a40af44ed400b07aa9b63425e941063ad9","size":4019,"data":"","first_seen":"2023-03-07T01:16:27Z","last_seen":"2026-04-09T08:19:03.981792Z","times_seen":4161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/js/scrolltop.js?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.881Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/js/scrolltop.js?v=6bf9c9c463875db9241bc2e09d0200 HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:20 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 29 Mar 2026 17:46:21 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c9656d-895\"\r\nExpires: Thu, 09 Apr 2026 09:22:20 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2197,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"4cf87d9dac7f80531ff65d2e224b563e","sha1":"789502de70d25ee0c1ff9e9dea607da5b377ee14","sha256":"41f523e7eaf751b6c668b3e32d3c91525c6d214fbe152be488ff91906f1140d1","sha512":"72cca7db347a004de4c800fb5adf11e7916706231a5581b31d2ea6461044b824cf3b9e69afde393cb1fde734679596417db25653f3d3ced77285a575fc0728c3","ssdeep":"","tlshash":"9541be4b79a327480eaff9bdca9f134cb775e153ae059854b88c16b68f1043816d2f8c","first_seen":"2025-07-31T15:52:06.848334Z","last_seen":"2026-04-08T21:22:45.817032Z","times_seen":23,"resource_available":true,"data":null}},"time_used":2801,"timings":{"blocked":1964,"dns":0,"connect":0,"send":0,"wait":837,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/js/owl.carousel.min.js?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.879Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/js/owl.carousel.min.js?v=6bf9c9c463875db9241bc2e09d0200 HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:20 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 29 Mar 2026 17:46:21 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c9656d-a70e\"\r\nExpires: Thu, 09 Apr 2026 09:22:20 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42766,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32000)","md5":"b7b9c97cd68ec336d01a79d5be48c58d","sha1":"1a99890b57c9859a622337ed0b2f989d6e30cc0e","sha256":"b394d33b2a7ec654a6b037ebfda6618341b3f897a362be624c923c2711b54a43","sha512":"968e18822c24c6c54827999ec766fe54750a9489d22b6a45b641854731ec00beb8fd93b9bda8823e67463f7a99ab587d333673821ae90cfdf7e92716ba050c4e","ssdeep":"768:JBA7PMMFA0tdlXKNSR4vlGRep2lcwJeL+C2jQdc7/CORUQuFBt33:HAIMFFdYMxAcLQDV","tlshash":"cb137346b3202d2a869b61a0663f160bb23a291ce414507d7d7da6de6d7dc4c213fbfc","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-04-09T07:28:40.009104Z","times_seen":16167,"resource_available":true,"data":null}},"time_used":1734,"timings":{"blocked":1239,"dns":0,"connect":0,"send":0,"wait":248,"receive":247,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/images/hero-bg-1.jpg","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:22.691Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/images/hero-bg-1.jpg HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/skin/10/css/def.css?v=6bf9c9c463875db9241bc2e09d0200\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:22 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sun, 29 Mar 2026 17:46:19 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c9656b-e591\"\r\nExpires: Fri, 08 May 2026 21:22:22 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58769,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x800, components 3","md5":"54df693087c681bca1e3a984c625aba9","sha1":"d1c489b5200f2b55945b848d7490234f296744df","sha256":"7b9d4cbbe3baae34090c8f128c4ebad670f69b0ad4103069517c167203a62225","sha512":"4737c4803798aa02a220e8592c6c7ca9900cffa5388da683d3d5db282db64e22445d1138a40ee187f3c45fa63575f8a07a5d024635296f5e6abcd02d5ee09dfa","ssdeep":"1536:OQ+bvPR6OSNawAWUOVoLzcm87HrQd4onCT:g3R6OSNawK8jEd/U","tlshash":"5a43e062ea42fb42e6ec1330dcf35b1e7f6305e69386d510aafc3874489a7683d4e585","first_seen":"2024-02-01T10:47:47Z","last_seen":"2026-04-08T21:22:45.821853Z","times_seen":656,"resource_available":false,"data":null}},"time_used":7708,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":7450,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/fonts/fontawesome-webfont.woff2","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:22.703Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/fonts/fontawesome-webfont.woff2 HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/skin/10/css/fontawe.css?v=6bf9c9c463875db9241bc2e09d0200\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:23 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 77160\r\nLast-Modified: Sun, 29 Mar 2026 17:46:17 GMT\r\nConnection: keep-alive\r\nETag: \"69c96569-12d68\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-04-09T08:07:22.906241Z","times_seen":419914,"resource_available":true,"data":null}},"time_used":9934,"timings":{"blocked":990,"dns":0,"connect":0,"send":0,"wait":248,"receive":8696,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/picture/ouyi.jpg","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.855Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/picture/ouyi.jpg HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:24 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sun, 29 Mar 2026 17:46:25 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c96571-8d0\"\r\nExpires: Fri, 08 May 2026 21:22:24 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2256,"size_decoded":0,"mime_type":"image/jpeg","magic":"PNG image data, 300 x 100, 8-bit/color RGBA, non-interlaced","md5":"d80a655e8147bf22fa1cebbbbc8a3d97","sha1":"7be4f086986bfe135e71540f8486d072d6a4bbfa","sha256":"7c9023c9fff2780b2c78129edb8e920fcc46392babcd1fe89c8392e30ee4f5ce","sha512":"2f3220d18615205f8e657975e907913a157e73a8ebd232b3c8f7d9f32ef7b45038fce5b46169b56f4fc7e5a935cc2e618e688c4d07ff895fb98c4f12e9b4347e","ssdeep":"","tlshash":"47412bead682cbee486940817f61da60c82fd26ff92071f5564111b8434378d52fb5e4","first_seen":"2025-06-27T15:21:13.948141Z","last_seen":"2026-04-08T21:22:45.824488Z","times_seen":32,"resource_available":false,"data":null}},"time_used":5338,"timings":{"blocked":5091,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/picture/shape-2.png","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.857Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/picture/shape-2.png HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:24 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 29 Mar 2026 17:46:25 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c96571-1cb5\"\r\nExpires: Fri, 08 May 2026 21:22:24 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7349,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 521 x 267, 8-bit/color