{"report_id":"1db30a85-3043-4760-81f0-d94b28a7472d","version":6,"status":"done","tags":[],"date":"2026-03-25T15:51:27Z","url":{"schema":"http","addr":"napthevn.news","fqdn":"napthevn.news","domain":"napthevn.news","tld":"news"},"ip":{"addr":"103.200.23.189","port":0,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"final":{"url":{"schema":"https","addr":"napthevn.news/?app=10050","fqdn":"napthevn.news","domain":"napthevn.news","tld":"news"},"title":"Trung tâm nạp thẻ Garena","dom":{"size":120671,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6821)","md5":"f7a4a449971bde133cbc173242a92959","sha1":"47076c27be9c28ad89f61d6a264e76307387bb1d","sha256":"eaf98926513659225cc290b073b74ab1f7e306021b0e51d1321120bf29349dd7","sha512":"f5a38d8a74b2c28488afcf459abb2b2341f641a52d0c7b30cd1e1cbbbaa7f9b399ea7791e9e72199de3f5bc653c567b2ca26f37b311691ce83309af969b01791","ssdeep":"1536:pnVQkoIhNj4zEIt9t2tJtGtdtOt0tfqqbOmqreNwVedqNK2yq+:piO/K2y","tlshash":"8ac308b011f006666063c6e4ba31e96e6e52b68fee4fc594b3dc1b851fd2ca2cd1f245","dom_hash":"domhashc3359e60bcea3e5200bb9c1f6ae4635c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"napthevn.news","fqdn":"napthevn.news","domain":"napthevn.news","tld":"news"},"ip":{"addr":"103.200.23.189","port":0,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-29T15:51:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"napthevn.news","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-03-22T22:42:38.000244Z","alert_count":0,"request_count":1,"received_data":871857,"sent_data":490,"comment":"","tags":null,"fingerprints":null},{"fqdn":"napthevn.news","ip":{"addr":"103.200.23.189","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-25T12:25:13.943056Z","last_seen":"2026-03-25T12:25:13.943056Z","alert_count":8,"request_count":8,"received_data":429276,"sent_data":3895,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdn-gop.garenanow.com","ip":{"addr":"104.18.57.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2010-09-27","domain_rank":469709,"first_seen":"2023-01-26T19:54:09Z","last_seen":"2026-03-23T13:43:51.610882Z","alert_count":0,"request_count":15,"received_data":611508,"sent_data":6984,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-03-22T22:38:17.64832Z","alert_count":0,"request_count":7,"received_data":4845,"sent_data":5448,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-22T22:23:33.61086Z","alert_count":0,"request_count":1,"received_data":423033,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-22T22:34:23.857339Z","alert_count":0,"request_count":1,"received_data":9014,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-16671127289","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc7d51fd0c0566f0a36e22b79922ca09","sha1":"4c36fa03db73b4a24391688c7ae8af858d30a148","sha256":"231633cc0c39c82e329b803e4f5c9413a90f228623ed82547ab6bcf88d0780ac","sha512":"6f4a592e9a5b59b3d2e6728f4639157b4af87b43e9b86ccbda20996ff57ea34c20bb2fb0c2129f7ba9ca68ed97b2f247193365d51b62b2daa394bce2572d422a","ssdeep":"6144:IjcY1SXNyyfjt8ynnHeFjTv87d4J+GZD81Nr3fNEF66QioE:8SXoyfRHeFjj8XvC","tlshash":"259408cdb3d6746653a2b478903f018ba57a28a2f44ccc99f189cce42d7469a4277f7c","size":422383,"data":"","first_seen":"2026-03-25T12:25:19.870106Z","last_seen":"2026-03-25T15:51:29.962852Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/canvas-confetti@1.6.0/dist/confetti.browser.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3b4c83cb818e4994c82d97300316db8","sha1":"4b977525b53f5b68a3366cb9a27494e40346de64","sha256":"9c2ae7a7ca8e46486a560dd8c7dd965204a4b9164301f1115402b69f2fa58901","sha512":"cd3d0809b08ff45bed90d03576c3f218ae4790b51ee3b29b136045d9a51e37e8d014160f7c8698a213869c4130c4c93dbcb2fe6cb11d16cff10f1518ff608b23","ssdeep":"192:HCjdomnmsP/QF/BZmwfqRdWybN6TWPEnjPkbXJ8MU:HCpnm8Q8wAdWybN6Th4bXJtU","tlshash":"36f1b6dcf6513d160f5323baa84f810ea238766b270f4584a1b9d5a83dbc41d633ef69","size":7890,"data":"","first_seen":"2025-05-07T02:20:36.658378Z","last_seen":"2026-04-06T17:21:40.208192Z","times_seen":229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthevn.news/assets/script.js","fqdn":"napthevn.news","domain":"napthevn.news","tld":"news"},"ip":{"addr":"103.200.23.189","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"09230a124eca17583ee5786540733d1e","sha1":"e002032bc76fd2417a8d8ffe97b4e4a8e9934754","sha256":"d18cecc44215045ffd3e0f4dd32ca820826ae91c8b69ffab64d274d436a82a4a","sha512":"478254fcc98fc126e33183ec53bb10f03f6891795666347bc407ca6d91484113494646969ea7c66abe806ae0b591a9407acdb06cd6d9bab50e88a4f4e8f299cf","ssdeep":"1536:x0JY/GugQcFuM30AW0mlNEf66zGJu9/+JC9fZALU56C:x/gsr7uBt6LU8C","tlshash":"8593419d62250032483737bddb936048ff6a2267b2018a597e9c86411fb6b24d673fde","size":95544,"data":"","first_seen":"2026-03-25T12:25:19.885046Z","last_seen":"2026-03-25T15:51:29.964701Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e33d3fff53511a365c0af8a5fbccdcf9","sha1":"055a7d4cc0fdb08f16301c5b82e59b5f7c9d02bb","sha256":"c24c29289bd8cfbd1c11e5fcc63c925a266da16f4d0eff7ece9f4c0e7baea016","sha512":"cf6b9f3237b2618ac72d922be3ae323751fdbb4116837d94e60b96112b644657777c7d91fade414bcdd08816376f9542891fbe71df785c0ae61bfce46156710c","ssdeep":"12288:zbaHsMmJQlnr/7Itc3zuCmY3n2LWYJPkwNaAkalab:PaMMm2RktUzuBYG6HTAkalc","tlshash":"c9054bea744274ea6272b4f940bb1408a3bd95aed41c0c5eb199c4f12f7680d70b6fb7","size":870949,"data":"","first_seen":"2026-03-12T21:14:04.564301Z","last_seen":"2026-03-27T18:26:18.3083Z","times_seen":12906,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthevn.news/","fqdn":"napthevn.news","domain":"napthevn.news","tld":"news"},"ip":{"addr":"103.200.23.189","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"da7e2cbddae6f6a5c1b51235e819ce29","sha1":"abfa59f51be2cea9e6292e5d331c359c7ef94d42","sha256":"45e5771ab5b7aa7e0be0d9af35cfbbb911cf4704b2ad826859d62944060dee06","sha512":"b7c7327f1d53ec78dd5aa3d125f6a17e9a953ac08dda62a1d761d00d9db99fd90594b03a88e324ed1e11101bf060c0d835084bd864cbdc090134c65f2e9c0031","ssdeep":"","tlshash":"94c02b88320a0cb146f72700cb3fb604b002333494e099324d2d23484d20e57d744860","size":155,"data":"","first_seen":"2026-03-25T12:25:19.902903Z","last_seen":"2026-03-25T15:51:29.977826Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"153d0d074a848f6f5a99c49c8cc957fa","sha1":"3a4c1721d66280c23002ccb8c77306ebbd4eb041","sha256":"7193190bf594994ad54b32225fdf2a1b33f3833cd5df798c0d49eed8fce495ac","sha512":"753060105dc1a79b00d86c2ba9085f1a80eb55cb9852095eb16638bfb0860cba3dc6eac0cb7c13c8d0428a41e441a6faade120827be873c2cc69ab8b52bd1ef6","ssdeep":"","tlshash":"b51121b22a05f0350b7209e191ffcb75e452741cf15c85e8a915ca842f69ccbcd05585","size":976,"data":"","first_seen":"2026-03-12T21:14:04.587611Z","last_seen":"2026-03-27T18:00:57.990841Z","times_seen":3255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:05.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://napthevn.news\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 370760\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Mar 2026 10:42:58 GMT\r\nexpires: Thu, 25 Mar 2027 10:42:58 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 09 Mar 2026 04:00:17 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 18487\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870949,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"e33d3fff53511a365c0af8a5fbccdcf9","sha1":"055a7d4cc0fdb08f16301c5b82e59b5f7c9d02bb","sha256":"c24c29289bd8cfbd1c11e5fcc63c925a266da16f4d0eff7ece9f4c0e7baea016","sha512":"cf6b9f3237b2618ac72d922be3ae323751fdbb4116837d94e60b96112b644657777c7d91fade414bcdd08816376f9542891fbe71df785c0ae61bfce46156710c","ssdeep":"12288:zbaHsMmJQlnr/7Itc3zuCmY3n2LWYJPkwNaAkalab:PaMMm2RktUzuBYG6HTAkalc","tlshash":"c9054bea744274ea6272b4f940bb1408a3bd95aed41c0c5eb199c4f12f7680d70b6fb7","first_seen":"2026-03-12T21:14:04.564301Z","last_seen":"2026-03-27T18:26:18.3083Z","times_seen":12906,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":145,"dns":1,"connect":8,"send":0,"wait":10,"receive":36,"ssl":135},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthevn.news/assets/app.css","fqdn":"napthevn.news","domain":"napthevn.news","tld":"news"},"ip":{"addr":"103.200.23.189","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:04.