{"report_id":"11cc026f-9e37-4de2-b41a-2761f1ab47fc","version":0,"status":"done","tags":[],"date":"2026-10-10T21:42:16Z","url":{"schema":"http","addr":"biketourshanoi.com/","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":0,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"biketourshanoi.com/","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"title":"Hanoi Bicycle Tours -Hanoi Vespa Tours - Hanoi Jeep Tours","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T00:43:27.550806Z","times_seen":19013199,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"biketourshanoi.com/","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":0,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-14T21:42:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-10-04T22:47:33.985443Z","alert_count":0,"request_count":1,"received_data":512996,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"biketourshanoi.com","ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"domain_registered":"2018-03-21","domain_rank":0,"first_seen":"2026-10-10T21:42:31.510583Z","last_seen":"2026-10-10T21:42:31.510583Z","alert_count":198,"request_count":99,"received_data":11078967,"sent_data":60629,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress:7.0.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Yoast SEO:28.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Contact Form 7:6.1.6","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.5.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-10-04T23:37:19.691773Z","alert_count":0,"request_count":5,"received_data":2633629,"sent_data":2666,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.tripadvisor.com","ip":{"addr":"3.167.2.55","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"1999-03-23","domain_rank":1921,"first_seen":"2012-05-22T01:41:46Z","last_seen":"2026-10-07T14:50:12.204139Z","alert_count":0,"request_count":2,"received_data":19741,"sent_data":1478,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"www.jscache.com","ip":{"addr":"3.164.230.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2009-07-23","domain_rank":154568,"first_seen":"2012-06-02T03:45:44Z","last_seen":"2026-10-05T02:45:59.541505Z","alert_count":0,"request_count":1,"received_data":642,"sent_data":612,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-10-04T23:05:21.462671Z","alert_count":0,"request_count":5,"received_data":62789,"sent_data":3348,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-04T22:46:21.559025Z","alert_count":0,"request_count":2,"received_data":81882,"sent_data":1124,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.tacdn.com","ip":{"addr":"3.164.230.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2011-03-21","domain_rank":72897,"first_seen":"2014-12-11T18:22:48Z","last_seen":"2026-10-09T16:53:08.69055Z","alert_count":0,"request_count":2,"received_data":53251,"sent_data":1050,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"biketourshanoi.com/wpcf7-recaptcha-js-before","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f659d2fe0555b0ad2d986611048ca09","sha1":"2e0f23cba06f460c718f1e1e8e43f2683f163d24","sha256":"83911f4e128f53973333cfecb84c7bbc829f28b0d3c4b6a708b03f048325df08","sha512":"314b4d8005cd1e030311f255eb87923e350f938644507277c0bf179462370dd75fee971cd8179ac4a0ac9a45caaafad186ab114a729cab42bec29085bef502ef","ssdeep":"6:nL0IvGQUjS/yGSui/WQ+h8QIAwOdCPHVAv:L0Iv1US/yJui/HSvIriCSv","tlshash":"d1a1a77cd9b41c9309de0c30596f0240b940d01bc726591d719e850d8fb80e7640550c","size":4986,"data":"","first_seen":"2026-10-10T21:42:44.112297Z","last_seen":"2026-10-10T21:42:44.112297Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripadvisor.com/WidgetEmbed-selfserveprop?border=true\u0026popIdx=true\u0026iswide=false\u0026locationId=14011398\u0026display_version=2\u0026uniq=716\u0026rating=true\u0026lang=en_US\u0026nreviews=5\u0026writereviewlink=true","fqdn":"www.tripadvisor.com","domain":"tripadvisor.com","tld":"com"},"ip":{"addr":"3.167.2.55","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd6d5a92671cbee3ab9fe8da81e98aec","sha1":"fd6bfbacf5962c856fc6cf272bb4911c23270389","sha256":"e1469f39fab2a54dbc98f64b0de2556f7678f00e1acc8f80b9f1bf4c664b7f04","sha512":"5a9e07bca99da86902034db57d9e3633f187e86edd8ae491d875b9b4fd3d2f83bcd045e3c6f7a58680c84751a029413d92204391417b69d1dfa5e082b02a0e08","ssdeep":"384:exRWkWr+Gftuj+sFdM9+EowSLbttTBcmH9Wbvaw0k9kEabtG2BcmH9Wbvaw0k9kB:zr+GftscsbtMmHXk9kEabtCmHXk9kel2","tlshash":"427261c9b8c101761b631249966b6201beedc03e8a0acf0dbd3c5140af41aa7e5f3fd6","size":16017,"data":"","first_seen":"2026-10-10T21:42:43.96941Z","last_seen":"2026-10-10T21:42:43.96941Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfK2qAUAAAAAHVWVP33wXcSA1OGf0cjlBTfdudc\u0026co=aHR0cHM6Ly9iaWtldG91cnNoYW5vaS5jb206NDQz\u0026hl=en\u0026v=nY0xPItgwtlvjEjk2TqdwOQz\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=hrotnw15i7xa","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-10-11T00:43:52.092941Z","times_seen":530930,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfK2qAUAAAAAHVWVP33wXcSA1OGf0cjlBTfdudc\u0026co=aHR0cHM6Ly9iaWtldG91cnNoYW5vaS5jb206NDQz\u0026hl=en\u0026v=nY0xPItgwtlvjEjk2TqdwOQz\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=hrotnw15i7xa","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e83efc111c5dfc7e59ecdcdb70afe0a6","sha1":"08e02b2ed4cb2acadf15bde7a0cde3d41a3ee454","sha256":"f144f1036f6b1dd1eacb59f482166b3fe57d59c32ccbf06797b207c305eeb948","sha512":"b8278f2cbe9dd209b49093318cf3c290b4a5cb12fd8acbf8db434d79689e01bc2f597cc47b6a66a9def25211084dd5da60c192a872e6f1039939a3d7dc382601","ssdeep":"768:jG84EFzhJ2RGKLVXocREmRE5gx2+Y5tRF23vSwaF5FbwHK:jG8/ZDKBT0dhj7mSwaGq","tlshash":"00f29e1ccc0638ebfebe8be14ad67794a17c025a4a5911bd31fa14c31a627c7b04e5ec","size":36164,"data":"","first_seen":"2026-10-10T21:42:44.121518Z","last_seen":"2026-10-10T21:42:44.121518Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/plugins/easy-fancybox/vendor/purify.min.js?ver=7.0.2","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cae9260daa20d52e18e72307d1d286b","sha1":"a064d13c5aa2f09330306ed75c51393fab9cdaad","sha256":"c45ba939765574f96cbf35ee9b6d89f73756a17921814425e74b82f7c54603ce","sha512":"295821a681860908353c2b92c837d604606f3e84f77cef139dc82068fda3f0dc7744a77c2906af6fa42a69a9eec8ee33215a4814557a52240e2bd482229cf43f","ssdeep":"768:5CgbC2L6j8BM66GHUIiIpH7cYhbY2SIThPVfzbFbeoOwyfPcUA9ptDmo0v2NREUN:68TN5hbY2f8PcUWVpIc8sxG+BYg","tlshash":"14d239a9bc5179726fdb50d9507b160ea17c251f300d8090e2cdecb618bae9960b7f2f","size":29209,"data":"","first_seen":"2026-07-11T18:46:55.199374Z","last_seen":"2026-10-10T22:26:13.606761Z","times_seen":605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/plugins/easy-fancybox/vendor/jquery.easing.min.js?ver=1.4.1","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"adf739cca147aff5e39fd65e6e64f420","sha1":"ce3bb19811c619220dd2329165eb8a8166094fec","sha256":"0ec98adf593ebcc01bec60b1f494dacd47522abfef9038a714101d83f45e165d","sha512":"91ae8b810de2caddf0386e2f69c4b2ccd86878804fdff623337793ef62a0ea7e3e3435f9b2d7fc0c0870dc4dc40561401039b30fd815de53f9f2e495628e9145","ssdeep":"","tlshash":"d44107d9f9c3b75a935275e0162f200bb22e6eb000ed2530c66174aa7d3831d9d3bacd","size":2302,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-10-10T22:30:25.439834Z","times_seen":6922,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/nY0xPItgwtlvjEjk2TqdwOQz/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"880723b04901ef902341d03409d07439","sha1":"92d597679deb157915cd08eb6dcd4d42bf274d23","sha256":"a2d9c6b17c85d85e1330c5b09c7fb1aea3fe457897ce6ac69e361dc6a72a57b1","sha512":"c700abc85dccb19b7617fd6e8e3dd813eed2dbb86228dc9c23744fd0ddeb2b71b2d387c474e764671745e659ff19ff07bf699039a43772bfdef6cf9b8738c197","ssdeep":"12288:3bWvqmePeW7L91BmS+ELcUAZoaI/aONG0wjXUpJvHnkb+:rZph1ZrIbMNGNwrfkb+","tlshash":"c8053bec35063eb56222b5fa10a76048933e942adc4c0b6db19798f13ef484d6177eb7","size":850545,"data":"","first_seen":"2026-10-07T03:06:23.101046Z","last_seen":"2026-10-11T00:45:16.626443Z","times_seen":3166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=nY0xPItgwtlvjEjk2TqdwOQz","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"56c7ff31a2aa91730a6b5266548a13cd","sha1":"310082d75d7f4b40d3fdc06c6f3f3a333d5ed514","sha256":"6d0ff36555e3a10a9266bb8c93d403352dbfb99147457474c862beff8f236d21","sha512":"11e8f94af5db14223342729cb418f9cf7a852f9966400ba9f312d35b00c16f779fe8fdc7ca6349edbcfd5689e4f44ad096d4ec19b63fbfc00382e53fb9542d2f","ssdeep":"","tlshash":"7bb012730e20c81c2c000592dc6ba3f9e0015024da9088f56224cfe843504a3c011900","size":102,"data":"","first_seen":"2026-10-07T03:06:23.095884Z","last_seen":"2026-10-11T00:47:02.862014Z","times_seen":2289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/plugins/easy-fancybox/fancybox/1.5.4/jquery.fancybox.min.js?ver=7.0.2","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b0f6837cbc3c180b82d3e4a00a7167d","sha1":"c8795b10f282db7f2ede452c3c33a329f6d48580","sha256":"eab9c8864de3aead9d122fb815a8f7b192632eb7aaff9edd34d7f81eedb241bb","sha512":"0cb609e7e8c61fcdf9696347c8c578d1b570221bf4eb4c09f798321dab55b1a9f42968e90c64ab70540a5e2e7958f19616357432647a3bc5eb62f91e56cfc7a8","ssdeep":"384:Ko6egAD3tckhIPYCuinkjm/q0JEuggl0kJU:KregetckhEjuiQm/fEuTl7JU","tlshash":"f282eb89b2483452407bb614d75bd30ad2335da5670706f1d12c89b81fe0fc67aebaee","size":17925,"data":"","first_seen":"2025-06-16T04:09:58.305155Z","last_seen":"2026-10-10T21:42:43.98795Z","times_seen":3239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=6LfK2qAUAAAAAHVWVP33wXcSA1OGf0cjlBTfdudc\u0026ver=3.0","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcce99e2b00dc38ceb0c571b1243ea7e","sha1":"d8b789cdf0f866c3359a5cc8e76d1afb5f047e34","sha256":"60c009bd7f001f4b520ada53afe6880096ab96df0fc232cfec45eb3126c87e5d","sha512":"af4fcd83c93cf44f3ba00510eef1c9cfd291135635d16c24ae726bbf23992650e136e17716a58f49845aa57a9738a25cb7c5b24d113282451ad4c838ffd4dbe7","ssdeep":"","tlshash":"511102b31a14a03a4b7209e1e2ffdbb1e852701de16888e8a515de982f69cc7ce05585","size":1010,"data":"","first_seen":"2026-10-10T21:42:43.939284Z","last_seen":"2026-10-10T21:42:43.939284Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","size":1499,"data":"","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-10-11T00:40:48.626964Z","times_seen":94835,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/flatsome-js-js-extra","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb6a66ff6bdc44a904f8e3bf8741422b","sha1":"336d1f0e3d7bd0cd0128f84df5de939083355225","sha256":"5c9b8d9f169fe41dd6110c61b83561b6971d1011ebf2078e216705e8965aac0a","sha512":"fbc1cbe00e14741bc51a0b1bb7b8a75d5a77543b4e558bce3dc26db68f930282334d3f9b92723d337f2db3e04ad9395daaee15b7aa4cd34c19ae03c004649c5f","ssdeep":"24:IS9xLHTW8ythNPeWAdmUZot6D33b1FzJldc4vNIrHV7IwyqVlYfFU:IKhHTW1thNAdJbL1VJlW4vNwH5jxYfG","tlshash":"1cc1ee79e31db529a4c7c1b6df38bfac87293131d0407010adff897991d286932aa52d","size":6112,"data":"","first_seen":"2026-10-10T21:42:44.125576Z","last_seen":"2026-10-10T21:42:44.125576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/themes/flatsome/assets/js/chunk.slider.js?ver=3.20.7","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9820dd1581c176d3ed694c27c17c90a","sha1":"0ff123fbfccede0a2e35a0e96a7fd9d6407bfd91","sha256":"c1abb1c5dfd238fe28fdfd930789c1ced9b5fe35d4d05a1e48b23280afe64e71","sha512":"f47fb6c97d71f5b67d771a39ab68845a320dca6a94047a4da252b8cd4ec72707df60cb411e7c43a6b7dde516d212146ac93879b687095ec110fe94bd75f964dc","ssdeep":"1536:Z/0mlwxaL/hxVzKXUlTAvw3J12/tqD18+AcJQVlxdz9+rdK0:Wmlz3JZt6w","tlshash":"a923635eb2413a3941cff1a7622f464ea273206d140181acf8a9ecd65db9c8d743bf79","size":49912,"data":"","first_seen":"2024-06-20T14:33:15Z","last_seen":"2026-10-10T21:42:43.868418Z","times_seen":21197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd4fcfa7b582204ef93013be12762d92","sha1":"6023b30ef2ea0f0c20c902d57226857698347c4a","sha256":"45d047b9b45954cee05ab65eeb1c1d6f62238ee222fae60740b8a92b3e040ea4","sha512":"f99c92d96e4ccc6914800a3f96256f235c4472b7a6d6ada11f3de7fbcc502f88380ccdaba56a17b6440ae89580d30e9ce29f84d8fc380e9e85c0f9787ff7fcf7","ssdeep":"384:KTwEZwAMfifbeH/uY3dA6ac+VVogo3w087TnKebmlioAdJTPxXkSYiTo9uX0jcym:KTc/fRsI+3IAj/dP84XxB","tlshash":"a8e28349b685b4e306e3b4b4409f444ab1b75745b81ecad1e316f6c0bc7d84ea0a7f8d","size":33743,"data":"","first_seen":"2026-03-05T15:53:41.292858Z","last_seen":"2026-10-11T00:10:13.219183Z","times_seen":16250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/jquery-fancybox-js-extra","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"72a2476ebd364ea657c117fa51afba1a","sha1":"1375e95b69bab4223f883acb7c3fd416883f4103","sha256":"80fc32c7f35431e4515cb040678b2acda4f0868111f8095018b302eb319f0464","sha512":"8275dacd9609a49932c469ac81cc0e4f23e7b62a30121977945c22614448a804e22125dbede9ad6443430b4b68e9ada40bffd8710cdb884519ea9c14b99a1646","ssdeep":"3:Hr6A+oJK2NiF4hvUdRp1XATFWR2C1veJlWPJ+5M/AFeYwT4mKKuU:OoJKkiF4hvUd6TrWeDguQ0mKPU","tlshash":"1aa18c13e0842d22d6f20db8490f4b3324f99a00e2a09f9dfac844424ab418322d44e4","size":4904,"data":"","first_seen":"2026-10-10T21:42:44.148441Z","last_seen":"2026-10-10T21:42:44.148441Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"336b4b067dcb50351d5e2d7c92cf1631","sha1":"9709109f27eaad0c5a1e50facc142f8f197a11b6","sha256":"ef2f7f28db32250196ae2c8242611a7f7159c2a539dabd40b82071b1c07561c6","sha512":"43c83e5907dbc25a8620884fadba33a679e0668095a659e79e711c8b6d6331d778849aab0f19bef0131cfd5537e462f2ca238dc9134732ec6867ddd945ff5676","ssdeep":"","tlshash":"d3b012343c25b42d192b300c31df53643c3a4140fa016940d07e78441433f550b01f8c","size":102,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-10-11T00:40:48.644801Z","times_seen":53236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"190ec300d6d4088f5d6fb93198de7be6","sha1":"75a15adac39340da907857c668061bd09e55ee15","sha256":"91c750e21516fc0c7671aa3819d3234cff4402212899470d7c0208ecc32da2cc","sha512":"3853cd4b260488892b14028725b72c189d2845cc9daaccb039b235d9daf2a4532332c9faa90f98add77b28628adace975c49e5b8b23f3aeff5b687c659dfdbcf","ssdeep":"","tlshash":"b621013a7129b4b1129259f4e2ff5a49d4b43ab31bc28821ca0148f5c67ff89512ef7d","size":1363,"data":"","first_seen":"2023-03-07T01:31:35Z","last_seen":"2026-10-10T21:42:44.156306Z","times_seen":1206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"80a1684b6fa00ef16550f0dd32c8f04e","sha1":"cf0dc5d665bb5e23b5bba435f84ae2b6f3b120b6","sha256":"e2652184fb81afcdcd2954e8d6580c10736ccba88e48e6dce0bd7a5210089537","sha512":"889a01269171dfbcf4d375bd0efc2517ab74930ee0d09011c7baf641c75ecb6a02b5fdea21fcc053b90d8ba94ceb3178d163d0c1d61db5da3c388b12ca4840a0","ssdeep":"","tlshash":"01c02b8c230b0c7041e727048b3fb600f001321ca8e0a931480923445d20e13db448e0","size":149,"data":"","first_seen":"2024-08-20T17:37:57.537172Z","last_seen":"2026-10-10T21:42:44.159206Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-10-11T00:43:46.768323Z","times_seen":74166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d0d33484c14edcfade2b530ad162a73","sha1":"abe674cf2b5bc5ad5bf2a8c1b46b1e79dc022e72","sha256":"afe335dfaf9c7f8caa25a835db99cb7c54f65a71becee57d41d0f84347838310","sha512":"619edd17c6db608870862391a08acbb59ad9a5df231784d5ff7ab93840f12a45cbe612e4ec055294cc17f75b54c4107312509d9cf542fd0d7ddad873f6fde64a","ssdeep":"","tlshash":"3cc0229a99a81c0a28e1c115017c1225b014a1138b3b6e95b21d004c2ff807eb41019a","size":192,"data":"","first_seen":"2026-10-10T21:42:44.16611Z","last_seen":"2026-10-10T21:42:44.16611Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"88cce1c6802ab50fdccaf33b56b348fc","sha1":"fa4a324a41ec97271540aa2ed1f556747960d498","sha256":"851fea2774376894e19a8fcaa2be5e6602b245033dce5309c67a1e0c63295b89","sha512":"e9e094da1e6dda9ad889dbd11c3a5725b319dffde7e6fabe855ca56bcd98efe9f026d57be79ccc1aaaec0f1682bc17fd9f529fc8d09cc684903ab0fc9daeefdd","ssdeep":"","tlshash":"46c08c13e0842d22d6f20db8450b4b3224b99a00e2605f9dfac804424a7418322d44e4","size":166,"data":"","first_seen":"2025-12-29T13:49:20.361694Z","last_seen":"2026-10-10T22:26:13.667128Z","times_seen":419,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"c034627d679f831dc34fa5811f08c789","sha1":"cb2a2a9bc74e5c7aa8c600ca32a23132d0b0b57f","sha256":"5cc17674718b065c5b1ccd47ed048d20e310bc143a3c67712d722f2254c180cd","sha512":"87c020c3d3b0b2ba00d1974c33b4dc6594ef46f1b842753ecfd30c2216fdb83fe1aa62c18bc719e8ce15590df3121bb8802c80fa3748091f44914f852b7e9477","ssdeep":"","tlshash":"e251311f30943cb882fa8515f7ef6420b77a113664558ab7f16d0c014b823c532c6adf","size":2627,"data":"","first_seen":"2026-04-26T06:05:13.291887Z","last_seen":"2026-10-10T21:42:44.171505Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"efdc69ce5f8e997d1de4d04e14cfb894","sha1":"e8eb4ade447a3b828f85b695345bcecbc3f6e992","sha256":"8d6fb3118c20342870d7e2c0280a378b0b604489c49336d2ed4cb9d05f69b3a0","sha512":"6cc4b1fe9bc46daa6fc8264cbdf559270f166e313318c1f37acd56107f3a4e84aa2e231004a215b02893d70aed0c663e7ac90a76b747ee41cce8d77486b039d8","ssdeep":"","tlshash":"71d0a9bce8b41ca309ee0c005a6b0240ba00d02bcb26592d72ae860d8fb80eba40590c","size":217,"data":"","first_seen":"2026-10-10T21:42:44.172421Z","last_seen":"2026-10-10T21:42:44.172421Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"f3e28df97d17966d4040c52066221006","sha1":"61ac3e2d14976da4f6c648516075521bbdee7a76","sha256":"3fade355f11ec98b407728236eb79aa386cb4aba8944ac17f988f9a93bd770bc","sha512":"7b4d5bcfa69228027a95cecc17231eb0e78a772da97b88a3a0218d67381b9e1f796ac6edbbde7518629f389854b26ac425b8b843cffaf77001eadf10b27da1aa","ssdeep":"","tlshash":"fd21f079631db52da4c7c187df38bfac8729313110407010edff897991d2c6932aa52d","size":1331,"data":"","first_seen":"2026-10-10T21:42:44.174428Z","last_seen":"2026-10-10T21:42:44.174428Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.6","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-10-11T00:42:10.543303Z","times_seen":246101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/themes/flatsome/assets/js/extensions/flatsome-live-search.js?ver=3.20.7","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"12f19d22d5c394f4be119ec6dd373866","sha1":"aff008c3d9c3ca9835c6e72ef7e336197dc7d935","sha256":"ec6fd7fb2ea851ec79af9eefb18e58900b662e74f787642a984d111be0f4f1cf","sha512":"b9c9c59b9031ca00db66e675a7146a5f9009c757120eb8f32488d8082250410c7819dea7ec7695c817279440ee9845cbf7674d74c583b4547f27172ea731afcb","ssdeep":"192:ywypHcFWh6FbKqYQIILvP+k6T9he5aBhOVfaOW4fW33BEvp9UkGhi1zKRCL19bf:ywypH36FbKvkn+dbGgOVfPWmQ3qvSWv","tlshash":"c852b54073c2a376d39b30ecc95b450e69b77f1528062190b22bc5955d68f08e1aff76","size":14217,"data":"","first_seen":"2025-08-12T22:36:09.920216Z","last_seen":"2026-10-10T21:42:43.926185Z","times_seen":4273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.jscache.com/wejs?wtype=selfserveprop\u0026uniq=716\u0026locationId=14011398\u0026lang=en_US\u0026rating=true\u0026nreviews=5\u0026writereviewlink=true\u0026popIdx=true\u0026iswide=false\u0026border=true\u0026display_version=2","fqdn":"www.jscache.com","domain":"jscache.com","tld":"com"},"ip":{"addr":"3.164.230.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecab21694a5161f5793c73be64300458","sha1":"87a3b8186d9e44960cb0c49fe062a2b0d2325c63","sha256":"6026d31a044a3aafd78595f89a4bf0094cd150c200fc712301af51fc9ffd3e7b","sha512":"a006e89173f72b26f947eb806bae9121f343ccf4ee84f28c11b40cc94631ca82f7a85f8da76129bb2543b86097ac45bcb8b73ad85b55846b6ceed889ce44aacb","ssdeep":"","tlshash":"f0e07dca2848be3c07a7d17e7066eb0864a3306ebce40b05d9a98cc55675fed89137dc","size":338,"data":"","first_seen":"2023-11-28T07:58:28Z","last_seen":"2026-10-10T21:42:43.968079Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tacdn.com/js3/build/concat/widget/cdswidgets_m-c-v22480917520a.js","fqdn":"static.tacdn.com","domain":"tacdn.com","tld":"com"},"ip":{"addr":"3.164.230.