RGBA, non-interlaced","md5":"23fafbe2054753eb8fbc0378efbd7358","sha1":"7577b91c4cd1aa99cb58a8f659fc59b2a8a4031e","sha256":"a05b62d2692f59650a63e51eebe3935050dda23c9bea9420b0864337d9a836bf","sha512":"907f9779abaff9534e5df85dc31ed4782059df3ded7f8d7d15255f6ce7986f1a00542370529e8b1845e16d5101392842affec68f6503b14222c08deae28e8994","ssdeep":"96:6JJ6DrFyKry4EDw+OR5uIB1V0TNHdq/RZkIgAjrLzulo/bZ5ZCeQhdrUxyo20GtR:xRyK5fR5ucUTfq/RZkYXPZhwpUH2/mG","tlshash":"5de1bfb972158e55970cb7e050e502d7fd8fc56884cca11f3d36ac1785f3571210a5cb","first_seen":"2024-02-01T10:47:46Z","last_seen":"2026-04-08T21:22:45.825858Z","times_seen":673,"resource_available":false,"data":null}},"time_used":7255,"timings":{"blocked":5919,"dns":0,"connect":0,"send":0,"wait":255,"receive":1081,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/images/o1.png","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.861Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/images/o1.png HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:25 GMT\r\nContent-Type: image/png\r\nLast-Modified: Thu, 02 Apr 2026 15:46:07 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69ce8f3f-abc4\"\r\nExpires: Fri, 08 May 2026 21:22:25 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43972,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced","md5":"4c79975742e260613e8ee91a0897ba80","sha1":"aa9b9a0a57cd0107fe875f5e3044403128a52d40","sha256":"6e3d880e9f0120ca44ceefbdb854566e4e5eab23a359a9798239a5f3355d8bab","sha512":"879b80b610ea173ee76d74ebef4424e12c0a90ad81dcbdab3dd3f10e6b4e019b4e8d6eb7d51b79338f861c6160a42c456a5d65eecab95c062236a92c47553cdc","ssdeep":"768:M3ubWte6IIHsa1YdpTxIbIiJNTw+04zCicNxBda8/D2wrH3h9N:QjvII7AgIFxL//D7HR9N","tlshash":"4713d0411ad1f0a5e4a9c6feeda002dc9663140726060f6477bfcc4cdf26b19ad62a93","first_seen":"2026-04-08T21:22:45.827093Z","last_seen":"2026-04-08T21:22:45.827093Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12361,"timings":{"blocked":6347,"dns":0,"connect":0,"send":0,"wait":254,"receive":5760,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/picture/icon-2.png","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.869Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/picture/icon-2.png HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:29 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 29 Mar 2026 17:46:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c96570-e70\"\r\nExpires: Fri, 08 May 2026 21:22:29 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3696,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 27 x 42, 8-bit/color RGBA, non-interlaced","md5":"db2a1bb07e49376ad9e93001a8a08223","sha1":"89dea4d507f5d61eacf70c755aef7bac003d92ae","sha256":"374b798d265fbf16b071275596dc6a5d6915f3ec3bd69d3e453073ad62c495ba","sha512":"a6a77e2285d64221f779709407e3ff537beb8e6f13f94af506f2ccfdfe50fa97c874352cec2aa8614089574f427eec83095ab696c411cc2f943cf16302386e7a","ssdeep":"","tlshash":"9d717c4df581691201eded810975403bdfb14a94deb8d8faacde405e64c08fe2166ecf","first_seen":"2024-02-01T10:47:46Z","last_seen":"2026-04-08T21:22:45.832149Z","times_seen":676,"resource_available":false,"data":null}},"time_used":12231,"timings":{"blocked":10934,"dns":0,"connect":0,"send":0,"wait":1042,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/picture/video-bg.jpg","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.871Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/picture/video-bg.jpg HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:31 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sun, 29 Mar 2026 17:46:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c96572-79e9\"\r\nExpires: Fri, 08 May 2026 21:22:31 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31209,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1140x620, components 3","md5":"a8550a80611b7d71d05bb74974d69896","sha1":"a3f06e35b67991287adf1d76bb35bdf373116fa5","sha256":"4208b4763543d1e81cf875a3f2c5d9ab5c1f9c8bdbf7e806716bb958d589ea5c","sha512":"d773469ca33587ac287d9359a1abf09f7d71c45d464f1e3aa06b4b1907f41e9ae030d1a4894911a82a71f5a314ed92c627145014e795b46f58fbd47f5f7823f7","ssdeep":"768:JAr3DcXYqBOE+//TcsS4FntOXxKQvqzu8D:JagYd1/JFnoX0QvH8D","tlshash":"e5e2e0b96fd42633df9476389aa3f31609579c8492acc1c1d78904fe20f97a32e1d584","first_seen":"2024-02-01T10:47:46Z","last_seen":"2026-04-08T21:22:45.833979Z","times_seen":654,"resource_available":false,"data":null}},"time_used":14014,"timings":{"blocked":12231,"dns":0,"connect":0,"send":0,"wait":258,"receive":1525,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/js/swiper.min.js?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.877Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/js/swiper.min.js?v=6bf9c9c463875db9241bc2e09d0200 HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:19 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 29 Mar 2026 17:46:21 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c9656d-1d9d8\"\r\nExpires: Thu, 09 Apr 2026 09:22:19 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":121304,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65276)","md5":"b117060487d6ec17a9af7c5604a2c149","sha1":"40a26a977cf1c6b060668c9680cf71a6c8e91e0d","sha256":"34200a216f42b734a9723a5367645bb517c31e036b42e2bf6a480c62880fc12c","sha512":"ed7117d767aaa81dc7633866334e0610334fa921f6f6e1076ebd1818398c657239a8a7d924f429a5bbf932ac9976ac0203d648c745a210f8a5000cc72d0d4c2b","ssdeep":"1536:nI2qg0G1fiPJWmb0vCqIA9GK8FEliAfmrGMy55T1s53V7gZxj8rvHgZsUOUBDBWf:V4b0akdSyBohgZu7HgZsUOUFBWqjxUx","tlshash":"41c3094eb390619511e36256529e9241a3b72409780ad0ac35b6cce7adbde4c13bfffc","first_seen":"2023-03-08T00:01:27Z","last_seen":"2026-04-08T21:22:45.835508Z","times_seen":955,"resource_available":true,"data":null}},"time_used":4176,"timings":{"blocked":726,"dns":0,"connect":0,"send":0,"wait":252,"receive":3198,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/js/meanmenu.min.js?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.878Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/js/meanmenu.min.js?v=6bf9c9c463875db9241bc2e09d0200 HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:19 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 29 Mar 2026 17:46:21 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c9656d-fb3\"\r\nExpires: Thu, 09 Apr 2026 09:22:19 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4019,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4019), with no line terminators","md5":"0444feb93a5bb35397275148613d7c07","sha1":"ffddb012374e39779bd5415080ab9e7ac5afa194","sha256":"eaf2ccc92a9f802623e6eb69af21a03fc6ba48b509201e2ded5165b58f22957e","sha512":"5126cb584686083ae2f01223a012efd657fa64fe1ab2d87ee7091050b83dcfedcb71971f9732c175b87f9afc41e828d6be578630728028a83a7c6da2cdde5a90","ssdeep":"","tlshash":"5e810066757084fc24bf64e6f43ee33636f7a40af44ed400b07aa9b63425e941063ad9","first_seen":"2023-03-07T01:16:27Z","last_seen":"2026-04-09T08:19:03.981792Z","times_seen":4161,"resource_available":true,"data":null}},"time_used":1240,"timings":{"blocked":993,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/fonts/top-arrow.svg","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:22.697Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/fonts/top-arrow.svg HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/skin/10/css/totop.css?v=6bf9c9c463875db9241bc2e09d0200\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:23 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 148\r\nLast-Modified: Sun, 29 Mar 2026 17:46:17 GMT\r\nConnection: keep-alive\r\nETag: \"69c96569-94\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":148,"size_decoded":0,"mime_type":"image/svg+xml","magic":"HTML document, ASCII text","md5":"630e1f9fef1a483fe84154e2d0d046df","sha1":"f10e0cf39fb920a438116caaea80a71e0dcdc162","sha256":"9cad3cff676946810a81047247f12e4e51faccc01df4134edfd871aee8ba0956","sha512":"33f8257b60c25704f0856806337c13e8afe964c5b075d80f15abd87ffa59ff0329f12de0c4b5978d4640d5b70c0a997c0c239f422d4da5bbdcb3727c281cfcda","ssdeep":"","tlshash":"1ac02b0d346366448a03001023c33240d086833f78da8010380ec083f3cf39ac4c73ae","first_seen":"2024-07-21T17:05:04Z","last_seen":"2026-04-09T05:17:47.830933Z","times_seen":14662,"resource_available":true,"data":null}},"time_used":1250,"timings":{"blocked":1003,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-08T21:22:24Z","timestamp":1775683344,"ip_dst":{"addr":"172.18.0.22","port":43448,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"severity":"medium","alert":"ETPRO HUNTING HTTP 200 Stat Code with 404 in Body","source":"{\"timestamp\":\"2026-04-08T21:22:24.193099+0000\",\"flow_id\":1139836120198054,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"162.209.242.116\",\"src_port\":80,\"dest_ip\":\"172.18.0.22\",\"dest_port\":43448,\"proto\":\"TCP\",\"tx_id\":3,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2847953,\"rev\":1,\"signature\":\"ETPRO HUNTING HTTP 200 Stat Code with 404 in Body\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2021_04_01\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_04_01\"]}},\"http\":{\"hostname\":\"view.khzwg.info\",\"url\":\"/skin/10/fonts/top-arrow.svg\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"image/svg+xml\",\"http_refer\":\"http://view.khzwg.info/skin/10/css/totop.css?v=6bf9c9c463875db9241bc2e09d0200\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":148},\"files\":[{\"filename\":\"/skin/10/fonts/top-arrow.svg\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":148,\"tx_id\":3}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":22,\"pkts_toclient\":33,\"bytes_toserver\":3914,\"bytes_toclient\":42004,\"start\":\"2026-04-08T21:22:19.060326+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"view.khzwg.info/","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-08T21:22:17.310Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T08:07:55.876601Z","times_seen":13532580,"resource_available":true,"data":null}},"time_used":542,"timings":{"blocked":542,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/css/animate.css?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.836Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/css/animate.css?v=6bf9c9c463875db9241bc2e09d0200 HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:21 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sun, 29 Mar 2026 17:46:14 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c96566-112b7\"\r\nExpires: Thu, 09 Apr 2026 09:22:21 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70327,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a03fca051fa426956b5c8a446a85e868","sha1":"53878b1011d5543f1bed65027a38d35fde314138","sha256":"810ec1b4b20c3fe475307bf9366e18be2603edbf88919bcc2dd0b32ce80c48ec","sha512":"5ffa46379d69d32f3de717e823846ba3fed5e75d8a0209da868ca299e6fae398a25023b13c3a85cdc5cc2096b5aecced8ce0858d91ff3b75d8d8a093d92b1dab","ssdeep":"192:BnSfe5dESfrjdhwCCKit/pRmG73PwjfHM9ZEklMz1GSzkdjEyg1U3dxH2HEi6Sqd:BP+/ZdZ/gpgdZbZv","tlshash":"e3631b6929a2104456334629c7df9f78663ce1732826ecfa73da588bcf41f9c23c9617","first_seen":"2025-04-07T10:47:40.787203Z","last_seen":"2026-04-08T21:22:45.839197Z","times_seen":484,"resource_available":false,"data":null}},"time_used":3813,"timings":{"blocked":2521,"dns":0,"connect":0,"send":0,"wait":247,"receive":1045,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/css/fontawe.css?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.842Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/css/fontawe.css?v=6bf9c9c463875db9241bc2e09d0200 HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:19 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sun, 29 Mar 2026 17:46:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c96567-78d8\"\r\nExpires: Thu, 09 Apr 2026 09:22:19 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30936,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30770)","md5":"159dbfb2c64d35f88d832d44a59fdf30","sha1":"678e20141c7814ae0c872ebf899414ee8f5609b2","sha256":"966a7e153f6b1720169403ae9d4af3f0c577b1abfba8203240e637fbacd00f5e","sha512":"a13d5fdd1628c80f5565fe68089b86c28d5e90ada79f67afee5426af687ef664fe0967217c27dfc40c0d0a58ce5379f02f45ee5196bcb5c2e60054f0444df2db","ssdeep":"384:vu5yWeTUKW+KlkJ5de2UYDyVfwzUas2l8yQ/8dwmaU8G:4lr+Klk3Yi+fwzUf2l8yQ/e9vf","tlshash":"83d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d22a522c5fb9","first_seen":"2025-07-31T15:52:06.743539Z","last_seen":"2026-04-08T21:22:45.840047Z","times_seen":16,"resource_available":false,"data":null}},"time_used":728,"timings":{"blocked":221,"dns":1,"connect":253,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/js/counterup.min.js?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.880Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/js/counterup.min.js?v=6bf9c9c463875db9241bc2e09d0200 HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:20 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 29 Mar 2026 17:46:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c9656c-42b\"\r\nExpires: Thu, 09 Apr 2026 09:22:20 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1067,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (917)","md5":"ef36cca760bf1cd76cfcd0e4dc10cef1","sha1":"ef38469f60d58850fe55c4de2ec7e289a2415d71","sha256":"26d40f8ffdf1b9bf286a954c6888a33cda0cd031e802d821fe0c0562e379ae29","sha512":"77c175276932891a30041ffcfe9016b2a525d304843a41b92804e4555e2c95f6e5abd55143a3320d95715a5dad59dfa63e1b826e94c1e0ceee53fc7d165810f5","ssdeep":"","tlshash":"37118cb93a0a298daa80e459f1efb0989176bdbc0c80884b91c558401fa5abc3b5b730","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-09T08:19:03.973835Z","times_seen":9204,"resource_available":true,"data":null}},"time_used":1982,"timings":{"blocked":1733,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/js/main.js?