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.napthevn.news","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 03:55:14 GMT","end":"Tue, 23 Jun 2026 03:55:13 GMT"},"fingerprint":{"sha1":"2A:96:F8:D6:80:E5:5E:1F:F1:1C:39:5B:91:15:41:34:50:57:20:B5","sha256":"33:F9:0F:2E:A7:7B:9F:F7:07:C6:5D:D5:B9:DB:BE:A0:81:14:67:CD:0B:A2:70:C3:1E:E5:55:D6:EE:17:4F:E8"}}},"request":{"raw":"GET /assets/app.css HTTP/1.1\r\nHost: napthevn.news\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nCookie: PHPSESSID=uvmdn3r2lacg4i7t3bi7kg9l26\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Apr 2026 15:50:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Jan 2026 07:26:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 16191\r\ndate: Wed, 25 Mar 2026 15:50:56 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":122784,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"70988a2299ef6b02852625916d388b39","sha1":"c32d60dd1d150c9bafb7a2a8a71628cf775ff9ac","sha256":"617c2ab77b84ac3c26b0608bec5e299adcfd245b2d25274337cbe6c7c2a6b6b2","sha512":"65c5c68ff677210b1d7331a174d618f35851811fa2d6c842559f40f6c146fa89293e99e671e8940e090f2d82619befea891a04316f7a1285ae69bb3351dd0679","ssdeep":"1536:OY0CcrY+6zpeq5PDlKPnFCYsE5qw5OBpil:LTcrY+ypeq5blKtCYsE5qw5OBpil","tlshash":"25c36118560750271e33aff5e7ec658cfb1a21b78e2b94b9badc21510ff02b05891e2d","first_seen":"2026-03-25T12:25:19.872249Z","last_seen":"2026-03-25T15:51:29.960737Z","times_seen":2,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"napthevn.news","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-gop.garenanow.com/gop/app/0000/100/155/icon.png","fqdn":"cdn-gop.garenanow.com","domain":"garenanow.com","tld":"com"},"ip":{"addr":"104.18.57.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:04.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-gop.garenanow.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 18:27:24 GMT","end":"Thu, 09 Apr 2026 18:27:23 GMT"},"fingerprint":{"sha1":"0A:EC:A3:C1:74:00:88:6B:E0:98:C4:9B:B4:98:30:80:90:49:DB:20","sha256":"A0:24:B8:EB:EF:85:A0:27:22:33:86:FC:B1:D1:CB:18:BC:86:F0:FE:7D:46:4F:76:B6:F1:02:0B:57:04:A2:86"}}},"request":{"raw":"GET /gop/app/0000/100/155/icon.png HTTP/1.1\r\nHost: cdn-gop.garenanow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:51:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 19754\r\nserver: cloudflare\r\nx-obs-request-id: 0000019BD520D0F89415B93DE42A4CC5\r\naccept-ranges: bytes\r\netag: \"f414c0686878e3c868f81d6ad7ebf240\"\r\nlast-modified: Thu, 09 Oct 2025 06:14:29 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nage: 366\r\nexpires: Wed, 25 Mar 2026 16:01:05 GMT\r\ncache-control: public, max-age=600\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncf-ray: 9e1f13323951c759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19754,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"f414c0686878e3c868f81d6ad7ebf240","sha1":"4134c4d63c9eade430002d45c01177211a624c55","sha256":"212f73f92531d5e3dc3657036dab92723edd0640479094ad037bb9213a603240","sha512":"6dfa8eb5bae79da69a44828f7e27ebe73e382bb5d6bee0d14ce839ba18e78130c3d9e350847ae64207553506eefb6bedb17bef63379de917a945913e45287af3","ssdeep":"384:ZZp7OJDCckkvImLWVlu25J9pHTc+1xBkXQZAAuzh1XzugqZ/PNIse2UAaCV:zwUrkveAULzyXmAAQhVCPase2pa+","tlshash":"1092d0f5d20591c0abf6f5c344f401aeaedac057679980b4da1930ef1c43b17aba4dd1","first_seen":"2025-12-31T12:20:59.736106Z","last_seen":"2026-03-25T15:51:29.961707Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1512,"timings":{"blocked":595,"dns":592,"connect":3,"send":0,"wait":297,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/form-data/16671127289?gtm=45be63n1v9240413347za200zd9240413347xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=103116026~103200004~115938465~115938469~116024733~117384406~117484252~118199988\u0026npa=1\u0026frm=0\u0026pscdl=noapi\u0026auid=1810803646.1774453865","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:06.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"F8:90:A0:F9:74:3F:20:44:F3:3A:FB:A7:89:DC:37:89:3C:83:4D:03","sha256":"BE:A4:BF:EB:A3:08:0B:22:38:7C:32:95:9D:25:3C:CB:F8:42:AD:54:32:60:4C:1D:43:C5:81:2C:4E:AF:DE:AE"}}},"request":{"raw":"POST /pagead/form-data/16671127289?gtm=45be63n1v9240413347za200zd9240413347xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=103116026~103200004~115938465~115938469~116024733~117384406~117484252~118199988\u0026npa=1\u0026frm=0\u0026pscdl=noapi\u0026auid=1810803646.1774453865 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://napthevn.news/\r\nOrigin: https://napthevn.news\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\ndate: Wed, 25 Mar 2026 15:51:06 GMT\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T10:11:47.49407Z","times_seen":13457697,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-16671127289","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:04.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"5D:21:36:26:B5:1D:67:14:0D:6A:68:D3:7C:EB:39:6E:A1:45:8C:29","sha256":"BC:A5:DD:5A:08:3A:33:49:76:BB:EB:18:9C:45:17:80:A1:3E:31:5F:BA:F9:93:28:C7:76:A0:97:FF:E9:3F:1C"}}},"request":{"raw":"GET /gtag/js?id=AW-16671127289 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 25 Mar 2026 15:51:04 GMT\r\nexpires: Wed, 25 Mar 2026 15:51:04 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 25 Mar 2026 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 142993\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":422383,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5882)","md5":"bc7d51fd0c0566f0a36e22b79922ca09","sha1":"4c36fa03db73b4a24391688c7ae8af858d30a148","sha256":"231633cc0c39c82e329b803e4f5c9413a90f228623ed82547ab6bcf88d0780ac","sha512":"6f4a592e9a5b59b3d2e6728f4639157b4af87b43e9b86ccbda20996ff57ea34c20bb2fb0c2129f7ba9ca68ed97b2f247193365d51b62b2daa394bce2572d422a","ssdeep":"6144:IjcY1SXNyyfjt8ynnHeFjTv87d4J+GZD81Nr3fNEF66QioE:8SXoyfRHeFjj8XvC","tlshash":"259408cdb3d6746653a2b478903f018ba57a28a2f44ccc99f189cce42d7469a4277f7c","first_seen":"2026-03-25T12:25:19.870106Z","last_seen":"2026-03-25T15:51:29.962852Z","times_seen":2,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":84,"dns":1,"connect":8,"send":0,"wait":31,"receive":25,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-gop.garenanow.com/gop/app/0000/100/072/icon.png","fqdn":"cdn-gop.garenanow.com","domain":"garenanow.com","tld":"com"},"ip":{"addr":"104.18.57.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:04.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-gop.garenanow.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 18:27:24 GMT","end":"Thu, 09 Apr 2026 18:27:23 GMT"},"fingerprint":{"sha1":"0A:EC:A3:C1:74:00:88:6B:E0:98:C4:9B:B4:98:30:80:90:49:DB:20","sha256":"A0:24:B8:EB:EF:85:A0:27:22:33:86:FC:B1:D1:CB:18:BC:86:F0:FE:7D:46:4F:76:B6:F1:02:0B:57:04:A2:86"}}},"request":{"raw":"GET /gop/app/0000/100/072/icon.png HTTP/1.1\r\nHost: cdn-gop.garenanow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:51:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 35999\r\nserver: cloudflare\r\nx-obs-request-id: 0000019CE005347C954BBCB44C564932\r\naccept-ranges: bytes\r\netag: \"5f5ad5f3f9350f8674357e3ad3bb575e\"\r\nlast-modified: Thu, 12 Mar 2026 03:08:01 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nage: 527\r\nexpires: Wed, 25 Mar 2026 16:01:05 GMT\r\ncache-control: public, max-age=600\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncf-ray: 9e1f13322917c759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35999,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"5f5ad5f3f9350f8674357e3ad3bb575e","sha1":"25356f9470b45780ccf5589a53cebadc3707bfd8","sha256":"5e97f35985ae926486187bc7eef05cd2eecf6eb0f90eab4576073b2cf33f6566","sha512":"c7d1250e6677181cdf6c386611f4c63576d10bd90100f126dfc58ebcc7ada73bc3ae87ffbb4839871c0d4664d59877cafeb558b03845eff5eeddff144a26ceca","ssdeep":"768:WqPPcDak3/W03UQ9653+NhDTTURcks+M2BnAePibz5Oqgf9:RHQHI38JosP21AIixhgf9","tlshash":"e5f2024e3b400396d652b357bc7358a83814d769129394b940bb36227be1ffcce56a35","first_seen":"2026-03-25T12:25:19.888412Z","last_seen":"2026-03-25T15:51:29.96344Z","times_seen":2,"resource_available":false,"data":null}},"time_used":704,"timings":{"blocked":579,"dns":0,"connect":0,"send":0,"wait":123,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-gop.garenanow.com/gop/mshop/www/live/assets/ic-google-d2ceaa95.svg","fqdn":"cdn-gop.garenanow.com","domain":"garenanow.com","tld":"com"},"ip":{"addr":"104.18.57.