{"report_id":"c311dd73-4840-4c1a-a836-fd77606f8cbf","version":0,"status":"done","tags":[],"date":"2026-06-08T16:02:32Z","url":{"schema":"http","addr":"winstep.tw","fqdn":"winstep.tw","domain":"winstep.tw","tld":"tw"},"ip":{"addr":"203.196.8.151","port":0,"asn":23764,"as":"CTGNet","country":"China","country_code":"CN"},"final":{"url":{"schema":"https","addr":"winstep.tw/","fqdn":"winstep.tw","domain":"winstep.tw","tld":"tw"},"title":"Winstep - 專業的 Windows 桌面美化增強套件 | 繁體中文官網","dom":{"size":59359,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (479)","md5":"db6ce36f8da42a9c688802210dceb989","sha1":"4366405ed0e3c2ff8deb26c74f8fff07fe677e88","sha256":"0a4fa36f63f26733ee4e7fd939e375c6bb601e6363980a2371c9ea2e22c1f4b2","sha512":"6125e6386e99d60da7ca859dfc1a7a19d68f3542bc23a019e04460fc0306eea7fc271484c940b27425a35c3751670e12089a085682a2355869f931ad4d8325e5","ssdeep":"1536:bCwj12JAxMZZ+VcoM7uGT0JPhZ6jfrmwQG41X9jP/wyBYhwNxvG:bVxS4epyoMZYurG4tvO","tlshash":"c443e86265f7142ea10381f29ba6332d3ab5d107c60ecd14b7fd1658cf86dc9ee63298","dom_hash":"domhash7df1e1a63a8faba7bcac095240199839","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"winstep.tw","fqdn":"winstep.tw","domain":"winstep.tw","tld":"tw"},"ip":{"addr":"203.196.8.151","port":0,"asn":23764,"as":"CTGNet","country":"China","country_code":"CN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-13T16:02:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"winstep.tw","ip":{"addr":"203.196.8.151","port":443,"asn":23764,"as":"CTGNet","country":"China","country_code":"CN"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-31T01:53:19.656062Z","last_seen":"2026-05-31T01:53:19.656062Z","alert_count":0,"request_count":10,"received_data":344680,"sent_data":5400,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"i-cdn.softscdn.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-09-02","domain_rank":0,"first_seen":"2023-09-14T07:21:00Z","last_seen":"2026-06-03T03:14:26.090536Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":457,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"winstep.tw/js/nav.js","fqdn":"winstep.tw","domain":"winstep.tw","tld":"tw"},"ip":{"addr":"203.196.8.151","port":443,"asn":23764,"as":"CTGNet","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ecf555c1b71aa51aa6df4de74218c5f","sha1":"c6ce8222709d2ea34f81e869cb5e066dc4b9fed2","sha256":"5c31ee7dea375879e77069eac7333e9a6e2750b29102433c84eda4c7f1c86e10","sha512":"456554c22c590fe76eda93ffb14a4e626bf2022b2c65bd08f61686145bfc606acbba84d6e6e0960ece97ce610853d5dc8fb98ffab1ebf227ef110feb0aed9c14","ssdeep":"96:4rHvobzhaIer0R92MGKnKm2EaOEer0RE4/y7SwMpVUMzRUzlXDBVwUDRu:JhdiTUYih8y7dMjUMz4lz7wUNu","tlshash":"fa422e51a1d5063f817342d6d7aa3769faee4043920da1017abe1b6b4f73d05ac378f8","size":12435,"data":"","first_seen":"2026-06-08T16:02:37.176145Z","last_seen":"2026-06-08T16:06:51.24589Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winstep.tw/js/footer.js","fqdn":"winstep.tw","domain":"winstep.tw","tld":"tw"},"ip":{"addr":"203.196.8.151","port":443,"asn":23764,"as":"CTGNet","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c993a322edad5e0db21a5eabb2f6187","sha1":"47211a929f073c1bb87b89ca4df151f7a6e0e6fa","sha256":"853f17c0cf0af5a61692b796cfda18f9d3035da265d78cedeedcc602f5db5f60","sha512":"a44c0b292d2823e518b88cf7e7dc2003e600f81a20fcb9e40800bda46622e37984cd8f934