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.882Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/js/main.js?v=6bf9c9c463875db9241bc2e09d0200 HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:21 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 29 Mar 2026 17:46:21 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c9656d-d73\"\r\nExpires: Thu, 09 Apr 2026 09:22:21 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3443,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f416025fb2d2c930d3dcd91417cce204","sha1":"41ab8a9bdb8c25b27116fe04040fb07a351616e9","sha256":"6dbaac1d45f3904298187b4e9e4ad744394ca03c9acd1b23b3d9cf0e6650e77e","sha512":"a145231aec5c51f33ab225cb6f60f3cce9cbbbd4b235698ef6bdadb7755cf8390d5fa1493fc8c17fed1181ffdac394c00f2b1bfef3cb8ab7d0d95b34f677191d","ssdeep":"","tlshash":"ee61bb06acf914211036e63d5fefa107d754d04bba85ae64788c0ad47fae2ad91fd7c0","first_seen":"2025-07-31T15:52:06.811052Z","last_seen":"2026-04-08T21:22:45.844274Z","times_seen":28,"resource_available":true,"data":null}},"time_used":2474,"timings":{"blocked":2227,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/images/cta-bg.png","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:22.693Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/images/cta-bg.png HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/skin/10/css/def.css?v=6bf9c9c463875db9241bc2e09d0200\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:22 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 29 Mar 2026 17:46:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c9656a-1166d\"\r\nExpires: Fri, 08 May 2026 21:22:22 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71277,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 350, 8-bit/color RGBA, non-interlaced","md5":"96d07cdabd48de8c3f406ca38b4a867e","sha1":"0766359895be74cfd59914603fdacf69887aa968","sha256":"892b149b7c759e154d0b8500e86c5682fdc3b6787b66b6148046bca479d670d2","sha512":"bdb8639fbf61c19dfc4713401322ca591bf328527f57187eb6746da3e1d4123c1956b1af1ffe2bd6b58af9298ea7361ee3290689a80d89ae7f1299b9d2261e97","ssdeep":"1536:n7Epa0xFG0PQVxXCSm6XAWXwvqG9STEqsKnQjAG9t5c7pzG:nUli0PQVk6QAwSG9Lqs4cJ9t5c7pC","tlshash":"a363f1ae9072ee84d8675172897b2b37f4339e8928c97c4fc3f080685890fe3d9915d6","first_seen":"2024-02-01T10:47:47Z","last_seen":"2026-04-08T21:22:45.850504Z","times_seen":651,"resource_available":false,"data":null}},"time_used":3396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":3141,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.gif?hca=0B8C0DD2CBB54AAD\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=1129577118\u0026si=ce1ff6059ddc61e2f540c0a6d14bb59e\u0026v=1.3.2\u0026lv=1\u0026sn=12519\u0026r=0\u0026ww=1280\u0026u=http%3A%2F%2Fview.khzwg.info%2F\u0026tt=PNUT%E5%85%91%E6%8D%A2%E6%95%99%E7%A8%8B-%E9%A1%B6%E7%BA%A7%E5%AE%89%E5%85%A8%E6%8A%80%E6%9C%AF%E4%B8%BA%E6%82%A8%E7%9A%84%E8%B5%84%E4%BA%A7%E4%BF%9D%E9%A9%BE%E6%8A%A4%E8%88%AA","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.3.198","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:24.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.gif?hca=0B8C0DD2CBB54AAD\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=1129577118\u0026si=ce1ff6059ddc61e2f540c0a6d14bb59e\u0026v=1.3.2\u0026lv=1\u0026sn=12519\u0026r=0\u0026ww=1280\u0026u=http%3A%2F%2Fview.khzwg.info%2F\u0026tt=PNUT%E5%85%91%E6%8D%A2%E6%95%99%E7%A8%8B-%E9%A1%B6%E7%BA%A7%E5%AE%89%E5%85%A8%E6%8A%80%E6%9C%AF%E4%B8%BA%E6%82%A8%E7%9A%84%E8%B5%84%E4%BA%A7%E4%BF%9D%E9%A9%BE%E6%8A%A4%E8%88%AA HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private, max-age=0, no-cache\r\nContent-Length: 43\r\nContent-Type: image/gif\r\nDate: Wed, 08 Apr 2026 21:22:24 GMT\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nPragma: no-cache\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=F4E1C2D41B396ECE; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-09T08:01:39.483044Z","times_seen":331251,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/favicon.ico","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:27.713Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nCookie: Hm_lvt_ce1ff6059ddc61e2f540c0a6d14bb59e=1775683344; Hm_lpvt_ce1ff6059ddc61e2f540c0a6d14bb59e=1775683344; HMACCOUNT=0B8C0DD2CBB54AAD\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:27 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3700,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (457)","md5":"ae0ff1593904285ed675b1d0112f9d0d","sha1":"d74ae7f24b90e15a51c167a9f072dd23634213ff","sha256":"9cbc514723484a32674b646550b43984c2f0fdf1a1969239e252bd2c3f5db7b0","sha512":"7e2226e57d14228d65ff5c1eaeeec7a18aaf9c055b4a9ffe4c292074ad731dd0944e71169f934047db3dc7699b4322d018822b7c401e11b72e55bd1f16874734","ssdeep":"","tlshash":"aa71c62669e5740a50034068fa723e693f041c978b4fdf26b4dd622dcf88ad3462334d","first_seen":"2026-04-08T21:22:45.862823Z","last_seen":"2026-04-08T21:22:45.862823Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-08T21:22:18.109Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:18 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]}],"data":{"size":29990,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27142), with no line terminators","md5":"66400232d1e38da4d3df6cc9ef3bc02f","sha1":"351892921c5cb39fcd54bcb446c0816780c9df5c","sha256":"57217f083e68379eef91e45f53d04e567d7ff1c7ec310296c50a2f42dc01c240","sha512":"e847eeffe41b6718c2a587bf0347a271725c7b9844bce436b826d5059a539a7bcb87acf5cb64fc212944fd12ea53d55f97a45b7ba58781169fbfff43c2c40209","ssdeep":"192:Afc6ul8fO4TiwckahFtPNYJL7wp+msmHlbEPXo9llujwewWa5lbfiS3Czv20u39e:pyYRYJL7wV2r/tL7/5OIHiw","tlshash":"86d2e899706fc9dbab22668311982f8bbeb3ff4d95b30d852d77ce509b87a525700c40","first_seen":"2026-04-08T21:22:45.866026Z","last_seen":"2026-04-08T21:22:45.866026Z","times_seen":1,"resource_available":true,"data":null}},"time_used":813,"timings":{"blocked":256,"dns":1,"connect":256,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/css/getbootstrap.css?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.822Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/css/getbootstrap.css?v=6bf9c9c463875db9241bc2e09d0200 HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:18 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sun, 29 Mar 2026 17:46:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c96567-229cb\"\r\nExpires: Thu, 09 Apr 2026 09:22:18 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":141771,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"0875c3579d4bc4151ae1f71175395f9b","sha1":"0ac447102a64a49f6144dbb0da6aa32df88c79ee","sha256":"6013aa7371afa94c731a25f3e8e074050b8445e116bf0a6b1f5e87d048cc3b7d","sha512":"629a625aaa6ec3b698252e89816cf85e1845f3704e75cd6ad180b61c573039b4be3abb850e2bffcab0ae97b4dbd6bf4e5ce936fb6953d0bcc788b31051102744","ssdeep":"1536:uL1wWSUPBT+QYYDnDEBi82NcuSEz/NvT/gIENM6HN26e:W1r7PDxYIENM6HN26e","tlshash":"b5d373a7f5a0312da567c61860d0bafd166f8245d7221ffaf4273b644b895cb0a73e0c","first_seen":"2025-09-20T18:38:23.370048Z","last_seen":"2026-04-08T21:22:45.869013Z","times_seen":15,"resource_available":false,"data":null}},"time_used":2040,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":1782,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/picture/bg-shape-2.png","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.868Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/picture/bg-shape-2.png HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:22 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 29 Mar 2026 17:46:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c9656f-846c\"\r\nExpires: Fri, 08 May 2026 21:22:22 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33900,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 534 x 404, 8-bit/color RGBA, non-interlaced","md5":"e6cf106a4d80d1bad808ce3d74342585","sha1":"234e439c9c7b08e9e2ade04bb3080d0c98037094","sha256":"93b3a18aacf64278c57ca5ac26d64a06a96ca4d3fb55fc3e482b2ad24c7dfc5f","sha512":"a4ea5e6c87ba9728b03d5c6e1145b42c9c70dc9a0f47b5d364c5f05ddbbb9bdc2b08fe03e3f46e7f1576907050cf9f5e013568515f57d4bda66cdc6ba1a5c3b8","ssdeep":"768:pg1ZqzBv+DHuz+EoZDTgAgeKaDdEHJ/NZSuM:eq1+Kz+EoZD7gbaDqHJlM","tlshash":"e9e2f1959403a1f4f1fe5a51b64833a53e4621ef28f1a8d32f82109c1f8e3b7d59d4da","first_seen":"2024-02-01T10:47:46Z","last_seen":"2026-04-08T21:22:45.871741Z","times_seen":677,"resource_available":false,"data":null}},"time_used":6086,"timings":{"blocked":3781,"dns":0,"connect":0,"send":0,"wait":254,"receive":2051,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/js/jquery-1.12.4.min.js?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.875Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/js/jquery-1.12.4.min.js?v=6bf9c9c463875db9241bc2e09d0200 HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:19 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 29 Mar 2026 17:46:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c9656c-17b8b\"\r\nExpires: Thu, 09 Apr 2026 09:22:19 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97163,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32077)","md5":"4f252523d4af0b478c810c2547a63e19","sha1":"5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb","sha256":"668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404","sha512":"8c6b0c1fcde829ef5ab02a643959019d4ac30d3a7cc25f9a7640760fefff26d9713b84ab2e825d85b3b2b08150265a10143f82e05975accb10645efa26357479","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV","tlshash":"8893d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-09T08:00:49.366401Z","times_seen":68106,"resource_available":true,"data":null}},"time_used":3479,"timings":{"blocked":680,"dns":0,"connect":0,"send":0,"wait":250,"receive":2549,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/css/totop.css?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.849Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/css/totop.css?v=6bf9c9c463875db9241bc2e09d0200 HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:19 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sun, 29 Mar 2026 17:46:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c96568-825\"\r\nExpires: Thu, 09 Apr 2026 09:22:19 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2085,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b4525e2c4e208559a8977c835c15e332","sha1":"325a144df45004109a61eaf0d44f989f331207b0","sha256":"06a777eb2517e4272bb713f96beaab985dbf60365b1b5ff7bc0d94a96cab12b1","sha512":"9e597b1dc93c57891b5f82ec05ae1e62087e4269a3003cfd78255d7718c8560008097492090dca7ec82ae6519cacbb4f4249e1ddde3d5669502f6421e5f536bb","ssdeep":"","tlshash":"d84133ba670714842b2bc39c1be74748ab788153ed23d86d3397126a8f35158c1b335a","first_seen":"2025-07-31T15:52:06.775114Z","last_seen":"2026-04-08T21:22:45.873486Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1204,"timings":{"blocked":458,"dns":1,"connect":253,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/css/swipermin.css?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.850Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/css/swipermin.css?v=6bf9c9c463875db9241bc2e09d0200 HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:19 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sun, 29 Mar 2026 17:46:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c96568-4d3f\"\r\nExpires: Thu, 09 Apr 2026 09:22:19 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19775,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19512)","md5":"5c0f2c77026394b48961a2072e95068b","sha1":"9e1fba8b077619cf85a7f82bbaf1d192590c8103","sha256":"fcc52c6f1315aa55dbc6d62c55437b49cadbabc1dde54a7e067b599764ee30b4","sha512":"216a4e8790f0d5e9dc822a578e32ffa3d0c6d7ac8119a8acb9a73c27d2c1f86292d07c0b551a9a12b91a3a55ede8f9c8b07fe845abed978f7e20fdc50d7a2ead","ssdeep":"192:JXaNv/lSSyJWCh8zfi5o/mXDN3eBxwdJ5c:JXa1/lS0Cifi5o/mXOGJ5c","tlshash":"ee92622c17003057e6334f1a87d99778c724c9939e4358ef6250ee48c7bb96a32af766","first_seen":"2023-04-21T02:35:04Z","last_seen":"2026-04-08T21:22:45.875747Z","times_seen":690,"resource_available":false,"data":null}},"time_used":1524,"timings":{"blocked":465,"dns":1,"connect":503,"send":0,"wait":247,"receive":308,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/picture/icon-1.png","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.869Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/picture/icon-1.png HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:22 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 29 Mar 2026 17:46:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c96570-9a2\"\r\nExpires: Fri, 08 May 2026 21:22:22 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2466,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"b12ee7f26711f115e8a962d682841331","sha1":"a1c578afea5339a63ecbe2d1878e4ae201aa8a6c","sha256":"666713a3f66755c9146819c2099af596bc212ff1a7db0cf981eee0c649ab2b8a","sha512":"f3d4b2d65dca4d05e544effb4d9a4abd77602331b66e23de00280aad8511a410e0d5ee568383f670d2815be8714ad62bd8ea356402ba6156af1c901d75c179b0","ssdeep":"","tlshash":"69511a15f0428812a2d9e542a5fa042a5f62c960ced0e1aeedca50a404742fc556e1df","first_seen":"2024-02-01T10:47:46Z","last_seen":"2026-04-08T21:22:45.876591Z","times_seen":682,"resource_available":false,"data":null}},"time_used":4824,"timings":{"blocked":3780,"dns":0,"connect":0,"send":0,"wait":1044,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/picture/icon-3.png","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.870Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/picture/icon-3.png HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:30 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 29 Mar 2026 17:46:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c96570-ba9\"\r\nExpires: Fri, 08 May 2026 21:22:30 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2985,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 42, 8-bit/color RGBA, non-interlaced","md5":"7b771bffd4eb3584002b6ecc876a2146","sha1":"30295bba792a8eeee1e01669211eca906039a8c3","sha256":"83228bc5e056a9ea12eef48e95455753d46a5867d5559b4afc52e6fcdda1fd19","sha512":"996dcde46077d104eaa50ae68e31af22ba5fa351e7fc9706a100006d113579f9357074d5c715d7c8f148fbaefde2729a7a8c4a336710b5c1a55a453650f9dda8","ssdeep":"","tlshash":"6f515c0dcf1e5c98748aae9508e48167fb759304c723eaf27acd481a09311f8e998dcf","first_seen":"2024-02-01T10:47:46Z","last_seen":"2026-04-08T21:22:45.877348Z","times_seen":684,"resource_available":false,"data":null}},"time_used":14436,"timings":{"blocked":11528,"dns":0,"connect":0,"send":0,"wait":257,"receive":2651,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/js/wow.min.js?