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d1a046b5d9f975765a5adc3c8f2722e","sha1":"fd964609d091c301d408e879aa431a2a52e74a2c","sha256":"e94e0140ad5ee0dd772ad05d9ba5cc4cf3e2a1f5d420ea5cb783edbdbdda9f10","sha512":"4a98a74c7ab4b32059a2be4237700130c43c00837becd2d29ce2e2cdb488392efaf69f94e0e770ebd261a99fa4a62728e60858a74b13588c42205eb8f4442a60","ssdeep":"384:UWEhknWAX9eICtgAlAdcnkJN5qXSyCyeezHSt8yXsbG8yI8yUyYtyCpyxLc53py/:KkJN5qXSyCyeez+XoQeLD5xoOuS6kwMB","tlshash":"8962d9e63655697a46ff01af0caf97897230c70e6c09c280441adc26942cfe6717feda","size":15421,"data":"","first_seen":"2023-03-07T14:03:25Z","last_seen":"2026-10-10T21:42:44.019317Z","times_seen":2359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-11T00:42:43.385373Z","times_seen":1099006,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"12ebec1b36678eb1da4412af6c65751a","sha1":"4cb5d87353d9a06fde067063787a4beed692ba77","sha256":"558ae0ec83cc88de0929fde86b87c231246aafa9c961ebffb3257b05f62ca5cf","sha512":"a1bbd93277a59086bf27da7dcc60434b717ac521bce0618aef7c914789497a22cf56441a7f300f1bb7a6de56ca624226883d048f6eadbcc049dc717338189bb6","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"fdc1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","size":5732,"data":"","first_seen":"2026-07-02T22:01:42.315643Z","last_seen":"2026-10-11T00:29:26.729061Z","times_seen":31130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/contact-form-7-js-before","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"def0196c7220e2227dd67dc7ac4b3ea3","sha1":"7f6cd8fc7dbd4822652e2d1b23ed12a4e205b18c","sha256":"b21ca9cbd90d92bb4142f4e982cb451f4e745a8acafb38ef206f69ce9ebba01d","sha512":"00dfd26572d07016aee4b86d9a29c1ad52bef658dbe406017b8c2fe057ec22476dc3ddecc8e37de1b3e12cf5e92f6dabcba7380622b817df5ba9eafe3bc9316f","ssdeep":"3:HT6SVGDSiCmbFFlHrHLaiLdIHBF/FFhhzVEGUHsR5pHdFQhN9GEawUWKLlUFrQAv:HLiRhDHLdIh1ulgpwLkuKZ4rQAv","tlshash":"0fa1229adaa81c0a28e1c135017c1225f014a117cb3bae95b21d004c2ff807eb41419a","size":4917,"data":"","first_seen":"2026-10-10T21:42:44.176769Z","last_seen":"2026-10-10T21:42:44.176769Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.6","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-10-11T00:42:10.411602Z","times_seen":252910,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=6.1.6","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec0187677793456f98473f49d9e9b95f","sha1":"8c55e0f4a29865e871f3d54be8d480a0665891d9","sha256":"df0ec8330290d184b1084527076cb87d41b33ba706ff5ab579d761f0cb6a744b","sha512":"84b468de22634404405e52cda2844d626b4d47054739971d677f0e63fd683dcca100550419b945391236846df54b65fb43ee4d6e7f7692eb0d414584e2594108","ssdeep":"","tlshash":"9811e1305a3031740967ca6182eb53e1be31e461f0a3898159fc4e141f7ced598b3d86","size":934,"data":"","first_seen":"2023-03-07T12:57:48Z","last_seen":"2026-10-11T00:29:23.235999Z","times_seen":117005,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-11T00:42:24.582241Z","times_seen":1003354,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/themes/flatsome/assets/js/flatsome.js?ver=e2eddd6c228105dac048","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"80419efe8fa59d4d918161240ad1cb86","sha1":"e9483145de272a64525fa9af0e0c851ee5c10430","sha256":"92880e58751aff89f2e3eb075547aa77c69e5b037953c34699c7a558d77bfb10","sha512":"079781b03a3f663c0fd341434857e4a2740eed7ff1b986132fd026fcab5d30500974f17f946451021bfde84186a7e999476094e0300e55c16c5baddc26292638","ssdeep":"1536:wfbhFL/nm9csLtvcMW35Il4KKPD2EGsFsAIcQ6lW:WbKjLRHWVrPDhoGlW","tlshash":"0943e769729070fd01ff51e7f13fa72432372566b00b4054b12998ea2d69d5e22b3fba","size":60631,"data":"","first_seen":"2025-09-21T19:21:43.611228Z","last_seen":"2026-10-10T21:42:44.066487Z","times_seen":5246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"55c5129ccd0fa8f383d9de82a91c5877","sha1":"596918015fa62e4f18533b69b0e6822ebee3cb2d","sha256":"cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090","sha512":"956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"5ca151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5050,"data":"","first_seen":"2026-07-02T22:01:42.321596Z","last_seen":"2026-10-11T00:29:26.725654Z","times_seen":31811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/jquery-fancybox-js-after","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c98eaa3891e3694efdb8fe3d521202e","sha1":"094a415e2684f39de176900260b7088509d33b92","sha256":"e157821e04c2d3b4f616e884ce0987a1ea2d66416d06148954f5538a2325a6ca","sha512":"cf05d7e6fa00f627f62111ed98e955077005a2f8c2960ca6c3bc8003d92951e37568b24ad7e9f05176d3b534ec6cb9a397a2f7f06ebfb0f958466933a82078e1","ssdeep":"48:Uw3/vWrXXvbk6yJNcVAiRNhCNf7N0N2xpz2crIUA4KiUU1qjv7u:hXWrXXQtJZiZe5WIjJXZ1qji","tlshash":"92e1201ff0943cb882fa8535f7af6420b77a1136e4558ab7e16d08014b823c522c6adf","size":7370,"data":"","first_seen":"2026-10-10T21:42:44.178438Z","last_seen":"2026-10-10T21:42:44.178438Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/plugins/easy-fancybox/vendor/jquery.mousewheel.min.js?ver=3.1.13","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"963b3f6599b02889ea79808c5c8189d0","sha1":"c2b5156772ddbaf09d18f00c31cddfb86bc1f1f1","sha256":"dd9bfe5f04d4e393463f42b4f503763c36693306dffef16d481e0c071b61ae64","sha512":"106cdffa6747a56504c6a5963163e1a3418479e619a7d0fb36b290125687f15233683b29fb398dc0b66c12d78a423bccde4102cbbb4f52bd9e08de514addeb56","ssdeep":"","tlshash":"bc517651771a32f381b61f36f16f6602317ac059280375a2b9b85d80ab69ceb6263d1e","size":2609,"data":"","first_seen":"2023-03-07T01:02:57Z","last_seen":"2026-10-10T21:42:43.984315Z","times_seen":4670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-ND0EPYVTC7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4316e0df56c40a7122e785d43f011f1","sha1":"02660700e861d4087dd74575e3b4a6a9eda61600","sha256":"9efbab8f746fab973e2b4b779a0e7697da8f72d25f05e4e7a9a536958fa44afb","sha512":"a1d8108da54b2903302971848c8ac4a71f3e66c15664fcde18f1f3a5b71aac127d34045147b66dcda1248707e880a6d7b36088719fc171102170a0457352a3de","ssdeep":"6144:SfsfCyqMnhImaVlQV+cfIb/EfD3ceiXmcw2rbGer/ap:CEKmWJmc/h0","tlshash":"63b408cdb3c6742693a6f578903f018ba57b29a2b44cc89af189dce02d3465a5173f7c","size":512392,"data":"","first_seen":"2026-10-10T21:42:44.096996Z","last_seen":"2026-10-10T21:42:44.096996Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-i18n-js-after","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0de902b1b2af0c0d48434470e64e45b","sha1":"d52e2be29e8ee4fb1b0aaf75d1c75f94cb53477d","sha256":"36e7ea60a95c8f2df8abb3dbe998a1e67ebfa637301d2205628f6f55cfa27248","sha512":"123bb017fd5fcd702bd44c209b308481ea2584b71f3f7a339f8e29dabf2bd5c1456f5230c60710fab86fe75590408cd66a919ad77dc9577d2f00ad2f66ae7d2c","ssdeep":"3:H6aUdLLxkFAhEK49MQGmVB4iFM/KGNVSJFo:aBLxTqtGmVOiFM/KGNMJ2","tlshash":"c4a112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":4817,"data":"","first_seen":"2025-12-19T21:36:30.73791Z","last_seen":"2026-10-10T21:42:44.179804Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://biketourshanoi.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2018/04/h2-601x400.png","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.712Z","timestamp":1791668488712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2018/04/h2-601x400.png HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/themes/flatsome/assets/css/flatsome.css?ver=3.20.7","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.254Z","timestamp":1791668487254,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/flatsome.css?ver=3.20.7 HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 25 Jun 2026 04:18:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3cabff-252bf\"\r\nexpires: Mon, 09 Nov 2026 21:41:27 GMT\r\ncache-control: max-age=2592000, public, must-revalidate, proxy-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":152255,"size_decoded":31219,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bffede086855cd081d3b66f2000ba1cc","sha1":"de6642ee4b50fe4fdc4bbc0726f1c527c90f2240","sha256":"e9205f852d69f46b2f4eacf5d43a5e2e5991c51755f52c2800aee6049a11af95","sha512":"f310bd11a0c2be328cdfb5a7b29bab16ea533aa5de257814037189fdc77bb08cc06d6e34ebc41df25091d08be110a43c4f73ae0fe86baf9ac2cfde190ec9956c","ssdeep":"3072:0q5/32yTXYK8Jm1LqCYDpSx9JNpO0dOeLWo0EADT+1zeckhNV5I:4Sx9JNpO0dOeLWo0EADT+1zeckhNV5I","tlshash":"f4e33c52f384242c95178319e5c8fbbc763991a1e7624afbf0639629cbcb6da0131f0d","first_seen":"2025-09-21T19:21:43.621662Z","last_seen":"2026-10-10T21:42:43.866008Z","times_seen":4115,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/themes/flatsome/assets/js/chunk.slider.js?ver=3.20.7","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.411Z","timestamp":1791668488411,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/chunk.slider.js?ver=3.20.7 HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 25 Jun 2026 04:18:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3cabff-c2f8\"\r\nexpires: Mon, 09 Nov 2026 21:41:28 GMT\r\ncache-control: max-age=2592000, public, must-revalidate, proxy-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49912,"size_decoded":13931,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49912), with no line terminators","md5":"a9820dd1581c176d3ed694c27c17c90a","sha1":"0ff123fbfccede0a2e35a0e96a7fd9d6407bfd91","sha256":"c1abb1c5dfd238fe28fdfd930789c1ced9b5fe35d4d05a1e48b23280afe64e71","sha512":"f47fb6c97d71f5b67d771a39ab68845a320dca6a94047a4da252b8cd4ec72707df60cb411e7c43a6b7dde516d212146ac93879b687095ec110fe94bd75f964dc","ssdeep":"1536:Z/0mlwxaL/hxVzKXUlTAvw3J12/tqD18+AcJQVlxdz9+rdK0:Wmlz3JZt6w","tlshash":"a923635eb2413a3941cff1a7622f464ea273206d140181acf8a9ecd65db9c8d743bf79","first_seen":"2024-06-20T14:33:15Z","last_seen":"2026-10-10T21:42:43.868418Z","times_seen":21197,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/03/Asia-Vespa-Tours-1-1400x788.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.487Z","timestamp":1791668488487,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/Asia-Vespa-Tours-1-1400x788.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 305364\r\nlast-modified: Wed, 22 Mar 2023 11:25:34 GMT\r\netag: \"641ae5ae-4a8d4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":305364,"size_decoded":305710,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1400x788, components 3","md5":"2199d1be98d7e4af8280e147a76d746d","sha1":"d125fdf3f9dd934b9ab844a16860a75c088ee831","sha256":"af9eb4ef7f85392c2ac72491947490185219d101ca4106e36d68ddf2c6fca9a4","sha512":"f301ffa2df505bdfd15402b0e8b9d7c9840aef3bd8274389e00bd1955bffa57971fb090661ffdec079e0f048f4fc1c5116457fe7acab2ebd270b150dd00793b5","ssdeep":"6144:0bAE+goI7/om2Qh+hgpbS8xaG16f/+bAdd9l8SWJ016vTniqg/Cqff:0AHgbYGELTd9l8SJUmKqff","tlshash":"8f5423461907d3766e0c9f302dea3e045457a17764d26b0bfbca400e67708afda9ac9f","first_seen":"2026-10-10T21:42:43.871004Z","last_seen":"2026-10-10T21:42:43.871004Z","times_seen":1,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":579,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2019/04/25.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.492Z","timestamp":1791668488492,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2019/04/25.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 300682\r\nlast-modified: Wed, 24 Apr 2019 04:05:32 GMT\r\netag: \"5cbfe08c-4968a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":300682,"size_decoded":301028,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=13, manufacturer=NIKON CORPORATION, model=NIKON D7100, orientation=upper-left, xresolution=200, yresolution=208, resolutionunit=2, software=Ver.1.01 , datetime=2019:04:14 09:32:13], baseline, precision 8, 1000x666, components 3","md5":"de061d462231a2f812acac2fe7417f4d","sha1":"d6199bba5899795deae0d59209c574228cb43c12","sha256":"860c8d8571e2e3a79cd7171e695f176d1f0434d37081a12ccf79b4598aae84f4","sha512":"21ebb02416df05db2449de145416854de3c19e2e31b3a1971120937fcfcf171c14e2d133f754779af09c9405baa9ae330efe8e3afaecec3047cb793f4b7395fd","ssdeep":"6144:wG8Nt0UX1Pv6h8TT/ZGz+Ho5zcPZQZ+afp7hPi+rTG+GsulbYvP:wEQ13kqbZJI5oiNjVriImsH","tlshash":"0b542201ba124d20dd9a6c7ee2dbdbb5f7a412313f1d1aa7b6cd01de77192a0d618e0c","first_seen":"2026-10-10T21:42:43.876592Z","last_seen":"2026-10-10T21:42:43.876592Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":764,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/themes/flatsome-child/style.css?ver=3.0","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.256Z","timestamp":1791668487256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/themes/flatsome-child/style.css?ver=3.0 HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:27 GMT\r\ncontent-type: text/css\r\ncontent-length: 303\r\nlast-modified: Fri, 07 Nov 2025 14:53:40 GMT\r\netag: \"690e07f4-12f\"\r\nexpires: Mon, 09 Nov 2026 21:41:27 GMT\r\ncache-control: max-age=2592000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":303,"size_decoded":640,"mime_type":"text/css","magic":"ASCII text","md5":"97ea2d751f6f88abaa4144804c209088","sha1":"fe7deabd8c4a06e58816fd9424e17ad884cf778f","sha256":"61971a06f7ba6959fa232b1137d1de182bf156368ca45164f90dfb1a48941ab3","sha512":"014371a55720b72dc47ac433d2a6da81713918c9d44bf4c00d13160b361b57eeadcc378d9228693e0ee8cd423183a0e5e648c9374d725ae317c4a62068cb1379","ssdeep":"","tlshash":"f0e02bd064d19d0c5136530b047602c893b07b106776056ca08c3568c19ebc508f8ec1","first_seen":"2023-04-06T15:55:49Z","last_seen":"2026-10-10T21:42:43.878149Z","times_seen":8947,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.6","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.286Z","timestamp":1791668487286,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.6 HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 Jul 2026 14:33:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a62262a-30e0\"\r\nexpires: Mon, 09 Nov 2026 21:41:27 GMT\r\ncache-control: max-age=2592000, public, must-revalidate, proxy-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12512,"size_decoded":3876,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-10-11T00:42:10.543303Z","times_seen":246101,"resource_available":true,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2025/07/Hanoi-Motorbike-Tours-Led-By-Women-9-1067x800.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.469Z","timestamp":1791668488469,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/Hanoi-Motorbike-Tours-Led-By-Women-9-1067x800.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 250879\r\nlast-modified: Fri, 25 Jul 2025 02:03:32 GMT\r\netag: \"6882e5f4-3d3ff\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":250879,"size_decoded":251225,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1067x800, components 3","md5":"8dbb04fac8f8408c60d65b7cf05d7e80","sha1":"566884145adca5222d5c50415e54b81ea381b115","sha256":"8a928a938a515cfa1dc8608ac0fd757a4307e529bfd1998af60d91b7d2cb118b","sha512":"1f3ecd4c2a17d2722d3feafca06d3336307c09646c2572fe9490865cdfda22ac9daadc16851feee57004992830cb57879f1c01943a552a9899e43e3b19161825","ssdeep":"6144:SpDRQANU8uF2ObyJH85ToFREYjU+XLbkVx4s6fchurNP4:4tPo2OLYjUcLqxQchud4","tlshash":"01342245988161376a2c5851816670097cfdba8001d6dfb5af7cebee23c42cab8d7eb1","first_seen":"2026-10-10T21:42:43.881614Z","last_seen":"2026-10-10T21:42:43.881614Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2022/09/Hanoi-Motorbike-Tours-Led-By-Women-8-711x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.506Z","timestamp":1791668488506,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2022/09/Hanoi-Motorbike-Tours-Led-By-Women-8-711x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 99963\r\nlast-modified: Tue, 15 Jul 2025 02:53:00 GMT\r\netag: \"6875c28c-1867b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":99963,"size_decoded":100308,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 711x400, components 3","md5":"32cad5a8990bccf97fd3923592e304da","sha1":"66471fe34b155d5f29d709bd6019a191d5901eb4","sha256":"f44be2d248dbbfbb352ff0c117df4bfd9ff03e89e0699a10e119df731f2b687f","sha512":"04c82748f47981efedbe6539149e8144939be0331dc0d31889649bff595b9928ebcf94966add045504431bc5b2e0c62830e2c9b17fc77ab53a0cbe41ae6765b6","ssdeep":"1536:tiy+1gDB+kCUb8Yam9R/bLUP+O60bfuOd+YAzpo11xh3X9af3oyFcFVdecTPF7Ng:WWkUIbG/NTWfuOd6p6X94oVVTPFpxtI","tlshash":"c1a312f8782f7b751b1e80cc219830d356793debad2889e35717ef28660b0439b9c691","first_seen":"2026-10-10T21:42:43.883633Z","last_seen":"2026-10-10T21:42:43.883633Z","times_seen":1,"resource_available":false,"data":null}},"time_used":817,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":567,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/11/country-712x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.536Z","timestamp":1791668488536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/country-712x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":713,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2024/05/bike-op1-Photoroom.png-Photoroom-800x800.png","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.276Z","timestamp":1791668487276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/bike-op1-Photoroom.png-Photoroom-800x800.png HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 164268\r\nlast-modified: Mon, 20 May 2024 21:27:46 GMT\r\netag: \"664bc052-281ac\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":164268,"size_decoded":164613,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"975fbc37274fee97163a2b396fdad16b","sha1":"4195d95df28d04cd7e8677602b624b301ba09b66","sha256":"f4c9e4cd1bf5289caea01b43b0f9c624ceacbbb1a334a5d7128f14ef3fa2425d","sha512":"52b04395739df7407dd847fb96bed835e53253b3493b8fabbfb59cda5ebecc8d52541afe221f704f640802e49be5a5f4d24035af7a63190a331586c395395803","ssdeep":"3072:Bdd4erKuviX0Cpc/0IGHknoZlV63x9v7//9fAsiJqSrDzuKEv86a:3KuI0Cp7KoVGTXBAs2qAXuK8a","tlshash":"a2f3127495badd19c9835bf944655f0bec9e30fdc8f63101d49e2a5ad08cc1a88e4a73","first_seen":"2026-10-10T21:42:43.886186Z","last_seen":"2026-10-10T21:42:43.886186Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1015,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":509,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/plugins/easy-fancybox/vendor/purify.min.js?ver=7.0.2","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.290Z","timestamp":1791668487290,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/plugins/easy-fancybox/vendor/purify.min.js?ver=7.0.2 HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 Jul 2026 14:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a622635-7219\"\r\nexpires: Mon, 09 Nov 2026 21:41:27 GMT\r\ncache-control: max-age=2592000, public, must-revalidate, proxy-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29209,"size_decoded":11088,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28979)","md5":"9cae9260daa20d52e18e72307d1d286b","sha1":"a064d13c5aa2f09330306ed75c51393fab9cdaad","sha256":"c45ba939765574f96cbf35ee9b6d89f73756a17921814425e74b82f7c54603ce","sha512":"295821a681860908353c2b92c837d604606f3e84f77cef139dc82068fda3f0dc7744a77c2906af6fa42a69a9eec8ee33215a4814557a52240e2bd482229cf43f","ssdeep":"768:5CgbC2L6j8BM66GHUIiIpH7cYhbY2SIThPVfzbFbeoOwyfPcUA9ptDmo0v2NREUN:68TN5hbY2f8PcUWVpIc8sxG+BYg","tlshash":"14d239a9bc5179726fdb50d9507b160ea17c251f300d8090e2cdecb618bae9960b7f2f","first_seen":"2026-07-11T18:46:55.199374Z","last_seen":"2026-10-10T22:26:13.606761Z","times_seen":605,"resource_available":true,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2025/07/Hanoi-Motorbike-Tours-Led-By-Women-7-533x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.021Z","timestamp":1791668488021,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/Hanoi-Motorbike-Tours-Led-By-Women-7-533x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64369\r\nlast-modified: Fri, 25 Jul 2025 02:03:18 GMT\r\netag: \"6882e5e6-fb71\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64369,"size_decoded":64713,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 533x400, components 3","md5":"afb26b771b7c0a1fb995156a84dc1150","sha1":"54106bb8664f274bc2e435616bae477a77d7946b","sha256":"8006fba5fa9cdf2ee0af6fb156d8e1e13e42837a73d3f43ee0176b658e737566","sha512":"bad1f5ae2cfb9063e5a172a5c7423f4e4b93750affde8468c6a0a3d499c1c1176125f02b625d3de2b7fe7af704056fe12d3463dbb6b0f3206a7332cca318a5c8","ssdeep":"1536:XrNOyaRNu4XQlDq/qgWAm3L7N0F2VvjwD24Z+/Gh:7sy+5XaDo9Wdl0F2VkDrAGh","tlshash":"975302e932df3b9928d7cf22443d19fc4017a917a883528527b9c152badbfd09d094f9","first_seen":"2026-10-10T21:42:43.891061Z","last_seen":"2026-10-10T21:42:43.891061Z","times_seen":1,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2018/08/14.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.490Z","timestamp":1791668488490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2018/08/14.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 399720\r\nlast-modified: Sat, 11 Aug 2018 21:51:20 GMT\r\netag: \"5b6f5a58-61968\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":399720,"size_decoded":400066,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=13, manufacturer=NIKON CORPORATION, model=NIKON D7100, orientation=upper-left, xresolution=200, yresolution=208, resolutionunit=2, software=Ver.1.01 , datetime=2018:08:11 15:11:16], baseline, precision 8, 1000x666, components 3","md5":"4840e0b895af2c020c17a7ec997b4a0b","sha1":"adac478a4b9a8838ddc233a039c6474244bd6c15","sha256":"f2fa4ea0dab22ff6b0556cef4cf220b815e8f24f28927b378675846fbce3d20d","sha512":"3911972a1d96a88102c68295ce3ad04b82df526b5f580ad0857b79428c6deb563e2b9ffda2ed7f7cdb19cac9bba06f55b40fd39cf8aa7e3d1916c74d873d235a","ssdeep":"12288:bRuQm60tWTNttSVMI5JrbxVzNIjG9gS59T05t:bRDtpNCVh1VpIe8t","tlshash":"af8423873300aa46ffe47c765ef587e413d4b5427a04246132beee787b2b7bb4649248","first_seen":"2026-10-10T21:42:43.89439Z","last_seen":"2026-10-10T21:42:43.89439Z","times_seen":1,"resource_available":false,"data":null}},"time_used":842,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":259,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2024/05/saigon-motorbike-tours-5-800x333.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.517Z","timestamp":1791668488517,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/saigon-motorbike-tours-5-800x333.