r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d27590a1d3cbe1e9632b8ae92aaae3f4
202b34e8a0c3b88c8826fd56c6227b34f2cd6f46
6bcfa518476658128c1fb4ea2435c4e58531454cf97138dce7ece9def589aead
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6BCFA518476658128C1FB4EA2435C4E58531454CF97138DCE7ECE9DEF589AEAD"
Last-Modified: Wed, 16 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5492
Expires: Fri, 18 Nov 2022 00:07:34 GMT
Date: Thu, 17 Nov 2022 22:36:02 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash be1be806b5dca7facbb45a6c3db44652
7ae9380a2f3eca959fe6ff6b3832a17cffd12cf4
1f3338058f8e9cae5c9fdd733c74564312726b01c6efdcd628d851d0c99876b0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1130
Cache-Control: max-age=130451
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 22:36:02 GMT
Etag: "63760d7b-1d7"
Expires: Sat, 19 Nov 2022 10:50:13 GMT
Last-Modified: Thu, 17 Nov 2022 10:31:23 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3a38b6dd8a4cc335c026aebf2ed348b6
8a386e0ccb0ca4dc502746c45b2ebc3aa3f83cf8
8b4040a645cec1841a00a22765eb3a74978559daf15c54bd4b41b6b48aab7f95
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B4040A645CEC1841A00A22765EB3A74978559DAF15C54BD4B41B6B48AAB7F95"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6918
Expires: Fri, 18 Nov 2022 00:31:20 GMT
Date: Thu, 17 Nov 2022 22:36:02 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 17 Nov 2022 21:44:57 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3065
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: U1gPDKE/5PKWBG5suvnhHyKNokqGJ/5HNoBScZvg1lNMympizux6RDJ++8Srm4wC3x0xbmqV8cE=
x-amz-request-id: CF0HNYXQXSE8NBMQ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 17 Nov 2022 22:15:19 GMT
age: 1243
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 17 Nov 2022 22:36:02 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
vietroll.vn/wp-content/fMgN4vYD1/
301 Moved Permanently 707 B URL HTTP/1.1 vietroll.vn/wp-content/fMgN4vYD1/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/fMgN4vYD1/ HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 17 Nov 2022 22:36:02 GMT
server: LiteSpeed
location: https://vietroll.vn/wp-content/fMgN4vYD1/
vary: Accept-Encoding
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 17 Nov 2022 22:25:01 GMT
cache-control: public,max-age=3600
age: 662
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash c10055ce87434f700ff8b20e3be1f919
477b3c9f1da0c464282bb54572737e76b6e346da
4d78eb296876122e5ff40fcd7667adf1bf8a4b1ee4c8203c88a63ce8d7910a57
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5988
Cache-Control: max-age=130240
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 22:36:03 GMT
Etag: "6375f9af-1d7"
Expires: Sat, 19 Nov 2022 10:46:43 GMT
Last-Modified: Thu, 17 Nov 2022 09:06:55 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fGxHRJy1gQIJ7ZiC3exInA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: nt29zhw+QQ8IiauPqQVdsFqlQxY=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5218
Expires: Fri, 18 Nov 2022 00:03:02 GMT
Date: Thu, 17 Nov 2022 22:36:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5218
Expires: Fri, 18 Nov 2022 00:03:02 GMT
Date: Thu, 17 Nov 2022 22:36:04 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4724f84-de93-48d7-8d33-1427f27e15a0.webp
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4724f84-de93-48d7-8d33-1427f27e15a0.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 55801be30fc7e7d24ba2418d00ce4ca2
31935f7d11269f0f4177a48d2c166e09fec1f377
05e58892cab261aca3abe7e29ff482b51f5f7e4261b8579e7b9f85487f53eeda
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4724f84-de93-48d7-8d33-1427f27e15a0.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7539
x-amzn-requestid: 96d0ad29-0b25-4e4b-93ea-da9fde83aa8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw9V5E2boAMFbiA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376a8f2-33f7f4592f8574486987e233;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:34:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: r1X3PUyrso5VkyphYHqBQdYo6lmmIvTQdA_kPA5I-lds8qn9RtEIpw==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 22:05:38 GMT
etag: "31935f7d11269f0f4177a48d2c166e09fec1f377"
content-type: image/jpeg
age: 1826
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 032386e5c9dffff1ba1ee5e8a322d438
dd4fd6c803a9b333bace9a541c6bd183d0c56bb9
0e9f559a0aa7e114c5810a27ba243c0da7b44dc0bf7aec2b7ab32b8f0e2b536c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92501a28-163f-4c6e-aed7-d31c29354d1e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11667
x-amzn-requestid: ae092a0a-1709-4497-9f07-0348a28d2491