f4a3c7766de91b5b5a4e20d0033ef98c44375987a55e0d5469f8fbd","ssdeep":"","tlshash":"42815132f9981d3b1137c250ab22a328f7a5920b724985617a7d0a5e9ff7c87dc63584","size":3930,"data":"","first_seen":"2026-06-08T16:02:37.170674Z","last_seen":"2026-06-08T16:06:51.246605Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"winstep.tw/images/winstepnexus_logo.png","fqdn":"winstep.tw","domain":"winstep.tw","tld":"tw"},"ip":{"addr":"203.196.8.151","port":443,"asn":23764,"as":"CTGNet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winstep.tw/","date":"2026-06-08T16:02:03.351Z","timestamp":1780934523351,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winstep.tw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 03:54:52 GMT","end":"Tue, 18 Aug 2026 03:54:51 GMT"},"fingerprint":{"sha1":"A2:4D:1D:55:42:C7:2E:18:C1:13:CA:73:E7:7E:11:9E:E5:22:B0:A7","sha256":"3D:94:5F:F1:31:A9:EC:2C:73:1C:4A:BD:D8:08:C0:F3:11:7F:5E:4E:EA:90:F1:2D:4B:AF:4A:D5:32:D1:A7:C7"}}},"request":{"raw":"GET /images/winstepnexus_logo.png HTTP/1.1\r\nHost: winstep.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winstep.tw/\r\nCookie: server_name_session=2e8dd2a9e60b1dca855a00aa9cf3522a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 08 Jun 2026 16:02:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Mar 2026 09:52:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bd18c5-6b7c\"\r\nexpires: Wed, 08 Jul 2026 16:02:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27516,"size_decoded":27851,"mime_type":"image/png","magic":"PNG image data, 128 x 164, 8-bit/color RGBA, non-interlaced","md5":"31133f8a281996b52e08d44a954bc823","sha1":"27be32b2a670f30b04d5577c55f058ff66e002c6","sha256":"ef97b39224362fad8e2b99ac8e6829f2cefe67787b765176bcd431639bfba4e5","sha512":"b147d6903fe13a0d564f41be6ba06511947343d12699a5dee5292670a7e62e82291b0cea07a3c6f42ee23e3310eb1364f208bcd8723e65d58422d22fb5bd1f44","ssdeep":"384:MXE05VMvI4vWN5uJvaiGe4rtRuv2DArJ4pZTtdQ7EPYbQFhvoVNzcFcUtEQELBRp:m35VMAuVStkCAt+hdeTlPgcoEJOCKbS","tlshash":"18c2e10ee136b47de26cf8369d2b52351dad014e9e87237da28b58e8905ac5f2732313","first_seen":"2026-06-08T16:02:37.167145Z","last_seen":"2026-06-08T16:06:51.247331Z","times_seen":2,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winstep.tw/images/winstep-logo.png","fqdn":"winstep.tw","domain":"winstep.tw","tld":"tw"},"ip":{"addr":"203.196.8.151","port":443,"asn":23764,"as":"CTGNet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winstep.tw/","date":"2026-06-08T16:02:04.161Z","timestamp":1780934524161,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winstep.tw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 03:54:52 GMT","end":"Tue, 18 Aug 2026 03:54:51 GMT"},"fingerprint":{"sha1":"A2:4D:1D:55:42:C7:2E:18:C1:13:CA:73:E7:7E:11:9E:E5:22:B0:A7","sha256":"3D:94:5F:F1:31:A9:EC:2C:73:1C:4A:BD:D8:08:C0:F3:11:7F:5E:4E:EA:90:F1:2D:4B:AF:4A:D5:32:D1:A7:C7"}}},"request":{"raw":"GET /images/winstep-logo.png HTTP/1.1\r\nHost: winstep.