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 51555\r\nlast-modified: Sun, 26 May 2024 14:04:24 GMT\r\netag: \"66534168-c963\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51555,"size_decoded":51899,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 800x333, components 3","md5":"70ac2de0f31c508bd2dfb7d8ef20932a","sha1":"b84e0a864e924bcb891e8abd5eb92bdcc02cd244","sha256":"2e1a2d7bf0e7d47acfe6868669e2bd38215d96db409fc5eb88e46a059a0bba84","sha512":"90f77993cd42255837851c4c486e234f6bb122d50cc3b89e8e5e5cd85e963b4327147c541c7203ae810e6b5bbbd3cb5340aa9f66e163c40acefc3c7e6d8ec5f1","ssdeep":"1536:oJfCm/JnYgxSq2+yIQcy+RTaknVnf7RIqTSdD5N2hsf6n:I1Yggq2+ysR/nlflen+n","tlshash":"2c33020d6c9e48b1b2a6a4dbea7651e2d6dd91b37dcd4d56bc52ea03f8c2dc2cc94002","first_seen":"2026-10-10T21:42:43.899896Z","last_seen":"2026-10-10T21:42:43.899896Z","times_seen":1,"resource_available":false,"data":null}},"time_used":727,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2026/05/BIKE-TOURS-HANOI-57-533x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.521Z","timestamp":1791668488521,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/BIKE-TOURS-HANOI-57-533x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 77718\r\nlast-modified: Wed, 27 May 2026 09:44:07 GMT\r\netag: \"6a16bce7-12f96\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77718,"size_decoded":78063,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 533x400, components 3","md5":"dd77875b963e0a1b82d3b040ee75a253","sha1":"479890d1de63bda6b988b515b1c6d4c63d0e1096","sha256":"9d7e66fa1146b83d4ed5e912ca4b50962e9e70d5efea7b37b60de4e1f941081e","sha512":"6c4b275269fb7c82aa0568af1018bd69d7c46bba7307b5b64479f32f642b358b7a86dc19ca3c53924902d7a5db886c677896e56ff221534e32d5b3cc5fc37c2b","ssdeep":"1536:XlqNsEXbbh+TTk+JC89VPXbZ6y3ScdW/YeGXJqxeuLo+sWxQcqyaA8BMzNY/W:I7XR+TTHJC8XPV6y3ScORGXJqpU+sWjb","tlshash":"f973026a6670b3e881e72e7fe50d0bc8a59cc94f89ed8894c17dd3210ad19d9721cd3d","first_seen":"2026-10-10T21:42:43.903395Z","last_seen":"2026-10-10T21:42:43.903395Z","times_seen":1,"resource_available":false,"data":null}},"time_used":804,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.281Z","timestamp":1791668487281,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 Jul 2026 14:32:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a622605-13ba\"\r\nexpires: Mon, 09 Nov 2026 21:41:27 GMT\r\ncache-control: max-age=2592000, public, must-revalidate, proxy-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5050,"size_decoded":2187,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"55c5129ccd0fa8f383d9de82a91c5877","sha1":"596918015fa62e4f18533b69b0e6822ebee3cb2d","sha256":"cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090","sha512":"956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"5ca151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-07-02T22:01:42.321596Z","last_seen":"2026-10-11T00:29:26.725654Z","times_seen":31811,"resource_available":true,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=6.1.6","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.298Z","timestamp":1791668487298,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=6.1.6 HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:27 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 934\r\nlast-modified: Thu, 23 Jul 2026 14:33:14 GMT\r\netag: \"6a62262a-3a6\"\r\nexpires: Mon, 09 Nov 2026 21:41:27 GMT\r\ncache-control: max-age=2592000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":934,"size_decoded":1285,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (934), with no line terminators","md5":"ec0187677793456f98473f49d9e9b95f","sha1":"8c55e0f4a29865e871f3d54be8d480a0665891d9","sha256":"df0ec8330290d184b1084527076cb87d41b33ba706ff5ab579d761f0cb6a744b","sha512":"84b468de22634404405e52cda2844d626b4d47054739971d677f0e63fd683dcca100550419b945391236846df54b65fb43ee4d6e7f7692eb0d414584e2594108","ssdeep":"","tlshash":"9811e1305a3031740967ca6182eb53e1be31e461f0a3898159fc4e141f7ced598b3d86","first_seen":"2023-03-07T12:57:48Z","last_seen":"2026-10-11T00:29:23.235999Z","times_seen":117005,"resource_available":true,"data":null}},"time_used":736,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/03/Motorbike-City-Tours-Hanoi-Food-and-Sight-Led-By-Women-5-1400x788.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.488Z","timestamp":1791668488488,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/Motorbike-City-Tours-Hanoi-Food-and-Sight-Led-By-Women-5-1400x788.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 256592\r\nlast-modified: Wed, 22 Mar 2023 11:25:54 GMT\r\netag: \"641ae5c2-3ea50\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":256592,"size_decoded":256938,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1400x788, components 3","md5":"2877e4cab47fc8b5d67f33d16222df8f","sha1":"e7c6af06db6981bf325d3b239cbd1d7e94d32fe0","sha256":"0d4933c6c8ac1b806bc13508d06555fb4ed6567efac58b523fb3d99883a3c480","sha512":"1d7acb2357d22a511ba9c474a73261a5c91de7592facddbd5b4311f4966feff402f920719b27536a75297b4ec2ad2d3509a65e322285af22295932c72e363274","ssdeep":"6144:eDdznV93rjjrDBTQioaKVRTXBLwR4PNIhP23IicpudV5mgnC:ed3rPrZQVVVRTxLwR4MfpudVggnC","tlshash":"2f442237538b409c0688ee6e065d266e84388ade6eff376911e4c53c49d007773a76eb","first_seen":"2026-10-10T21:42:43.912396Z","last_seen":"2026-10-10T21:42:43.912396Z","times_seen":1,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2026/07/Hanoi-Jeep-Tours-5.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.493Z","timestamp":1791668488493,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/Hanoi-Jeep-Tours-5.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 269650\r\nlast-modified: Sun, 12 Jul 2026 11:18:21 GMT\r\netag: \"6a5377fd-41d52\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":269650,"size_decoded":269996,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1000x562, components 3","md5":"1d0164a6a9e020d99181e0972d7e22f2","sha1":"f4dd32507c101c800a06415e47fd041ec79f028f","sha256":"a6dd1ba50a20fc04c0d97525330220f286471a8a4204aa8052b4bcb4d4ccc49b","sha512":"1a34e495706c021ececa41f0dee32ab7903899b0e4e1781e5c693b54612201530c0feba03b1db87e0fcc47b1f1cca1a8741282fa77973a249ce560dfd452a2c8","ssdeep":"6144:kmag7u9yI9+IW5NWfvsB2rxaeGnnI+I1JhHSJj3X4+bcBN49/kIb17:kzUu939PyUv9rxaempI7MJj3o+im9/1","tlshash":"3d4422a9cb40392087cd5f3d4c47967d06916a3d1389e84995a53ccbbdeeee0b8149fc","first_seen":"2026-10-10T21:42:43.915717Z","last_seen":"2026-10-10T21:42:43.915717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":764,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2022/09/vespa-3-711x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.530Z","timestamp":1791668488530,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2022/09/vespa-3-711x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 94116\r\nlast-modified: Fri, 28 Nov 2025 00:36:35 GMT\r\netag: \"6928ee93-16fa4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94116,"size_decoded":94461,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 711x400, components 3","md5":"9b236ea2d26aeff22bd120d2e50b5704","sha1":"69444af30d9535356b42f22985769d9b6ca1a36c","sha256":"013ab8c7c396ae951ca7ecc0f87df4688733c7dfafaee7b9569e28d2db6803bb","sha512":"0b8b4cf2cec7bc863f7dcecbea6300d6d8d0f7c4d52909dfcd59a0f6d11a94f96aaaf3e8a4d9b5950ebdd04719c37146478495e360233ab97936d797311078b2","ssdeep":"1536:tuPUScnUlYeagvOQrVQNVPJQzaTtVbmFOWmOwdDatmQmIArOI0XIwWWlnIRHkh:IUScaa2OqSPJQz8thmFOWmOwdd/rH0YS","tlshash":"499312b941c7625dd8309e4ae59474ab6e3a3b23bf2ca921bd77c131c0d5cd7a03664c","first_seen":"2026-10-10T21:42:43.92041Z","last_seen":"2026-10-10T21:42:43.92041Z","times_seen":1,"resource_available":false,"data":null}},"time_used":795,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/06/0ce08993cab72ae973a6-601x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.537Z","timestamp":1791668488537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/0ce08993cab72ae973a6-601x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":712,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfK2qAUAAAAAHVWVP33wXcSA1OGf0cjlBTfdudc\u0026co=aHR0cHM6Ly9iaWtldG91cnNoYW5vaS5jb206NDQz\u0026hl=en\u0026v=nY0xPItgwtlvjEjk2TqdwOQz\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=hrotnw15i7xa","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:30.181Z","timestamp":1791668490181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LfK2qAUAAAAAHVWVP33wXcSA1OGf0cjlBTfdudc\u0026co=aHR0cHM6Ly9iaWtldG91cnNoYW5vaS5jb206NDQz\u0026hl=en\u0026v=nY0xPItgwtlvjEjk2TqdwOQz\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=hrotnw15i7xa HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 10 Oct 2026 21:41:30 GMT\r\ncontent-security-policy: script-src 'nonce-JW_-Vezr4iIYMsMKOWeWGw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54636,"size_decoded":29441,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (36170)","md5":"abdad0221d1db6eaad0423ad984fee54","sha1":"aceb10ea15e216c321b2293aad9f3e8c2bf8bd77","sha256":"60cec4bd61bf0631ffcad84b94bdc7bbbc07a77bbb24dc38ae416a895cd78239","sha512":"8319b7a3c29d8f6b04dce753b032cb1923633fa04030e39d8d8399431f18fd87255b389917c3c388d420442807c6b2b226d6415825610d73977526bccd3d65ca","ssdeep":"768:UFkD/iEEkA3+bsIi77b3bK3YciXX3bsiDG84EFzhJ2RGKLVXocREmRE5gx2+Y5tU:GvloiDG8/ZDKBT0dhj7mSwaGj","tlshash":"3a336b1448072485ead78ee213ca7f30fa2e4201624590b973fd1797aed7ed7a19a3dc","first_seen":"2026-10-10T21:42:43.922883Z","last_seen":"2026-10-10T21:42:43.922883Z","times_seen":1,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/reload?k=6LfK2qAUAAAAAHVWVP33wXcSA1OGf0cjlBTfdudc","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfK2qAUAAAAAHVWVP33wXcSA1OGf0cjlBTfdudc\u0026co=aHR0cHM6Ly9iaWtldG91cnNoYW5vaS5jb206NDQz\u0026hl=en\u0026v=nY0xPItgwtlvjEjk2TqdwOQz\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=hrotnw15i7xa","date":"2026-10-10T21:41:31.547Z","timestamp":1791668491547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"POST /recaptcha/api2/reload?k=6LfK2qAUAAAAAHVWVP33wXcSA1OGf0cjlBTfdudc HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-protobuffer\r\nContent-Length: 10411\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfK2qAUAAAAAHVWVP33wXcSA1OGf0cjlBTfdudc\u0026co=aHR0cHM6Ly9iaWtldG91cnNoYW5vaS5jb206NDQz\u0026hl=en\u0026v=nY0xPItgwtlvjEjk2TqdwOQz\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=hrotnw15i7xa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":10424,"data":"\n\u0018nY0xPItgwtlvjEjk2TqdwOQz\u0012ä\f03AFcWeA7P-gl3C3VZkBWKgUsY3pWbqYq95caEPMNM5RQy1vj-8xNEIdFWFRikESqkoA2dpooGUuQHha4Z9Tf0kwad4shiV8MMWA4O8Q3o7xvhyYpaxDT1vrojbp8V4FU4PZn4pBhldgmnkk6JrdZJy8bQdP8fzbHA7i9k_KwjVQ0rfzDPKLLFrcQr1dKV2OdJgqVGvKgaNcV3LnqG1WR6uTJThuThxwVZrXLD3VniErmg_h4hajl-RQfCi6H3HJvpFm0OHb2ybLYTGxHI2ptkrI1P4AL2pmCGjXr8WCgJ2gWrRmkIgQl4ZRB0FWfcSHLGy1t0zvn8diBFV9Q2VZmx0qK5gMtZAh4C-tefkFKx4u8e1oQ9OCCyIhy7HowYKs8Wzh7Hx5HcLk5nTSw_qRRD2Lu2T7lVml1PPwupEg_zwe_MORqzQ9sIZSuJZnuVoy2wpSQvy6y_TjVJT0M4-aQVfeqdzqddjwpVHLl1BUDz9p3mGIhBhpdoHncZhoeaGtnYqU2_JP-53tMp7y6pt6CU_eBT1lsWLsZDN92MO6K7Bls3GY42hdNDq3WvgfpCIs_c_CDNxvCVRsnv9a3iP485kt6PKqEAYsVl2pQ6rtJwkxpQzCRcliEj7JoRfnC_F6CVJ5laATqpBmdKGVHLhCzC4di23usV3J_gZKNFpOePV6JL5qgHt0Xfx00LWkcVqVgKc4EbTzODV-AaNzuZxv5iP_un_FIW4Z8NbiIhl-iGQGHK86gFlclQ0qYkCPLNia_N88S3LSdO1Juvoe13RwhIIkZGwUwAE2l9q6VKRxuIFII5raZWV5Y75rlQkoz8QoAUPa6LjW6m9xEWLLWSKmaT9J_1Xy3QEKDCWrTFJFsT1P7E0YoVtCP8WtXRngsXaPGLQN8uHrNDH_76jfDSqHBeTE8fs74uBAFiGyvTXRAILG-6tfUnBvoJKR42vKowdlMxYuacNyqlUGaWNXjmqpk5icjyDsxdjmXr_bJBaz6jfCogZsgZSg1BY0l10WKTp8lh3B6BYTqQmvQLsYRdauQEPeQDtrs_4GlQGw0vm3zm2HRztnqGywOMAEzd_oj_X60ZjBTpanSWxQUB6Umu4bF5Hn9VwEasRsGPwG1openRxhGI5w-sMxfFo1QzD7eHb9nk9w_bqQww9a5O5V4kq0ljy7dYhLyv9gTf9m61B0_t6z4UIucxg_DHbmWjZuAxbldz7c6rgx7NnfNSGK6qdkaWoYlD_GdUBQB9cFU6er0wxzkybUU9zak9lxwPKCbaDjadWbWaqPkW-Vbh_rLZ0WGbHH6FL2rs8e2DzMAArvIwpyQ3Afgw6QZuopZKuNZAk4awzdGWbNQu1U7LpaEPLOhyuAxVkl3nRV5gdbENntNb8XI9rbnt3gv9WfW74wHN-rCL-z8RmAUaU-IwORO-PX2RC2K-xnxC82Os-nFmbmM_8yc1wx9bPTBOtMMpyrKF1g9ef8apo26V6n-V8L24yakrdrXMbOkRRs5MzM6K9q8Q0E_zQmSweLgOMxUW84hxTiFEhPzscAooC3ab6-bIBvJJggasf5idNhotWr59a803CnJG21aRWNYVvn86iD-jChXPawn4mDQcdemKB8TzVXoFstcXVCmf1kEAA*\n15797460632\u0001qB\bhomepager(6LfK2qAUAAAAAHVWVP33wXcSA1OGf0cjlBTfdudc‚\u0001‹#0cLH5NWGWiwI-ap-UC0dzqJ0UUHyxptEXUoS52hlTg_o2YpeMAz9roJUMSHSpnhVRfbKnHlqGu7AnY4_EuTBsmM3COXWh1stCfqrf1EuHs-jdQT2o7fI_fqz-MC90suoRLHjl7QBaq-D7IWCQ0v0scZr3HjpUtPkyTp63uiouapjDJD2KpfgjVX7X5TqLrPQwZkiH_jpmm5AHQ2-kmRBMeK2iGVWBtqsiXoq_tCtnk8i9NHCc0cY9eaXazzMvpOEZSmeXxSUaa77TDkZq1_UIdYuu6Uk-rtPsJ2Kp5Rgsa4_OKFiYwKzrJ1mUx_QzaaD5_WFd0ggMibnHAhs6ebXsIVSCwfcsh4vv62CLrAI1T6mz1h93tPMJNTt6tvAdVIPC-SaIjPDsYY3QwP85c6XaCEd9sA0RdXHmDFaHmvEEOJzC7S9ElszYMytqpuANRHOy6Bp4fODcUW2GAeUkXpjH_C1sotMyNpqWCxSKaqnjHlSFsvEnV7e7HxuQmdAPRKbl1x9chbsXMFmO0NUUUIXA7x1ckcgiJoqG-yFnpZrzQ1ib3uFLR5jpHEtkxe8wS3THs_IuZJjS-zpvogAEaGTZDUVXxNUsDEuFv_IkVJPI_Vldwb0yUoG4xgVBeajgDk2CtBMXe3fsNEVLisT-MGiT0gc2mJwA_HGd8NAPS4K36hhXi8MdIYWB9iNlVZTQCjdundwQSKKmCgZ7lessW3TL-w9GebHWHHigwQ49UV-e2QxBeazoHE-HtuUkXI_q7lJOw_g5TqHL4glWiqUPUGF4viY4S6ba-x-aifAiUKTEASQygLHlDmOq3x4tZ6_oCxhuhuj9XG2b5ApzoJT_NlWdtuQvPKPU_URWv-L3On-1zAIiXrPlOkaazNwvRajO2URiidARKoCh0yMybM3VAUiQyPcfbH6v7iZwssH6ETp7p9wnOHex6x1VgL_zLIWJADxonZL28md9t_gvWoupDyl7kfsOMnHNrOslX5TK9DNqnPn9YV3S_xsxcKzmE0p5uOwjfoLm4ldetQn7IF-ZzwU5cqLYE0Z2pugdUquvEw-Eyt3jIl6Tzv0rap7UMDSr5xNIPaGdEj5vx_YzMnnOr-4uYJPNAThooNUAQnejBQltad79ToiE2vwzaqm_Lj1luuxESKPN-Upgrb3aUlWz1SU5XX7J9Ehu0Og7S3a92xdrsdTVUHSTzf1XY6zfCkl3gsAvUnzR4hw9jpfmNTtpr_Ixeq3LEkhls8ckMoK9wCxFdH699zFplcv_PG2m3ARGeq8JDXFt4g1LgsnhAVZKicP_MWSZywY4a6LQED921dk9Oa7Z9w1MhsL3LVWUy_paXsK-M2myktENQ3Sx2hlPhd_jR0O44iNcWrjbHiBfm9MGQGin2RJtcdXRRnyR-gg5mZDuFk5xsuP8MJfM5Ep-f9seVF2u8-Y9Yb7GBkZoodkEap-qAC94jZ3gTGF_0t0hRYmu_1KTtN37OXaq-vNambPEFVaJ0gksTYim9S5Mv9TjXpKT7icjbZ7UFDqFvfoOVnzP9ilUiuP8KUGN3RtOYJi_BT2flAgoQX2X2iZdsJroCVWO2uBEbZLFF0FmresVRJ--3fdqornfNzF91_lQWYWr-yxJgt8YME-d0i5Im8DYPmiIqQ9CTqrFBTBBnPAVUHC75R0xUrm6CyiAke0yYame-x5aa9P8C4Z10fZTeqayG1BOnAIpTYDU2yB2qK8JJVG01PkwdpHA6EaCl90eO3jOzwpiorkANjhhzOUgdKPbDk8-irwASIOD2AU2iJ_kOm-jrdsUbICbECp1oeMPQn2SwxVcgsOyDWeHqcH3P3mkzw5Kn7XSHVOY5_pFeo_V9V6LtMcVaGfSAg1QYssPDlhuoAdCPKO47jmLl-0aXmHI7i4_k6jZMU50tOI1OJ_TDSB4heIeWFae5-Y1ZIv9FTVxvekOX6jO3ihLndrUCnaL0O8qhJDQ-EF1vrYPTHG12g1fiN_nBU-LtBY_eojq8UlQrsolRXKhuzc5esrZLmGrvAgTdG_ACUNblMIYKZCw6PBjhJ7SCUOJx_YhNqiv6Tt-ktT-Rled4OcufbW8ClGZi_gMbWKV3jRQp6zv9TRuqNoPPX-0DRF1ceYGQ3Sm8BNPgMXX7Sxoos8GNXSo3jo-op4TKZHDyABWabDCLTqXxO8VOn6_7ghrlLb_LVR97AA-YcPY7j2IrAYGT4aTEjRDeN4WF3i35_IwbnzS_jZjmLkOM4jG-jpLharJJzWGoARBeK3C8TmHm9AOYGe64QpUhtDUKEx-pt4XTYLAHS5kpqf2GniBzQM7bp678kKfr_RBcGS64EZ6icUGDV923Pw8R5Hl-ix5or4HQJ636BFKZ6jxE2pr4-0hVqfGBFyQlK__PUOCvPYnYovK_jKQlPj0aXPHGQyFr88XMGyQ1ghah5nSLm15rsobd6nLDkQqaabeFUJ9r-YXT3u98SeAhOjkWXWT7-0sZqHWBjV0qNw6PqKeEzRyhPsrIoiQ8BNrmMbeImh5vvJFbbHdIk-FfcL1Mk2k6DQ-ms72MS-Elsg7UWm6GDdboaIMNoy-3_dHTqHwBluHwek6HFuV0AY3ZKPXCmlt0c1CfbXgCTuKw8oOR4il4hxroprvKUuz1QRRVrfOIyqIlcEZXGiJ2hRrmo3CDnJhndzyMWuk2w46ea3gP0Onoxg0Y7nhJ11qzOoyLnjeARtybNfrT3W84yVGXZbECk1vm-ArKpmsxjVTltXyCVmC3RknZ3rKKTxrxMYsHm6PBjtpj674MXaMvxRCOqu44EhiaKfhHEyIsO8jVbW5HRmOrw02ZISv8AdelMv4IIWzz_04kpbRDjV0sQEqcIa38O4tZ6HWCzZ1qdo7P3mt5CBIrKgdIJ-zBxxxW7T7OmmC0PUkemKh2xVKeqrpHU2vsxcTaajkF3GTlhE2Z4-zECWGgqvNDEaBtecfUoq-8CtTlcn_WFzAvDFRjrDtC3W57hIlX8LZHU2Wod0ONHDV3yhIdbvPNXJ80PIaWobR8xVofMMQL0KBu_UoWorJ_DWPk_fzaJLS2U5chu8kMIKa9QlkdprM8imd0tr7d4DK9gdKoMLZ_Tx2r-YYRYS37kpOsq4EQ4LYDy9sftgCPWyt0-8igae87SI8e7XxIlOExvtUWLy4LWJ4sxYrcIu5-zd1f98cN4SY3OtifLHfLFqjqA48bq2w40tDo8zxTTV0sOcZVH287yCChurmW2_PEgJFeI7NCT1xpdYVR4Lb31aSvvPoTIHJBTFmW5bF_i9awfEPgoSt-C2BleorQYmG8Q5pfcHGBzN42ds7Tq_Z-R9fkd7bElmszeA6hLwAKkKQn8cYK2XR5gZac9n2TWS8qv4WjpPOIURqrtozO5GVvjlSfc7TOH2Ipes_Uaek8i5IhfcfMY_Q3fguo5XXH3ee3b8vM6rmEkc8s-8bUEWp8S1ZjoPD7SZXgsY9VnfN9EV5X8_TSoay59xTj7vw5VyYxPnuUprWAjcsaZbPACuS2uwRW7yr5FNjiencTFDHAy9kWdAMOG1ixg5Kdqug2wpDdJ8dSXOX6zU8i6zSHW5nmvlDcW6e-jdjkqv1IWx99wUfhonSLTuHs8gwPqCTzvBgZMgQTHitotsMSHahGV1swu4mJ5Ol9DVhpM4KMFiu5_z6am7SGlaCt6zmFk-Aq-k-U8L9DjVpufMmZo7kHTIwoKQIUIy47eIbTIW24Uaiqcb3b5-u_URxeJICBmqy7hpPRH6u5xhDx9ctYX2i1Tw_g6ARGj6x1hhJfHzq-VhdlfwyX26e9A4ujZDIAElkr8AwNJjgHEh9cqzcFUZxvPBnXLzcPCh-peMIIpKW-kJ-qt_UDT54qNMrbpz58TJ1ksH0Y2qE9PhcpOAMQTZvoNsKNav19zRet_EPJ5eJ2vRBY9XsOnd7vdEhQHa39kpNobTiTnSZzAQkcJ7fFCl9mORIVK3k3xQunqIGToq26-AZSoa03zRWi-gMcHfbBiVoa8T6IoGl8PEwX773AluQqvARS2ql6g1FmJjTJHex4wongobkGDt-ib7YSEzD_ytgVcwINGle1RE9cmfLE097sKXeD0h5pCsvjcHkJzJngfH1WaHdCT4zbZ3WBzKZ6xkdfJmuHD-SxgEmXIDY3QF2i9sDDDpu3OkfXLnq7Qd3e98nY4_EufMjXI24NHlnvPQEcH-qEDFCdskEKGy61P40kZrzEG9qn7kpLZHZFUF2a6TVDz9qsvcxjqnJ8mVundgaG4uP8zt3o9jNDj9spdYBeLSz9j9vibzvVHKlwxNvksvkKDmj2eMug6emFVJXjs_kWHSE8hVdXaDjEkxkxxI1UJrR4Ppqn6MaVoK3rBAMYq7hCF-CpdT5SWSnFB5ysufGBUd7sd4SS3-y5xdZjcMcIJfT_zQpoNwIPTKWkgcyc4nuFlaLgNf9VYOl7fRuntjGDnOH0gEpWq668z5qh8MbSFubxNoZU4zD8iJhk80nXA¢\u0001œ\u0003tbMywxMDMsMzUyMF0sWzEsMTkyOCw0MzE0XSxbMiw0MSw2NDQ4XV0sbnVsbCxbbnVsbCxudWxsLG51bGwsWzE0LDEyLjI4NTcxNDI4NTcxNDI4NiwwLjU4NTAzNDAxMzYwNTQ0MjIsODddLFswLG51bGwsMF0sMCwwLDBdLFsiYmlrZXRvdXJzaGFub2kuY29tIiwid3d3Lmdvb2dsZXRhZ21hbmFnZXIuY29tIiwid3d3Lmdvb2dsZS5jb20iLCJ3d3cuanNjYWNoZS5jb20iLCJ3d3cudHJpcGFkdmlzb3IuY29tIiwid3d3LmdzdGF0aWMuY29tIiwic3RhdGljLnRhY2RuLmNvbSIsInJlZ2lvbjEuZ29vZ2xlLWFuYWx5dGljcy5jb20iXSxbOCw1MDldXQ²\u0001¤\u001dBDAAYCIAGEQAAUZKI0kRCaAcBIlYhAyAABtAgwIAEEGILSqQQRxC4ygJBFAISkABQUhEIACABKIAIAlhugBDbAFACRZAwAKJCLiCpwOAcIREGGIQABIhABYASYAHhAkEUgIlYAqpEgAFICAeQCCkQgYMUKFBAhSAcJiVAAkBQYIBkRIYI0QIAASACBgGkgACCESoEAFAFAgQgJBAJcBjQgmVQEYIAAjJoEAIAVDCUAQCEAiEAAZgACoUkRAAFEshmCBkEaJoAIAAUg0AiWkARQAAASAABAXCrAAAEhIwZICRZAgIMQkYBGBQgGMCwmRlCNUAEiwBAiREDFqsQA0JQMBJPIQUCAIoBvaOAQRBygbMQkcAoGVYACQABIzsLERgEgYBCBhgEGHjQUqCCOABbRMAYBAAJSAmABMEAACkgIACAgADtMoRmqTAAFQSEEhBGMgCI6gAzsYgwBDFAYhAGCANKTEEAkAgEJFUGYBQihIEG8kEARUUQJgQUwQPBSUaNkhQQAhAQFAIoA9BEFihtUgI4kIwrCEhkECAIICqAIEhABQBYBBCAkUkIEIBQBpCUCKRgUAgAAgAgUAEckBDQASihKBEQIAm8RlEAyIAISEC4MB1iCWVQSh0SICEAIpAkAARQIYB8EmBFETASQ0ECCQEQYBCEQRYhEAgcBYGH0BXFIoAMGEBAlAC1EEEBgPgGggQimRQIEQAIIGQoAAPIChmKARGIDAAThCipoBEANwBAAZoAWYQgHQggsCA5QCpEaAIGhkALKBEKSghKABoE0HSAAJQgQYDLYgCYFRxdwQAQLAESCAACEODIiISEQCgIBEAIrpgAgSQsSRUACESPgQk4AcYCpEgYOBCAABoEDABBCiMACQwAUBxDgxoQIFGMBpqMcAMAJA4oYBmEJhAtBCCD6IIGGjghED1AIxkRhGZAoIBCXIi6iCURNKIRAQJaEAAAMQSaoIcyErJAAiBUAAEiAAikBECSFoACh7ScQJdARgIBLLgFFxCUIBcCGAAAQgigCDBlARCGSISAhY4wCIGAiIJCAFhaAgkkoGZAAMQQEBMOhAKAQiAAiERBQQFERggAZoAI4IFAmgCAg4ECBAfEIJwAHKMKmEAHAEYggAwQKpIAggkiUCC3sBBSwxQp4QCgkQCMCwF23AIJJACCQSxEiAcTFiIELtBQEQQBaqsolQBgPRFAiU4GTSJJGgAAgAAICNBEggcEwLw6FCoMGyhAxQArBRAMgiANMAgJAILBBCxsJBeQDAAKKhChAERkSQARScQ0BAAMKADSUQWgIwoDHYAiJFTIkMyQATAqQEGsIKAGumwCBcACgCSCCRgkAEpAEDgAQKI0qCYrgEMUCggUEAAEIUBsEYDOg0GGUIAHCwwMVkNTWcBC4DIAIjIsKA8yYIBA9OAeIgSBogAqAhOlEKqt2ISQgEGAiSCQEGBQAKDAAACGICACKnCiQzhQZBFgAwsNghIBQDFFEQhAkkAFAEQAISE4kAAjSCQIkQMAAAyyWoSiRBwggAEtYKTaBAB1lgjgYQJCIoAAUkCBhAEQoB4oAQDADBAAQAQGYCAANIATEGwSARCAGCXSCAEGJVdO5AooBiAJBMAzQImhDIGjrACgBIIAwAoSkCiQIEABhMlASIiECGQEESQA5xhAVEAgaAAQeohCAL0EoAARApIwixAEIAAAAzBQUAgAgAqghANEA0QEACexCIZHMwAAAYY0AaoGohFEpAAAoOlAECAWjABATUEAYgJEBZIkLqgABABxCA3MKCYKAzRECEIAEgAIgJKCjBQJ8JAvQGwiKDoARgJBAQULi8CMEAKAJIFyAQ0CA0QkFACAAINGkQI0hIAigFxQCCJQCTUAVkiIIB4ERSAACAApBUABIgAsijEpaQBBDGQAAMiCDgEBVcDAtAICkAlAYwpICEECAAOABAgADgRIwAEAC4EiGDADEpOIALikBFAgLTQgBYBQiTCUEMAggKBExQABBhhqUAMAJIAEAQEQghBJAAJrQhCTIGAQkGvQCAUrunEkBBQIgUAwCQgMACAAQIMAjoBIoCAAiIBQABMKQQFgQCoAAAxAgBAJyRCgJkaEZAM5LsDABx1sglzhAZA0TpcSCAEhIBSYEgQgiFdAJIiIAyjBSEQCASIBFTQRgCmDIIAIAOJIAEglACQQyIGAABAgwMARukAQgIIwFCAQAgGSzIEyN0ICQgIsbiiJABQeEiA6iWjhITATC1BBBAkEAKCRAkAIEABCBIGAAasIJJmlCByYOURmVBAmgEBJEIQTBiUIHSrgIBAhiQBIMxCIgDAVxRCMAxQoAAxCUSApMACQgAqACgBAJKGAaBZCAQYCABk1CEAgMAEUIGkOACgwEAALCQgN5hIAJIohASUAAMcGMAAADJABAEhAKBAAgoAyEsQIAAQMAgBYBLBgUIEAQAwABWIsSiI2wEQIAwQpgoEQhTQZGIKJAIiAAAIgmM0mwAEOGICQwAAiADmgGDZAEggVEADCAGEykQECBAAQwQiAMgIgAaQl4RUDClAEwggSLhmCQAAUBoBkgiBElVCACBtUBIfAIPQAABMIECAiB4FIJUthUAPxYBAEAUBaQFqKLIQABMbEEBCDIEMTBAYkVsgJ2hgYjgsIBAAZpRgQgBGAAxAAGAgkCEZAwLGBpKkKMRRAgIIBTEEkEEPhSAQIRcGjwAGBGhpEAACABADkJyEBCCIIaQE4QEDIEkQIkAAiAgUCIjYoBAgKKDAYDKAQhigHmYIpFEASoyCFLlAhwnkOQAAQFsABkSACI0IQAGOJEFBAQQ3kChoAQAGBCTIRGuCBkICCAFCRKxICDQ1VAIhHDiAIAYiUAPINAEYpKAEAiMNChASgMgABAAAMoCqpoQGECIUUIBAWwjhwiDAALIWAAAgCEWAQBQlBAJAAAAEFIL0AFDQABMOEiRmJCADiQKBlIgKliDGSIOFzCAoC+YlA1BwFERRAKgBAAECooTLAvAeRACCIYApAgqAiOKAmUqEIEEAEQR4hG2IAEAIBwAVwCAJIUwDACuAQAAcoGCKACCF5HsXqIMAvAggASEBcEGkBAUA2qADwUiAAoIiCiIBMgCYLCCqGB+CQkZAEvD4MAiDMEgQEUgGBHKDAhQgABBA4AgChEBIBYFBQIoJA4AGOZQCAhAaSAhOA4twECtRggCASAKYDMDEAwIJE/8CRCiFAjABEUIgABQTJBCJEQBAQhgYxgARhwCBQnDDAEEAUxAJBRQcRJDwpsiRCAEQCxH4BIA57C5AjxiMBRA2ACEJQXhLoRUQQTWQEDEIQAgKEADFgRJABJouGJmxEACwECEOI8BABAEECDZgIkEWkAnCKZrIAABJDIsAzmQQYAIARAQQAIRFQPSWtSYhgB4gIIkWFFFCB0ICiMEGgLSgCQQGIGCggAAOSSB0QAAiKIFgUBAhJJOAeQIgBgAYAANcp0kpnBaBgs4BGEN+TWiKAggCCAIdgSoGDyIwAmMKAl0iTgRRIAikKRAAAg3RGOEcH4pE2ACLAgKDIAAAADEIQQRiB2CAUIg5xTCCCGGAMgQgGBAQAhQB0wzAwEsCggJBlS0CAChGhgKg0NYBRBwQiE0AoDBICUEyWAogFXXKhpSQUE1NCksAYwQIAERYYiFKVBA4LEElLAwgGgyWg5AYgEByAqqKCiADQABACQAkhEARACDBcmZABBkABvFADUkEBQgjckvAhAEUADLKABmZiQIhBYCIÊ\u0001\u0003W10à\u0001 œ\u0001è\u0001°ê\u0001"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nx-content-type-options: nosniff\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-resource-policy: same-site\r\ncontent-encoding: gzip\r\ndate: Sat, 10 Oct 2026 21:41:31 GMT\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: _GRECAPTCHA=09AKhCRwgN1dpaTFFZCZEScgBYg1V3RX8s2zPlJbaT5vCNPGZ5AJn5ZtzUmIcqR8PlYNQkJG8TtdzNzQWTgDByxZI; Expires=Thu, 08-Apr-2027 21:41:31 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nexpires: Sat, 10 Oct 2026 21:41:31 GMT\r\ncache-control: private\r\n\r\n","headers":null,"cookies":[{"name":"_GRECAPTCHA","value":"09AKhCRwgN1dpaTFFZCZEScgBYg1V3RX8s2zPlJbaT5vCNPGZ5AJn5ZtzUmIcqR8PlYNQkJG8TtdzNzQWTgDByxZI","quoted":false,"path":"/recaptcha","expires":"2027-04-08T21:41:31Z","raw_expires":"Thu, 