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.882Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/js/wow.min.js?v=6bf9c9c463875db9241bc2e09d0200 HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:20 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 29 Mar 2026 17:46:22 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c9656e-20df\"\r\nExpires: Thu, 09 Apr 2026 09:22:20 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8415,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8385)","md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-04-09T08:19:03.95091Z","times_seen":9842,"resource_available":true,"data":null}},"time_used":2227,"timings":{"blocked":1980,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/css/owl.css?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.846Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/css/owl.css?v=6bf9c9c463875db9241bc2e09d0200 HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:19 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sun, 29 Mar 2026 17:46:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c96568-d24\"\r\nExpires: Thu, 09 Apr 2026 09:22:19 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3364,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3194)","md5":"6fd338d01b002e369f3981f1a74a40fc","sha1":"fcb2985d8ecb9ade9189ea9dfb7040ca313898b1","sha256":"75e09f682f70b2216d6fe51f5793fd6b69be396caed264612706aa3b7ac5d8ae","sha512":"effe99dbd7d4afc2b66634ac7649a36404c08c1006ef76a0c96c86cfa3887b225326e363607b3acff68646b7e5229f1616bc50a0d290ff0f0d148e55213c16a3","ssdeep":"","tlshash":"7461bbe5314a225f480f83221dd81e86393dcc52d8660a5a92bbd71447dae6d213ffcf","first_seen":"2023-04-11T21:31:49Z","last_seen":"2026-04-08T21:22:45.879045Z","times_seen":647,"resource_available":false,"data":null}},"time_used":1291,"timings":{"blocked":217,"dns":1,"connect":250,"send":0,"wait":823,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/tj.js?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.854Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/tj.js?v=6bf9c9c463875db9241bc2e09d0200 HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:19 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 253\r\nLast-Modified: Sun, 29 Mar 2026 09:51:35 GMT\r\nConnection: keep-alive\r\nETag: \"69c8f627-fd\"\r\nExpires: Thu, 09 Apr 2026 09:22:19 GMT\r\nCache-Control: max-age=43200\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":253,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bbbb51d7554c28651fe1feafd1118c9f","sha1":"9ec00cc410be9cbc0f4d433677151c61d4d8b7bb","sha256":"efaf36a3a67fdb4ca19e0710269325a7550c313b5ecbca0992d9fdbf3e492ef6","sha512":"cfca1aaf60cb1339075063aa5c840e94d28a69f65dd4092da01f6170b2e7558452cd24bde52e5cc8b58cec0b7d2c4675ce1c17b519f5700bde32643d2ddc62aa","ssdeep":"","tlshash":"e9d02e1f2c1468386366082811bfda8cb262948c50be990080ece8108aa0fea1c2e7c8","first_seen":"2026-04-08T21:22:45.879794Z","last_seen":"2026-04-08T21:22:45.879794Z","times_seen":1,"resource_available":true,"data":null}},"time_used":749,"timings":{"blocked":502,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/picture/shape-1.png","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.856Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/picture/shape-1.png HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:24 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 29 Mar 2026 17:46:25 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c96571-91f\"\r\nExpires: Fri, 08 May 2026 21:22:24 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2335,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit/color RGBA, non-interlaced","md5":"ec3948b8d36dea60b210b2ab21a92290","sha1":"4bb53e0c80977f8d95852c6c25a7459568405b4d","sha256":"3c1ae3164c38144ae661f6b4bffd359f55b36a903aa4714b35a70d3a605a47c1","sha512":"b39637ffde3d9f5dd72df77bb325ee7caa8d2f9d2ee863393b426b6b15c077132eb296ede44dab6197bbb8578223f975ad681c377df0a3202ba8477fd8aba6f4","ssdeep":"","tlshash":"b3414d04ed412f0131a67c2b98e44033ed9b4a90e7a0f81f788ad0233d3a6f65615ae5","first_seen":"2024-02-01T10:47:46Z","last_seen":"2026-04-08T21:22:45.881647Z","times_seen":678,"resource_available":false,"data":null}},"time_used":6389,"timings":{"blocked":5337,"dns":0,"connect":0,"send":0,"wait":248,"receive":804,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/picture/shape-3.png","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.860Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/picture/shape-3.png HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:25 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 29 Mar 2026 17:46:25 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c96571-603\"\r\nExpires: Fri, 08 May 2026 21:22:25 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1539,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit/color RGBA, non-interlaced","md5":"7897206239870928ccadd33798a0c388","sha1":"c8ebf2f2078d74e3cd70765dd23610fd2e118295","sha256":"5933313031931d2179d11ecac187502a4e628c63c22f89cae78f1a009d5f2f51","sha512":"d2a406f8bffc58bdf76868fab236816274b99bcef08c9daf37abb73e37f89692336c76e1ff33312b3739489d9a5c38f191da45a7bb650161c2c3be6901b291ad","ssdeep":"","tlshash":"a53197999a026f437288f9c208e90673986645c0d9e5e0787dcea41225721fd56167c7","first_seen":"2024-02-01T10:47:46Z","last_seen":"2026-04-08T21:22:45.882456Z","times_seen":673,"resource_available":false,"data":null}},"time_used":6348,"timings":{"blocked":6093,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/picture/bg-shape-1.png","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.867Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/picture/bg-shape-1.png HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:22 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 29 Mar 2026 17:46:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c9656f-1a74\"\r\nExpires: Fri, 08 May 2026 21:22:22 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6772,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 229 x 229, 8-bit/color RGBA, non-interlaced","md5":"d766bbc7dc567b95f8132c8c835ad430","sha1":"ce7021882547660a54cfc66246acb2050f75ab5f","sha256":"0797750b854c6127f25fb6a9855ac9fbd0c2a26ad2111cb67b80b26fc5514a1e","sha512":"ed09b9c87e08548ff1db79b9cb72fef49d7c36e39c2eb77ce27c424398f61303add442b50630a2a0433367488ee19be473222a911143f2ad311e4a2d23ddf657","ssdeep":"192:aR26UomMjnwJatzUncFQ9cMMzzfRzaHqxAX:aEkhrwJCzTFUctzSR","tlshash":"85d19fb9b80b3c0580d264810dd294572f5dd08af27a723b5dffc01c02663ba9e207e9","first_seen":"2024-02-01T10:47:46Z","last_seen":"2026-04-08T21:22:45.883241Z","times_seen":660,"resource_available":false,"data":null}},"time_used":5908,"timings":{"blocked":3781,"dns":0,"connect":0,"send":0,"wait":1619,"receive":508,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/picture/ouyi2.png","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.874Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/picture/ouyi2.png HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:33 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 29 Mar 2026 17:46:25 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c96571-7f2\"\r\nExpires: Fri, 08 May 2026 21:22:33 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2034,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 164 x 72, 8-bit gray+alpha, non-interlaced","md5":"c11ea92e0aab1d552980ce5743d34e19","sha1":"6276479b407217e25cc7c85a77e8e3bebc939172","sha256":"23201bd5c9fd195828c101f0fbf1963b4d649bcffccbe282f73a6e16711ecce4","sha512":"b9fc6e7cf829ed8afcaa6361880744aeac69cd664769b937e654bcff6178da9c67dcfe7e3243c1d145182b0dfbc73e9e1f800f2a479f4627ce2629a17176bb2a","ssdeep":"","tlshash":"8a41eccaffb69dbd8dc707d2041b599ccce055c24d52bda9eeb0b36856140c5214a652","first_seen":"2024-10-18T02:34:59.43098Z","last_seen":"2026-04-09T00:30:26.916428Z","times_seen":665,"resource_available":false,"data":null}},"time_used":15504,"timings":{"blocked":14432,"dns":0,"connect":0,"send":0,"wait":257,"receive":815,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/css/caidan.css?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.828Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/css/caidan.css?v=6bf9c9c463875db9241bc2e09d0200 HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:18 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sun, 29 Mar 2026 17:46:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c96567-ddf\"\r\nExpires: Thu, 09 Apr 2026 09:22:18 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3551,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"0114b5bc44cfbf06fecb3419fd86558a","sha1":"535f3a6dfbec7470af300f7245a69baf034bf392","sha256":"916cc8ed433d7132f756b452e4ab9f9c429bf921b640c1a4a38ccc50465ed721","sha512":"d68e43013d60e47d926c573f9a7b5ab9a7797f9f80499ef8974256c09db6faeceb8e440f1657349493e8897582171a681b18f38c65719136dd2e91f7ceb959c0","ssdeep":"","tlshash":"9a71ce64da7b1049bbbf967ca3b1d7297fe0a056af0bc2ac78fce424c18439d50512c9","first_seen":"2025-02-06T16:53:29.615652Z","last_seen":"2026-04-08T21:22:45.885664Z","times_seen":501,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/js/magnific-popup.min.js?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.878Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/js/magnific-popup.min.js?v=6bf9c9c463875db9241bc2e09d0200 HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:19 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 29 Mar 2026 17:46:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c9656c-4ef8\"\r\nExpires: Thu, 09 Apr 2026 09:22:19 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20216,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087)","md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-09T08:00:16.758438Z","times_seen":55175,"resource_available":true,"data":null}},"time_used":3903,"timings":{"blocked":1008,"dns":0,"connect":0,"send":0,"wait":250,"receive":2645,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?ce1ff6059ddc61e2f540c0a6d14bb59e","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.3.198","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:22.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?ce1ff6059ddc61e2f540c0a6d14bb59e HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\nContent-Length: 11286\r\nContent-Type: application/javascript\r\nDate: Wed, 08 Apr 2026 21:22:23 GMT\r\nEtag: de7d488541780a858921e9acf4a2811e\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=0B8C0DD2CBB54AAD; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29892,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (616)","md5":"1c1f6a5e99bdcb762d68eb2c9207886f","sha1":"fed23af56829ae332145e749b8855b963bca8c89","sha256":"2093c80a189fa38f81be3ec203680e88675ee6964b0c6df008fc8c9f0cbb100e","sha512":"eddff4cae3718bbe72a51cd40179da4ea93957fd82b90998f5566b0ac6f90c1bfbd5ea4aa3f2fc5b495967633e696b500e20bd1b7ae39b9814f494371cf46225","ssdeep":"384:4FJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:4F4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"b9d2d9a9b282713293a324a5153f324ef07b5a54bd4968a4f11894c07d38fbb027bfdd","first_seen":"2026-04-08T21:22:45.887243Z","last_seen":"2026-04-08T21:22:45.887243Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2185,"timings":{"blocked":960,"dns":352,"connect":200,"send":0,"wait":263,"receive":1,"ssl":407},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/css/magpopup.css?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.839Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/css/magpopup.css?v=6bf9c9c463875db9241bc2e09d0200 HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:21 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sun, 29 Mar 2026 17:46:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c96567-1b2a\"\r\nExpires: Thu, 09 Apr 2026 09:22:21 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6954,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"30b593b71d7672658f89bfea0ab360c9","sha1":"d6963db6faa9294387bb3175813a61bc3f859437","sha256":"45d1f5f6cf913746c45dd697b1a8f3b719c02d8b3f678dc7fc2766d54e1aaf6e","sha512":"58440dbfd777facab21e3aea519a1b0e11404590e4a36c2959d7dca6fe3896cca9b12b8c3b490719ddcc43caebb019ff41adfd5688e985d53a08c92925498357","ssdeep":"192:hRQ4fS5bzRyIy++mcS3n2s96/LEpeXHFykgxe:Alx3pSFh","tlshash":"a5e11bd39fb22305e525e9a8a657a76973120013e70fcc6bbfd12448df8d7c942a3b85","first_seen":"2023-04-05T05:38:02Z","last_seen":"2026-04-09T07:46:55.036322Z","times_seen":21625,"resource_available":true,"data":null}},"time_used":3098,"timings":{"blocked":2843,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/css/owl.min.css?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.848Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/css/owl.min.css?v=6bf9c9c463875db9241bc2e09d0200 HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:19 GMT\r\nContent-Type: text/css\r\nContent-Length: 1016\r\nLast-Modified: Sun, 29 Mar 2026 17:46:16 GMT\r\nConnection: keep-alive\r\nETag: \"69c96568-3f8\"\r\nExpires: Thu, 09 Apr 2026 09:22:19 GMT\r\nCache-Control: max-age=43200\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1016,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (846)","md5":"594b81805a98b267e47c70a8fad30d9f","sha1":"684d84ec40b305ca14efc88c91f12972cb6342b4","sha256":"924b0dc630d1c5dff9fa31aead9509775b1d476bfe0a5ac2977b2f11205a26ac","sha512":"b0c5ed30d2f5cd1ce894760a12e8ccd80a822d447d1760b8ff4e5c75bc638cb491bcc40872210f090668fbe9e4ee0a3706d4ae2bd91f6bfb3e6b87f88b9a4b93","ssdeep":"","tlshash":"4d11abc5f189221d301781904aa842cb6b1e687e529d0ef5f8ee8160c22dd053a6fbf9","first_seen":"2023-04-05T06:03:14Z","last_seen":"2026-04-09T07:42:24.85705Z","times_seen":18737,"resource_available":false,"data":null}},"time_used":805,"timings":{"blocked":260,"dns":1,"connect":297,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/css/def.css?