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winstep.tw/\r\nCookie: server_name_session=2e8dd2a9e60b1dca855a00aa9cf3522a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 08 Jun 2026 16:02:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 01 Apr 2026 14:40:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cd2e48-509e\"\r\nexpires: Wed, 08 Jul 2026 16:02:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20638,"size_decoded":21013,"mime_type":"image/png","magic":"PNG image data, 127 x 105, 8-bit/color RGBA, non-interlaced","md5":"af38d7cd2acb3246d2622629f76de7b0","sha1":"7c46000afebc311f863f63634930e948a7788b2e","sha256":"a0558e3351054806d3e470dd242571932387a15c84457d6816792d619315b003","sha512":"8a6dcb813d73fda583234449f01a248b770aded7b4e5e411017a85c2aee661be48f10abf60aa762d58ff4d4d6b219fedc06b132ea65623d1632e77ab225990f1","ssdeep":"384:UJXE05eHDOuNZ4wFv+QoZONbfbGhP/LuNWt5WbaLZn:Q352RNmUnooPGRLuWt5iah","tlshash":"5392d0cb6d1df1aee81835064dfbc38653a4affc83f3264654529c890d2fc961f22965","first_seen":"2026-04-03T22:45:59.720289Z","last_seen":"2026-06-08T16:06:51.245195Z","times_seen":3,"resource_available":false,"data":null}},"time_used":905,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":905,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winstep.tw/","fqdn":"winstep.tw","domain":"winstep.tw","tld":"tw"},"ip":{"addr":"203.196.8.151","port":443,"asn":23764,"as":"CTGNet","country":"China","country_code":"CN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-08T16:01:59.654Z","timestamp":1780934519654,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winstep.tw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 03:54:52 GMT","end":"Tue, 18 Aug 2026 03:54:51 GMT"},"fingerprint":{"sha1":"A2:4D:1D:55:42:C7:2E:18:C1:13:CA:73:E7:7E:11:9E:E5:22:B0:A7","sha256":"3D:94:5F:F1:31:A9:EC:2C:73:1C:4A:BD:D8:08:C0:F3:11:7F:5E:4E:EA:90:F1:2D:4B:AF:4A:D5:32:D1:A7:C7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: winstep.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 08 Jun 2026 16:02:02 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 27 Apr 2026 08:12:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ef1a65-c3c4\"\r\nset-cookie: server_name_session=2e8dd2a9e60b1dca855a00aa9cf3522a; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50116,"size_decoded":9371,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (352), with CRLF line terminators","md5":"3fb7aca361979c7c0bf3f1200d91c397","sha1":"95ddbcea2df21f37ec084bd0daac5a5fb38928a1","sha256":"fef098e07768abf6649fd5e5bbc108beec4205b77f2787f8f1da7b7dab3cb065","sha512":"8345e2743700866e08d7603b007db63d37a70afca8f6b6249ad2a4c117c1da02281c8ebc070cc155e34d8b4ee37f3a7a2df40ca463c1030f419c113706aee3ed","ssdeep":"1536:LAkIg04mxMOZzVfov7jGU0MPCZvje6EKTam6L4+B95sD1e0:L0xzRlk3JfaRuKTa1n0","tlshash":"d1237525a65114299133c3b1cfa2232cffa68147d74a0228b6fd22475fb5c8dda63ed8","first_seen":"2026-06-08T16:02:37.169598Z","last_seen":"2026-06-08T16:06:51.249157Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3224,"timings":{"blocked":-1,"dns":1247,"connect":218,"send":0,"wait":436,"receive":0,"ssl":1322},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winstep.tw/js/footer.js","fqdn":"winstep.tw","domain":"winstep.tw","tld":"tw"},"ip":{"addr":"203.196.8.151","port":443,"asn":23764,"as":"CTGNet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winstep.tw/","date":"2026-06-08T16:02:03.318Z","timestamp":1780934523318,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winstep.tw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 03:54:52 GMT","end":"Tue, 18 Aug 2026 03:54:51 GMT"},"fingerprint":{"sha1":"A2:4D:1D:55:42:C7:2E:18:C1:13:CA:73:E7:7E:11:9E:E5:22:B0:A7","sha256":"3D:94:5F:F1:31:A9:EC:2C:73:1C:4A:BD:D8:08:C0:F3:11:7F:5E:4E:EA:90:F1:2D:4B:AF:4A:D5:32:D1:A7:C7"}}},"request":{"raw":"GET /js/footer.js HTTP/1.1\r\nHost: winstep.