08-Apr-2027 21:41:31 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"_GRECAPTCHA=09AKhCRwgN1dpaTFFZCZEScgBYg1V3RX8s2zPlJbaT5vCNPGZ5AJn5ZtzUmIcqR8PlYNQkJG8TtdzNzQWTgDByxZI; Expires=Thu, 08-Apr-2027 21:41:31 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2945,"size_decoded":3204,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with very long lines (2940)","md5":"d71bb961a8db0d3c5b375c951ee224bc","sha1":"f34baa583fb72c213818ca597f553dd816baba1d","sha256":"1cb652536de0832c1a64e02d4a493e6af0e8c61f0fe8594d115d2386f96d561b","sha512":"fbebe95ed40cd7004c400e91ce8de4bc051f9177f9b846cd9ba4a6980fa3724edb1b6ee391641b0de301b1c07a744306d49864865195fbcf22c2493ae32a12f5","ssdeep":"","tlshash":"21513d4514231c9f6993e3e1e4145ce3c6ec385fdf080cba26f85e50b59337668a5b5d","first_seen":"2026-10-10T21:42:43.924627Z","last_seen":"2026-10-10T21:42:43.924627Z","times_seen":1,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/themes/flatsome/assets/js/extensions/flatsome-live-search.js?ver=3.20.7","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.289Z","timestamp":1791668487289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/extensions/flatsome-live-search.js?ver=3.20.7 HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 25 Jun 2026 04:18:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3cabff-3789\"\r\nexpires: Mon, 09 Nov 2026 21:41:27 GMT\r\ncache-control: max-age=2592000, public, must-revalidate, proxy-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14217,"size_decoded":5039,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14217), with no line terminators","md5":"12f19d22d5c394f4be119ec6dd373866","sha1":"aff008c3d9c3ca9835c6e72ef7e336197dc7d935","sha256":"ec6fd7fb2ea851ec79af9eefb18e58900b662e74f787642a984d111be0f4f1cf","sha512":"b9c9c59b9031ca00db66e675a7146a5f9009c757120eb8f32488d8082250410c7819dea7ec7695c817279440ee9845cbf7674d74c583b4547f27172ea731afcb","ssdeep":"192:ywypHcFWh6FbKqYQIILvP+k6T9he5aBhOVfaOW4fW33BEvp9UkGhi1zKRCL19bf:ywypH36FbKvkn+dbGgOVfPWmQ3qvSWv","tlshash":"c852b54073c2a376d39b30ecc95b450e69b77f1528062190b22bc5955d68f08e1aff76","first_seen":"2025-08-12T22:36:09.920216Z","last_seen":"2026-10-10T21:42:43.926185Z","times_seen":4273,"resource_available":true,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":494,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2019/12/f8709659cdb134ef6da0-533x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.560Z","timestamp":1791668488560,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2019/12/f8709659cdb134ef6da0-533x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":690,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2019/12/cd5ece7995916ccf3580-533x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.561Z","timestamp":1791668488561,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2019/12/cd5ece7995916ccf3580-533x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/nY0xPItgwtlvjEjk2TqdwOQz/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfK2qAUAAAAAHVWVP33wXcSA1OGf0cjlBTfdudc\u0026co=aHR0cHM6Ly9iaWtldG91cnNoYW5vaS5jb206NDQz\u0026hl=en\u0026v=nY0xPItgwtlvjEjk2TqdwOQz\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=hrotnw15i7xa","date":"2026-10-10T21:41:30.292Z","timestamp":1791668490292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /recaptcha/releases/nY0xPItgwtlvjEjk2TqdwOQz/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 354590\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 09 Oct 2026 17:27:02 GMT\r\nexpires: Sat, 09 Oct 2027 17:27:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 05 Oct 2026 00:06:40 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 101668\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":850545,"size_decoded":355477,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (602)","md5":"880723b04901ef902341d03409d07439","sha1":"92d597679deb157915cd08eb6dcd4d42bf274d23","sha256":"a2d9c6b17c85d85e1330c5b09c7fb1aea3fe457897ce6ac69e361dc6a72a57b1","sha512":"c700abc85dccb19b7617fd6e8e3dd813eed2dbb86228dc9c23744fd0ddeb2b71b2d387c474e764671745e659ff19ff07bf699039a43772bfdef6cf9b8738c197","ssdeep":"12288:3bWvqmePeW7L91BmS+ELcUAZoaI/aONG0wjXUpJvHnkb+:rZph1ZrIbMNGNwrfkb+","tlshash":"c8053bec35063eb56222b5fa10a76048933e942adc4c0b6db19798f13ef484d6177eb7","first_seen":"2026-10-07T03:06:23.101046Z","last_seen":"2026-10-11T00:45:16.626443Z","times_seen":3166,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2022/07/city-1-712x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.022Z","timestamp":1791668488022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2022/07/city-1-712x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 92638\r\nlast-modified: Mon, 24 Nov 2025 14:47:40 GMT\r\netag: \"6924700c-169de\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92638,"size_decoded":92983,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 712x400, components 3","md5":"02900a00398dd575a5d63c369adf4179","sha1":"1645f27495a31c8ba262dafa8aadde22f6ad04ec","sha256":"41c4344ec981f6132097a78a1cb4199467b5d7044e90313ae6ef5c93a36185fb","sha512":"83828c2890a2174450d4cef16f3a2611be5caa8dd18bbd6e23813c777c982b3367bfea8c84bdabc781545e1e28721287d6f5553f741947238813666862f2e1d8","ssdeep":"1536:+tpSp1tJlw/ElIHpxgHBrsld/OZunw5oVIC73mmWhbbhmq+E4GuJ0KKgacg6xlMe:IporTw/IIDgHJsL/OZunwOV/3mZFhbpA","tlshash":"d693021e96b20362f53b6fad0f9a5f39019e04d33c128d431e17b29d2a7b1b429b41da","first_seen":"2026-10-10T21:42:43.927812Z","last_seen":"2026-10-10T21:42:43.927812Z","times_seen":1,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2022/09/Hanoi-Vespa-Tours-11-533x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.545Z","timestamp":1791668488545,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2022/09/Hanoi-Vespa-Tours-11-533x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":705,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":531,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/fonts/lato/S6u9w4BMUTPHh6UVSwiPGQ.woff2","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.987Z","timestamp":1791668487987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/fonts/lato/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23040\r\nlast-modified: Fri, 07 Nov 2025 14:59:31 GMT\r\netag: \"690e0953-5a00\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23040,"size_decoded":23312,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23040, version 1.0","md5":"de69cf9e514df447d1b0bb16f49d2457","sha1":"2ac78601179c3a63ba3f3f3081556b12ddcaf655","sha256":"c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49","sha512":"4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1","ssdeep":"384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD","tlshash":"fca2e1c05cc1e2d4ae02daf7fda5a4eab4e2f01123a8f65f8f114b75d505993640fe01","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-10-11T00:39:30.17093Z","times_seen":197457,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/06/z3373435796620_8ce18f524a73a4705466d6cdbbe4f76f-600x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.531Z","timestamp":1791668488531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/z3373435796620_8ce18f524a73a4705466d6cdbbe4f76f-600x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 46791\r\nlast-modified: Thu, 01 Jun 2023 05:01:12 GMT\r\netag: \"64782618-b6c7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46791,"size_decoded":47135,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 600x400, components 3","md5":"1cd6eb5e63262a65648d396009a61bab","sha1":"4724d967b7ffc66483cfde9221bf4d9a67c9764d","sha256":"a463f47f870ec0a7bca2f7719930ce86d2ffd0a8aa84769c93507a259ae527df","sha512":"98f93772337debafdd84281aa56c88b562f8b6120f8e44f1cc87702644558e2aee80178f4b41f9d2dd72e78467d0555320a9323ce1848928416dd853aa2d74fa","ssdeep":"768:O2j8aeVEBnGBNBon50W2wYuL2qYYK2bqzKMAbFVOVOUYpaQxZEaX0mHNKo5aZOV9:O4eC3Uw2cK2EAbXsOlPxZEaEmHgSVG2X","tlshash":"1223f1225c7a12d6f4d48e74c0a684f5ca6c8d9b407b7281a7abd797c2ccef4c058b35","first_seen":"2026-10-10T21:42:43.929864Z","last_seen":"2026-10-10T21:42:43.929864Z","times_seen":1,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/09/2-1400x788.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.478Z","timestamp":1791668488478,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/2-1400x788.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 329149\r\nlast-modified: Mon, 25 Sep 2023 02:40:30 GMT\r\netag: \"6510f31e-505bd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":329149,"size_decoded":329495,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1400x788, components 3","md5":"27059f63688a75921f887cdef1e9fc6a","sha1":"d8979609afb3fa94c2a296222394d8a2ff24ee67","sha256":"cfcbb788adbf76b9550476d5777655ffe9f0d48f591d6bef392aa652912d209e","sha512":"867c797633dc64f7bfe66bd51c71bcbbbfd315cb703e7f0cd039b2acd3c0e60df9457dd23286352683664ed604fcc749f8cc9071274dcdcf2948c7684c10992a","ssdeep":"6144:0NpKKmGhlwUKl9JAARrrBNS+gkajpPbklc5++RBHo0dOUqZAb6kR98MoWndBP+:KtmGMUKlQApcgKjwVRZAukIzWnHP+","tlshash":"0e642307ab084f236c288f715f2959e88f1839eed649f180713f8979d2d5ad4aec71e4","first_seen":"2026-10-10T21:42:43.931191Z","last_seen":"2026-10-10T21:42:43.931191Z","times_seen":1,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/11/cty-712x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.534Z","timestamp":1791668488534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/cty-712x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 100194\r\nlast-modified: Mon, 24 Nov 2025 15:22:03 GMT\r\netag: \"6924781b-18762\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":100194,"size_decoded":100540,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 712x400, components 3","md5":"c02e11818240153b153c06187ba649bd","sha1":"3a1379188b145abbca7163e8ff83556a3ed7da3d","sha256":"575a4ccafd15174d7a76cedaba43dd09a05ba8b60dbd865bbf039f1c089e8d57","sha512":"9a424cd04831ec950029ed0d2aa54d1495f2c4acd0d9f42aa31526bdb030fbc709b0c4d1f1245a92b401c306c1c823e03d8d0cb3d865c72487697e52a41467ad","ssdeep":"3072:gBbUoidoI9Qdl4yAUSyl7bJ46zuSxoCItOQ9a:gNUoioBdSyvSU46KSxoBVa","tlshash":"a1a312c76bbc81e6fc8369107479dbde87f3b0419a215d12aca29900d21aded1c795fc","first_seen":"2026-10-10T21:42:43.933165Z","last_seen":"2026-10-10T21:42:43.933165Z","times_seen":1,"resource_available":false,"data":null}},"time_used":792,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/02/z4120769833175_d7885927e13f42e2574603b59f620bca-533x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.563Z","timestamp":1791668488563,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/02/z4120769833175_d7885927e13f42e2574603b59f620bca-533x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":687,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":513,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfK2qAUAAAAAHVWVP33wXcSA1OGf0cjlBTfdudc\u0026co=aHR0cHM6Ly9iaWtldG91cnNoYW5vaS5jb206NDQz\u0026hl=en\u0026v=nY0xPItgwtlvjEjk2TqdwOQz\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=hrotnw15i7xa","date":"2026-10-10T21:41:30.575Z","timestamp":1791668490575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:52:25 GMT\r\nexpires: Tue, 05 Oct 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 452945\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-10-11T00:42:53.647444Z","times_seen":1020110,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":18,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/nY0xPItgwtlvjEjk2TqdwOQz/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=nY0xPItgwtlvjEjk2TqdwOQz","date":"2026-10-10T21:41:30.710Z","timestamp":1791668490710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /recaptcha/releases/nY0xPItgwtlvjEjk2TqdwOQz/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 354590\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 09 Oct 2026 17:27:02 GMT\r\nexpires: Sat, 09 Oct 2027 17:27:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 05 Oct 2026 00:06:40 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 101668\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":850545,"size_decoded":355477,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (602)","md5":"880723b04901ef902341d03409d07439","sha1":"92d597679deb157915cd08eb6dcd4d42bf274d23","sha256":"a2d9c6b17c85d85e1330c5b09c7fb1aea3fe457897ce6ac69e361dc6a72a57b1","sha512":"c700abc85dccb19b7617fd6e8e3dd813eed2dbb86228dc9c23744fd0ddeb2b71b2d387c474e764671745e659ff19ff07bf699039a43772bfdef6cf9b8738c197","ssdeep":"12288:3bWvqmePeW7L91BmS+ELcUAZoaI/aONG0wjXUpJvHnkb+:rZph1ZrIbMNGNwrfkb+","tlshash":"c8053bec35063eb56222b5fa10a76048933e942adc4c0b6db19798f13ef484d6177eb7","first_seen":"2026-10-07T03:06:23.101046Z","last_seen":"2026-10-11T00:45:16.626443Z","times_seen":3166,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.300Z","timestamp":1791668487300,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 27 Jun 2024 12:55:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"667d613a-5db\"\r\nexpires: Mon, 09 Nov 2026 21:41:27 GMT\r\ncache-control: max-age=2592000, public, must-revalidate, proxy-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1499,"size_decoded":1063,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1464)","md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-10-11T00:40:48.626964Z","times_seen":94835,"resource_available":true,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":481,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2022/09/Hanoi-Vespa-Tours-23-533x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.546Z","timestamp":1791668488546,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2022/09/Hanoi-Vespa-Tours-23-533x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":703,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfK2qAUAAAAAHVWVP33wXcSA1OGf0cjlBTfdudc\u0026co=aHR0cHM6Ly9iaWtldG91cnNoYW5vaS5jb206NDQz\u0026hl=en\u0026v=nY0xPItgwtlvjEjk2TqdwOQz\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=hrotnw15i7xa","date":"2026-10-10T21:41:30.574Z","timestamp":1791668490574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:52:25 GMT\r\nexpires: Tue, 05 Oct 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 452945\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-10-11T00:42:53.647444Z","times_seen":1020110,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":3,"connect":30,"send":0,"wait":16,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/plugins/easy-fancybox/vendor/jquery.easing.min.js?ver=1.4.1","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.293Z","timestamp":1791668487293,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/plugins/easy-fancybox/vendor/jquery.easing.min.js?ver=1.4.1 HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 Jul 2026 14:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a622635-8fe\"\r\nexpires: Mon, 09 Nov 2026 21:41:27 GMT\r\ncache-control: max-age=2592000, public, must-revalidate, proxy-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2302,"size_decoded":1124,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2301)","md5":"adf739cca147aff5e39fd65e6e64f420","sha1":"ce3bb19811c619220dd2329165eb8a8166094fec","sha256":"0ec98adf593ebcc01bec60b1f494dacd47522abfef9038a714101d83f45e165d","sha512":"91ae8b810de2caddf0386e2f69c4b2ccd86878804fdff623337793ef62a0ea7e3e3435f9b2d7fc0c0870dc4dc40561401039b30fd815de53f9f2e495628e9145","ssdeep":"","tlshash":"d44107d9f9c3b75a935275e0162f200bb22e6eb000ed2530c66174aa7d3831d9d3bacd","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-10-10T22:30:25.439834Z","times_seen":6922,"resource_available":true,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=6LfK2qAUAAAAAHVWVP33wXcSA1OGf0cjlBTfdudc\u0026ver=3.0","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.296Z","timestamp":1791668487296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"GET /recaptcha/api.js?render=6LfK2qAUAAAAAHVWVP33wXcSA1OGf0cjlBTfdudc\u0026ver=3.0 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sat, 10 Oct 2026 21:41:27 GMT\r\ndate: Sat, 10 Oct 2026 21:41:27 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1010,"size_decoded":1317,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1010), with no line terminators","md5":"bcce99e2b00dc38ceb0c571b1243ea7e","sha1":"d8b789cdf0f866c3359a5cc8e76d1afb5f047e34","sha256":"60c009bd7f001f4b520ada53afe6880096ab96df0fc232cfec45eb3126c87e5d","sha512":"af4fcd83c93cf44f3ba00510eef1c9cfd291135635d16c24ae726bbf23992650e136e17716a58f49845aa57a9738a25cb7c5b24d113282451ad4c838ffd4dbe7","ssdeep":"","tlshash":"511102b31a14a03a4b7209e1e2ffdbb1e852701de16888e8a515de982f69cc7ce05585","first_seen":"2026-10-10T21:42:43.939284Z","last_seen":"2026-10-10T21:42:43.939284Z","times_seen":1,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":3,"connect":28,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2?v=3.20.7","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.985Z","timestamp":1791668487985,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2?v=3.20.7 HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7560\r\nlast-modified: Thu, 25 Jun 2026 04:18:07 GMT\r\netag: \"6a3cabff-1d88\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7560,"size_decoded":7831,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7560, version 1.0","md5":"7db70d75ed20d444c694d6aad85ce18b","sha1":"01d64f5ed7777e34c148c83595b877d0f6272d4b","sha256":"3c5b7d55b56f4bdee9e362078497694a9605b716868eb907b7e9c39bc5b5b9cc","sha512":"ad05e1701fe81d050b8db6574c28d9ce9c12242fb4cf4d6d4c5746829574ac2b38029cccb255d21c4b0c2d60d73854894c5043245c3ccd733017b60d1ff361a4","ssdeep":"192:mdZdmp7xgnbaRx9fo1JQrUo2Vfah48R+Q/BE99D5q7PKJ4:+ZYpsbaRxphAYhbRD/BE99Ep","tlshash":"faf1afddfd527b7bd2d1d126394007c838cad44919901cc2aaaf2f2933a3c569db27ad","first_seen":"2024-06-20T14:33:16Z","last_seen":"2026-10-11T00:40:48.637979Z","times_seen":28090,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2025/07/Hanoi-Motorbike-Tours-Led-By-Women-1-533x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.518Z","timestamp":1791668488518,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/Hanoi-Motorbike-Tours-Led-By-Women-1-533x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 69745\r\nlast-modified: Fri, 25 Jul 2025 02:02:44 GMT\r\netag: \"6882e5c4-11071\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69745,"size_decoded":70090,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 533x400, components 3","md5":"c6c7b3908d10663c301abb614a31f339","sha1":"b91fa2721080434d1de790a2fe49b9ccc4a8a0b5","sha256":"0a34b46b4b5167bcdd8c9a122ae199b012400d9468d94b210c2d2b0d1617f1f0","sha512":"42af491c04368edc0403dcb5c2c1840223da1da2e9bb6beed45e19c79f7a7d1a9d8ca491ca314d8740a284253cfdf2c5de6504db69bf9dc8af4bef95ffba6843","ssdeep":"1536:Xi2lxUmNBONmJRRVK8o2Tw8mZZunc/yllLzJ3:y+NyNOKV4l/cKlFz9","tlshash":"4763129f1f378542218edb38353de2fab1871c6c473062122e78ceba51da8ed1559c27","first_seen":"2026-10-10T21:42:43.94555Z","last_seen":"2026-10-10T21:42:43.94555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/nY0xPItgwtlvjEjk2TqdwOQz/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfK2qAUAAAAAHVWVP33wXcSA1OGf0cjlBTfdudc\u0026co=aHR0cHM6Ly9iaWtldG91cnNoYW5vaS5jb206NDQz\u0026hl=en\u0026v=nY0xPItgwtlvjEjk2TqdwOQz\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=hrotnw15i7xa","date":"2026-10-10T21:41:30.291Z","timestamp":1791668490291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /recaptcha/releases/nY0xPItgwtlvjEjk2TqdwOQz/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35518\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 09 Oct 2026 17:21:42 GMT\r\nexpires: Sat, 09 Oct 2027 17:21:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 05 Oct 2026 00:06:40 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 101988\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":75464,"size_decoded":36365,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8d238bbb2bc7a7869927ef2503d16191","sha1":"912fd0a764df016c6b465a1f764a58856dc8e41a","sha256":"32bd2171bd3e9dce2bcd973d4b6e0492a64f2ad5b58fc9941f12a1973fb3c0ba","sha512":"0f576e605660ab3774a8da75b359d28228d5e117be771f4bd0e66b8bc2b5868a7381af5de6721fa1fe3f14a982f286b35e9654bc436d12cf992f4dde7ba8eec9","ssdeep":"768:8FUwZKuv7Ht5prr2yNU4FJFC7vCTaYyR0v+UJYLbzRWpebyBHM54Pmx1ugKSGdXS:yv1jNDJT4R0v+U+LXkHZzhXwWx7W1bx7","tlshash":"74736e7338403b26f8279b5161d6aafdf21cc523e5514bfaa9557a31c3cb1a7822370b","first_seen":"2026-09-22T05:52:13.875819Z","last_seen":"2026-10-11T00:43:51.759041Z","times_seen":15765,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-10T21:41:23.755Z","timestamp":1791668483755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.2.33\r\nx-pingback: https://biketourshanoi.com/xmlrpc.php\r\nlink: \u003chttps://biketourshanoi.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://biketourshanoi.com/wp-json/wp/v2/pages/215\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://biketourshanoi.com/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress:7.0.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Yoast SEO:28.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Contact Form 7:6.1.6","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.5.