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:04.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-gop.garenanow.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 18:27:24 GMT","end":"Thu, 09 Apr 2026 18:27:23 GMT"},"fingerprint":{"sha1":"0A:EC:A3:C1:74:00:88:6B:E0:98:C4:9B:B4:98:30:80:90:49:DB:20","sha256":"A0:24:B8:EB:EF:85:A0:27:22:33:86:FC:B1:D1:CB:18:BC:86:F0:FE:7D:46:4F:76:B6:F1:02:0B:57:04:A2:86"}}},"request":{"raw":"GET /gop/mshop/www/live/assets/ic-google-d2ceaa95.svg HTTP/1.1\r\nHost: cdn-gop.garenanow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:51:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nx-obs-request-id: 0000019A0CEB8556980C30C28B36EC92\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 22 Oct 2025 09:32:45 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nage: 2991638\r\ncf-cache-status: HIT\r\netag: W/\"03c2c64edea0a95174e94b164fc513dc\"\r\ncontent-encoding: gzip\r\ncf-ray: 9e1f13322920c759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1310,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03c2c64edea0a95174e94b164fc513dc","sha1":"2099e04f410bb5fb1e4182679445a3787363471e","sha256":"d2ceaa95987be72f6b13771ff628f84c84f267be19fd70b7de4bfd24b2eeb9ae","sha512":"cb7ae000aa1e857e65d1dd4ee505269208ead90af22a9ca585266f89d7fff539468ad79b206cab12f85a2e57d6ab9d6a7a3468afd3353b034186f364e86eaafc","ssdeep":"","tlshash":"d621f3e664dd60d1e905d3415a2f173a24b931fe3696c9a98343ae3574741fe848dc80","first_seen":"2025-07-09T09:36:01.527574Z","last_seen":"2026-03-25T15:51:29.964235Z","times_seen":7,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":575,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthevn.news/assets/script.js","fqdn":"napthevn.news","domain":"napthevn.news","tld":"news"},"ip":{"addr":"103.200.23.189","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:04.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.napthevn.news","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 03:55:14 GMT","end":"Tue, 23 Jun 2026 03:55:13 GMT"},"fingerprint":{"sha1":"2A:96:F8:D6:80:E5:5E:1F:F1:1C:39:5B:91:15:41:34:50:57:20:B5","sha256":"33:F9:0F:2E:A7:7B:9F:F7:07:C6:5D:D5:B9:DB:BE:A0:81:14:67:CD:0B:A2:70:C3:1E:E5:55:D6:EE:17:4F:E8"}}},"request":{"raw":"GET /assets/script.js HTTP/1.1\r\nHost: napthevn.news\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nCookie: PHPSESSID=uvmdn3r2lacg4i7t3bi7kg9l26\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 26 Jan 2026 07:26:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 16026\r\ndate: Wed, 25 Mar 2026 15:50:56 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95551,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"09230a124eca17583ee5786540733d1e","sha1":"e002032bc76fd2417a8d8ffe97b4e4a8e9934754","sha256":"d18cecc44215045ffd3e0f4dd32ca820826ae91c8b69ffab64d274d436a82a4a","sha512":"478254fcc98fc126e33183ec53bb10f03f6891795666347bc407ca6d91484113494646969ea7c66abe806ae0b591a9407acdb06cd6d9bab50e88a4f4e8f299cf","ssdeep":"1536:x0JY/GugQcFuM30AW0mlNEf66zGJu9/+JC9fZALU56C:x/gsr7uBt6LU8C","tlshash":"8593419d62250032483737bddb936048ff6a2267b2018a597e9c86411fb6b24d673fde","first_seen":"2026-03-25T12:25:19.885046Z","last_seen":"2026-03-25T15:51:29.964701Z","times_seen":2,"resource_available":true,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":576,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"napthevn.news","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fnapthevn.news%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=526129528.1774453865\u0026dt=Trung%20t%C3%A2m%20n%E1%BA%A1p%20th%E1%BA%BB%20Garena\u0026auid=1810803646.1774453865\u0026navt=n\u0026npa=1\u0026gtm=45be63n1v9240413347za200zd9240413347xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=103116026~103200004~115938465~115938469~116024733~117384406~117484252~118199988\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-16671127289\u0026tid=AW-16671127289\u0026tft=1774453865061\u0026tfd=1710","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:05.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"F8:90:A0:F9:74:3F:20:44:F3:3A:FB:A7:89:DC:37:89:3C:83:4D:03","sha256":"BE:A4:BF:EB:A3:08:0B:22:38:7C:32:95:9D:25:3C:CB:F8:42:AD:54:32:60:4C:1D:43:C5:81:2C:4E:AF:DE:AE"}}},"request":{"raw":"POST /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fnapthevn.news%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=526129528.1774453865\u0026dt=Trung%20t%C3%A2m%20n%E1%BA%A1p%20th%E1%BA%BB%20Garena\u0026auid=1810803646.1774453865\u0026navt=n\u0026npa=1\u0026gtm=45be63n1v9240413347za200zd9240413347xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=103116026~103200004~115938465~115938469~116024733~117384406~117484252~118199988\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-16671127289\u0026tid=AW-16671127289\u0026tft=1774453865061\u0026tfd=1710 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://napthevn.news/\r\nOrigin: https://napthevn.news\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 25 Mar 2026 15:51:05 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://napthevn.news\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T10:11:47.49407Z","times_seen":13457697,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-gop.garenanow.com/gop/mshop/www/live/assets/ic-fb-485c92b0.svg","fqdn":"cdn-gop.garenanow.com","domain":"garenanow.com","tld":"com"},"ip":{"addr":"104.18.57.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:04.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-gop.garenanow.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 18:27:24 GMT","end":"Thu, 09 Apr 2026 18:27:23 GMT"},"fingerprint":{"sha1":"0A:EC:A3:C1:74:00:88:6B:E0:98:C4:9B:B4:98:30:80:90:49:DB:20","sha256":"A0:24:B8:EB:EF:85:A0:27:22:33:86:FC:B1:D1:CB:18:BC:86:F0:FE:7D:46:4F:76:B6:F1:02:0B:57:04:A2:86"}}},"request":{"raw":"GET /gop/mshop/www/live/assets/ic-fb-485c92b0.svg HTTP/1.1\r\nHost: cdn-gop.garenanow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:51:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nx-obs-request-id: 0000019A1289DA92941D094EE88F2849\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 22 Oct 2025 09:32:45 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nage: 5244942\r\ncf-cache-status: HIT\r\netag: W/\"8f90a549179f5d200e48a023761d02cf\"\r\ncontent-encoding: gzip\r\ncf-ray: 9e1f1332291fc759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":557,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f90a549179f5d200e48a023761d02cf","sha1":"d014a356ab8bbccfd941e303a35bf020c52ce34a","sha256":"485c92b0fcfea240cab51353b5737f1b321b8855a54e5963e2bcf771bff173bb","sha512":"7ff343f63725ad05892e5f0894ab5c9df49e4b506b40973bb8937f70ff2954b58700b15f49e187b32f4b9a31e6012a83b24238b487441eed91ed1b0488e60277","ssdeep":"","tlshash":"4df081f5216c7b815844e778927976b234390cfd77374e009290fc91d9d01fb0d5e586","first_seen":"2025-07-09T09:36:01.515958Z","last_seen":"2026-03-25T15:51:29.965608Z","times_seen":7,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":577,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-gop.garenanow.com/gop/mshop/www/live/assets/ic-vk-abadf989.svg","fqdn":"cdn-gop.garenanow.com","domain":"garenanow.com","tld":"com"},"ip":{"addr":"104.18.57.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:04.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-gop.garenanow.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 18:27:24 GMT","end":"Thu, 09 Apr 2026 18:27:23 GMT"},"fingerprint":{"sha1":"0A:EC:A3:C1:74:00:88:6B:E0:98:C4:9B:B4:98:30:80:90:49:DB:20","sha256":"A0:24:B8:EB:EF:85:A0:27:22:33:86:FC:B1:D1:CB:18:BC:86:F0:FE:7D:46:4F:76:B6:F1:02:0B:57:04:A2:86"}}},"request":{"raw":"GET /gop/mshop/www/live/assets/ic-vk-abadf989.svg HTTP/1.1\r\nHost: cdn-gop.garenanow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:51:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nx-obs-request-id: 0000019C5920ABBC9416A041A2B94366\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 03 Feb 2026 03:07:02 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nage: 3432026\r\ncf-cache-status: HIT\r\netag: W/\"01187641f966b014b71efb61370675b0\"\r\ncontent-encoding: gzip\r\ncf-ray: 9e1f1332292bc759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":902,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"01187641f966b014b71efb61370675b0","sha1":"9820d3c8d1b8e225c6214f2c6a40454b7f1b8e6d","sha256":"abadf9891c4f17e4109a033edcb5e6aa37f8fe0553394d5fe5ff59c2a2a743d4","sha512":"0e7856c82b73c485ce2288bfc363b001bc7e1ffc56a3b632e95509314e328bd5d95d490bc245249d59f93e2630016b02f60622b124e613b30fbb98e7d8b2dd11","ssdeep":"","tlshash":"44118cf5ebe8e1d1cd468fb4976cecb5ae1235693a25cf488af0c56093690ef09c18d0","first_seen":"2025-07-09T09:36:01.502153Z","last_seen":"2026-03-25T15:51:29.966128Z","times_seen":5,"resource_available":false,"data":null}},"time_used":657,"timings":{"blocked":576,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthevn.news/assets/images/zing.png","fqdn":"napthevn.news","domain":"napthevn.news","tld":"news"},"ip":{"addr":"103.200.23.189","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:04.