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winstep.tw/\r\nCookie: server_name_session=2e8dd2a9e60b1dca855a00aa9cf3522a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 08 Jun 2026 16:02:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Apr 2026 08:12:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ef1a59-f5a\"\r\nexpires: Tue, 09 Jun 2026 04:02:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3930,"size_decoded":1974,"mime_type":"application/javascript","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (473), with CRLF line terminators","md5":"7c993a322edad5e0db21a5eabb2f6187","sha1":"47211a929f073c1bb87b89ca4df151f7a6e0e6fa","sha256":"853f17c0cf0af5a61692b796cfda18f9d3035da265d78cedeedcc602f5db5f60","sha512":"a44c0b292d2823e518b88cf7e7dc2003e600f81a20fcb9e40800bda46622e37984cd8f934f4a3c7766de91b5b5a4e20d0033ef98c44375987a55e0d5469f8fbd","ssdeep":"","tlshash":"42815132f9981d3b1137c250ab22a328f7a5920b724985617a7d0a5e9ff7c87dc63584","first_seen":"2026-06-08T16:02:37.170674Z","last_seen":"2026-06-08T16:06:51.246605Z","times_seen":2,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winstep.tw/images/winstepnexusultimate_logo.png","fqdn":"winstep.tw","domain":"winstep.tw","tld":"tw"},"ip":{"addr":"203.196.8.151","port":443,"asn":23764,"as":"CTGNet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winstep.tw/","date":"2026-06-08T16:02:03.353Z","timestamp":1780934523353,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winstep.tw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 03:54:52 GMT","end":"Tue, 18 Aug 2026 03:54:51 GMT"},"fingerprint":{"sha1":"A2:4D:1D:55:42:C7:2E:18:C1:13:CA:73:E7:7E:11:9E:E5:22:B0:A7","sha256":"3D:94:5F:F1:31:A9:EC:2C:73:1C:4A:BD:D8:08:C0:F3:11:7F:5E:4E:EA:90:F1:2D:4B:AF:4A:D5:32:D1:A7:C7"}}},"request":{"raw":"GET /images/winstepnexusultimate_logo.png HTTP/1.1\r\nHost: winstep.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winstep.tw/\r\nCookie: server_name_session=2e8dd2a9e60b1dca855a00aa9cf3522a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 08 Jun 2026 16:02:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Mar 2026 09:52:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69bd18c4-a6a2\"\r\nexpires: Wed, 08 Jul 2026 16:02:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42658,"size_decoded":43016,"mime_type":"image/png","magic":"PNG image data, 300 x 164, 8-bit/color RGBA, non-interlaced","md5":"38ee578c0c6116d5480548c74d6cf5f0","sha1":"cf141c726acae12c6a8b86a998784490a7e7999a","sha256":"99930ab3ffbe43536f1bd8041463cae846c03c31655eaf9cf0a615085e2d02d1","sha512":"af67846686bb12a180cdb7154aeaf873cf75e95ae756da3fe501b5cf48ed39805a0ce39ae07b8d6cc6fac117b2d0df3915ac472c91aab6a459dd05ba14addb4a","ssdeep":"768:O350KpLlkaUgiia8E5b7+h2c9fS7Yh0SWyeAZSdEUKJ2s7ZczT11sFJKSZvDUWQK:3K9lNMiap7+hbXh0LyeAMd+D7ZczDsFp","tlshash":"7e1302e25424d11d3dbe76a104620ec63bfab33948a742147f20373289b7d91fb6dd9a","first_seen":"2026-06-08T16:02:37.171559Z","last_seen":"2026-06-08T16:06:51.248035Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1059,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1059,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winstep.tw/images/winstepxtreme_logo.png","fqdn":"winstep.tw","domain":"winstep.tw","tld":"tw"},"ip":{"addr":"203.196.8.151","port":443,"asn":23764,"as":"CTGNet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winstep.tw/","date":"2026-06-08T16:02:03.355Z","timestamp":1780934523355,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winstep.tw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 