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]}],"data":{"size":367977,"size_decoded":41826,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11285)","md5":"7f0e35ff73258b5abf9a2bc006f46f1c","sha1":"b330702c2138ee1dc287d082351b081c491db66d","sha256":"93764fb05552bb923ccb7afedf7639493e0b3a766eab617ebbfdc116c82715e9","sha512":"f5b2b9b3b1cb5359f221be2d77c27f9798d5ea7661aacf31983bc1e98b8cd47805e5914f6c50379d6a741336baf1847222dcec7eec11d0c69d7b732a83d84adb","ssdeep":"3072:q15wlslIlpjIe2AO6EJziY76t3J73DAyGok8dJR8SrGks+9oV14:/lslI/jIes6EJziY76t3J73Dr","tlshash":"5c7452b30b8d183b2a1612c3515cbe4de58b9973cbb6a4c1f3bf62c8a7d1d932611479","first_seen":"2026-10-10T21:42:43.95441Z","last_seen":"2026-10-10T21:42:43.95441Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3221,"timings":{"blocked":-1,"dns":8,"connect":257,"send":0,"wait":2439,"receive":0,"ssl":516},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.257Z","timestamp":1791668487257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 28 Aug 2023 17:14:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64ecd5ef-15601\"\r\nexpires: Mon, 09 Nov 2026 21:41:27 GMT\r\ncache-control: max-age=2592000, public, must-revalidate, proxy-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":30992,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-11T00:42:43.385373Z","times_seen":1099006,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2022/09/2-2-601x400.png","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.544Z","timestamp":1791668488544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2022/09/2-2-601x400.png HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":705,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":531,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2022/06/Halong-Bay-5-star-boat-7-654x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.557Z","timestamp":1791668488557,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2022/06/Halong-Bay-5-star-boat-7-654x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":692,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.284Z","timestamp":1791668487284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 Jul 2026 14:32:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a622605-1664\"\r\nexpires: Mon, 09 Nov 2026 21:41:27 GMT\r\ncache-control: max-age=2592000, public, must-revalidate, proxy-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5732,"size_decoded":2824,"mime_type":"application/javascript","magic":"data","md5":"12ebec1b36678eb1da4412af6c65751a","sha1":"4cb5d87353d9a06fde067063787a4beed692ba77","sha256":"558ae0ec83cc88de0929fde86b87c231246aafa9c961ebffb3257b05f62ca5cf","sha512":"a1bbd93277a59086bf27da7dcc60434b717ac521bce0618aef7c914789497a22cf56441a7f300f1bb7a6de56ca624226883d048f6eadbcc049dc717338189bb6","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"fdc1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","first_seen":"2026-07-02T22:01:42.315643Z","last_seen":"2026-10-11T00:29:26.729061Z","times_seen":31130,"resource_available":true,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/09/1-3-1400x788.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.479Z","timestamp":1791668488479,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/1-3-1400x788.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 292612\r\nlast-modified: Mon, 25 Sep 2023 02:40:06 GMT\r\netag: \"6510f306-47704\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":292612,"size_decoded":292958,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1400x788, components 3","md5":"03b56981e46fecd40b9dac2cfca137e2","sha1":"68bc23e7c7d7201302c2d59b6ab7c41a765a3286","sha256":"a5c8b5682b8c91a0b05df4da7f2034edc0105a6a82d4aa9c410b53c0a6fab416","sha512":"811840b29814016a1f5fefafdd05201b3e7909006122a0577bcef24b9a2f7b0b53e4c6104ac0704343e26aac319690d2fd70c3eb457a4a5a3838fffc88cea6d7","ssdeep":"6144:bYqGZNlF+ceavLMkiAZFvqdU8s8qoYKxgcob11er9ptYm47F08hZq8:hCgCLbdZUdUU8swb11erO/7bhE8","tlshash":"bd5422ca403ae794ee0b29542ee725207fe18a6f0f85f28bb323d9149135595c46b93f","first_seen":"2026-10-10T21:42:43.961308Z","last_seen":"2026-10-10T21:42:43.961308Z","times_seen":1,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2025/07/Hanoi-Motorbike-Tours-Led-By-Women-12-533x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.507Z","timestamp":1791668488507,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/Hanoi-Motorbike-Tours-Led-By-Women-12-533x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 54609\r\nlast-modified: Fri, 25 Jul 2025 02:03:45 GMT\r\netag: \"6882e601-d551\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54609,"size_decoded":54953,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 533x400, components 3","md5":"ede15e06bbd23e24e0966664b57bc656","sha1":"3bd24af7da9dafe4f1ed655bb70e77cbb6cf2fd3","sha256":"cc08abc9bba94a5730f1908534b4c1474aae19fd997120c7bae33b528e1cc45c","sha512":"1ff1104111771cb45c88b0daf8962a5f122c4ef4d5e5e936aeef7933330e22585d45ae819824e6c14c93baab5777fccfa6b45843e569853bce320f24c5ace545","ssdeep":"768:XFLZYZ71QrQRJ5e1fDjmYj7sYwjwxaA+75aEesHaQJJz0hsmCgOESbsA7X:XF471GO++i7BwcxaA+NZ0yPE1AT","tlshash":"cf33014b95b3a82fbcbc6cb708621e87bd2edea1a748139108b90c4468c31cd7e515de","first_seen":"2026-10-10T21:42:43.964605Z","last_seen":"2026-10-10T21:42:43.964605Z","times_seen":1,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":566,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/12/jeep-19-711x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.542Z","timestamp":1791668488542,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/jeep-19-711x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 92874\r\nlast-modified: Mon, 24 Nov 2025 13:52:10 GMT\r\netag: \"6924630a-16aca\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92874,"size_decoded":93219,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 711x400, components 3","md5":"c5e562999b3c86cfdd2db29c52d8dbfc","sha1":"ef3966ea6dc13a756d1fdb51863dbf37704b10f5","sha256":"e631d1c850cfa8dd2392a8f684bfa86455f2e34b4daeaa8de4b60959fe004f11","sha512":"4ae6004c37ad30b414d3b4361b765201c62b60e4e503c9321311584ceb7eee692bd99bfe44e5f6efc14c06b35f92338c740750c9dcf11174523f7b65f6007dde","ssdeep":"1536:t7UgHVrvC9dbmqM7kFYNozSU2P/yErZ3Jx4M+uz6tlvlxr0PDRjB6q:XC9DM7tGOTPNdZ/+uWtlvLIlB6q","tlshash":"1b9302cd3df1b04cd1a3c18e6849962b5a3c5b443c8298d4dfb4ed2331fa5e255afa25","first_seen":"2026-10-10T21:42:43.966376Z","last_seen":"2026-10-10T21:42:43.966376Z","times_seen":1,"resource_available":false,"data":null}},"time_used":785,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2022/06/z3487426648692_94cbb82184f879199267d06a7cf2a389-533x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.556Z","timestamp":1791668488556,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2022/06/z3487426648692_94cbb82184f879199267d06a7cf2a389-533x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":693,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tripadvisor.com/wejs?wtype=selfserveprop\u0026uniq=716\u0026locationId=14011398\u0026lang=en_US\u0026rating=true\u0026nreviews=5\u0026writereviewlink=true\u0026popIdx=true\u0026iswide=false\u0026border=true\u0026display_version=2","fqdn":"www.tripadvisor.com","domain":"tripadvisor.com","tld":"com"},"ip":{"addr":"3.167.2.55","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.339Z","timestamp":1791668487339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripadvisor.com","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 06 Jan 2026 20:46:05 GMT","end":"Sun, 07 Feb 2027 20:46:04 GMT"},"fingerprint":{"sha1":"7A:B0:93:52:EE:1E:5D:61:83:AC:F5:91:85:88:8D:0A:9B:13:34:D3","sha256":"DA:BB:FE:30:DE:BE:2B:2A:A4:F8:4E:9B:18:B3:06:C4:2D:38:92:41:D4:9F:A2:6F:62:2F:4B:CA:F3:3F:E7:ED"}}},"request":{"raw":"GET /wejs?wtype=selfserveprop\u0026uniq=716\u0026locationId=14011398\u0026lang=en_US\u0026rating=true\u0026nreviews=5\u0026writereviewlink=true\u0026popIdx=true\u0026iswide=false\u0026border=true\u0026display_version=2 HTTP/1.1\r\nHost: www.tripadvisor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biketourshanoi.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/x-javascript;charset=UTF-8\r\ndate: Sat, 10 Oct 2026 21:41:27 GMT\r\nserver: envoy\r\nexpires: 0\r\ncache-control: no-cache,no-store,must-revalidate\r\npragma: no-cache\r\nset-cookie: TADCID=X2KNhJzkpN5ImlAPABQChrLCR-aOT_K5vlfY_RXuc5De4gcFDpbh5-hN4gPv1t-j7sIkMabtafCdciTwteGkw70-GM65OuLmsr8; Domain=www.tripadvisor.com; Expires=Tue, 07-Oct-2036 21:41:27 GMT; Path=/; Secure; HttpOnly\n__vt=sGFCpFefhjo5qBsAABQCT24E-H_BQo6gx1APGQJPt0C8giukC8gNNLC7fZ_W-c3JrYt5WrTAvvmb7ObxAEwx30mdwxdxyhl0jawWosR-8C2rRyBfLEjYYDRwRGUAF57MIThHrkLSdExSzmkjSeIE3am9bQ; Domain=www.tripadvisor.com; Expires=Sat, 10-Oct-2026 22:41:27 GMT; Path=/; Secure; HttpOnly\r\ntiming-allow-origin: https://www.tripadvisor.com\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: d907190a-b9c2-44b5-8d79-544f62aaf5ad\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bb7e95405d9101d4320e2582fcead450.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: NHRza9gx4tqHrJZzHke9yZr25bpM3wxQ8fxLHKWMVndM54zAm1WpGg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"TADCID","value":"X2KNhJzkpN5ImlAPABQChrLCR-aOT_K5vlfY_RXuc5De4gcFDpbh5-hN4gPv1t-j7sIkMabtafCdciTwteGkw70-GM65OuLmsr8","quoted":false,"path":"/","domain":"www.tripadvisor.com","expires":"2036-10-07T21:41:27Z","raw_expires":"Tue, 07-Oct-2036 21:41:27 GMT","secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"TADCID=X2KNhJzkpN5ImlAPABQChrLCR-aOT_K5vlfY_RXuc5De4gcFDpbh5-hN4gPv1t-j7sIkMabtafCdciTwteGkw70-GM65OuLmsr8; Domain=www.tripadvisor.com; Expires=Tue, 07-Oct-2036 21:41:27 GMT; Path=/; Secure; HttpOnly"},{"name":"__vt","value":"sGFCpFefhjo5qBsAABQCT24E-H_BQo6gx1APGQJPt0C8giukC8gNNLC7fZ_W-c3JrYt5WrTAvvmb7ObxAEwx30mdwxdxyhl0jawWosR-8C2rRyBfLEjYYDRwRGUAF57MIThHrkLSdExSzmkjSeIE3am9bQ","quoted":false,"path":"/","domain":"www.tripadvisor.com","expires":"2026-10-10T22:41:27Z","raw_expires":"Sat, 10-Oct-2026 22:41:27 GMT","secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"__vt=sGFCpFefhjo5qBsAABQCT24E-H_BQo6gx1APGQJPt0C8giukC8gNNLC7fZ_W-c3JrYt5WrTAvvmb7ObxAEwx30mdwxdxyhl0jawWosR-8C2rRyBfLEjYYDRwRGUAF57MIThHrkLSdExSzmkjSeIE3am9bQ; Domain=www.tripadvisor.com; Expires=Sat, 10-Oct-2026 22:41:27 GMT; Path=/; Secure; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":338,"size_decoded":1297,"mime_type":"application/x-javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (337)","md5":"ecab21694a5161f5793c73be64300458","sha1":"87a3b8186d9e44960cb0c49fe062a2b0d2325c63","sha256":"6026d31a044a3aafd78595f89a4bf0094cd150c200fc712301af51fc9ffd3e7b","sha512":"a006e89173f72b26f947eb806bae9121f343ccf4ee84f28c11b40cc94631ca82f7a85f8da76129bb2543b86097ac45bcb8b73ad85b55846b6ceed889ce44aacb","ssdeep":"","tlshash":"f0e07dca2848be3c07a7d17e7066eb0864a3306ebce40b05d9a98cc55675fed89137dc","first_seen":"2023-11-28T07:58:28Z","last_seen":"2026-10-10T21:42:43.968079Z","times_seen":2,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":54,"connect":1,"send":0,"wait":132,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tripadvisor.com/WidgetEmbed-selfserveprop?border=true\u0026popIdx=true\u0026iswide=false\u0026locationId=14011398\u0026display_version=2\u0026uniq=716\u0026rating=true\u0026lang=en_US\u0026nreviews=5\u0026writereviewlink=true","fqdn":"www.tripadvisor.com","domain":"tripadvisor.com","tld":"com"},"ip":{"addr":"3.167.2.55","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.055Z","timestamp":1791668488055,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tripadvisor.com","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 06 Jan 2026 20:46:05 GMT","end":"Sun, 07 Feb 2027 20:46:04 GMT"},"fingerprint":{"sha1":"7A:B0:93:52:EE:1E:5D:61:83:AC:F5:91:85:88:8D:0A:9B:13:34:D3","sha256":"DA:BB:FE:30:DE:BE:2B:2A:A4:F8:4E:9B:18:B3:06:C4:2D:38:92:41:D4:9F:A2:6F:62:2F:4B:CA:F3:3F:E7:ED"}}},"request":{"raw":"GET /WidgetEmbed-selfserveprop?border=true\u0026popIdx=true\u0026iswide=false\u0026locationId=14011398\u0026display_version=2\u0026uniq=716\u0026rating=true\u0026lang=en_US\u0026nreviews=5\u0026writereviewlink=true HTTP/1.1\r\nHost: www.tripadvisor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: TADCID=X2KNhJzkpN5ImlAPABQChrLCR-aOT_K5vlfY_RXuc5De4gcFDpbh5-hN4gPv1t-j7sIkMabtafCdciTwteGkw70-GM65OuLmsr8; __vt=sGFCpFefhjo5qBsAABQCT24E-H_BQo6gx1APGQJPt0C8giukC8gNNLC7fZ_W-c3JrYt5WrTAvvmb7ObxAEwx30mdwxdxyhl0jawWosR-8C2rRyBfLEjYYDRwRGUAF57MIThHrkLSdExSzmkjSeIE3am9bQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"TADCID","value":"X2KNhJzkpN5ImlAPABQChrLCR-aOT_K5vlfY_RXuc5De4gcFDpbh5-hN4gPv1t-j7sIkMabtafCdciTwteGkw70-GM65OuLmsr8"},{"name":"__vt","value":"sGFCpFefhjo5qBsAABQCT24E-H_BQo6gx1APGQJPt0C8giukC8gNNLC7fZ_W-c3JrYt5WrTAvvmb7ObxAEwx30mdwxdxyhl0jawWosR-8C2rRyBfLEjYYDRwRGUAF57MIThHrkLSdExSzmkjSeIE3am9bQ"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript;charset=UTF-8\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\nserver: envoy\r\nexpires: 0\r\npragma: no-cache\r\ncache-control: no-cache,no-store,must-revalidate\r\nset-cookie: TAUnique=%1%enc%3A0zdJf3MCWd6dYH%2FRSFHjL%2B%2F0A48R8W5XzY7Tsj20PdTUWbUqtPTYXxOmbcPgHGNTNox8JbUSTxk%3D; Domain=.tripadvisor.com; Expires=Mon, 09-Oct-2028 21:41:28 GMT; Path=/; HttpOnly\n__vt=FtSHxitjMR9ZKE-yABQCT24E-H_BQo6gx1APGQJPt0C8goxN4-Ku4S94iKcgBywXnt-OXExKUhyu9ZkhWSYgoSshG6W9IHkcziCDAVt7eX_4rZTzFzuFuKbqQ0bg2REyPDAXrazdRW-NGKbWecpulavJPQ; Domain=www.tripadvisor.com; Expires=Sat, 10-Oct-2026 22:41:28 GMT; Path=/; Secure; HttpOnly\nTASSK=enc%3AADSssAyt3ZzeZX9qgSzrn867fi9KgklmPpBBMfYvxQ9VLGtGL4RcOWovJVn7hGomymGiv1Gisws4syGMNUzuPsI9ye31d%2BN3R0Iqm%2Br%2Fm8hHm4uFbqykYgmn93jf4hsZAg%3D%3D; Domain=www.tripadvisor.com; Expires=Thu, 08-Apr-2027 21:41:28 GMT; Path=/; HttpOnly\nTASession=V2ID.651AB1BA8BB64548A1EB0EC799D172E7*SQ.1*LS.WidgetEmbed-selfserveprop*HS.recommended*ES.popularity*DS.5*SAS.popularity*FPS.oldFirst*FA.1*DF.0*TRA.true; Domain=.tripadvisor.com; Path=/\nSRT=TART_SYNC; Domain=www.tripadvisor.com; Expires=Sat, 10-Oct-2026 22:11:28 GMT; Path=/\nServerPool=C; Domain=.tripadvisor.com; Path=/\nPMC=V2*MS.83*MD.20261010*LD.20261010; Domain=www.tripadvisor.com; Expires=Mon, 09-Oct-2028 21:41:28 GMT; Path=/; Secure; HttpOnly\nTART=%1%enc%3A9EEiRcQEMZJK6G75Rv3Ka65e9nOGLvnslaXuIOpupcOGZJ3pPTxPJh8Cp3CFe3fzR2bsi32L4Tc%3D; Domain=www.tripadvisor.com; Expires=Thu, 15-Oct-2026 21:41:28 GMT; Path=/; HttpOnly\nTATravelInfo=V2*A.2*MG.-1*HP.2*FL.3*RS.1; Domain=.tripadvisor.com; Expires=Sat, 24-Oct-2026 21:41:28 GMT; Path=/\nTAUD=RDD-1791668488120-2026_10_10; Domain=.tripadvisor.com; Expires=Sat, 24-Oct-2026 21:41:28 GMT; Path=/\nTASID=651AB1BA8BB64548A1EB0EC799D172E7; Domain=www.tripadvisor.com; Expires=Sat, 10-Oct-2026 22:11:28 GMT; Path=/; Secure\r\ntiming-allow-origin: https://www.tripadvisor.com\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: ed657abf-dcd3-4bbf-bc28-653bc4147d19\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bb7e95405d9101d4320e2582fcead450.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: EeEbIsV6-Iz0IxvMT1UtRgYbdGH97C-pZqTJhvk4IKmX9QCVJ9s52w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"TAUnique","value":"%1%enc%3A0zdJf3MCWd6dYH%2FRSFHjL%2B%2F0A48R8W5XzY7Tsj20PdTUWbUqtPTYXxOmbcPgHGNTNox8JbUSTxk%3D","quoted":false,"path":"/","domain":".tripadvisor.com","expires":"2028-10-09T21:41:28Z","raw_expires":"Mon, 09-Oct-2028 21:41:28 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"TAUnique=%1%enc%3A0zdJf3MCWd6dYH%2FRSFHjL%2B%2F0A48R8W5XzY7Tsj20PdTUWbUqtPTYXxOmbcPgHGNTNox8JbUSTxk%3D; Domain=.tripadvisor.com; Expires=Mon, 09-Oct-2028 21:41:28 GMT; Path=/; HttpOnly"},{"name":"__vt","value":"FtSHxitjMR9ZKE-yABQCT24E-H_BQo6gx1APGQJPt0C8goxN4-Ku4S94iKcgBywXnt-OXExKUhyu9ZkhWSYgoSshG6W9IHkcziCDAVt7eX_4rZTzFzuFuKbqQ0bg2REyPDAXrazdRW-NGKbWecpulavJPQ","quoted":false,"path":"/","domain":"www.tripadvisor.com","expires":"2026-10-10T22:41:28Z","raw_expires":"Sat, 10-Oct-2026 22:41:28 GMT","secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"__vt=FtSHxitjMR9ZKE-yABQCT24E-H_BQo6gx1APGQJPt0C8goxN4-Ku4S94iKcgBywXnt-OXExKUhyu9ZkhWSYgoSshG6W9IHkcziCDAVt7eX_4rZTzFzuFuKbqQ0bg2REyPDAXrazdRW-NGKbWecpulavJPQ; Domain=www.tripadvisor.com; Expires=Sat, 10-Oct-2026 22:41:28 GMT; Path=/; Secure; HttpOnly"},{"name":"TASSK","value":"enc%3AADSssAyt3ZzeZX9qgSzrn867fi9KgklmPpBBMfYvxQ9VLGtGL4RcOWovJVn7hGomymGiv1Gisws4syGMNUzuPsI9ye31d%2BN3R0Iqm%2Br%2Fm8hHm4uFbqykYgmn93jf4hsZAg%3D%3D","quoted":false,"path":"/","domain":"www.tripadvisor.com","expires":"2027-04-08T21:41:28Z","raw_expires":"Thu, 08-Apr-2027 21:41:28 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"TASSK=enc%3AADSssAyt3ZzeZX9qgSzrn867fi9KgklmPpBBMfYvxQ9VLGtGL4RcOWovJVn7hGomymGiv1Gisws4syGMNUzuPsI9ye31d%2BN3R0Iqm%2Br%2Fm8hHm4uFbqykYgmn93jf4hsZAg%3D%3D; Domain=www.tripadvisor.com; Expires=Thu, 08-Apr-2027 21:41:28 GMT; Path=/; HttpOnly"},{"name":"TASession","value":"V2ID.651AB1BA8BB64548A1EB0EC799D172E7*SQ.1*LS.WidgetEmbed-selfserveprop*HS.recommended*ES.popularity*DS.5*SAS.popularity*FPS.oldFirst*FA.1*DF.0*TRA.true","quoted":false,"path":"/","domain":".tripadvisor.com","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"TASession=V2ID.651AB1BA8BB64548A1EB0EC799D172E7*SQ.1*LS.WidgetEmbed-selfserveprop*HS.recommended*ES.popularity*DS.5*SAS.popularity*FPS.oldFirst*FA.1*DF.0*TRA.true; Domain=.tripadvisor.com; Path=/"},{"name":"SRT","value":"TART_SYNC","quoted":false,"path":"/","domain":"www.tripadvisor.com","expires":"2026-10-10T22:11:28Z","raw_expires":"Sat, 10-Oct-2026 22:11:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"SRT=TART_SYNC; Domain=www.tripadvisor.com; Expires=Sat, 10-Oct-2026 22:11:28 GMT; Path=/"},{"name":"ServerPool","value":"C","quoted":false,"path":"/","domain":".tripadvisor.com","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"ServerPool=C; Domain=.tripadvisor.com; Path=/"},{"name":"PMC","value":"V2*MS.83*MD.20261010*LD.20261010","quoted":false,"path":"/","domain":"www.tripadvisor.com","expires":"2028-10-09T21:41:28Z","raw_expires":"Mon, 09-Oct-2028 21:41:28 GMT","secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"PMC=V2*MS.83*MD.20261010*LD.20261010; Domain=www.tripadvisor.com; Expires=Mon, 09-Oct-2028 21:41:28 GMT; Path=/; Secure; HttpOnly"},{"name":"TART","value":"%1%enc%3A9EEiRcQEMZJK6G75Rv3Ka65e9nOGLvnslaXuIOpupcOGZJ3pPTxPJh8Cp3CFe3fzR2bsi32L4Tc%3D","quoted":false,"path":"/","domain":"www.tripadvisor.com","expires":"2026-10-15T21:41:28Z","raw_expires":"Thu, 15-Oct-2026 21:41:28 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"TART=%1%enc%3A9EEiRcQEMZJK6G75Rv3Ka65e9nOGLvnslaXuIOpupcOGZJ3pPTxPJh8Cp3CFe3fzR2bsi32L4Tc%3D; Domain=www.tripadvisor.com; Expires=Thu, 15-Oct-2026 21:41:28 GMT; Path=/; HttpOnly"},{"name":"TATravelInfo","value":"V2*A.2*MG.-1*HP.2*FL.3*RS.1","quoted":false,"path":"/","domain":".tripadvisor.com","expires":"2026-10-24T21:41:28Z","raw_expires":"Sat, 24-Oct-2026 21:41:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"TATravelInfo=V2*A.2*MG.-1*HP.2*FL.3*RS.1; Domain=.tripadvisor.com; Expires=Sat, 24-Oct-2026 21:41:28 GMT; Path=/"},{"name":"TAUD","value":"RDD-1791668488120-2026_10_10","quoted":false,"path":"/","domain":".tripadvisor.com","expires":"2026-10-24T21:41:28Z","raw_expires":"Sat, 24-Oct-2026 21:41:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"TAUD=RDD-1791668488120-2026_10_10; Domain=.tripadvisor.com; Expires=Sat, 24-Oct-2026 21:41:28 GMT; Path=/"},{"name":"TASID","value":"651AB1BA8BB64548A1EB0EC799D172E7","quoted":false,"path":"/","domain":"www.tripadvisor.com","expires":"2026-10-10T22:11:28Z","raw_expires":"Sat, 10-Oct-2026 22:11:28 GMT","secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"TASID=651AB1BA8BB64548A1EB0EC799D172E7; Domain=www.tripadvisor.com; Expires=Sat, 10-Oct-2026 22:11:28 GMT; Path=/; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":16017,"size_decoded":5809,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (342)","md5":"dd6d5a92671cbee3ab9fe8da81e98aec","sha1":"fd6bfbacf5962c856fc6cf272bb4911c23270389","sha256":"e1469f39fab2a54dbc98f64b0de2556f7678f00e1acc8f80b9f1bf4c664b7f04","sha512":"5a9e07bca99da86902034db57d9e3633f187e86edd8ae491d875b9b4fd3d2f83bcd045e3c6f7a58680c84751a029413d92204391417b69d1dfa5e082b02a0e08","ssdeep":"384:exRWkWr+Gftuj+sFdM9+EowSLbttTBcmH9Wbvaw0k9kEabtG2BcmH9Wbvaw0k9kB:zr+GftscsbtMmHXk9kEabtCmHXk9kel2","tlshash":"427261c9b8c101761b631249966b6201beedc03e8a0acf0dbd3c5140af41aa7e5f3fd6","first_seen":"2026-10-10T21:42:43.96941Z","last_seen":"2026-10-10T21:42:43.96941Z","times_seen":1,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/12/Hanoi-Jeep-Tours-21-711x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.504Z","timestamp":1791668488504,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/Hanoi-Jeep-Tours-21-711x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 63816\r\nlast-modified: Sat, 12 Jul 2025 14:57:26 GMT\r\netag: \"687277d6-f948\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63816,"size_decoded":64160,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 711x400, components 3","md5":"38ca0eab1fa818cec2e33dafd6c2ffa0","sha1":"f8d338bbd8365168f9c68f5ccc63236c3f525c7c","sha256":"d57598bba35352c98220088a011d266e1bbbf32c9a66217f0c6fc56b516c6f2f","sha512":"5fada2c1bf42c86c2fc2ea5ed8ffbbf1bbdc4ad4962a21c0a02d7508169bf3957eb0d1279586b9b36398223aeac0fcbc7370c078f803c3e02c806fa0acf8496a","ssdeep":"1536:tEMiEs4surN6/HVljwfRuDzIFYVrzsTFf6Hrt3fdvyu:qMds4lsHVlIIzI4QhIXvyu","tlshash":"21530180d204018f6a29fd30fd0117bd45ef968a3529b35f9c6a8dba77c57cab6c8394","first_seen":"2026-10-10T21:42:43.970557Z","last_seen":"2026-10-10T21:42:43.970557Z","times_seen":1,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":569,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.6","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.247Z","timestamp":1791668487247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.6 HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 23 Jul 2026 14:33:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a62262a-ba3\"\r\nexpires: Mon, 09 Nov 2026 21:41:27 GMT\r\ncache-control: max-age=2592000, public, must-revalidate, proxy-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2979,"size_decoded":1381,"mime_type":"text/css","magic":"ASCII text","md5":"b2b463a5bdb73833be2a6afbc1843ddd","sha1":"ade55e90dd7694b7974edd336b555e765967e702","sha256":"a3b9f5df6bf638a4cb583480bed6e18a84ad7141cc3d75b81094f91dd7b82f32","sha512":"431fcb88c720bc2ee3cd950772bbf03194b28f5a00c602287ea4877829ed377f0742dcff523e88e07dd4a7968ea8618fae59b883617d9112d61feee5167ae191","ssdeep":"","tlshash":"aa510264660028504bff92db6eaddb047b6e7481cd1faf97b0c21a7c57782851223e5e","first_seen":"2026-05-15T04:06:26.038056Z","last_seen":"2026-10-11T00:45:03.084443Z","times_seen":31914,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2019/10/e7c2367279789f26c669.