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.napthevn.news","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 03:55:14 GMT","end":"Tue, 23 Jun 2026 03:55:13 GMT"},"fingerprint":{"sha1":"2A:96:F8:D6:80:E5:5E:1F:F1:1C:39:5B:91:15:41:34:50:57:20:B5","sha256":"33:F9:0F:2E:A7:7B:9F:F7:07:C6:5D:D5:B9:DB:BE:A0:81:14:67:CD:0B:A2:70:C3:1E:E5:55:D6:EE:17:4F:E8"}}},"request":{"raw":"GET /assets/images/zing.png HTTP/1.1\r\nHost: napthevn.news\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nCookie: PHPSESSID=uvmdn3r2lacg4i7t3bi7kg9l26\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Apr 2026 15:50:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 26 Jan 2026 07:26:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19672\r\ndate: Wed, 25 Mar 2026 15:50:57 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19672,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 114, 8-bit/color RGBA, non-interlaced","md5":"cefe0b4938ac976bb819ac7268b0cc13","sha1":"f6460bcb39e1925a2942bab5ab22eea91034b75a","sha256":"b87cd753fb48701e4829839a7257a8fbbcc7abf546db74be966daeec44d93529","sha512":"903b176f0c0dd25116683aca021475345947d15d9d20fb4036412b0c589d74da8b3e7326f49d64cf3333128c46e15b0eb8f7ecb9a30f0dc2bf6a86c1cb082602","ssdeep":"384:7CngZ4t739tgH1bTVy8wyTmA6KX5sibJKhNaTH3WVUTqeeIa1PZ3rJiP4:OgO39GZsXAnnb/zrqeeB1PZ3rJiw","tlshash":"4992c0f074102010778db28b5bfb29929f335df1a69c50b1edc2811568d7dfb0aae2a3","first_seen":"2025-10-11T07:48:35.613256Z","last_seen":"2026-03-25T15:51:29.966947Z","times_seen":4,"resource_available":false,"data":null}},"time_used":849,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":848,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"napthevn.news","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/form-data/16671127289?gtm=45be63n1v9240413347za200zd9240413347xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=103116026~103200004~115938465~115938469~116024733~117384406~117484252~118199988\u0026npa=1\u0026frm=0\u0026pscdl=noapi\u0026auid=1810803646.1774453865\u0026ec_mode=a\u0026em=tv.1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:06.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"F8:90:A0:F9:74:3F:20:44:F3:3A:FB:A7:89:DC:37:89:3C:83:4D:03","sha256":"BE:A4:BF:EB:A3:08:0B:22:38:7C:32:95:9D:25:3C:CB:F8:42:AD:54:32:60:4C:1D:43:C5:81:2C:4E:AF:DE:AE"}}},"request":{"raw":"POST /ccm/form-data/16671127289?gtm=45be63n1v9240413347za200zd9240413347xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=103116026~103200004~115938465~115938469~116024733~117384406~117484252~118199988\u0026npa=1\u0026frm=0\u0026pscdl=noapi\u0026auid=1810803646.1774453865\u0026ec_mode=a\u0026em=tv.1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://napthevn.news/\r\nOrigin: https://napthevn.news\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://napthevn.news\r\ndate: Wed, 25 Mar 2026 15:51:06 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:67:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsgac:67:0\r\nreport-to: {\"group\":\"ascnsrsgac:67:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgac:67:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T10:11:47.49407Z","times_seen":13457697,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-gop.garenanow.com/gop/app/0000/100/067/icon.png","fqdn":"cdn-gop.garenanow.com","domain":"garenanow.com","tld":"com"},"ip":{"addr":"104.18.57.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:04.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-gop.garenanow.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 18:27:24 GMT","end":"Thu, 09 Apr 2026 18:27:23 GMT"},"fingerprint":{"sha1":"0A:EC:A3:C1:74:00:88:6B:E0:98:C4:9B:B4:98:30:80:90:49:DB:20","sha256":"A0:24:B8:EB:EF:85:A0:27:22:33:86:FC:B1:D1:CB:18:BC:86:F0:FE:7D:46:4F:76:B6:F1:02:0B:57:04:A2:86"}}},"request":{"raw":"GET /gop/app/0000/100/067/icon.png HTTP/1.1\r\nHost: cdn-gop.garenanow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:51:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 68227\r\nserver: cloudflare\r\nx-obs-request-id: 0000019C52BFA63B994FEF83825A2C16\r\naccept-ranges: bytes\r\netag: \"ce0473c929fa557b06e60379848eadf2\"\r\nlast-modified: Wed, 14 Jan 2026 04:12:15 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nage: 334\r\nexpires: Wed, 25 Mar 2026 16:01:05 GMT\r\ncache-control: public, max-age=600\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncf-ray: 9e1f1332290cc759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68227,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"ce0473c929fa557b06e60379848eadf2","sha1":"92b52c792d2d2762260732a3ccf04ad6d1daed9b","sha256":"87ea2fe5d21ef7d7bfa4d104f26f1eb8fd495de3dd32d063313d991e6835c176","sha512":"6902640a20c634815a302eb5098a1a589ea6e596995e26bafc2ae20ac7a1247a6f61c5714d20553ede8ebe3f4620a786fa425786a882941b9414be65da17df61","ssdeep":"1536:+b7kA03EoxH6weF6f3rq2bctk09RXIC39bBM6l56y3jTuU8Wv0sC:Mr0ZQ7F6f3G2bpCRXS05JzTuU8w7C","tlshash":"356302f45b3e3ccae26f6869143a95323553009d6360758a75c3e7a0cb3a4fed62d389","first_seen":"2026-01-29T18:57:45.711463Z","last_seen":"2026-04-05T14:52:05.971636Z","times_seen":6,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":584,"dns":0,"connect":0,"send":0,"wait":86,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-gop.garenanow.com/gop/mshop/www/live/assets/ic-twitter-92527e61.svg","fqdn":"cdn-gop.garenanow.com","domain":"garenanow.com","tld":"com"},"ip":{"addr":"104.18.57.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:04.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-gop.garenanow.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 18:27:24 GMT","end":"Thu, 09 Apr 2026 18:27:23 GMT"},"fingerprint":{"sha1":"0A:EC:A3:C1:74:00:88:6B:E0:98:C4:9B:B4:98:30:80:90:49:DB:20","sha256":"A0:24:B8:EB:EF:85:A0:27:22:33:86:FC:B1:D1:CB:18:BC:86:F0:FE:7D:46:4F:76:B6:F1:02:0B:57:04:A2:86"}}},"request":{"raw":"GET /gop/mshop/www/live/assets/ic-twitter-92527e61.svg HTTP/1.1\r\nHost: cdn-gop.garenanow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:51:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nx-obs-request-id: 0000019C24ACDF2B98135A84D59C3D6E\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 03 Feb 2026 03:07:02 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nage: 2479570\r\ncf-cache-status: HIT\r\netag: W/\"c42e204db55336316ccd078abd3b5fed\"\r\ncontent-encoding: gzip\r\ncf-ray: 9e1f1332292ac759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":422,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c42e204db55336316ccd078abd3b5fed","sha1":"86c3f5b8080aa9a3fc024b6d2e22b6e6b20b3c75","sha256":"92527e610065edb6102fdbc52d472c7e949a691b3b020739bea4a0d6e43a3c02","sha512":"dfa8a5d934cb0297467280bf36315df0391e1a3a1cee3b57fc883b641d759006c75c24ade7bad9e93fbba9a1ed7dda9d7c3e474b58d383cb3a78fc25bfb76a7f","ssdeep":"","tlshash":"a5e02be2f1aaffc2c056d73612357279087b35912f7902d6c6c1961452781ef58059d9","first_seen":"2025-07-09T09:36:01.529173Z","last_seen":"2026-03-25T15:51:29.967965Z","times_seen":5,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":577,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-gop.garenanow.com/gop/app/0000/100/067/point.png","fqdn":"cdn-gop.garenanow.com","domain":"garenanow.com","tld":"com"},"ip":{"addr":"104.18.57.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:04.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-gop.garenanow.