03:54:52 GMT","end":"Tue, 18 Aug 2026 03:54:51 GMT"},"fingerprint":{"sha1":"A2:4D:1D:55:42:C7:2E:18:C1:13:CA:73:E7:7E:11:9E:E5:22:B0:A7","sha256":"3D:94:5F:F1:31:A9:EC:2C:73:1C:4A:BD:D8:08:C0:F3:11:7F:5E:4E:EA:90:F1:2D:4B:AF:4A:D5:32:D1:A7:C7"}}},"request":{"raw":"GET /images/winstepxtreme_logo.png HTTP/1.1\r\nHost: winstep.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winstep.tw/\r\nCookie: server_name_session=2e8dd2a9e60b1dca855a00aa9cf3522a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 08 Jun 2026 16:02:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Apr 2026 07:59:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ef174b-14442\"\r\nexpires: Wed, 08 Jul 2026 16:02:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83010,"size_decoded":83344,"mime_type":"image/png","magic":"PNG image data, 1044 x 235, 8-bit colormap, non-interlaced","md5":"90406addf314139979d5ade4e09648d7","sha1":"991adc76a1efa61e4b792403e78a0220bb2955f5","sha256":"83eb327ea7e3eb4fad082cc2b2f8bb14fa56f6054d3ec97d6b8c501de59c1f25","sha512":"f2b4e12ae56fd497e6cd008e4601309853778baaff490a2fa9bcbd8e93baed85762eaeacc2d12c4b2a7df2303f7c19be5a47fe0b5096068b75d2ebdd69d64b52","ssdeep":"1536:cLHnCj95o4LfoY5nhwY0OQKd/MttaiAphb6ikzgTnOGOVoPbo2FIU6Do09F80xzM:yHA5ogfp8naMttaiohRKyOpohAk0xY","tlshash":"7a83129826e3269444cfdcddc8e4d51bd0d6714888ac26ae1ee4d530f6f5d2c4b82b5f","first_seen":"2026-06-08T16:02:37.172472Z","last_seen":"2026-06-08T16:06:51.250532Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winstep.tw/images/winstep_logo.png","fqdn":"winstep.tw","domain":"winstep.tw","tld":"tw"},"ip":{"addr":"203.196.8.151","port":443,"asn":23764,"as":"CTGNet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winstep.tw/","date":"2026-06-08T16:02:03.639Z","timestamp":1780934523639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winstep.tw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 03:54:52 GMT","end":"Tue, 18 Aug 2026 03:54:51 GMT"},"fingerprint":{"sha1":"A2:4D:1D:55:42:C7:2E:18:C1:13:CA:73:E7:7E:11:9E:E5:22:B0:A7","sha256":"3D:94:5F:F1:31:A9:EC:2C:73:1C:4A:BD:D8:08:C0:F3:11:7F:5E:4E:EA:90:F1:2D:4B:AF:4A:D5:32:D1:A7:C7"}}},"request":{"raw":"GET /images/winstep_logo.png HTTP/1.1\r\nHost: winstep.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winstep.tw/\r\nCookie: server_name_session=2e8dd2a9e60b1dca855a00aa9cf3522a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 08 Jun 2026 16:02:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 02 Apr 2026 02:56:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cddacc-fe26\"\r\nexpires: Wed, 08 Jul 2026 16:02:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65062,"size_decoded":65195,"mime_type":"image/png","magic":"PNG image data, 512 x 291, 8-bit