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.489Z","timestamp":1791668488489,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2019/10/e7c2367279789f26c669.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 130473\r\nlast-modified: Thu, 17 Oct 2019 11:19:30 GMT\r\netag: \"5da84e42-1fda9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130473,"size_decoded":130819,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1000x666, components 3","md5":"70626f2838e170c755a8b8bf2b8bc46a","sha1":"8133bd57bddc5ed2cc806d0acb0d870b8e9e6d42","sha256":"ce49fdbe8aacec02861672cf95df60a88838ace493d652150e03b4626e5f1b34","sha512":"71822cd1f7e517714ff16e795c0a47817998e76f03f56a1c1081b9d09c4078ca76cd5ab7910017ba982e171b63efd5d4a08b1b3b5d0f40ec6bfd354259d685e5","ssdeep":"3072:gTkG5gD4G5oAXPDw8PH41D98TrqiyFbRcJ+v935:gQG5ROPk8Pih8yVbmJ+V35","tlshash":"70d31261b54f18d5db13fe9b00a15bd9b01da6a3e03b8019d063eecdc163d7a9b582ec","first_seen":"2026-10-10T21:42:43.973893Z","last_seen":"2026-10-10T21:42:43.973893Z","times_seen":1,"resource_available":false,"data":null}},"time_used":761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/05/city-711x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.537Z","timestamp":1791668488537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/05/city-711x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.6","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.288Z","timestamp":1791668487288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.6 HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 Jul 2026 14:33:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a62262a-348c\"\r\nexpires: Mon, 09 Nov 2026 21:41:27 GMT\r\ncache-control: max-age=2592000, public, must-revalidate, proxy-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13452,"size_decoded":4635,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-10-11T00:42:10.411602Z","times_seen":252910,"resource_available":true,"data":null}},"time_used":495,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":495,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/10/food-1400x788.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.476Z","timestamp":1791668488476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/10/food-1400x788.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 188915\r\nlast-modified: Thu, 05 Oct 2023 08:52:36 GMT\r\netag: \"651e7954-2e1f3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":188915,"size_decoded":189261,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1400x788, components 3","md5":"ac177de463b5489a81a680d6ac2828bd","sha1":"797c3872e3135045f5aaf3b41999454b83e0e8a2","sha256":"babee20acf2b1c0b4a3dcecddc2b69dfda785655d37240a87ad284485fd09010","sha512":"3acfb1bc231b97c045a78defdae52114f5cffc7cb0b14eca9ddc9f5ac7a69bd1c5c8886620d6e68250f0d8ce941dc38b19b8fc28578d170ee87f1a892a1cf625","ssdeep":"3072:+/3TUZYahsnzFWkfWUOsanzpKoxeqsLii+++E7dqbSP+Wa9/Evw3pFOAFozR7gFy:+rUZ3hsn9+Us91e1FVxAEvcaASoDxI3T","tlshash":"e804124acf470de4e99e49e6490d0acf2a63234dc07889b586a09dd53b9943b5f9eb0c","first_seen":"2026-10-10T21:42:43.975982Z","last_seen":"2026-10-10T21:42:43.975982Z","times_seen":1,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/03/Bike-Tours-Hanoi-2-1400x787.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.484Z","timestamp":1791668488484,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/Bike-Tours-Hanoi-2-1400x787.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 245748\r\nlast-modified: Wed, 22 Mar 2023 11:25:50 GMT\r\netag: \"641ae5be-3bff4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":245748,"size_decoded":246094,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1400x787, components 3","md5":"ebe49f25dd016db22cc993d6915e4f38","sha1":"24ee2b1d75daeca8c933fbaaf83b1de22bd91b06","sha256":"84c953f943747ef44c54deaa72b191ea968db879ed427ec58f18f960092b6292","sha512":"8dd9d2ca2279ccc34af495aaafcf0fd88bcfb4a3a8397fe8c543460c066586bf1eae3858b7049d36c5584398222dbeb7ae55396be0d9b20905b8b75ece1dd2a5","ssdeep":"6144:iEO/VpzhG9bmZGVUbXugC8j/S5tWjgoKN4SFeMLDmdV:iEO/Vp+bSGVG9z/STWjg3qSFen","tlshash":"c9342323486da3bdb6648b3090c4ce79b6fd3956df994b18b1a07a563c493f3dc80276","first_seen":"2026-10-10T21:42:43.97741Z","last_seen":"2026-10-10T21:42:43.97741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":572,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2022/09/Motorbike-Tours-Led-By-Women-48-601x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.533Z","timestamp":1791668488533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2022/09/Motorbike-Tours-Led-By-Women-48-601x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 76757\r\nlast-modified: Sat, 30 Sep 2023 00:27:18 GMT\r\netag: \"65176b66-12bd5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76757,"size_decoded":77102,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 601x400, components 3","md5":"78638aed9b792f16b61aae7332cba0a1","sha1":"bdd2df841bafb4ee9d713189831c5a7ab5c86c4c","sha256":"5734d7385baa445fed025bbb7518c18fbba2c9b4a79132af0d6744cfaae24307","sha512":"7d1df4dccdf592bdcaa81f14820457327eec287c3747c2c38602ce8b71612985375ee4edb6a2ebd2c128a55abe2b4c7f5626e34ba85e844b86af512e293a31c9","ssdeep":"1536:DHKovhjynjIMt0qLFqbAE4OTkyhHm3I/SocGiLtT+8ur6wBz0XuEhotA13:bbvknjIDqLIbAEtXQCSM8t3YXBoXVOAJ","tlshash":"d47302a53a16d4e85d6fb53ae85237dc5cc6e24a120acd4783b9cc245392cc4d3f25bb","first_seen":"2026-10-10T21:42:43.980235Z","last_seen":"2026-10-10T21:42:43.980235Z","times_seen":1,"resource_available":false,"data":null}},"time_used":792,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/12/co-loa-711x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.539Z","timestamp":1791668488539,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/co-loa-711x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":709,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2025/07/Hanoi-Motorbike-Tours-Led-By-Women-3-533x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.515Z","timestamp":1791668488515,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/Hanoi-Motorbike-Tours-Led-By-Women-3-533x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 47029\r\nlast-modified: Fri, 25 Jul 2025 02:02:55 GMT\r\netag: \"6882e5cf-b7b5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47029,"size_decoded":47373,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 533x400, components 3","md5":"cf53fadd7d0c336f0a568d7d1fe7b916","sha1":"c76af1088a402881bb3a4b3f5b20e2efb9c7f5c4","sha256":"f7081c51613180caee353ed1b622d804e6e99d09f261a20ca511720920fa3992","sha512":"9679295562b981441c48e809c422ac74736a04d445c4a5db25ce12dbc7a376003b9263890a1c50b987cf710c6943193e7d2a1f20ebe31af1712eb0196dc85194","ssdeep":"768:Xtrstpq+TEKYDCHkxFcjFwnl2NOe2DghI4wbr391BOZN3ng7KOTUBBp9d54:XOW+ZYCHkbcjFwl8LhI9br391BoN3g7/","tlshash":"dd2302dba97200e1b8e95f0d4a64e3ef259f6fb005a3d76829a2d0cdd2f71f69110a04","first_seen":"2026-10-10T21:42:43.982212Z","last_seen":"2026-10-10T21:42:43.982212Z","times_seen":1,"resource_available":false,"data":null}},"time_used":728,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2018/04/h1-601x400.png","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.713Z","timestamp":1791668488713,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2018/04/h1-601x400.png HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":537,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":363,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/plugins/easy-fancybox/vendor/jquery.mousewheel.min.js?ver=3.1.13","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.294Z","timestamp":1791668487294,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/plugins/easy-fancybox/vendor/jquery.mousewheel.min.js?ver=3.1.13 HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 Jul 2026 14:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a622635-a31\"\r\nexpires: Mon, 09 Nov 2026 21:41:27 GMT\r\ncache-control: max-age=2592000, public, must-revalidate, proxy-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2609,"size_decoded":1503,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2608)","md5":"963b3f6599b02889ea79808c5c8189d0","sha1":"c2b5156772ddbaf09d18f00c31cddfb86bc1f1f1","sha256":"dd9bfe5f04d4e393463f42b4f503763c36693306dffef16d481e0c071b61ae64","sha512":"106cdffa6747a56504c6a5963163e1a3418479e619a7d0fb36b290125687f15233683b29fb398dc0b66c12d78a423bccde4102cbbb4f52bd9e08de514addeb56","ssdeep":"","tlshash":"bc517651771a32f381b61f36f16f6602317ac059280375a2b9b85d80ab69ceb6263d1e","first_seen":"2023-03-07T01:02:57Z","last_seen":"2026-10-10T21:42:43.984315Z","times_seen":4670,"resource_available":true,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":489,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.tacdn.com/css2/build/concat/t4b_widget_self_serve_property-v24057824710a.css","fqdn":"static.tacdn.com","domain":"tacdn.com","tld":"com"},"ip":{"addr":"3.164.230.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.217Z","timestamp":1791668488217,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tacdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 17 Aug 2026 00:00:00 GMT","end":"Tue, 02 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4D:58:CA:2A:12:D2:72:8A:70:B2:CF:7C:33:83:66:DD:89:A3:8B:2C","sha256":"CC:B9:D3:7C:86:18:9E:89:C2:A7:83:75:15:ED:7B:1E:B8:EF:6A:B8:F6:9E:B4:16:B5:51:1D:9C:5F:69:92:09"}}},"request":{"raw":"GET /css2/build/concat/t4b_widget_self_serve_property-v24057824710a.css HTTP/1.1\r\nHost: static.tacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ndate: Tue, 22 Sep 2026 07:57:11 GMT\r\nserver: envoy\r\nlast-modified: Mon, 14 Sep 2026 08:16:09 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000, immutable\r\nexpires: Wed, 22 Sep 2027 07:57:11 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 3177f810-5cb1-4607-9d44-911b135ff4ed\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e3d4442c9380e0f8994d148c9677eac4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: 5vGzVGjfCETYtxj-Ty9ALqC90w6p2C0209iv4NNmFcElhxLujoLcMw==\r\nage: 1604657\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":36434,"size_decoded":6807,"mime_type":"text/css","magic":"ASCII text, with very long lines (36433)","md5":"feca4ce8c4fa42268080f36f7c82de68","sha1":"cb265a95fee9b136b12be44b8d55bc5bfbab060a","sha256":"8ff5555b2c04df227cf360fc80e861161c6026e798a92e6079ece742ae580d8f","sha512":"932087b89a5154aea6661e9e867e7fd9ae419142e886fb0ebe45a4eefd7da79401d4fe1ec5866798f8cd385790c3dec6c247f91d4670cc46e65ed154e08424cb","ssdeep":"384:Ityld4YgfXfn0DBzpXavUmDoTQID2rk/fbFY7dBqF7WYcYC:IYld43fXiBzpelof/fbFY7dBqF7WYnC","tlshash":"6df28ee4d54d4acb3f3ac443d3d4ef8a21a5b0a199600d55f81b181e88e1299d3ebf7e","first_seen":"2025-08-05T05:07:13.324777Z","last_seen":"2026-10-10T21:42:43.98527Z","times_seen":681,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":14,"connect":9,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=nY0xPItgwtlvjEjk2TqdwOQz","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfK2qAUAAAAAHVWVP33wXcSA1OGf0cjlBTfdudc\u0026co=aHR0cHM6Ly9iaWtldG91cnNoYW5vaS5jb206NDQz\u0026hl=en\u0026v=nY0xPItgwtlvjEjk2TqdwOQz\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=hrotnw15i7xa","date":"2026-10-10T21:41:30.664Z","timestamp":1791668490664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=nY0xPItgwtlvjEjk2TqdwOQz HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfK2qAUAAAAAHVWVP33wXcSA1OGf0cjlBTfdudc\u0026co=aHR0cHM6Ly9iaWtldG91cnNoYW5vaS5jb206NDQz\u0026hl=en\u0026v=nY0xPItgwtlvjEjk2TqdwOQz\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=hrotnw15i7xa\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Sat, 10 Oct 2026 21:41:30 GMT\r\ndate: Sat, 10 Oct 2026 21:41:30 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":954,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"56c7ff31a2aa91730a6b5266548a13cd","sha1":"310082d75d7f4b40d3fdc06c6f3f3a333d5ed514","sha256":"6d0ff36555e3a10a9266bb8c93d403352dbfb99147457474c862beff8f236d21","sha512":"11e8f94af5db14223342729cb418f9cf7a852f9966400ba9f312d35b00c16f779fe8fdc7ca6349edbcfd5689e4f44ad096d4ec19b63fbfc00382e53fb9542d2f","ssdeep":"","tlshash":"7bb012730e20c81c2c000592dc6ba3f9e0015024da9088f56224cfe843504a3c011900","first_seen":"2026-10-07T03:06:23.095884Z","last_seen":"2026-10-11T00:47:02.862014Z","times_seen":2289,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/02/z4120767996442_1595b9630af3495b7e84cf21ded6c8ca-533x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.570Z","timestamp":1791668488570,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/02/z4120767996442_1595b9630af3495b7e84cf21ded6c8ca-533x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":680,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/plugins/easy-fancybox/fancybox/1.5.4/jquery.fancybox.min.js?ver=7.0.2","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.291Z","timestamp":1791668487291,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/plugins/easy-fancybox/fancybox/1.5.4/jquery.fancybox.min.js?ver=7.0.2 HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 Jul 2026 14:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a622635-4605\"\r\nexpires: Mon, 09 Nov 2026 21:41:27 GMT\r\ncache-control: max-age=2592000, public, must-revalidate, proxy-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17925,"size_decoded":6123,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17925), with no line terminators","md5":"2b0f6837cbc3c180b82d3e4a00a7167d","sha1":"c8795b10f282db7f2ede452c3c33a329f6d48580","sha256":"eab9c8864de3aead9d122fb815a8f7b192632eb7aaff9edd34d7f81eedb241bb","sha512":"0cb609e7e8c61fcdf9696347c8c578d1b570221bf4eb4c09f798321dab55b1a9f42968e90c64ab70540a5e2e7958f19616357432647a3bc5eb62f91e56cfc7a8","ssdeep":"384:Ko6egAD3tckhIPYCuinkjm/q0JEuggl0kJU:KregetckhEjuiQm/fEuTl7JU","tlshash":"f282eb89b2483452407bb614d75bd30ad2335da5670706f1d12c89b81fe0fc67aebaee","first_seen":"2025-06-16T04:09:58.305155Z","last_seen":"2026-10-10T21:42:43.98795Z","times_seen":3239,"resource_available":true,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/03/z3865961905086_6687ac55c7caf020a90ad51f4f9af451-1400x786.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.481Z","timestamp":1791668488481,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/z3865961905086_6687ac55c7caf020a90ad51f4f9af451-1400x786.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 183016\r\nlast-modified: Wed, 15 Mar 2023 15:48:08 GMT\r\netag: \"6411e8b8-2cae8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":183016,"size_decoded":183362,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1400x786, components 3","md5":"4625f884bf29f3682d19a0b9bed6b090","sha1":"051d3a6e2c68683457011ae2cdfb5150cacc0ac5","sha256":"77a3fb07292f53c4fa920904b690012ed5b7087d61ae7143be2a5af54d25f95c","sha512":"7905f376853c359dd66f2141795c1ef13f98c555154f1e3a2eba3a99bb1ea245ae8525645acf6ccfcb25c8cb8f9cbcb8b5c8f7727ea11f97d0bcfe748e03a94a","ssdeep":"3072:WHBPR7ycStv+kND8vuNtMygRoiHrsb5qrqMXA6k6YlohKS+6Lk/ryatDmCI:0BPStv+K8GCygRoq85qrzAlghS6YCCI","tlshash":"9204126369599993ca3bee30ef43490d11445e1b92e609f226eecb172ee0f4d0fc25d2","first_seen":"2026-10-10T21:42:43.988767Z","last_seen":"2026-10-10T21:42:43.988767Z","times_seen":1,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":505,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2018/05/55.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.491Z","timestamp":1791668488491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2018/05/55.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 361790\r\nlast-modified: Mon, 14 May 2018 20:48:06 GMT\r\netag: \"5af9f606-5853e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":361790,"size_decoded":362136,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=11, manufacturer=Canon, model=Canon EOS 60D, orientation=upper-left, xresolution=166, yresolution=174, resolutionunit=2, datetime=2018:05:14 12:20:27], baseline, precision 8, 1000x666, components 3","md5":"ea311b3b4fb4f9197a217fb08353d220","sha1":"25abe04d9b7a5c940441595d9f88c6bde3022af4","sha256":"5761c3da154bd14305c698b0eec2dc0a3fe96a97e6dcf0ef2b820e81915f165d","sha512":"5d259690e64e87405e70a9dd1978ee19d602b9b4e6d872c76c4842d5c37c90d3d885919f423d895415ddbbce06a38c7ace4dd976f18eb2fd223abb58373fe39f","ssdeep":"6144:qvWhtAnz/xw4usfmZc08/LpxfVBCrvLp4LQXy3O0asMdRumu2QftgQ:qGtAz/G4usfGc08/LVBCDN9oO0qLu7ll","tlshash":"26742381a311db67cf103afa9ab34e864b006a6af7415b3b35dfd5863b0a0d53847db1","first_seen":"2026-10-10T21:42:43.993641Z","last_seen":"2026-10-10T21:42:43.993641Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":764,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/01/13-601x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.543Z","timestamp":1791668488543,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/01/13-601x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":707,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2024/05/cropped-bike-op1-Photoroom.png-Photoroom-32x32.png","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:29.848Z","timestamp":1791668489848,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/cropped-bike-op1-Photoroom.png-Photoroom-32x32.png HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 2137\r\nlast-modified: Mon, 20 May 2024 21:27:52 GMT\r\netag: \"664bc058-859\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2137,"size_decoded":2478,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"19588486bdf58392a4ac2e42b2476d34","sha1":"2388d110b38c7b9ab1886a8c82cefeb2eae7c478","sha256":"a9250cf32304f42db57218c8a9196ba1bf93869fb65be9b441ce23817c57547d","sha512":"76c282e6458747207ce07941476671cb761c8a871a91799809ae83e979d82cb51b20252b881667e5a83bcb478ca129faaf7cb3098d2d6fe39f01a0885f8a2498","ssdeep":"","tlshash":"8b410a1718939dfcf94fb9407d04b5e4b9887ed0038f49c4d3189c66daa0adae220942","first_seen":"2026-10-10T21:42:43.996516Z","last_seen":"2026-10-10T21:42:43.996516Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/clr?k=6LfK2qAUAAAAAHVWVP33wXcSA1OGf0cjlBTfdudc","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:31.650Z","timestamp":1791668491650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"POST /recaptcha/api2/clr?k=6LfK2qAUAAAAAHVWVP33wXcSA1OGf0cjlBTfdudc HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://biketourshanoi.com/\r\nContent-Length: 1834\r\nOrigin: https://biketourshanoi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1858,"data":"\n(6LfK2qAUAAAAAHVWVP33wXcSA1OGf0cjlBTfdudc\u0012ä\f03AFcWeA7P-gl3C3VZkBWKgUsY3pWbqYq95caEPMNM5RQy1vj-8xNEIdFWFRikESqkoA2dpooGUuQHha4Z9Tf0kwad4shiV8MMWA4O8Q3o7xvhyYpaxDT1vrojbp8V4FU4PZn4pBhldgmnkk6JrdZJy8bQdP8fzbHA7i9k_KwjVQ0rfzDPKLLFrcQr1dKV2OdJgqVGvKgaNcV3LnqG1WR6uTJThuThxwVZrXLD3VniErmg_h4hajl-RQfCi6H3HJvpFm0OHb2ybLYTGxHI2ptkrI1P4AL2pmCGjXr8WCgJ2gWrRmkIgQl4ZRB0FWfcSHLGy1t0zvn8diBFV9Q2VZmx0qK5gMtZAh4C-tefkFKx4u8e1oQ9OCCyIhy7HowYKs8Wzh7Hx5HcLk5nTSw_qRRD2Lu2T7lVml1PPwupEg_zwe_MORqzQ9sIZSuJZnuVoy2wpSQvy6y_TjVJT0M4-aQVfeqdzqddjwpVHLl1BUDz9p3mGIhBhpdoHncZhoeaGtnYqU2_JP-53tMp7y6pt6CU_eBT1lsWLsZDN92MO6K7Bls3GY42hdNDq3WvgfpCIs_c_CDNxvCVRsnv9a3iP485kt6PKqEAYsVl2pQ6rtJwkxpQzCRcliEj7JoRfnC_F6CVJ5laATqpBmdKGVHLhCzC4di23usV3J_gZKNFpOePV6JL5qgHt0Xfx00LWkcVqVgKc4EbTzODV-AaNzuZxv5iP_un_FIW4Z8NbiIhl-iGQGHK86gFlclQ0qYkCPLNia_N88S3LSdO1Juvoe13RwhIIkZGwUwAE2l9q6VKRxuIFII5raZWV5Y75rlQkoz8QoAUPa6LjW6m9xEWLLWSKmaT9J_1Xy3QEKDCWrTFJFsT1P7E0YoVtCP8WtXRngsXaPGLQN8uHrNDH_76jfDSqHBeTE8fs74uBAFiGyvTXRAILG-6tfUnBvoJKR42vKowdlMxYuacNyqlUyGaWNXjmqpk5icjyDsxdjmXr_bJBaz6jfCogZsgZSg1BY0l10WKTp8lh3B6BYTqQmvQLsYRdauQEPeQDtrs_4GlQGw0vm3zm2HRztnqGywOMAEzd_oj_X60ZjBTpanSWxQUB6Umu4bF5Hn9VwEasRsGPwG1openRxhGI5w-sMxfFo1QzD7eHb9nk9w_bqQww9a5O5V4kq0ljy7dYhLyv9gTf9m61B0_t6z4UIucxg_DHbmWjZuAxbldz7c6rgx7NnfNSGK6qdkaWoYlD_GdUBQB9cFU6er0wxzkybUU9zak9lxwPKCbaDjadWbWaqPkW-Vbh_rLZ0WGbHH6FL2rs8e2DzMAArvIwpyQ3Afgw6QZuopZKuNZAk4awzdGWbNQu1U7LpaEPLOhyuAxVkl3nRV5gdbENntNb8XI9rbnt3gv9WfW74wHN-rCL-z8RmAUaU-IwORO-PX2RC2K-xnxC82Os-nFmbmM_8yc1wx9bPTBOtMMpyrKF1g9ef8apo26V6n-V8L24yakrdrXMbOkRRs5MzM6K9q8Q0E_zQmSweLgOMxUW84hxTiFEhPzscAooC3ab6-bIBvJJggasf5idNhotWr59a803CnJG21aRWNYVvn86iD-jChXPawn4mDQcdemKB8TzVXoFstcXVCmf1kEAA\u001a\u0018nY0xPItgwtlvjEjk2TqdwOQz\"}\u0018\u0001*o\n\b\b\u0005\u0010®2\u0018„\u0004\n\u0007\b\u000b\u0010ƒ;\u0018A\n\b\b\u0006\u0010‚;\u0018ö\u0001\n\b\b\u0003\u0010´2\u0018±\u000b\n\b\b\u000f\u0010ä5\u0018‹\u0004\n\b\b\u0001\u0010ž5\u0018Ã\u0005\n\b\b\u0002\u0010á:\u0018£\u0002\n\f\b\u0004\u0010†=\u0018K*\u0003\u0010«Q\n\u0007\b\u0014\u0010À\u001b\u0018g\n\b\b\u0012\u0010Ú!