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bqZOIEN7oAMFlaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637408c0-5ac595df302a8f1d3703ad8d;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 21:46:40 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: c_SJMaV3uYSUysTSOFV--jQqDUxw-fBp8cXWWUZw9vUjt0d6PsOpxA==
via: 1.1 0bb842bd5868b86440983b936bb0adee.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 02:49:36 GMT
age: 71188
etag: "dd4fd6c803a9b333bace9a541c6bd183d0c56bb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F84053cb2-edec-465e-8700-6af61bae8236.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F84053cb2-edec-465e-8700-6af61bae8236.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 676b1603008690786aa36dc3113b7581
cbdc425467a5d41aba5e8e5c54354b4f03cd194a
7e5e7bf695ff31df6c97e502a44f4fa9197c6579b0c7a7c590457ea067d1cf1e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F84053cb2-edec-465e-8700-6af61bae8236.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8155
x-amzn-requestid: 5650af50-eb93-47d9-8322-8a2e263e12ea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-7vFU5IAMFYGw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab7e-759bbd5b5a22e07c1c181c0a;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:45:34 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: VikBDm5_Bqbs0gLFkhbT6H3i6t57bnC0Xq-gkiJBILQ8Ynw_7RqWNA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:55:43 GMT
etag: "cbdc425467a5d41aba5e8e5c54354b4f03cd194a"
content-type: image/jpeg
age: 2421
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29c72a34-350b-448d-b69f-b0adfe74dc64.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29c72a34-350b-448d-b69f-b0adfe74dc64.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c96e8dc581a03b62c5f0a7c8ac49916
9051be78c17480c8e5128836c2cda0c6b96b0261
99c330ef89dbe0ac0b957e419e85c2c7de20bb74e6437961f60779410f70ba0e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29c72a34-350b-448d-b69f-b0adfe74dc64.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14762
x-amzn-requestid: f60d1de2-407f-4e2f-bbb0-750f77d42878
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw9VRGlUoAMFSqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376a8ee-1ef9573e23c7774435cbc843;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:34:38 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8PCqnZrbbUjhEbFw5eAVSk93efBZwEpUSLH_vA3NRFeQQzUWH5ADZA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:51:54 GMT
age: 2650
etag: "9051be78c17480c8e5128836c2cda0c6b96b0261"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F591858fd-bcb1-4a79-bff2-51b044b4fbb0.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F591858fd-bcb1-4a79-bff2-51b044b4fbb0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 58e93b8944e96f1c5cd61caa7829ca96
c90e73a1a1ecf67e5e0bd374ae37d04caa3bb1c1
b38ee82e01744e77f69be21470d7a864a366a9c94c6c8dd9adf1877ad99199ab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F591858fd-bcb1-4a79-bff2-51b044b4fbb0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8108
x-amzn-requestid: b0579a2a-5b57-40cb-9ab5-1ed1a58ca1fe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-MNGLUIAMFp7A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376aa4d-6aeb306b0e99303639416188;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:40:29 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5nocBDggKFVpnZaJj3Mr3iRTKBMSk81Y7FUQ05QHhwTWr9BmrFdOuQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:51:56 GMT
age: 2648
etag: "c90e73a1a1ecf67e5e0bd374ae37d04caa3bb1c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20ddb38f-d459-45e6-9351-068a5306b3a1.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20ddb38f-d459-45e6-9351-068a5306b3a1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7d16e5ff718353c095d266b080fe547f
fa7c5c9a1d16355859196271f3d13f3850931888
9a94d8eb20cc56d0898b1e2b80c0006ebbef75c15ad94e907050c5be4e19a960
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20ddb38f-d459-45e6-9351-068a5306b3a1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10349
x-amzn-requestid: fc85e078-a81a-4fed-899e-15249961f59c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-7tHGLIAMF00Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab7d-4224d193517794684fcdc0ad;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:45:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UK-XD_8EcfPwfLb-QVwfLr8aG-sqVBoUJcbPb5hKAlQS68eOxdgM5g==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 22:03:27 GMT
age: 1957
etag: "fa7c5c9a1d16355859196271f3d13f3850931888"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d6ec8dee2a1996c177b49398a45a4267