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 18:27:24 GMT","end":"Thu, 09 Apr 2026 18:27:23 GMT"},"fingerprint":{"sha1":"0A:EC:A3:C1:74:00:88:6B:E0:98:C4:9B:B4:98:30:80:90:49:DB:20","sha256":"A0:24:B8:EB:EF:85:A0:27:22:33:86:FC:B1:D1:CB:18:BC:86:F0:FE:7D:46:4F:76:B6:F1:02:0B:57:04:A2:86"}}},"request":{"raw":"GET /gop/app/0000/100/067/point.png HTTP/1.1\r\nHost: cdn-gop.garenanow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:51:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 2582\r\nserver: cloudflare\r\nx-obs-request-id: 0000019C2E2F42C9980B624192A1F2E3\r\naccept-ranges: bytes\r\netag: \"d4a1999bb0648b0493f9ef2f9489902d\"\r\nlast-modified: Tue, 25 Oct 2022 06:27:57 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nage: 285\r\nexpires: Wed, 25 Mar 2026 16:01:05 GMT\r\ncache-control: public, max-age=600\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncf-ray: 9e1f1332293bc759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2582,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"d4a1999bb0648b0493f9ef2f9489902d","sha1":"5a82a7640cb229ced82c91504b8b1f0440ea31bc","sha256":"4b8e573bd2c9d55d2b7465ee266e7b54312a6a02a1f3dce010143dec84c774ad","sha512":"cdfb073c32a350bab3ef569856a006ddf1d4d11a96bbf08b6011c4ff0ddab84e6e251d446cd89c29608d7f7e59356d36dd10ae0cdcde4f247ce8ecbe511ae6ae","ssdeep":"","tlshash":"b651fb6cae809140a787f61101f62a37d6b1488099b038ddb8cf640711f49f52c3e9df","first_seen":"2023-05-03T02:19:58Z","last_seen":"2026-03-25T15:51:29.968477Z","times_seen":10,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":577,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthevn.news/assets/images/Logo_Vinaphone.svg.png","fqdn":"napthevn.news","domain":"napthevn.news","tld":"news"},"ip":{"addr":"103.200.23.189","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:04.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.napthevn.news","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 03:55:14 GMT","end":"Tue, 23 Jun 2026 03:55:13 GMT"},"fingerprint":{"sha1":"2A:96:F8:D6:80:E5:5E:1F:F1:1C:39:5B:91:15:41:34:50:57:20:B5","sha256":"33:F9:0F:2E:A7:7B:9F:F7:07:C6:5D:D5:B9:DB:BE:A0:81:14:67:CD:0B:A2:70:C3:1E:E5:55:D6:EE:17:4F:E8"}}},"request":{"raw":"GET /assets/images/Logo_Vinaphone.svg.png HTTP/1.1\r\nHost: napthevn.news\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nCookie: PHPSESSID=uvmdn3r2lacg4i7t3bi7kg9l26\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Apr 2026 15:50:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 26 Jan 2026 07:26:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23849\r\ndate: Wed, 25 Mar 2026 15:50:56 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23849,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 275, 8-bit/color RGBA, non-interlaced","md5":"e3e0fa028b024a5e51e9ac27796a8ffc","sha1":"68cdad1e533988c21e27a465e23360e4ced1141b","sha256":"d6e2bb292863921cb277fbae28de20df5d89e20e9065b1787a5aca68c471684a","sha512":"9893d8f6a1d4530d609d9a672e40915489313c8c605648efdb12637e2783274196bbc30b2d8499abeafef5186dfd82e41755757de324061f681a85f3e56d9bfc","ssdeep":"384:GQl2tRn86sociSwka76eWCezkmmDWxk8SwCU0sTNL/S58vYQVejxijRF1P5/2GIF:GGcR57k/aGxCezktDeGUzFwieqNROlF","tlshash":"65b2d0dbf607d3611e5f507c40fe27808c2d4b8568172cb6a27668bcfd681a0386bb76","first_seen":"2026-03-25T12:25:19.894833Z","last_seen":"2026-03-25T15:51:29.969204Z","times_seen":2,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":567,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"napthevn.news","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthevn.news/assets/images/garenavn.png","fqdn":"napthevn.news","domain":"napthevn.news","tld":"news"},"ip":{"addr":"103.200.23.189","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:04.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.napthevn.news","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 03:55:14 GMT","end":"Tue, 23 Jun 2026 03:55:13 GMT"},"fingerprint":{"sha1":"2A:96:F8:D6:80:E5:5E:1F:F1:1C:39:5B:91:15:41:34:50:57:20:B5","sha256":"33:F9:0F:2E:A7:7B:9F:F7:07:C6:5D:D5:B9:DB:BE:A0:81:14:67:CD:0B:A2:70:C3:1E:E5:55:D6:EE:17:4F:E8"}}},"request":{"raw":"GET /assets/images/garenavn.png HTTP/1.1\r\nHost: napthevn.news\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nCookie: PHPSESSID=uvmdn3r2lacg4i7t3bi7kg9l26\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Apr 2026 15:50:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 26 Jan 2026 07:26:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5211\r\ndate: Wed, 25 Mar 2026 15:50:56 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5211,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 143 x 90, 8-bit/color RGBA, non-interlaced","md5":"edd80f6ffcc2daac5eb97873bb74f48c","sha1":"56b3a087857cf746cab620b53682950e61dad394","sha256":"7c95d9318f5338189ffe52120d9d65142058e94f1478e4fd92df2b88d4b796a5","sha512":"7efb0fbce0beea7a199cd4ed53c3c3fcc8272cfb452dee2e7f503f0766bda8b186aa879be2ed10870f9f45d6bea79c77f50c3486260121043f658ca3a4586590","ssdeep":"96:XPbbLdv5Em8HTyWBXIRKkJw4vPIjxKjp6qvlljo5WpiJVfyrRH:XPEm8zVtIRKkJwuAxmp6clSWpBN","tlshash":"75b12a18fb40b1c1683495f214b31d31be7ac4589dd456e8fa9f956b1fa028eb8c70fa","first_seen":"2026-03-25T12:25:19.901477Z","last_seen":"2026-03-25T15:51:29.969686Z","times_seen":2,"resource_available":false,"data":null}},"time_used":848,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":270,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"napthevn.news","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-gop.garenanow.com/gop/mshop/www/live/assets/pattern-game-selection-59889447.png","fqdn":"cdn-gop.garenanow.com","domain":"garenanow.com","tld":"com"},"ip":{"addr":"104.18.57.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:05.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-gop.garenanow.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 18:27:24 GMT","end":"Thu, 09 Apr 2026 18:27:23 GMT"},"fingerprint":{"sha1":"0A:EC:A3:C1:74:00:88:6B:E0:98:C4:9B:B4:98:30:80:90:49:DB:20","sha256":"A0:24:B8:EB:EF:85:A0:27:22:33:86:FC:B1:D1:CB:18:BC:86:F0:FE:7D:46:4F:76:B6:F1:02:0B:57:04:A2:86"}}},"request":{"raw":"GET /gop/mshop/www/live/assets/pattern-game-selection-59889447.png HTTP/1.1\r\nHost: cdn-gop.garenanow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:51:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 47612\r\nserver: cloudflare\r\nx-obs-request-id: 0000019C5920AB33941B81E8507A2800\r\naccept-ranges: bytes\r\netag: \"4bdf74eef5d750a12ba46c41bae05dab\"\r\nlast-modified: Tue, 03 Feb 2026 03:07:03 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nage: 649354\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncf-ray: 9e1f13322909c759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 330, 8-bit/color RGBA, non-interlaced","md5":"4bdf74eef5d750a12ba46c41bae05dab","sha1":"5e3769e29a07b941bdd5e0c51de1413146b8fa9b","sha256":"598894476d8114aa0cc23224dd9e0588090308270726d5a8852c05eb2db3ed84","sha512":"f84ce999e5cf00877395101c8009fde271fade7f1b03b4f243240e09de59e469627a2401fb6fd0827e32e360b5bc763d3ccb122632f234cbb86814f80f154685","ssdeep":"768:qRYzF1lWkYEBSg4Ms36rM/2cCrFRRrlJlUZJkHp69Xsk+pcSYvotVQRHJY3S0eUs:weF1lWqA9JuLRc3mpEck+pcFwnQNW3VQ","tlshash":"a823f1275c0434f8bb86295e1980068337b7fb2e054485867ba27bdd2c156fce6a86df","first_seen":"2024-11-26T02:28:18.440688Z","last_seen":"2026-03-25T15:51:29.970204Z","times_seen":14,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":211,"dns":192,"connect":1,"send":0,"wait":80,"receive":5,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fnapthevn.news%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=526129528.1774453865\u0026dt=Trung%20t%C3%A2m%20n%E1%BA%A1p%20th%E1%BA%BB%20Garena\u0026auid=1810803646.1774453865\u0026navt=n\u0026npa=1\u0026gtm=45be63n1v9240413347za200zd9240413347xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=103116026~103200004~115938465~115938469~116024733~117384406~117484252~118199988\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-16671127289\u0026tid=AW-16671127289\u0026tft=1774453865061\u0026tfd=1710","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:05.