\u0018ˆ\u000f\n\u0007\b\u0013\u0010°2\u0018)8\u0002@ œ\u0001H°ê\u0001"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/binary\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 10 Oct 2026 21:41:31 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":2968,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T00:43:27.550806Z","times_seen":19013199,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2026/06/Motorbike-City-Tours-10-712x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.509Z","timestamp":1791668488509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/Motorbike-City-Tours-10-712x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64302\r\nlast-modified: Fri, 05 Jun 2026 04:15:03 GMT\r\netag: \"6a224d47-fb2e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64302,"size_decoded":64646,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 712x400, components 3","md5":"139ea64b262035710a0fa0ca7051d004","sha1":"617864e1a3b9d53257a1897c1f480fe9f7f2b9f7","sha256":"b4b3abad0e9b6c64bdb03199db4cdd0df87eed251f33a13eee871b01ed4018b0","sha512":"708263a05fb87586cfe024a9aec505d889e5d837260176901256b2119581d94a4e91b224591fd640f18ddc98b950d9847ab5cac4524790cacf5f551a23bff93a","ssdeep":"1536:+/466SYjGhXsjEjusvK8bsypdQV9Uz7ju/qHiF68xN5G93b8Dj/K:4mihcw3S8DaV9Uq/qH6zGcS","tlshash":"995302b633415af4faab7cb7008c155ff80ef6e121d6898752f08bfce24467552aa0c8","first_seen":"2026-10-10T21:42:44.00143Z","last_seen":"2026-10-10T21:42:44.00143Z","times_seen":1,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":565,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2019/10/48a1531c1c16fa48a307.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.274Z","timestamp":1791668487274,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2019/10/48a1531c1c16fa48a307.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:27 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 142366\r\nlast-modified: Thu, 17 Oct 2019 11:19:28 GMT\r\netag: \"5da84e40-22c1e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":142366,"size_decoded":142712,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1000x666, components 3","md5":"0597bf9f2fccb1b1944eeff28dbbc5fa","sha1":"79639b97b0c3a7e6232c94d5694206a93a554d46","sha256":"9fa2a678a1bfdf9684149a9d0f6aaf0f60611b7f4a4071652e13d8b033aa0d01","sha512":"0f05a84c23a36edd9d70c7f019a86528b7707c060d21f097646fe833ac9be7a3629d1056e4ad9755e89285781eb3636e2cc2914cf91351e11c0debf913d8d0fa","ssdeep":"3072:HU7TKeqdM0WOHPXiAmj8EiwPmuNYsmokE+zkb:HU7TKeqtvi1osP9Y7o9Skb","tlshash":"00d312c25f0c491e15a83974abd33235cb56425b3ef00de3427e5971a7788b7288eab6","first_seen":"2023-11-28T07:58:29Z","last_seen":"2026-10-10T21:42:44.0043Z","times_seen":2,"resource_available":false,"data":null}},"time_used":765,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":502,"receive":263,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2022/07/JEEP-711x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.025Z","timestamp":1791668488025,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2022/07/JEEP-711x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 89146\r\nlast-modified: Mon, 24 Nov 2025 14:39:58 GMT\r\netag: \"69246e3e-15c3a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89146,"size_decoded":89491,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 711x400, components 3","md5":"22cc0c87de10be642911d29ff750a50e","sha1":"3a44762ae7171aaf7f8406a31e2ba3dc8ce41293","sha256":"7d2abc8d8e0ae618addf9434c88d58b1a84113f20fcdec52caaba94885165c0d","sha512":"53c6b43b014fb44cb53c7ac3183a7c0d76d8061ee506b08dc2f1cf23ada86b15dfb39a1750816ce2357038b9d619c0216f4be9991d0ee6aef9ba9f00e8e09707","ssdeep":"1536:t3lZRhwa26r7BEsl2CAkhSQK+/Q+SAvVJd2bicr0et+yf5tR3I23FOKr9dB1Y:FlZV227Bbl2yhfK+kbbr0RC5nB1OKr9G","tlshash":"fb93128190a0d4fd16880a2bde49ec16dc317f632365b7da0eb9d23637915c220dfe99","first_seen":"2026-10-10T21:42:44.00631Z","last_seen":"2026-10-10T21:42:44.00631Z","times_seen":1,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/fonts/lato/S6u9w4BMUTPHh6UVSwaPGR_p.woff2","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.988Z","timestamp":1791668487988,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/fonts/lato/S6u9w4BMUTPHh6UVSwaPGR_p.woff2 HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 5552\r\nlast-modified: Fri, 07 Nov 2025 14:59:31 GMT\r\netag: \"690e0953-15b0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5552,"size_decoded":5823,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5552, version 1.0","md5":"33c906549bd61edf700e9a28132f25f8","sha1":"30128ef02a089c98139c978a2a0cedaadd634dbe","sha256":"3a5797f440bc67b59830cad81e59a71011e35cb45ed7f747b61a69b0a9b0d6ae","sha512":"dc4a63153cec46714504239de7184f87585c5805498300c8d1ba066053135ca04895f1484e739ee3fc492baba6920b5686e40a05ade1b962e5113a9635013503","ssdeep":"96:tg4V29KoaW+ekf+c3aIw2Lp/HwoGccbVjNRFRf7g/v/88V6PnW4+Kydey7kh:tnKKovjHULVHwMcbtFR+v082njyPg","tlshash":"c6b1ae0c7d929cebf5ac14792c508c34199b5eac8f5ee94c8c860c2a02e25dd1e0e7be","first_seen":"2025-09-17T01:22:23.26484Z","last_seen":"2026-10-10T23:24:51.988119Z","times_seen":4150,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/02/z4120770846519_42a7f77591ea209482bab2bba2e96afe-533x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.567Z","timestamp":1791668488567,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/02/z4120770846519_42a7f77591ea209482bab2bba2e96afe-533x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":683,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.297Z","timestamp":1791668487297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 Jul 2026 14:32:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a622605-83d0\"\r\nexpires: Mon, 09 Nov 2026 21:41:27 GMT\r\ncache-control: max-age=2592000, public, must-revalidate, proxy-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33744,"size_decoded":12316,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33549)","md5":"dd4fcfa7b582204ef93013be12762d92","sha1":"6023b30ef2ea0f0c20c902d57226857698347c4a","sha256":"45d047b9b45954cee05ab65eeb1c1d6f62238ee222fae60740b8a92b3e040ea4","sha512":"f99c92d96e4ccc6914800a3f96256f235c4472b7a6d6ada11f3de7fbcc502f88380ccdaba56a17b6440ae89580d30e9ce29f84d8fc380e9e85c0f9787ff7fcf7","ssdeep":"384:KTwEZwAMfifbeH/uY3dA6ac+VVogo3w087TnKebmlioAdJTPxXkSYiTo9uX0jcym:KTc/fRsI+3IAj/dP84XxB","tlshash":"a8e28349b685b4e306e3b4b4409f444ab1b75745b81ecad1e316f6c0bc7d84ea0a7f8d","first_seen":"2026-03-05T15:53:41.292858Z","last_seen":"2026-10-11T00:10:13.219183Z","times_seen":16250,"resource_available":true,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":487,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/fonts/lato/S6uyw4BMUTPHjxAwXjeu.woff2","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.989Z","timestamp":1791668487989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/fonts/lato/S6uyw4BMUTPHjxAwXjeu.woff2 HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 5612\r\nlast-modified: Fri, 07 Nov 2025 14:59:31 GMT\r\netag: \"690e0953-15ec\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5612,"size_decoded":5883,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5612, version 1.0","md5":"633f8feda2188d767d2396652da17377","sha1":"d35cc70037f82ab61d86f2c4d80685a474821d45","sha256":"8b9fc9737043f88c1a9a7195c27a239bd329cc33d928ffb67736c61ae7a1dbbd","sha512":"edadc35473adc7d3d2b6c0bc04789dc78c7f38c0eccac6f08625738d5c8cfa9203c1d9ef2ee6ce721fabc5a4eba41cd19f47e56dc85ff3bc1f7f0ede2ec5ba0b","ssdeep":"96:iD0G8mpQLE+J8uftoCUdUZ/OGjfSg7uov39XTr9a8dBmhPk7jJ5lpqaAjiv/8qBA:7xXLZ8uVoCUdUFOGjJ7Pv39Pw0MiZ5cB","tlshash":"23c1af36b54e1d4bf74201b8137b823e41c70c621637356dbb16aa9418dcf4161371e7","first_seen":"2025-09-17T03:45:02.002945Z","last_seen":"2026-10-10T23:24:52.007249Z","times_seen":5815,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/nY0xPItgwtlvjEjk2TqdwOQz/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.057Z","timestamp":1791668488057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /recaptcha/releases/nY0xPItgwtlvjEjk2TqdwOQz/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://biketourshanoi.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 354590\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 09 Oct 2026 17:27:02 GMT\r\nexpires: Sat, 09 Oct 2027 17:27:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 05 Oct 2026 00:06:40 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 101667\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":850545,"size_decoded":355497,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (602)","md5":"880723b04901ef902341d03409d07439","sha1":"92d597679deb157915cd08eb6dcd4d42bf274d23","sha256":"a2d9c6b17c85d85e1330c5b09c7fb1aea3fe457897ce6ac69e361dc6a72a57b1","sha512":"c700abc85dccb19b7617fd6e8e3dd813eed2dbb86228dc9c23744fd0ddeb2b71b2d387c474e764671745e659ff19ff07bf699039a43772bfdef6cf9b8738c197","ssdeep":"12288:3bWvqmePeW7L91BmS+ELcUAZoaI/aONG0wjXUpJvHnkb+:rZph1ZrIbMNGNwrfkb+","tlshash":"c8053bec35063eb56222b5fa10a76048933e942adc4c0b6db19798f13ef484d6177eb7","first_seen":"2026-10-07T03:06:23.101046Z","last_seen":"2026-10-11T00:45:16.626443Z","times_seen":3166,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":17,"receive":61,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/03/Motorbike-City-Tours-Hanoi-Food-and-Sight-Led-By-Women-6-1400x788.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.471Z","timestamp":1791668488471,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/Motorbike-City-Tours-Hanoi-Food-and-Sight-Led-By-Women-6-1400x788.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 276298\r\nlast-modified: Wed, 22 Mar 2023 11:26:00 GMT\r\netag: \"641ae5c8-4374a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":276298,"size_decoded":276644,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1400x788, components 3","md5":"06e1e222b32ca2aee93b7cf1273b49ab","sha1":"533aea902548fc03b15fa002c3061ea3ce5ad856","sha256":"1dd228ca9024137d72890a601f05597291842b8978cb7c5c8abf1a18f3e9b8d5","sha512":"bf97a60f89f60ce39be257aa4628aca53cea5979be0d1a68085d5c2def6404d31a4da1fd6077221b55a7b74cb1d7e6a71954d51a61a0b3b1f6cc1bb284dca20f","ssdeep":"6144:ay1JdP+VJAJ6a2w1F/sb9WdYcEDcKqImbQMc7sXmTxNPhCYm:nVPEda1W9uiXqImbQMc7uWNPhC5","tlshash":"9744236620df29b9be9406355beb1ade01509d588b0071d4a77bf609ce02cbbf74d8e4","first_seen":"2026-10-10T21:42:44.015222Z","last_seen":"2026-10-10T21:42:44.015222Z","times_seen":1,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/02/z4120767991452_2cd8c712078c7525779509f88af3bcc8-533x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.564Z","timestamp":1791668488564,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/02/z4120767991452_2cd8c712078c7525779509f88af3bcc8-533x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":686,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.tacdn.com/js3/build/concat/widget/cdswidgets_m-c-v22480917520a.js","fqdn":"static.tacdn.com","domain":"tacdn.com","tld":"com"},"ip":{"addr":"3.164.230.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.218Z","timestamp":1791668488218,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tacdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 17 Aug 2026 00:00:00 GMT","end":"Tue, 02 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4D:58:CA:2A:12:D2:72:8A:70:B2:CF:7C:33:83:66:DD:89:A3:8B:2C","sha256":"CC:B9:D3:7C:86:18:9E:89:C2:A7:83:75:15:ED:7B:1E:B8:EF:6A:B8:F6:9E:B4:16:B5:51:1D:9C:5F:69:92:09"}}},"request":{"raw":"GET /js3/build/concat/widget/cdswidgets_m-c-v22480917520a.js HTTP/1.1\r\nHost: static.tacdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/x-javascript\r\ndate: Fri, 18 Sep 2026 20:02:03 GMT\r\nserver: envoy\r\nlast-modified: Tue, 08 Sep 2026 08:15:30 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000, immutable\r\nexpires: Sat, 18 Sep 2027 20:02:03 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-request-id: 691fc3df-637c-401c-b32a-336faae34ca2\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e3d4442c9380e0f8994d148c9677eac4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: fdHTmEkaWQDzd5-L-imd6WcnkPgpT4-0k4vgSSF9VtXMiBsiTbSTZg==\r\nage: 1906765\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":15421,"size_decoded":5156,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (13794)","md5":"9d1a046b5d9f975765a5adc3c8f2722e","sha1":"fd964609d091c301d408e879aa431a2a52e74a2c","sha256":"e94e0140ad5ee0dd772ad05d9ba5cc4cf3e2a1f5d420ea5cb783edbdbdda9f10","sha512":"4a98a74c7ab4b32059a2be4237700130c43c00837becd2d29ce2e2cdb488392efaf69f94e0e770ebd261a99fa4a62728e60858a74b13588c42205eb8f4442a60","ssdeep":"384:UWEhknWAX9eICtgAlAdcnkJN5qXSyCyeezHSt8yXsbG8yI8yUyYtyCpyxLc53py/:KkJN5qXSyCyeez+XoQeLD5xoOuS6kwMB","tlshash":"8962d9e63655697a46ff01af0caf97897230c70e6c09c280441adc26942cfe6717feda","first_seen":"2023-03-07T14:03:25Z","last_seen":"2026-10-10T21:42:44.019317Z","times_seen":2359,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":13,"connect":8,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2025/01/Hanoi-Jeep-Tours-17-1067x800.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.474Z","timestamp":1791668488474,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2025/01/Hanoi-Jeep-Tours-17-1067x800.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 281124\r\nlast-modified: Mon, 27 Jan 2025 13:04:21 GMT\r\netag: \"67978455-44a24\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":281124,"size_decoded":281470,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1067x800, components 3","md5":"41708ebfcd3b7785632d5fd7d960e26e","sha1":"c18aa6f59243dbb23010726b69f71f85973e3146","sha256":"2538871627b0d3f297294e56bd76b02d3b6c5c71a3315f4acafee48a7718cae5","sha512":"b82463b4ebdf558e919d120a7dd754bb67f0558ccd5ef191330e485c9c839cdd8a24d50ac788fd2812547cbbd5af07cf5e6c21bd696ceff42cd3194d5750f432","ssdeep":"6144:IZ4N+GEFKe1L0VxVVRiHkSTCBgm9lLIYI6FWwm1QMYNLwCo3syOOYP:Ifr1L0VxBpBXbLiVVMNLwrhOOg","tlshash":"a35423630f79d76106ad1e78c2362703e8c3fed974b8a1ec3168dfc9552e9b08964b94","first_seen":"2026-10-10T21:42:44.022155Z","last_seen":"2026-10-10T21:42:44.022155Z","times_seen":1,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2026/06/Hanoi-Jeep-Tours-10-1-712x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.520Z","timestamp":1791668488520,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/Hanoi-Jeep-Tours-10-1-712x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 81096\r\nlast-modified: Fri, 12 Jun 2026 09:07:50 GMT\r\netag: \"6a2bcc66-13cc8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81096,"size_decoded":81441,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 712x400, components 3","md5":"94732d4161b258187f041496c15c92e8","sha1":"1a929f741a9e69af43be67ae9e07ef1353eafdbd","sha256":"098af9af5fe7c971bcf248bfd2c5dd7c255f01c47a89a29fc8a8bd97e50c9ec2","sha512":"fe1fbcb8718888305ee8f02ee16192dfda4fdf9695cc3c0e210507380233eef550eb63e378a7b84509efc13f6f169f12277127061eaa01aaea5eaa2269af5e8e","ssdeep":"1536:+bSfb58dyYkA21YUjIWyS2luKeP7r3WCR1CDILFVyU+mFVT+7dY:WCAy7PptR/W1URzim","tlshash":"438312fd22eb5029beee65f1d7f2219434a3f09628f69c447991d9e81d701f6089c2ce","first_seen":"2026-10-10T21:42:44.027387Z","last_seen":"2026-10-10T21:42:44.027387Z","times_seen":1,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/12/city-2-712x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.541Z","timestamp":1791668488541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/city-2-712x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":707,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/02/z3910111996146_92114147236c19f93bdf69a7dcfcd347-300x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.565Z","timestamp":1791668488565,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/02/z3910111996146_92114147236c19f93bdf69a7dcfcd347-300x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2018/04/h3-601x400.png","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.711Z","timestamp":1791668488711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2018/04/h3-601x400.png HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2024/05/cropped-bike-op1-Photoroom.png-Photoroom-192x192.png","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:29.845Z","timestamp":1791668489845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/cropped-bike-op1-Photoroom.png-Photoroom-192x192.png HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 27404\r\nlast-modified: Mon, 20 May 2024 21:27:52 GMT\r\netag: \"664bc058-6b0c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27404,"size_decoded":27747,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"03e456a441b2f9f7297999748884a3fb","sha1":"6a996b16377607f9b4ebee211bbadf8a6967461e","sha256":"d5cf2bcc728b7426042ed4ba8357c760f6a3c9f132b01f42d0a96a086bbe7d12","sha512":"9897e2cdcc2b2e3d50f6634ab20e3cb75584567b2cbf9dce62d9108d31d330707822b577dfb4a4dd49afbd0dfb0ef82657173ad53e39811506e2ab794f465cd6","ssdeep":"768:3ciYz0rTrqUScGQr3/tK7fhRt7jh/nUWKQ/IqVWApy:3c9IyUvGYKVDjh/NKQ/IYPy","tlshash":"02c2e1123113d4d9b44f150e1f8c128f8a0537aa33cdb5a625fb6846adee9bddc470c9","first_seen":"2026-10-10T21:42:44.035511Z","last_seen":"2026-10-10T21:42:44.035511Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/03/Asia-Vespa-Tours-2-1400x788.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.485Z","timestamp":1791668488485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/Asia-Vespa-Tours-2-1400x788.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 235946\r\nlast-modified: Wed, 22 Mar 2023 11:25:38 GMT\r\netag: \"641ae5b2-399aa\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":235946,"size_decoded":236292,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1400x788, components 3","md5":"ee8b7d1a017d74ffc8ad60467deceb62","sha1":"4859477f14fd264734ff577c1dca719d0665c8d6","sha256":"671798ade129534547643bec9e1aa8f430270452eef08d1422e878770c697aa4","sha512":"4edf7751dd734a90fb328fcdfa9345d408c6bf44530d1afb67cebb54663aaaf4c3b54e0d66a3caa3a0dae7975dfd1aaefd92c819c4172dea1f480f7fd341b833","ssdeep":"6144:ESBASKU6L75M/L0tLG0mrbPf2fPjo6PaAtPKx+00uXl6:ESBNzmq0t6PbPf2HjojwPKw096","tlshash":"f63412315fe986ae53a1ccd023c55868f17c6e239588ccfa85338fd4798761ea783897","first_seen":"2026-10-10T21:42:44.038113Z","last_seen":"2026-10-10T21:42:44.038113Z","times_seen":1,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2025/11/bia-2-1400x788.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.019Z","timestamp":1791668488019,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/bia-2-1400x788.