24de47e193eeba292a97cec6bca644c8188083b5
d371e3106f15dc34c50c96383c339653902a797faeeb4685c51eaaa506d59003
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 22:36:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-212561384-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-212561384-1
IP
File type ASCII text, with very long lines (1921)
Hash 6b877fc81a5ba0171ac3d3521bb5e1cf
42f775caf6940fce02559d1af87cdb01de1d707b
233a4d4886c55be82fb548ff2c14e4e2f6a47efd799d33c2b145a09c091a2ed3
GET /gtag/js?id=UA-212561384-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 17 Nov 2022 22:36:05 GMT
expires: Thu, 17 Nov 2022 22:36:05 GMT
cache-control: private, max-age=900
last-modified: Thu, 17 Nov 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43681
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d6ec8dee2a1996c177b49398a45a4267
24de47e193eeba292a97cec6bca644c8188083b5
d371e3106f15dc34c50c96383c339653902a797faeeb4685c51eaaa506d59003
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 17 Nov 2022 22:36:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
vietroll.vn/wp-includes/css/dist/block-library/style.min.css?ver=5.7.8
200 OK 8.1 kB URL HTTP/2 vietroll.vn/wp-includes/css/dist/block-library/style.min.css?ver=5.7.8
IP
File type Unicode text, UTF-8 text, with very long lines (29677)
Hash 94816d5978ddc9ea9b99529b0df33900
cdd5c13a34ac09bef821aa64c7ec9e34bda6052e
4e6fd88eff0b6f5dc1e0a23bdf0b2c6b35f44e38615781531923614851f59ea6
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.7.8 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: text/css
last-modified: Thu, 15 Apr 2021 17:05:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 8146
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/vendors-style.css?ver=4.4.3
200 OK 911 B URL HTTP/2 vietroll.vn/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/vendors-style.css?ver=4.4.3
IP
File type ASCII text, with very long lines (3276), with no line terminators
Hash 5d670b5def8387bbd5e614f9d309a592
586928ec81bdc4f13d851e7a5c7915ec9f343512
f45ed68d669ede39822d665dbfbe36381eb01bf9e3c38f1ac40e9fb50098973c
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/vendors-style.css?ver=4.4.3 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 03:25:18 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 911
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css?ver=4.4.3
200 OK 18 kB URL HTTP/2 vietroll.vn/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css?ver=4.4.3
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 64f293be0985484e1634368bc756ec56
55644171b2139baf5c48a53cfbe0e16f8dee1f22
c284816558860cf0b41df7cd0c9068c2235a1e82b8f037ca2090044285502681
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css?ver=4.4.3 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 03:25:17 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 17637
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.4.6
200 OK 12 kB URL HTTP/2 vietroll.vn/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.4.6
IP
File type Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators
Hash 31a2646ef4aaa5e3ab233c248ceb8d4c
fca77b634f6c3d889a17e6c3c92c1151099c5842
dc1cb2ac65eb0c9a2d68304b118673af23f02bf948326c26ccb37e2965e8ff47
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.4.6 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 04:44:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 12411
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/fMgN4vYD1/
404 Not Found 19 kB URL HTTP/2 vietroll.vn/wp-content/fMgN4vYD1/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3381), with CRLF, LF line terminators
Hash 70e52d2df1bd713ad12a785c26973a37
71a8ef4554c653a7c100739f3e01a16807307395
89b6adb321ece7bf2729bc00b66b31ff2ea5560bb5137c39b9e9416dfda4b578
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/fMgN4vYD1/ HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 404 Not Found
x-powered-by: PHP/7.3.33
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://vietroll.vn/wp-json/>; rel="https://api.w.org/"
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
date: Thu, 17 Nov 2022 22:36:04 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
vietroll.vn/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=5.1.0
200 OK 8.4 kB URL HTTP/2 vietroll.vn/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=5.1.0
IP
File type Unicode text, UTF-8 text, with very long lines (62789), with no line terminators
Hash 9834791a56176f4340f5a795e699c0f4
efd08256f0b0c0add6b6759f29b20087c47a7eb6
264b381ca91c85d7ce5b9863f439be26c19c2d6fa75a2c7a6b486cb3f24892d5
