Expired50% confidenceFactExact time
H5ST (H5 Security Token) is a front-end security signing mechanism independently developed by JD.com and is a core component of the web-side anti-crawler system.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
7/2/2026
First Seen
Valid until: 9/30/2026(expired)
Sources
Practical Guide: Auto-Generating JD.com H5ST Encryption Parameters with AI + Skills + MCP
bilibili派派Python6/8/2026
Related Claims
UnverifiedThe encrypted fields of the Aisou login interface include pwd (standard MD5), he (modified SHA-1), san (modified SHA-1), ts (timestamp), and seclet (security verification parameter).67% similarUnverifiedThe core encryption logic of H5ST resides in the sign method of an object named _pdp, which is mounted on window.ParamsSign.67% similarUnverifiedCommon signing algorithms include HMAC-SHA256, MD5 digest, and AES encryption.67% similarUnverifiedAnthropic has enabled cyber safeguards for Sonnet 5 by default64% similarUnverified应用程序密码（Application Password）是WordPress 5.6（2020年）引入的专用安全机制，可单独撤销、有独立访问记录，泄露也不危及后台登录权限63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/50746API
curl https://kongchang.com/api/v1/knowledge/claims/50746MCP
get_claim(id=50746)