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 270594\r\nlast-modified: Mon, 24 Nov 2025 22:46:11 GMT\r\netag: \"6924e033-42102\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":270594,"size_decoded":270940,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1400x788, components 3","md5":"0148208c6bc88dd210c8b90462b89e6e","sha1":"2b3048bd6212e110f231c233a0039083ba1bd6f2","sha256":"791ee75be226f532b3454ea955129417313cdc69ef3776af4cb572ce01088903","sha512":"7be84ef3fd0f2efa7afdcac5a90c27610a788f90c557c77575abd5f9f85bf3e9e70edbeee1fa976dce5c428680eea8f353d9e86f39c5840c8df5980aa8f94cb0","ssdeep":"6144:hYfp4k5EyluTWhixcKQol8rvoLZHD3zJTs/JyJNsQHMPAndC6p:GR4gEc60m6ol0oLZHhs/JyJlMPAnEw","tlshash":"b44423be207d976982bb5be3999e3412b2641f6545233c08c93bfa8fefc5ad0506c0d5","first_seen":"2026-10-10T21:42:44.043304Z","last_seen":"2026-10-10T21:42:44.043304Z","times_seen":1,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":258,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2022/11/food-711x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.024Z","timestamp":1791668488024,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2022/11/food-711x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 100327\r\nlast-modified: Mon, 24 Nov 2025 13:50:47 GMT\r\netag: \"692462b7-187e7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":100327,"size_decoded":100673,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 711x400, components 3","md5":"36a3db14dd6e1b35668fa3c09fee7532","sha1":"b2cfc94b73d6b3e3c006b1096aad25f6c3edf46e","sha256":"70058b0644b6439a9cf29ebf53d7284b3472b7a73452afd6f4296dd3c092fa3f","sha512":"b1837d007567517a0ffbeae3f8ac76f9c70dc6f2e42570830de846f683554e773591697bc473ea0ba5010b1c2b05e6dabcfdf4eb75ca40a46bd5741696df27d9","ssdeep":"1536:tqv04RWHjn1QTuHzQp8gjGJ5aehprR+vFg42GNjKQSTfVjzsIIG99/JGhsc3wPub:g85BQTuMOF5a2+qvGNu5Tx2QGWMJiLI","tlshash":"d4a312792e7305379b8a581d46d51ab222b8704c742c7e9f803bd5cd7e8ead16da831c","first_seen":"2026-10-10T21:42:44.047374Z","last_seen":"2026-10-10T21:42:44.047374Z","times_seen":1,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2026/06/Hanoi-Motorbike-Tours-24.png","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.494Z","timestamp":1791668488494,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/Hanoi-Motorbike-Tours-24.png HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 2228828\r\nlast-modified: Thu, 09 Jul 2026 20:15:19 GMT\r\netag: \"6a500157-22025c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2228828,"size_decoded":2229175,"mime_type":"image/png","magic":"PNG image data, 1376 x 768, 8-bit/color RGBA, non-interlaced","md5":"5c67f8d9fe2739cfd0a2dcf333c400e9","sha1":"2c98923f89967e715d140ab0f9f2e9bf038949e7","sha256":"22ba2528dad302b8b8d102ea74859249261c367c166a18e7731b9142fca8ffef","sha512":"c8e1e3dd24aaa5c8d443ef61117d32bad712bd62adec82539beed557212189b5e4d90ee876699651d6496cead10cce93f42d9fa875793161a5dc40b3cdf97d0a","ssdeep":"24576:po0odhVOX/c2Be94CB597CD8WakdzanporUP0SCnBmTWyt:BodmTBe9dBjCL7zkX5Dt","tlshash":"732523b5f24a29e6e0403979a1d68141baf9f58623f458d001fadecde48f9c823397d9","first_seen":"2026-10-10T21:42:44.056427Z","last_seen":"2026-10-10T21:42:44.056427Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":579,"receive":801,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/11/Bat-Trang-Tours-1-712x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.510Z","timestamp":1791668488510,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/Bat-Trang-Tours-1-712x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 78771\r\nlast-modified: Thu, 16 Nov 2023 07:25:12 GMT\r\netag: \"6555c3d8-133b3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78771,"size_decoded":79116,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 712x400, components 3","md5":"c0206152ee582f856acdddd43e155605","sha1":"2af702f55b97727b9be84bb76bba73b5bd6d8562","sha256":"1d3935abbbd6da99b9f5681bd8d8d6c6a15049557cb0dfa68257bf375f82b9bd","sha512":"69acfce3d98174b594b6a5b39b8401b370a2f19d0592ae34970a472a3554b7efdb0c1f10c9fab042d0dde82c318537d75995f878b6545fadd8187311f341c84d","ssdeep":"1536:+nVEyCas9Gac6xraxIKAxE0B5Vulfw3I6h8498MfSzazHMBMVbSqPT4smn:maQ6Dx2iKAxE0B5VpNA8SqPUBn","tlshash":"c473127f439e5b326910a97cf40c43e6fb68c6a4a5b1ba193babc6451d741c3d2cc223","first_seen":"2026-10-10T21:42:44.060104Z","last_seen":"2026-10-10T21:42:44.060104Z","times_seen":1,"resource_available":false,"data":null}},"time_used":814,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2022/09/IMG_0893-601x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.532Z","timestamp":1791668488532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2022/09/IMG_0893-601x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64859\r\nlast-modified: Fri, 02 Sep 2022 08:19:36 GMT\r\netag: \"6311bc98-fd5b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64859,"size_decoded":65203,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 601x400, components 3","md5":"69c8365ad5da12f1c96aa961d57d5f73","sha1":"8738a7a13cc14a3e3946a81776aa73df7747225f","sha256":"0dc9d75236cf1fed7434839bd57520b92a559783a69da0f8e0729ff526f74473","sha512":"b0b7b69c7ad0000033aa92a772eb8b86131d097a5e258b30f83a949730910c2fd45c66666c0e6dcef9c17dc5cdcbc45ef58ed2f94bb6244b1cfc582d9bf97969","ssdeep":"1536:DitIXAAXFmez8x7XKC5arz58CkKhojg9Uhe:27cmQ8xTK9H5RkKh9V","tlshash":"505302b0b5a91167a99b0f7a9c4b6fcd927f8c661d005957bdc490b3c1d0ec9a0bb34c","first_seen":"2026-10-10T21:42:44.061839Z","last_seen":"2026-10-10T21:42:44.061839Z","times_seen":1,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfK2qAUAAAAAHVWVP33wXcSA1OGf0cjlBTfdudc\u0026co=aHR0cHM6Ly9iaWtldG91cnNoYW5vaS5jb206NDQz\u0026hl=en\u0026v=nY0xPItgwtlvjEjk2TqdwOQz\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=hrotnw15i7xa","date":"2026-10-10T21:41:30.556Z","timestamp":1791668490556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/nY0xPItgwtlvjEjk2TqdwOQz/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 08 Oct 2026 15:10:22 GMT\r\nexpires: Thu, 15 Oct 2026 15:10:22 GMT\r\ncache-control: public, max-age=604800\r\nage: 196268\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":3002,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-10-11T00:42:53.922428Z","times_seen":743396,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2022/09/j-2-712x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.538Z","timestamp":1791668488538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2022/09/j-2-712x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":710,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/plugins/easy-fancybox/fancybox/1.5.4/jquery.fancybox.min.css?ver=7.0.2","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.252Z","timestamp":1791668487252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/plugins/easy-fancybox/fancybox/1.5.4/jquery.fancybox.min.css?ver=7.0.2 HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 23 Jul 2026 14:33:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a622635-1514\"\r\nexpires: Mon, 09 Nov 2026 21:41:27 GMT\r\ncache-control: max-age=2592000, public, must-revalidate, proxy-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5396,"size_decoded":1720,"mime_type":"text/css","magic":"ASCII text, with very long lines (5396), with no line terminators","md5":"c596306c731dbe2b608c21be3d8f5920","sha1":"426ddef38ff6e399fa0b056510833977c8636644","sha256":"4bce18de486fea257a1a5c9d5477070cec0ca1dff3438e5784161e8a8756da44","sha512":"6c41512cb2bf019dede4c5f99eb97d1ab8aed2494182aeb9770af182abd37b811a577189e5de68dc514a9fbf68d0943b8367722f1b920ef5a5697cff8ad412d1","ssdeep":"96:rMVHicv4Ucprabb4WK6h7UKb4ARnIVAOdJufAGocmEVt4+1Brf2fR:8C6gW0+7UOIVbTUAhcmEVt4+1B72fR","tlshash":"44b1a927264031c8ea7b9e21e3df8ba9d071450349a115ffa70cf928cbd67e415f62ca","first_seen":"2023-04-05T18:14:29Z","last_seen":"2026-10-10T22:26:13.582787Z","times_seen":5511,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/themes/flatsome/assets/js/flatsome.js?ver=e2eddd6c228105dac048","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.301Z","timestamp":1791668487301,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/flatsome.js?ver=e2eddd6c228105dac048 HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 25 Jun 2026 04:18:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3cabff-ecd7\"\r\nexpires: Mon, 09 Nov 2026 21:41:27 GMT\r\ncache-control: max-age=2592000, public, must-revalidate, proxy-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60631,"size_decoded":19721,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (60631), with no line terminators","md5":"80419efe8fa59d4d918161240ad1cb86","sha1":"e9483145de272a64525fa9af0e0c851ee5c10430","sha256":"92880e58751aff89f2e3eb075547aa77c69e5b037953c34699c7a558d77bfb10","sha512":"079781b03a3f663c0fd341434857e4a2740eed7ff1b986132fd026fcab5d30500974f17f946451021bfde84186a7e999476094e0300e55c16c5baddc26292638","ssdeep":"1536:wfbhFL/nm9csLtvcMW35Il4KKPD2EGsFsAIcQ6lW:WbKjLRHWVrPDhoGlW","tlshash":"0943e769729070fd01ff51e7f13fa72432372566b00b4054b12998ea2d69d5e22b3fba","first_seen":"2025-09-21T19:21:43.611228Z","last_seen":"2026-10-10T21:42:44.066487Z","times_seen":5246,"resource_available":true,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":481,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/10/an-chay-1400x788.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.482Z","timestamp":1791668488482,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/10/an-chay-1400x788.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 296120\r\nlast-modified: Thu, 05 Oct 2023 08:53:36 GMT\r\netag: \"651e7990-484b8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":296120,"size_decoded":296466,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1400x788, components 3","md5":"b7c61e251e36f2c0ed0b8b2e3dd6daab","sha1":"668f8eda75063254a6cbc6a1f006143d7ebf6b40","sha256":"92833387c740a2b868945a074089a14d3d6e230666355cdfb9586f36c088efed","sha512":"0498edc8ca33f7cac050df478424059dfc8772cc3729f15ea228b659252fbf03e434437ba403b0d1672d7101b9b5de71aecc1c40f6c96cefa9385a45d2bea330","ssdeep":"6144:b6pTl3gQ6Ss/x4pxlJP7u5Fb3seSXOtxBeUB00xxjFXR9GZIUw+:bkRg53p4flJyTbtSCTeUG0/1LGZII","tlshash":"c154233b0566e10d9b7a6d2107b62cbc4a76afc1d26ec38c85314cc6365c2865bbb5cf","first_seen":"2026-10-10T21:42:44.071075Z","last_seen":"2026-10-10T21:42:44.071075Z","times_seen":1,"resource_available":false,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2022/07/Hanoi-Jeep-Tour-3-601x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.512Z","timestamp":1791668488512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2022/07/Hanoi-Jeep-Tour-3-601x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 42479\r\nlast-modified: Tue, 26 Sep 2023 04:12:10 GMT\r\netag: \"65125a1a-a5ef\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42479,"size_decoded":42823,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 601x400, components 3","md5":"a58b1a4da2c3f0ab9b1cb4cec4d9ad6a","sha1":"63208c6eccb0358dda49ccc8fbb22a987526109a","sha256":"3a42509e11395f9bae66dacaf2ab4b422a01c8168e457a065f3ef717b71d3d9e","sha512":"f01fada54c0fdf87e83432a5ae3b5633ac54ee700f61c765a6f108e2ed0dbf08aa7e644576aad79783ccb7201df56d49ddc95d95946314da0e81886e4eadef7f","ssdeep":"768:DOrd1ti5/0uaQfbeW5GQbe5j6hVWOvjkkdnREO5mcCx3iWmhp2glo:DOrd1cRle8GQgcsOLk8RXYc0i/o","tlshash":"ad13011daa7800aeb330956e16f4aa46860fc4d3fec418c50af1dfdc9883ac6a47d173","first_seen":"2026-10-10T21:42:44.075246Z","last_seen":"2026-10-10T21:42:44.075246Z","times_seen":1,"resource_available":false,"data":null}},"time_used":730,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.259Z","timestamp":1791668487259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6482bd64-3509\"\r\nexpires: Mon, 09 Nov 2026 21:41:27 GMT\r\ncache-control: max-age=2592000, public, must-revalidate, proxy-revalidate\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":5239,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-11T00:42:24.582241Z","times_seen":1003354,"resource_available":true,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.jscache.com/wejs?wtype=selfserveprop\u0026uniq=716\u0026locationId=14011398\u0026lang=en_US\u0026rating=true\u0026nreviews=5\u0026writereviewlink=true\u0026popIdx=true\u0026iswide=false\u0026border=true\u0026display_version=2","fqdn":"www.jscache.com","domain":"jscache.com","tld":"com"},"ip":{"addr":"3.164.230.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.263Z","timestamp":1791668487263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.tacdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 17 Aug 2026 00:00:00 GMT","end":"Tue, 02 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4D:58:CA:2A:12:D2:72:8A:70:B2:CF:7C:33:83:66:DD:89:A3:8B:2C","sha256":"CC:B9:D3:7C:86:18:9E:89:C2:A7:83:75:15:ED:7B:1E:B8:EF:6A:B8:F6:9E:B4:16:B5:51:1D:9C:5F:69:92:09"}}},"request":{"raw":"GET /wejs?wtype=selfserveprop\u0026uniq=716\u0026locationId=14011398\u0026lang=en_US\u0026rating=true\u0026nreviews=5\u0026writereviewlink=true\u0026popIdx=true\u0026iswide=false\u0026border=true\u0026display_version=2 HTTP/1.1\r\nHost: www.jscache.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ncontent-length: 0\r\nlocation: https://www.tripadvisor.com/wejs?wtype=selfserveprop\u0026uniq=716\u0026locationId=14011398\u0026lang=en_US\u0026rating=true\u0026nreviews=5\u0026writereviewlink=true\u0026popIdx=true\u0026iswide=false\u0026border=true\u0026display_version=2\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ndate: Thu, 08 Oct 2026 13:58:52 GMT\r\nx-request-id: 1e8b4915-2b78-4c24-a79e-7dfd97f37fff\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e3d4442c9380e0f8994d148c9677eac4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: SEvH_JmI_eLYuCWCfH9hFIzZocpzainyeyopzSCEGbWye7OgMoCcgQ==\r\nage: 200554\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T00:43:27.550806Z","times_seen":19013199,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":27,"connect":24,"send":0,"wait":10,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2025/01/Hanoi-Jeep-Tours-35-1067x800.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.020Z","timestamp":1791668488020,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2025/01/Hanoi-Jeep-Tours-35-1067x800.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 188638\r\nlast-modified: Mon, 27 Jan 2025 13:04:11 GMT\r\netag: \"6797844b-2e0de\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":188638,"size_decoded":188984,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1067x800, components 3","md5":"fd91de04a557f97e094f73ff2f7623f6","sha1":"a60ffedff6190da8419465f8ffd8c965f3a1e06b","sha256":"ab68bd0716b042588057986f70500adebe4dac863a7e41eec82b625f8ae32501","sha512":"a277d19db6d913911084e372dbf97c36667faf0237208a30f4ba7326c2d39f094591473d835d5d8b446c667f891cebda9bc78c933b5835de491509129f0f6b8a","ssdeep":"3072:p9bxAJ4SAwaK3DrHL1bP+7Ss37iJBIoikAnXlOZZsm+XTbdR/n3ahCXDOuGBEwMS:nOebK3HHL1bWGsYCoGXoZZslbLKhsFha","tlshash":"990412531d201007916daf728ea1b9563cf21a995fc2f2cbb768d0436fdc5b9a52d32c","first_seen":"2026-10-10T21:42:44.084674Z","last_seen":"2026-10-10T21:42:44.084674Z","times_seen":1,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/03/Bike-Tours-Hanoi-1-1400x788.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.486Z","timestamp":1791668488486,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/Bike-Tours-Hanoi-1-1400x788.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 237293\r\nlast-modified: Wed, 22 Mar 2023 11:25:44 GMT\r\netag: \"641ae5b8-39eed\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":237293,"size_decoded":237639,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1400x788, components 3","md5":"e669e8d5551f47c33f0a72ecab061f43","sha1":"8881744c18d1a58e1e2b46e29300dcaafc1a004a","sha256":"4a802ca94649631676c061f8e9eff55738c87f2e7f0b1eee277d5069db982652","sha512":"e51e04a8b08f26c906b37c22f9a0050bbbabd9b3f09bd9d5fa0ee17be246365d7c3fd610e1dfefa3385a4c30ead348437f094b5ba643c3ca3e4a8334c2af358f","ssdeep":"6144:2ehWlK2fdSkOivqguoQnvgxKHy6ox3DElVGQl:2ehWltLOwtu9vEII34z","tlshash":"37341250f0bf0224827aed2184ea6ef56a4435288af6f0573b05bcd7b4953869c1ff96","first_seen":"2026-10-10T21:42:44.087608Z","last_seen":"2026-10-10T21:42:44.087608Z","times_seen":1,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/11/Bat-Trang-Tours-8-712x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.514Z","timestamp":1791668488514,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/11/Bat-Trang-Tours-8-712x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 77808\r\nlast-modified: Thu, 16 Nov 2023 07:26:40 GMT\r\netag: \"6555c430-12ff0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77808,"size_decoded":78153,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 712x400, components 3","md5":"cf021b08da2322bfe51e7cafaefa86db","sha1":"4893d2ab15451cf9e1e7ae5362281f385582001e","sha256":"04e240f7a5ce5c41bc48c31cde782bd8b0ec47dc3e884f203d13cf7da710a83a","sha512":"6672f9cc1ed6daf80821003047dbe4ab0b2016f29e2ae05574dab1aa5c70556455f1412b9b340bee1e814f99059d6250e16ef50ebd0f20840b06f069eab0ca3a","ssdeep":"1536:+6uX7U/C8TIDvkj4qCSTpP/jOYx8/VQt2mZxZgnUsAWUZ:sXyDTDjhCSNjNx8/VyNZxyUh","tlshash":"3273026f9532ba5a1782272193311fc81a88ab95600e9fd2c4b6846c3e15efc75dc8cc","first_seen":"2026-10-10T21:42:44.090309Z","last_seen":"2026-10-10T21:42:44.090309Z","times_seen":1,"resource_available":false,"data":null}},"time_used":811,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2023/08/DSC05662-712x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.555Z","timestamp":1791668488555,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/DSC05662-712x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":694,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":520,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2019/12/f9c581add4452d1b7454-533x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.559Z","timestamp":1791668488559,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2019/12/f9c581add4452d1b7454-533x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":691,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2019/12/87e66dc93621cf7f9630-533x400.jpg","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.562Z","timestamp":1791668488562,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2019/12/87e66dc93621cf7f9630-533x400.jpg HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":324,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T00:38:56.888868Z","times_seen":566993,"resource_available":true,"data":null}},"time_used":688,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-ND0EPYVTC7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.279Z","timestamp":1791668487279,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtag/js?id=G-ND0EPYVTC7 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 21:41:27 GMT\r\nexpires: Sat, 10 Oct 2026 21:41:27 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 172273\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":512392,"size_decoded":172877,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"b4316e0df56c40a7122e785d43f011f1","sha1":"02660700e861d4087dd74575e3b4a6a9eda61600","sha256":"9efbab8f746fab973e2b4b779a0e7697da8f72d25f05e4e7a9a536958fa44afb","sha512":"a1d8108da54b2903302971848c8ac4a71f3e66c15664fcde18f1f3a5b71aac127d34045147b66dcda1248707e880a6d7b36088719fc171102170a0457352a3de","ssdeep":"6144:SfsfCyqMnhImaVlQV+cfIb/EfD3ceiXmcw2rbGer/ap:CEKmWJmc/h0","tlshash":"63b408cdb3c6742693a6f578903f018ba57b29a2b44cc89af189dce02d3465a5173f7c","first_seen":"2026-10-10T21:42:44.096996Z","last_seen":"2026-10-10T21:42:44.096996Z","times_seen":1,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":4,"connect":19,"send":0,"wait":48,"receive":59,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/fonts/lato/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:27.984Z","timestamp":1791668487984,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/fonts/lato/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23580\r\nlast-modified: Fri, 07 Nov 2025 14:59:31 GMT\r\netag: \"690e0953-5c1c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23580,"size_decoded":23852,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-10-11T00:39:30.472006Z","times_seen":275886,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"biketourshanoi.com/wp-content/uploads/2026/06/Hanoi-Motorbike-Tours-14-717x400.png","fqdn":"biketourshanoi.com","domain":"biketourshanoi.com","tld":"com"},"ip":{"addr":"15.235.146.211","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://biketourshanoi.com/","date":"2026-10-10T21:41:28.511Z","timestamp":1791668488511,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"biketourshanoi.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:40:03 GMT","end":"Wed, 18 Nov 2026 04:40:02 GMT"},"fingerprint":{"sha1":"59:77:4E:B4:CE:46:C9:8D:C6:7D:56:45:84:A6:28:24:02:B6:8B:A4","sha256":"BA:BE:AA:0E:E3:A1:96:29:F0:07:A5:E8:81:2B:8F:4A:E2:D8:99:0E:F5:D9:A1:FC:6C:5C:ED:2E:C2:DA:56:E0"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/Hanoi-Motorbike-Tours-14-717x400.png HTTP/1.1\r\nHost: biketourshanoi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://biketourshanoi.com/\r\nCookie: _ga_ND0EPYVTC7=GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0; _ga=GA1.1.296203575.1791668488\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_ND0EPYVTC7","value":"GS2.1.s1791668488$o1$g0$t1791668488$j60$l0$h0"},{"name":"_ga","value":"GA1.1.296203575.1791668488"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 21:41:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 603649\r\nlast-modified: Thu, 09 Jul 2026 20:14:57 GMT\r\netag: \"6a500141-93601\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, must-revalidate, proxy-revalidate\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":603649,"size_decoded":603994,"mime_type":"image/png","magic":"PNG image data, 717 x 400, 8-bit/color RGBA, non-interlaced","md5":"4606d2238a7e06cc47ededffd4545488","sha1":"d9d208f5b098e620eb65a00efa1ac56573c90930","sha256":"aed76ec9adc29d8f42f3af34fdcdc1655fcc750b929c10954b105ff961d2f690","sha512":"1c1d6a4573d0e9bdebf2cbc9015017cbfc2a94781c8cefc6e940a64e40a5846d16c7521134da7bfacefe8165635b6ad3531b1d37451696b67bfbe58b19209016","ssdeep":"12288:FOSuu+Nnk18exsR23NgvBnET3Kt0IwbaFJw4YAQx:au+sqBnETKqyl6x","tlshash":"1ad4233d9ddaa63e715010cea2d0b01d1dc37a4bdb79478a4ac8e71d38af7191398dca","first_seen":"2026-10-10T21:42:44.106175Z","last_seen":"2026-10-10T21:42:44.106175Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":771,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"biketourshanoi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}