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"F8:90:A0:F9:74:3F:20:44:F3:3A:FB:A7:89:DC:37:89:3C:83:4D:03","sha256":"BE:A4:BF:EB:A3:08:0B:22:38:7C:32:95:9D:25:3C:CB:F8:42:AD:54:32:60:4C:1D:43:C5:81:2C:4E:AF:DE:AE"}}},"request":{"raw":"GET /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fnapthevn.news%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=526129528.1774453865\u0026dt=Trung%20t%C3%A2m%20n%E1%BA%A1p%20th%E1%BA%BB%20Garena\u0026auid=1810803646.1774453865\u0026navt=n\u0026npa=1\u0026gtm=45be63n1v9240413347za200zd9240413347xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=103116026~103200004~115938465~115938469~116024733~117384406~117484252~118199988\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-16671127289\u0026tid=AW-16671127289\u0026tft=1774453865061\u0026tfd=1710 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 25 Mar 2026 15:51:05 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T10:11:47.49407Z","times_seen":13457697,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fnapthevn.news%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=526129528.1774453865\u0026dt=Trung%20t%C3%A2m%20n%E1%BA%A1p%20th%E1%BA%BB%20Garena\u0026auid=1810803646.1774453865\u0026navt=n\u0026npa=1\u0026gtm=45be63n1v9240413347za200zd9240413347xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=103116026~103200004~115938465~115938469~116024733~117384406~117484252~118199988\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16671127289\u0026tid=AW-16671127289\u0026tft=1774453866327\u0026tfd=2975","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:06.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"F8:90:A0:F9:74:3F:20:44:F3:3A:FB:A7:89:DC:37:89:3C:83:4D:03","sha256":"BE:A4:BF:EB:A3:08:0B:22:38:7C:32:95:9D:25:3C:CB:F8:42:AD:54:32:60:4C:1D:43:C5:81:2C:4E:AF:DE:AE"}}},"request":{"raw":"GET /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fnapthevn.news%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=526129528.1774453865\u0026dt=Trung%20t%C3%A2m%20n%E1%BA%A1p%20th%E1%BA%BB%20Garena\u0026auid=1810803646.1774453865\u0026navt=n\u0026npa=1\u0026gtm=45be63n1v9240413347za200zd9240413347xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=103116026~103200004~115938465~115938469~116024733~117384406~117484252~118199988\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16671127289\u0026tid=AW-16671127289\u0026tft=1774453866327\u0026tfd=2975 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\ndate: Wed, 25 Mar 2026 15:51:06 GMT\r\npragma: no-cache\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T10:11:47.49407Z","times_seen":13457697,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-gop.garenanow.com/gop/app/0000/100/151/icon.png","fqdn":"cdn-gop.garenanow.com","domain":"garenanow.com","tld":"com"},"ip":{"addr":"104.18.57.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:04.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-gop.garenanow.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 18:27:24 GMT","end":"Thu, 09 Apr 2026 18:27:23 GMT"},"fingerprint":{"sha1":"0A:EC:A3:C1:74:00:88:6B:E0:98:C4:9B:B4:98:30:80:90:49:DB:20","sha256":"A0:24:B8:EB:EF:85:A0:27:22:33:86:FC:B1:D1:CB:18:BC:86:F0:FE:7D:46:4F:76:B6:F1:02:0B:57:04:A2:86"}}},"request":{"raw":"GET /gop/app/0000/100/151/icon.png HTTP/1.1\r\nHost: cdn-gop.garenanow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:51:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 63027\r\nserver: cloudflare\r\nx-obs-request-id: 0000019BD520D07794117FC7D44CB450\r\naccept-ranges: bytes\r\netag: \"de3c2cddca2960c484c8184d231e4e7a\"\r\nlast-modified: Mon, 14 Jul 2025 08:25:52 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nage: 509\r\nexpires: Wed, 25 Mar 2026 16:01:05 GMT\r\ncache-control: public, max-age=600\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncf-ray: 9e1f133239b1c759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63027,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"de3c2cddca2960c484c8184d231e4e7a","sha1":"277b8b6eb6d3f45f70763787e49a7a4f45837c0a","sha256":"1df433dad8421a69f37e60ac7031bf632abd2664175db5086bfc4176cc00216c","sha512":"76e093d20906a6a56eac853a2cd64409be2a6739c781735af17611677b31dfcb536937bc9c29ce0582b157ea3e370eda98427a2e62bc963d9c4a3509d24fdc6e","ssdeep":"1536:ZAmho+ug7XVDg7YiRyPIOCL3irKwZLKOdYeHZcR:ZAma+ug7XF5iRgIOQi3rYUZcR","tlshash":"9d53029f44a35cadc2efcc7cc69e1d03dea3b25a720e8a4d21c51490921d65d73ba12a","first_seen":"2025-08-04T04:16:39.848942Z","last_seen":"2026-03-25T15:51:29.970669Z","times_seen":9,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":590,"connect":3,"send":0,"wait":12,"receive":5,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-gop.garenanow.com/gop/app/0000/010/090/icon.png","fqdn":"cdn-gop.garenanow.com","domain":"garenanow.com","tld":"com"},"ip":{"addr":"104.18.57.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:04.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-gop.garenanow.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 18:27:24 GMT","end":"Thu, 09 Apr 2026 18:27:23 GMT"},"fingerprint":{"sha1":"0A:EC:A3:C1:74:00:88:6B:E0:98:C4:9B:B4:98:30:80:90:49:DB:20","sha256":"A0:24:B8:EB:EF:85:A0:27:22:33:86:FC:B1:D1:CB:18:BC:86:F0:FE:7D:46:4F:76:B6:F1:02:0B:57:04:A2:86"}}},"request":{"raw":"GET /gop/app/0000/010/090/icon.png HTTP/1.1\r\nHost: cdn-gop.garenanow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:51:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 10243\r\nserver: cloudflare\r\nx-obs-request-id: 0000019C34A4CEE1980961CC323231B0\r\naccept-ranges: bytes\r\netag: \"f766555b87e010a5ccfe4a8a79f8fb67\"\r\nlast-modified: Tue, 25 Oct 2022 06:27:46 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nexpires: Wed, 25 Mar 2026 16:01:05 GMT\r\ncache-control: public, max-age=600\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncf-ray: 9e1f1332396cc759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10243,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"f766555b87e010a5ccfe4a8a79f8fb67","sha1":"a0f8136ed31dd91ef95d96680a3e029f79ea51c2","sha256":"7d38213aa937e3f5748bebebcb4c1a6e2900dcd8e8788126c06cb756f960efa4","sha512":"9f9e8a4194eb780c0c4c70de5aab187c1a3f0bc72e3261a0636f02b5550cc61812aa6b8e257d4fda4e20a84e26b57769a3807c4c7d0f8a862ed75517a8b34745","ssdeep":"192:OixdHJ/k7h6ExnbYH1lN5pFGkopCzFmPBtUiLrYnsfn0dK:OikhdYVlr3ocIPrUionkwK","tlshash":"7922bfa2fe4d975367523ba4ba60d7b2447cede32d32a57b804ba80372f36107240d67","first_seen":"2023-04-10T20:59:09Z","last_seen":"2026-03-25T15:51:29.971329Z","times_seen":34,"resource_available":false,"data":null}},"time_used":905,"timings":{"blocked":-1,"dns":590,"connect":3,"send":0,"wait":285,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/canvas-confetti@1.6.0/dist/confetti.browser.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:04.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/canvas-confetti@1.6.0/dist/confetti.browser.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:51:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3356\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.6.0\r\nx-jsd-version-type: version\r\netag: W/\"1ed2-S5d1JbU/W2ijNmy5onSU5ANG3mQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220159-FRA, cache-bma-essb1270070-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2602857\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DkWQwAHok3ApFvNMxX9SfS4kFGaIHm7MPc5e8QuCT3bbkuiTC8%2BejFIaWAphTZdTbmofUng%2Fp4GhxonN0KCkqfzDEqw9EPOuRPlHmwx1lA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e1f132eabfc958c-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7890,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7542)","md5":"e3b4c83cb818e4994c82d97300316db8","sha1":"4b977525b53f5b68a3366cb9a27494e40346de64","sha256":"9c2ae7a7ca8e46486a560dd8c7dd965204a4b9164301f1115402b69f2fa58901","sha512":"cd3d0809b08ff45bed90d03576c3f218ae4790b51ee3b29b136045d9a51e37e8d014160f7c8698a213869c4130c4c93dbcb2fe6cb11d16cff10f1518ff608b23","ssdeep":"192:HCjdomnmsP/QF/BZmwfqRdWybN6TWPEnjPkbXJ8MU:HCpnm8Q8wAdWybN6Th4bXJtU","tlshash":"36f1b6dcf6513d160f5323baa84f810ea238766b270f4584a1b9d5a83dbc41d633ef69","first_seen":"2025-05-07T02:20:36.658378Z","last_seen":"2026-04-06T17:21:40.208192Z","times_seen":229,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":1,"connect":12,"send":0,"wait":13,"receive":1,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fnapthevn.news%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=526129528.1774453865\u0026dt=Trung%20t%C3%A2m%20n%E1%BA%A1p%20th%E1%BA%BB%20Garena\u0026auid=1810803646.1774453865\u0026navt=n\u0026npa=1\u0026gtm=45be63n1v9240413347za200zd9240413347xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=103116026~103200004~115938465~115938469~116024733~117384406~117484252~118199988\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16671127289\u0026tid=AW-16671127289\u0026tft=1774453866327\u0026tfd=2975","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:06.