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=5.1.0 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 03:25:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 8444
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/plugins/twist/assets/css/slick-theme.css?ver=5.7.8
200 OK 625 B URL HTTP/2 vietroll.vn/wp-content/plugins/twist/assets/css/slick-theme.css?ver=5.7.8
IP
Hash dae01aaa0fcd4eef367d0c1b1aed8de6
533299faecc22cb1155691a4258cd6e61b6d121e
bb16717f1d753555f611801871d627d10ce676eeeb27fd7412c0dab2d35b6878
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/twist/assets/css/slick-theme.css?ver=5.7.8 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 03:25:57 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 625
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/plugins/twist/assets/css/slick.css?ver=5.7.8
200 OK 488 B URL HTTP/2 vietroll.vn/wp-content/plugins/twist/assets/css/slick.css?ver=5.7.8
IP
Hash 16f33e31e58e45437ab5a9b6b8c80fc0
796b2f121d20ec42aa83178d145170f5438488aa
dd67893335a0469f50c1472d0f52cbd8b4bec2de41ae4827ecb39afee92f7485
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/twist/assets/css/slick.css?ver=5.7.8 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 03:25:57 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 488
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/plugins/twist/assets/css/wpgs-style.css?ver=3.2
200 OK 1.6 kB URL HTTP/2 vietroll.vn/wp-content/plugins/twist/assets/css/wpgs-style.css?ver=3.2
IP
Hash e3bc612200030de8925744037dfbe34f
c7320e2bddd8e9d010059bd6e72b5eb76fc41639
0a02d628220551b011c2c2ee1509ce0c84e67736f77a4393e07c6046944e453b
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/twist/assets/css/wpgs-style.css?ver=3.2 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 03:25:57 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 1617
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/themes/understrap/font-awesome-5.11.2/css/all.min.css?ver=0.9.4.1612145532
200 OK 30 kB URL HTTP/2 vietroll.vn/wp-content/themes/understrap/font-awesome-5.11.2/css/all.min.css?ver=0.9.4.1612145532
IP
File type ASCII text, with very long lines (65393)
Hash ccbc29441066a5535702efb5fccc39fa
2f594c30db115837b9f6e8afff1efdb3684b3e5b
3da6a22a494cfd7ce95d6403cf0bfa0d60ce47dc1fd0f133c00609e05d3da233
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/understrap/font-awesome-5.11.2/css/all.min.css?ver=0.9.4.1612145532 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: text/css
last-modified: Mon, 01 Feb 2021 06:56:04 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 30124
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/themes/understrap/css/custom/menu-right.css?ver=0.9.4.1612145532
200 OK 2.7 kB URL HTTP/2 vietroll.vn/wp-content/themes/understrap/css/custom/menu-right.css?ver=0.9.4.1612145532
IP
File type ASCII text, with very long lines (338)
Hash c30d98c42e47472131998fd9a92fa3e3
f63eaefd6565b7373556b4b63201559499b07396
c812789604cc15a1af0c5c17f379a25a0be363f024699f62d7fbcdac2abd4f36
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/understrap/css/custom/menu-right.css?ver=0.9.4.1612145532 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: text/css
last-modified: Tue, 15 Feb 2022 09:08:31 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 2705
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/themes/understrap/css/custom/header.css?ver=0.9.4.1612145532
200 OK 1.4 kB URL HTTP/2 vietroll.vn/wp-content/themes/understrap/css/custom/header.css?ver=0.9.4.1612145532
IP
Hash 7e591bec931f9b4254999b99024654af
347145543175cb85c1799121b8c47bb69b322aa4
32bcc52c85f888b939820f6c366e2040d2202530b2c6cdaed89b8f1159ceb1a7
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/understrap/css/custom/header.css?ver=0.9.4.1612145532 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: text/css
last-modified: Thu, 17 Feb 2022 07:49:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 1394
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/themes/understrap/css/custom/footer.css?ver=0.9.4.1612145532
200 OK 1.1 kB URL HTTP/2 vietroll.vn/wp-content/themes/understrap/css/custom/footer.css?ver=0.9.4.1612145532
IP
File type assembler source, ASCII text
Hash 4f2e9918984dcdbe608f0a68dc1777ce
e6a934726c9223bf2f67d36ed494063ad9f593eb
e955d34e5dab94e08456e176b48b481a43b1e46cf17f0b50cf859d74ee4b35e0
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/understrap/css/custom/footer.css?ver=0.9.4.1612145532 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: text/css
last-modified: Tue, 15 Feb 2022 10:08:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 1122
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/themes/understrap/css/custom/main.css?ver=0.9.4.1612145532