colormap, non-interlaced","md5":"05746e862fe3cbf4dbe648ed115fb8b8","sha1":"0538f5573ab82486235b28f09cee5a157c7d31d6","sha256":"45f86a5ec42abdf41d39134ed56a225a798c78b14efabb11b0d8e4d43df67d71","sha512":"5797a01e70ab5730d96604247b485d2cee411850bf06929d13e63e7a99938684052a48537eff88deef99b3526f251c444bb363555504102b3b1c9160ee7b2e4e","ssdeep":"1536:paL/WQ3hkVCnRkxn6D5UoBssddk3bRKpBG1xwGbKy2p44ePGOOFW2K:yeQJSVsdqspQQI3PGOqK","tlshash":"4d5302a586dc04e06771b4661e3d860475c0bcb7d3ed79ce0c4373bcaa5da8e6158f98","first_seen":"2026-06-08T16:02:37.173394Z","last_seen":"2026-06-08T16:06:51.24446Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i-cdn.softscdn.com/apsdai.min.js","fqdn":"i-cdn.softscdn.com","domain":"softscdn.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winstep.tw/","date":"2026-06-08T16:02:03.648Z","timestamp":1780934523648,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /apsdai.min.js HTTP/1.1\r\nHost: i-cdn.softscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winstep.tw/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T05:32:18.765025Z","times_seen":16815642,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winstep.tw/images/winstep-logo.png","fqdn":"winstep.tw","domain":"winstep.tw","tld":"tw"},"ip":{"addr":"203.196.8.151","port":443,"asn":23764,"as":"CTGNet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winstep.tw/","date":"2026-06-08T16:02:04.159Z","timestamp":1780934524159,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winstep.tw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 03:54:52 GMT","end":"Tue, 18 Aug 2026 03:54:51 GMT"},"fingerprint":{"sha1":"A2:4D:1D:55:42:C7:2E:18:C1:13:CA:73:E7:7E:11:9E:E5:22:B0:A7","sha256":"3D:94:5F:F1:31:A9:EC:2C:73:1C:4A:BD:D8:08:C0:F3:11:7F:5E:4E:EA:90:F1:2D:4B:AF:4A:D5:32:D1:A7:C7"}}},"request":{"raw":"GET /images/winstep-logo.png HTTP/1.1\r\nHost: winstep.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winstep.tw/\r\nCookie: server_name_session=2e8dd2a9e60b1dca855a00aa9cf3522a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 08 Jun 2026 16:02:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 01 Apr 2026 14:40:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cd2e48-509e\"\r\nexpires: Wed, 08 Jul 2026 16:02:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20638,"size_decoded":21013,"mime_type":"image/png","magic":"PNG image data, 127 x 105, 8-bit/color RGBA, non-interlaced","md5":"af38d7cd2acb3246d2622629f76de7b0","sha1":"7c46000afebc311f863f63634930e948a7788b2e","sha256":"a0558e3351054806d3e470dd242571932387a15c84457d6816792d619315b003","sha512":"8a6dcb813d73fda583234449f01a248b770aded7b4e5e411017a85c2aee661be48f10abf60aa762d58ff4d4d6b219fedc06b132ea65623d1632e77ab225990f1","ssdeep":"384:UJXE05eHDOuNZ4wFv+QoZONbfbGhP/LuNWt5WbaLZn:Q352RNmUnooPGRLuWt5iah","tlshash":"5392d0cb6d1df1aee81835064dfbc38653a4affc83f3264654529c890d2fc961f22965","first_seen":"2026-04-03T22:45:59.720289Z","last_seen":"2026-06-08T16:06:51.245195Z","times_seen":3,"resource_available":false,"data":null}},"time_used":907,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":907,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winstep.tw/css/common.css","fqdn":"winstep.tw","domain":"winstep.tw","tld":"tw"},"ip":{"addr":"203.196.8.151","port":443,"asn":23764,"as":"CTGNet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winstep.tw/","date":"2026-06-08T16:02:03.315Z","timestamp":1780934523315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winstep.tw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 03:54:52 GMT","end":"Tue, 18 Aug 2026 03:54:51 GMT"},"fingerprint":{"sha1":"A2:4D:1D:55:42:C7:2E:18:C1:13:CA:73:E7:7E:11:9E:E5:22:B0:A7","sha256":"3D:94:5F:F1:31:A9:EC:2C:73:1C:4A:BD:D8:08:C0:F3:11:7F:5E:4E:EA:90:F1:2D:4B:AF:4A:D5:32:D1:A7:C7"}}},"request":{"raw":"GET /css/common.css HTTP/1.1\r\nHost: winstep.