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"F8:90:A0:F9:74:3F:20:44:F3:3A:FB:A7:89:DC:37:89:3C:83:4D:03","sha256":"BE:A4:BF:EB:A3:08:0B:22:38:7C:32:95:9D:25:3C:CB:F8:42:AD:54:32:60:4C:1D:43:C5:81:2C:4E:AF:DE:AE"}}},"request":{"raw":"POST /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fnapthevn.news%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=526129528.1774453865\u0026dt=Trung%20t%C3%A2m%20n%E1%BA%A1p%20th%E1%BA%BB%20Garena\u0026auid=1810803646.1774453865\u0026navt=n\u0026npa=1\u0026gtm=45be63n1v9240413347za200zd9240413347xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=103116026~103200004~115938465~115938469~116024733~117384406~117484252~118199988\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16671127289\u0026tid=AW-16671127289\u0026tft=1774453866327\u0026tfd=2975 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://napthevn.news/\r\nOrigin: https://napthevn.news\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 25 Mar 2026 15:51:06 GMT\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://napthevn.news\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T10:11:47.49407Z","times_seen":13457697,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthevn.news/","fqdn":"napthevn.news","domain":"napthevn.news","tld":"news"},"ip":{"addr":"103.200.23.189","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-25T15:51:03.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.napthevn.news","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 03:55:14 GMT","end":"Tue, 23 Jun 2026 03:55:13 GMT"},"fingerprint":{"sha1":"2A:96:F8:D6:80:E5:5E:1F:F1:1C:39:5B:91:15:41:34:50:57:20:B5","sha256":"33:F9:0F:2E:A7:7B:9F:F7:07:C6:5D:D5:B9:DB:BE:A0:81:14:67:CD:0B:A2:70:C3:1E:E5:55:D6:EE:17:4F:E8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: napthevn.news\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.3.30\r\nset-cookie: PHPSESSID=uvmdn3r2lacg4i7t3bi7kg9l26; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 25 Mar 2026 15:50:56 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":120747,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6821), with CRLF line terminators","md5":"1a64ba3d183708ac19e6f8afd086ce85","sha1":"60faa26f9ee592c132fa6f49e64a68c8c90c3fae","sha256":"2d60857186f988bdf3a47cb7d2e9f7553618eece1bcdaca9a4eece41c692e14f","sha512":"9a6513e1437c7425677aa5311bf9e66b6927238e342605a348c4e8e3154333e2a4da3bf833e84d02c68ff8f38126e3cb0cee38c6ff644d112aa3e9b23f0f051f","ssdeep":"1536:FVQFvIhNHMuItEt/tstFt+t5t/tc4qK6bqge9Odoqq8qC:N6D","tlshash":"ecc3b4b051d005669073c6a8ba31eaa9fd56628bdf4fc544b3dc2b876fb2c62cd0f251","first_seen":"2026-03-25T12:25:19.898398Z","last_seen":"2026-03-25T15:51:29.97267Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1717,"timings":{"blocked":575,"dns":1,"connect":283,"send":0,"wait":567,"receive":0,"ssl":288},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"napthevn.news","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-gop.garenanow.com/gop/app/0000/100/054/icon.png","fqdn":"cdn-gop.garenanow.com","domain":"garenanow.com","tld":"com"},"ip":{"addr":"104.18.57.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:04.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-gop.garenanow.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 18:27:24 GMT","end":"Thu, 09 Apr 2026 18:27:23 GMT"},"fingerprint":{"sha1":"0A:EC:A3:C1:74:00:88:6B:E0:98:C4:9B:B4:98:30:80:90:49:DB:20","sha256":"A0:24:B8:EB:EF:85:A0:27:22:33:86:FC:B1:D1:CB:18:BC:86:F0:FE:7D:46:4F:76:B6:F1:02:0B:57:04:A2:86"}}},"request":{"raw":"GET /gop/app/0000/100/054/icon.png HTTP/1.1\r\nHost: cdn-gop.garenanow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:51:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 73914\r\nserver: cloudflare\r\nx-obs-request-id: 0000019BD520D0709414E18E52FC8CC2\r\naccept-ranges: bytes\r\netag: \"5ed302fed9de61563070b6c9845ff2bf\"\r\nlast-modified: Thu, 16 Mar 2023 08:02:49 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nage: 533\r\nexpires: Wed, 25 Mar 2026 16:01:05 GMT\r\ncache-control: public, max-age=600\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncf-ray: 9e1f1332395ec759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73914,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"5ed302fed9de61563070b6c9845ff2bf","sha1":"6887ebc061e2ab337b524013eb0459ab95c1bf7b","sha256":"bb3a9d9ed98e02a9e0f740c05a20df1f7063872ae053c2e46acb0a481a774aa3","sha512":"7cb016fd236de24de3d2276befbaa3417593b04bef581ab817891bb85022582a2fb107a7067a36c14195a9d0baa921c2aeac69ad77173da3b92a62234db25ee2","ssdeep":"1536:/RSd2/GTc2R7XVhn3g2XhTsTZRYXrArq5tqqfKzSfnajz3z:/RKTcM77nwOWTZRFsBfKzPzj","tlshash":"ac73028c54b70d94f5307ac8189c89d263e7ba951563b2fc20877a253e70e87da5c2ee","first_seen":"2023-04-10T20:59:09Z","last_seen":"2026-03-25T15:51:29.973163Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1760,"timings":{"blocked":595,"dns":591,"connect":3,"send":0,"wait":542,"receive":3,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-gop.garenanow.com/gop/app/0000/100/137/icon.png","fqdn":"cdn-gop.garenanow.com","domain":"garenanow.com","tld":"com"},"ip":{"addr":"104.18.57.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:04.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-gop.garenanow.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 18:27:24 GMT","end":"Thu, 09 Apr 2026 18:27:23 GMT"},"fingerprint":{"sha1":"0A:EC:A3:C1:74:00:88:6B:E0:98:C4:9B:B4:98:30:80:90:49:DB:20","sha256":"A0:24:B8:EB:EF:85:A0:27:22:33:86:FC:B1:D1:CB:18:BC:86:F0:FE:7D:46:4F:76:B6:F1:02:0B:57:04:A2:86"}}},"request":{"raw":"GET /gop/app/0000/100/137/icon.png HTTP/1.1\r\nHost: cdn-gop.garenanow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:51:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 74636\r\nserver: cloudflare\r\nx-obs-request-id: 0000019BD520D0F594169DB01ADBFF5F\r\naccept-ranges: bytes\r\netag: \"0d1b65b3079f4492e80e8ed8d2bb2d75\"\r\nlast-modified: Mon, 09 Jan 2023 07:39:12 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nage: 153\r\nexpires: Wed, 25 Mar 2026 16:01:05 GMT\r\ncache-control: public, max-age=600\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncf-ray: 9e1f1332291ac759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74636,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"0d1b65b3079f4492e80e8ed8d2bb2d75","sha1":"4acbb1d95a69ea64d2e6d48c7aad5400efa3611b","sha256":"cf684a15363b57bc1951fd8fd9d77a9bb5f255f48ca703e894a87b584a1dd2e4","sha512":"27fcd63e76be84003be6f04956eba3842f868217d46ed727b2f581926823f02fbc006ffbf0465ea747956fdaabe18532de046f180b13bfd97c0bdca7dbc868ed","ssdeep":"1536:eGjHpZMrkmng9pNiIJ4Y+eozkxy17jFBxAP5CrV9Qu:JFZMrA9WIBozsy17hoP5CUu","tlshash":"1a7302b1e7b71963949e451790d2ae238924ae933a7f4f54b3f180b29b7d3d188c81d3","first_seen":"2023-05-01T09:26:57Z","last_seen":"2026-03-25T15:51:29.973714Z","times_seen":22,"resource_available":false,"data":null}},"time_used":655,"timings":{"blocked":578,"dns":0,"connect":0,"send":0,"wait":74,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-gop.garenanow.com/gop/mshop/www/live/assets/FF-f997537d.jpg","fqdn":"cdn-gop.garenanow.com","domain":"garenanow.com","tld":"com"},"ip":{"addr":"104.18.57.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:05.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-gop.garenanow.