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.852Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/css/def.css?v=6bf9c9c463875db9241bc2e09d0200 HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:19 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 02 Apr 2026 16:54:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69ce9f56-13a5e\"\r\nExpires: Thu, 09 Apr 2026 09:22:19 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80478,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a20ce9f46874c337a0c375c2dd0a4cba","sha1":"36dddcfe931aa1cac89e878b57d4a2afcfb82131","sha256":"3a0bff51a1c21801ee1fe57ed09c5543d9ee318bd81b0a67f65d950bda4f472c","sha512":"b60523409b3627d5b773dfcae1994dc88ffe16e75cd0a676ea8587a90700529724bc34b7da39daf4cadf069584e23c9b78ae9cdf2abb27bb8b84763dccd693c8","ssdeep":"768:fGw0Vx7oDnz7LXMGAFM+f/eQfdDyEQodt3EK5Cd3ocwqDB2FQF8BFQF8ez2n18No:EkQfdDy7odt3EK5Cd3o+kOKOh0gzsl","tlshash":"0573415baa671845b40b98b96fbbab95231c5043960fddb87f8c364ccf850e581b3b4c","first_seen":"2026-04-08T21:22:45.893841Z","last_seen":"2026-04-08T21:22:45.893841Z","times_seen":1,"resource_available":false,"data":null}},"time_used":719,"timings":{"blocked":464,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/picture/hero-mobile-1.png","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.865Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/picture/hero-mobile-1.png HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:26 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 29 Mar 2026 17:46:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c96570-ba23\"\r\nExpires: Fri, 08 May 2026 21:22:26 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47651,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 401 x 801, 8-bit/color RGBA, non-interlaced","md5":"689fab29ff518f640b9eb842d7838ff7","sha1":"436226b82cdcf8071dd5a3dd9a6a92a3c7aaaf68","sha256":"2f190ed00391ce2b621e9f9fbf3610c80e103776f30328cf9cab9b35da8fe192","sha512":"bc35f7bfcc58a766dae3d965f41dea9b07ff2e0037c2da8ccb8cd49cfbab1bb36ad8a55e8df87c2c1c0152ebf713b1f8af5d982af384c69faa1d7d245a48f158","ssdeep":"768:OfnUt4asE7mPjUOHrPbF+0a+J6FhUio2Hfw1xxFQs9w1nNzHA5Jj8XjUMN+CcEQJ:OpzUI/HrD962W/CwZYF8QMN+ewqW","tlshash":"6e23e1508f84f47e4d6cc6f7192b428da9f352e753c52068887b5ead7996e78bc30c82","first_seen":"2024-02-01T10:47:46Z","last_seen":"2026-04-08T21:22:45.896216Z","times_seen":650,"resource_available":false,"data":null}},"time_used":10938,"timings":{"blocked":7224,"dns":0,"connect":0,"send":0,"wait":255,"receive":3459,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/picture/about-icon-1.png","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.866Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/picture/about-icon-1.png HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:22 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 29 Mar 2026 17:46:23 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c9656f-9f4\"\r\nExpires: Fri, 08 May 2026 21:22:22 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2548,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 57 x 57, 8-bit/color RGBA, non-interlaced","md5":"5787184d0495e46a5557b7aa8957af95","sha1":"f48a8870e05b6c3cb8278159dfe96bfcd9b9203b","sha256":"fe2389b7a1ee96ca436b5ed684c94c61d561b1c9af8a463a79b6c19cf84e7413","sha512":"55b12d394cd0d4d3fc1346b308acee78ef0612118b0f0834f6850f6229a705eaa6e0afafd446e8c19885185a1575cbb0819a33f0b45a5c0281fe83ac5294a714","ssdeep":"","tlshash":"4d511aafdc566e517008eb9540e54a23c87a84e0d6e6d39717fcd44a0d271a9742b1cb","first_seen":"2024-02-01T10:47:46Z","last_seen":"2026-04-08T21:22:45.899494Z","times_seen":661,"resource_available":false,"data":null}},"time_used":4832,"timings":{"blocked":3782,"dns":0,"connect":0,"send":0,"wait":1050,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/js/bootstrap.min.js?v=6bf9c9c463875db9241bc2e09d0200","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.875Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/js/bootstrap.min.js?v=6bf9c9c463875db9241bc2e09d0200 HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:19 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Sun, 29 Mar 2026 17:46:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69c9656c-c75f\"\r\nExpires: Thu, 09 Apr 2026 09:22:19 GMT\r\nCache-Control: max-age=43200\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51039,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (50758)","md5":"67176c242e1bdc20603c878dee836df3","sha1":"27a71b00383d61ef3c489326b3564d698fc1227c","sha256":"56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4","sha512":"9fa75814e1b9f7db38fe61a503a13e60b82d83db8f4ce30351bd08a6b48c0d854baf472d891af23c443c8293380c2325c7b3361b708af9971aa0ea09a25cdd0a","ssdeep":"768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+","tlshash":"3533b649725078b201df9176913f460bb736788ea907816cb95d98ed2e7cd89322bf3c","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-04-09T08:07:39.570766Z","times_seen":120788,"resource_available":true,"data":null}},"time_used":3114,"timings":{"blocked":696,"dns":0,"connect":0,"send":0,"wait":254,"receive":2164,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"view.khzwg.info/skin/10/images/o2.png","fqdn":"view.khzwg.info","domain":"khzwg.info","tld":"info"},"ip":{"addr":"162.209.242.116","port":80,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://view.khzwg.info/","date":"2026-04-08T21:22:18.864Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /skin/10/images/o2.png HTTP/1.1\r\nHost: view.khzwg.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://view.khzwg.info/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Apr 2026 21:22:25 GMT\r\nContent-Type: image/png\r\nLast-Modified: Thu, 02 Apr 2026 15:46:07 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"69ce8f3f-1a597\"\r\nExpires: Fri, 08 May 2026 21:22:25 GMT\r\nCache-Control: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":107927,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"f5bc2d67a911b7ffdf04dc205c43132a","sha1":"dca20d1025b6224f46ce97665beb96501ec392db","sha256":"ed798609d2a5f1e8f4fe6acfc0e30936e1e1447c5ab809290dff0c89a7bdba27","sha512":"3f9a09b8be1bf76c61625157558fbf123a531a9f7def46de9c8c041b83a9669bf653b9d803d655a8a9c85d79e98fc31c428824f4de4dfe192a4e7db58d9224ba","ssdeep":"1536:g8g9zrMY/8uAiGExLK//D7kAaxHRW/l7i0Q14l2BGMWjWTPeUKBCP5b8q0ECZCXo:DgNx/hSOeHD7wHWVcmaeUqCP5QuCZCXo","tlshash":"91b30201abc0fa40d6ce81f8e8c284d906a3cc9b7abe8d58797d088fef50e5d5d69585","first_seen":"2026-04-08T21:22:45.903881Z","last_seen":"2026-04-08T21:22:45.903881Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12399,"timings":{"blocked":6382,"dns":0,"connect":0,"send":0,"wait":247,"receive":5770,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