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winstep.tw/\r\nCookie: server_name_session=2e8dd2a9e60b1dca855a00aa9cf3522a\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 08 Jun 2026 16:02:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 31 Mar 2026 10:32:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cba2d2-3b35\"\r\nexpires: Tue, 09 Jun 2026 04:02:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15157,"size_decoded":3544,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"785dba2ba2ee07286dc15c3c53468646","sha1":"e5a420c80fc012b14d3f16a0752cb837ecd1bff9","sha256":"94d7642201461f57e54ca5200bcdd26383d3c1522f9e958a6555496e95400f9e","sha512":"b430cc8d722ed59c2664cc5823b9e0e2bc5451feac6b38a460884bf8277019b6a4f5212056fab135d2829a18ac801ac16310f415dbb583358469169f240e162e","ssdeep":"192:9LEcVBA49lKYP+e5EO+GEHe913FiKBeqTlaf5gooajaDT5bauMgMq6UVoLfGXNtH:9Ma/MsaS","tlshash":"24621058f601129362379bbdabf98209f3a4e1138f05536e7fd952400fba1bd91a1edc","first_seen":"2026-06-08T16:02:37.175208Z","last_seen":"2026-06-08T16:06:51.249844Z","times_seen":2,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winstep.tw/js/nav.js","fqdn":"winstep.tw","domain":"winstep.tw","tld":"tw"},"ip":{"addr":"203.196.8.151","port":443,"asn":23764,"as":"CTGNet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winstep.tw/","date":"2026-06-08T16:02:03.317Z","timestamp":1780934523317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winstep.tw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 03:54:52 GMT","end":"Tue, 18 Aug 2026 03:54:51 GMT"},"fingerprint":{"sha1":"A2:4D:1D:55:42:C7:2E:18:C1:13:CA:73:E7:7E:11:9E:E5:22:B0:A7","sha256":"3D:94:5F:F1:31:A9:EC:2C:73:1C:4A:BD:D8:08:C0:F3:11:7F:5E:4E:EA:90:F1:2D:4B:AF:4A:D5:32:D1:A7:C7"}}},"request":{"raw":"GET /js/nav.js HTTP/1.1\r\nHost: winstep.tw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://winstep.tw/\r\nCookie: server_name_session=2e8dd2a9e60b1dca855a00aa9cf3522a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 08 Jun 2026 16:02:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Apr 2026 08:12:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ef1a59-3097\"\r\nexpires: Tue, 09 Jun 2026 04:02:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12439,"size_decoded":3111,"mime_type":"application/javascript","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (362), with CRLF line terminators","md5":"1ecf555c1b71aa51aa6df4de74218c5f","sha1":"c6ce8222709d2ea34f81e869cb5e066dc4b9fed2","sha256":"5c31ee7dea375879e77069eac7333e9a6e2750b29102433c84eda4c7f1c86e10","sha512":"456554c22c590fe76eda93ffb14a4e626bf2022b2c65bd08f61686145bfc606acbba84d6e6e0960ece97ce610853d5dc8fb98ffab1ebf227ef110feb0aed9c14","ssdeep":"96:4rHvobzhaIer0R92MGKnKm2EaOEer0RE4/y7SwMpVUMzRUzlXDBVwUDRu:JhdiTUYih8y7dMjUMz4lz7wUNu","tlshash":"fa422e51a1d5063f817342d6d7aa3769faee4043920da1017abe1b6b4f73d05ac378f8","first_seen":"2026-06-08T16:02:37.176145Z","last_seen":"2026-06-08T16:06:51.24589Z","times_seen":2,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}