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 18:27:24 GMT","end":"Thu, 09 Apr 2026 18:27:23 GMT"},"fingerprint":{"sha1":"0A:EC:A3:C1:74:00:88:6B:E0:98:C4:9B:B4:98:30:80:90:49:DB:20","sha256":"A0:24:B8:EB:EF:85:A0:27:22:33:86:FC:B1:D1:CB:18:BC:86:F0:FE:7D:46:4F:76:B6:F1:02:0B:57:04:A2:86"}}},"request":{"raw":"GET /gop/mshop/www/live/assets/FF-f997537d.jpg HTTP/1.1\r\nHost: cdn-gop.garenanow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:51:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 168470\r\nserver: cloudflare\r\nx-obs-request-id: 0000019A17FABFBD9145E45202FF25CB\r\naccept-ranges: bytes\r\netag: \"72bc236e465cc7f16a28507525dbe9e7\"\r\nlast-modified: Wed, 22 Oct 2025 09:32:42 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nage: 7662308\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncf-ray: 9e1f1332291cc759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168470,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1888x384, components 3","md5":"72bc236e465cc7f16a28507525dbe9e7","sha1":"94ba7e6a5cd85c50cd85821c8a56480af955880c","sha256":"f997537dfea79d86b4c51820f8a53ccb8ff9300081b710e6d199520dc8ba2525","sha512":"5508d46acaae7fc49bd597dccf4d43d26d4091ebe0ab32a86911e00f8960efb93b00e4eb775f9e8d6c82fd849a9e45091f017c341d94fe90a49d5190502ea2ee","ssdeep":"3072:Hku29IUn2fAJ4M4wpEePWvS216kvRciZg/YjDuZaYkRcgS2voK2BUTUZYP3wQ2mI:HrQ2fAZ4WNWNbTZguDuZGSgboK2BUgOy","tlshash":"bcf3124b8f0a5377ae0e9472b18b8f1e5411cda515973d58a04c3f98befb20c79a14bb","first_seen":"2025-03-11T17:32:02.668282Z","last_seen":"2026-04-05T14:52:05.972862Z","times_seen":11,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":209,"dns":0,"connect":0,"send":0,"wait":129,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:04.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:55 GMT","end":"Mon, 18 May 2026 18:21:54 GMT"},"fingerprint":{"sha1":"EA:E6:47:26:9A:0B:B3:6C:6B:AE:E8:B9:D6:BC:75:92:2C:FE:B8:ED","sha256":"5F:49:E5:ED:4A:20:39:8A:4E:34:2D:41:2D:FE:BF:2A:79:ED:E6:DF:13:0A:2A:AD:38:8B:BC:21:9A:73:31:20"}}},"request":{"raw":"GET /recaptcha/api.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Wed, 25 Mar 2026 15:51:04 GMT\r\ndate: Wed, 25 Mar 2026 15:51:04 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":976,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (976), with no line terminators","md5":"153d0d074a848f6f5a99c49c8cc957fa","sha1":"3a4c1721d66280c23002ccb8c77306ebbd4eb041","sha256":"7193190bf594994ad54b32225fdf2a1b33f3833cd5df798c0d49eed8fce495ac","sha512":"753060105dc1a79b00d86c2ba9085f1a80eb55cb9852095eb16638bfb0860cba3dc6eac0cb7c13c8d0428a41e441a6faade120827be873c2cc69ab8b52bd1ef6","ssdeep":"","tlshash":"b51121b22a05f0350b7209e191ffcb75e452741cf15c85e8a915ca842f69ccbcd05585","first_seen":"2026-03-12T21:14:04.587611Z","last_seen":"2026-03-27T18:00:57.990841Z","times_seen":3255,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":111,"dns":1,"connect":21,"send":0,"wait":33,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-gop.garenanow.com/gop/app/0000/032/837/icon.png","fqdn":"cdn-gop.garenanow.com","domain":"garenanow.com","tld":"com"},"ip":{"addr":"104.18.57.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:04.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-gop.garenanow.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 18:27:24 GMT","end":"Thu, 09 Apr 2026 18:27:23 GMT"},"fingerprint":{"sha1":"0A:EC:A3:C1:74:00:88:6B:E0:98:C4:9B:B4:98:30:80:90:49:DB:20","sha256":"A0:24:B8:EB:EF:85:A0:27:22:33:86:FC:B1:D1:CB:18:BC:86:F0:FE:7D:46:4F:76:B6:F1:02:0B:57:04:A2:86"}}},"request":{"raw":"GET /gop/app/0000/032/837/icon.png HTTP/1.1\r\nHost: cdn-gop.garenanow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 25 Mar 2026 15:51:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 36075\r\nserver: cloudflare\r\nx-obs-request-id: 0000019CE004A6BE954BBCAB15DE00B6\r\naccept-ranges: bytes\r\netag: \"0a1be47ad625de692af0008b8690bee0\"\r\nlast-modified: Thu, 12 Mar 2026 03:07:13 GMT\r\nx-obs-id-2: 36AAAQAAEAABAAAQAAEAABAAAQAAEAABAAAaI=AAAAAAAAAAAAAAAAAAAAAAAAAA\r\nage: 139\r\nexpires: Wed, 25 Mar 2026 16:01:05 GMT\r\ncache-control: public, max-age=600\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncf-ray: 9e1f13323962c759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36075,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"0a1be47ad625de692af0008b8690bee0","sha1":"14f260c05f5086bc9ba59410badd7fb59c53424b","sha256":"0b971b5cea0782ead91c9e18a68d5797b4d0befe5f0509cc57f56d847a00108c","sha512":"f722e43b2827048e4403189fb3912258accc18b32cde0f62dc0b9d6be06f4c7820ac6ed428088f213babc8fafc00a9ac7445529e6bf7347afd8a7716856967e8","ssdeep":"768:d0qF+fCqTDefWuhBoc2H+eJ/qSw4e7AyajaE3fg:yqF+6CyOmsHl9qSs7O9g","tlshash":"43f2e1921da67214b45c8ed49bf224f36ab3a7cf895f546d81a1eb1c1ddc474230be0b","first_seen":"2026-03-25T12:25:19.89688Z","last_seen":"2026-03-25T15:51:29.97591Z","times_seen":2,"resource_available":false,"data":null}},"time_used":902,"timings":{"blocked":-1,"dns":589,"connect":3,"send":0,"wait":281,"receive":3,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthevn.news/assets/images/viettel.png","fqdn":"napthevn.news","domain":"napthevn.news","tld":"news"},"ip":{"addr":"103.200.23.189","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:04.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.napthevn.news","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 03:55:14 GMT","end":"Tue, 23 Jun 2026 03:55:13 GMT"},"fingerprint":{"sha1":"2A:96:F8:D6:80:E5:5E:1F:F1:1C:39:5B:91:15:41:34:50:57:20:B5","sha256":"33:F9:0F:2E:A7:7B:9F:F7:07:C6:5D:D5:B9:DB:BE:A0:81:14:67:CD:0B:A2:70:C3:1E:E5:55:D6:EE:17:4F:E8"}}},"request":{"raw":"GET /assets/images/viettel.png HTTP/1.1\r\nHost: napthevn.news\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nCookie: PHPSESSID=uvmdn3r2lacg4i7t3bi7kg9l26\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Apr 2026 15:50:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 26 Jan 2026 07:26:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11274\r\ndate: Wed, 25 Mar 2026 15:50:56 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 114, 8-bit/color RGBA, non-interlaced","md5":"ffe3ec5c52d58c7d1049dd4eab8159ed","sha1":"56f288e98e2b49dca9152d30feaa6e621bd1059f","sha256":"d7447bb72303a26f0a26d61d4f5055f6c2e51b9a57efce07d38b02123e7c029a","sha512":"5ff289c47484fec398f5b5c0930c56cee2a15ae89123cd2b9b78c6e1a5db53fbf5c086dc3b71cea9ccb600c5ef5f2219e9d889ae5e9224b1c51cc54d3ea5493c","ssdeep":"192:8SXknf4JS7yhB444q3KIizQZ6O49JyRd25TCEvkFQVJKQHit0oQpBpqO3xSgWa9P:7Un7a444agK2lCRFQVQz0hp9rW4444z+","tlshash":"de32ad25c812689b54d8e43498fa51326c57dcf55443e0edacfedfd70a105e18b0a2cb","first_seen":"2025-10-11T07:48:35.63035Z","last_seen":"2026-03-25T15:51:29.976446Z","times_seen":4,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"napthevn.news","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthevn.news/assets/images/mobifone.png","fqdn":"napthevn.news","domain":"napthevn.news","tld":"news"},"ip":{"addr":"103.200.23.189","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthevn.news/","date":"2026-03-25T15:51:04.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.napthevn.news","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Mar 2026 03:55:14 GMT","end":"Tue, 23 Jun 2026 03:55:13 GMT"},"fingerprint":{"sha1":"2A:96:F8:D6:80:E5:5E:1F:F1:1C:39:5B:91:15:41:34:50:57:20:B5","sha256":"33:F9:0F:2E:A7:7B:9F:F7:07:C6:5D:D5:B9:DB:BE:A0:81:14:67:CD:0B:A2:70:C3:1E:E5:55:D6:EE:17:4F:E8"}}},"request":{"raw":"GET /assets/images/mobifone.png HTTP/1.1\r\nHost: napthevn.news\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://napthevn.news/\r\nCookie: PHPSESSID=uvmdn3r2lacg4i7t3bi7kg9l26\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 01 Apr 2026 15:50:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 26 Jan 2026 07:26:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27777\r\ndate: Wed, 25 Mar 2026 15:50:56 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27777,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 114, 8-bit/color RGBA, non-interlaced","md5":"718f48783e4adf931466110fc53550df","sha1":"fd38ac39154a19181af3043ed1525cca2926fed5","sha256":"9874b99edd042b57a7fb3927cada8c4dcf9b29436ddaae536965fbb19e319a52","sha512":"e188652c0d6b80fd01430052daceda4bf3f5b73d91411496321a16c0b1fbff56f5ea1ce60f6917ea80ef4094e72a3fcf28704fef2ab58b2fd00a3d4cc68623ad","ssdeep":"192:8S8kt3hoOn3x/4rFgcdICGoOw3V6K50ooqLelM4EsQRpT8LaxRfsr5veNcrVCpF3:7Pt3eO3xyFdGykKOwWQR1MFpq8yFxwi","tlshash":"58c2ae28b4f0b689b98574b348e460ed7c765647de04dc42789cac037f05b99ae9e893","first_seen":"2023-05-08T00:31:45Z","last_seen":"2026-03-25T15:51:29.976995Z","times_seen":7,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":568,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"napthevn.news","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}