200 OK 3.4 kB URL HTTP/2 vietroll.vn/wp-content/themes/understrap/css/custom/main.css?ver=0.9.4.1612145532
IP
Hash 7f052f9debce03d3f7aea3e47db83eaa
e959617ae1a75cb7745d91ec4d75ee933ae0b278
ce4c47d66791f0a6c1dcefbc0c50474ac92cb33618d21212a5a05e9e7864e4d7
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/understrap/css/custom/main.css?ver=0.9.4.1612145532 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: text/css
last-modified: Tue, 22 Feb 2022 02:04:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 3376
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-includes/js/jquery/jquery.min.js?ver=3.5.1
200 OK 30 kB URL HTTP/2 vietroll.vn/wp-includes/js/jquery/jquery.min.js?ver=3.5.1
IP
File type ASCII text, with very long lines (65451)
Hash ef2cb9901cc106c049c57b6bb1c6eec4
3773a0684805600ac8a1c5543d0586e7f8b7e2de
386fc33b0d773cbabecd02bfa72605f417d337fcc8f26f5f919a8c7e6b7a5a0b
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/jquery/jquery.min.js?ver=3.5.1 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: application/javascript
last-modified: Wed, 07 Oct 2020 16:33:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 30287
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.0 kB URL HTTP/2 vietroll.vn/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
File type ASCII text, with very long lines (11126)
Hash 7e058b51f939eacfa31cdface14dded5
9d732e5afdeb42edef9e1b9631b7e95e054787cc
4ece5b00423755d8f4121ce382c8ea4dc44c241f28f150abe19caa85d0b0acc1
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: application/javascript
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 3995
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.4.4
200 OK 46 kB URL HTTP/2 vietroll.vn/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.4.4
IP
File type ASCII text, with very long lines (42889)
Hash 7b6e082bde2cd00810b3413baa28da45
4b18394c3ab61e2dae4eae87b00cdc74f2339447
30fe548881461bdef9c96b8faf55eaeeb8759dcb83049beef418e939b9f965b0
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.4.4 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 04:44:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 45472
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/themes/understrap/css/theme.min.css?ver=0.9.4.1612145532
200 OK 36 kB URL HTTP/2 vietroll.vn/wp-content/themes/understrap/css/theme.min.css?ver=0.9.4.1612145532
IP
File type ASCII text, with very long lines (65307)
Hash 63a1cd03c7f3b4920b3c0f6f850816f5
7ef1343be6db381cd475743a1a7e7a000adaaa0f
b1532a652c6e9c7135ba2b9a0adbd42b3f7efadcd49491155650a9b8b1e1c128
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/understrap/css/theme.min.css?ver=0.9.4.1612145532 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: text/css
last-modified: Mon, 01 Feb 2021 02:12:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 36314
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.4.6
200 OK 90 kB URL HTTP/2 vietroll.vn/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.4.6
IP
File type ASCII text, with very long lines (64270)
Hash 6595e7d135bbe98be8f42fbb5a62d3a2
8c30aff0d0305c6ae0ef90e1a47f87c617ac83cf
33385779002fe2988837a9df929180c214fb12ca292d6d82f715ac8d4f358a3d
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.4.6 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 04:44:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 89947
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70
200 OK 3.2 kB URL HTTP/2 vietroll.vn/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70
IP
File type ASCII text, with very long lines (9081)
Hash 700d3ca3b6f3e00a4c59f7ca3353e5ac
c4fb56a1dd52567489e3c35030fcbc430ec9d371
513764573155698d580bfcbb7c0d6f02cfef9326ae4b4809148b915103ffe895
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 03:25:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 3232
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=5.1.0
200 OK 970 B URL HTTP/2 vietroll.vn/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=5.1.0
IP
File type HTML document, ASCII text, with very long lines (3037), with no line terminators
Hash 155d874ef60217f790dedec58e83d832
42a2698adec25b2000046cf7e3818e6478951fc3
c6801f4d5dcdd86ba3e33dc35a8765c03fd55e9f621443dd0fb7cd8c8e6707da
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=5.1.0 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 03:25:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 970
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.4.1
200 OK 321 B URL HTTP/2 vietroll.vn/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.4.1
IP
Hash 159e4731a0ffba6862ee2a1bbcc8a805
7fb2a5ca7a80d96187fda406d0a1b7db23867fa7
c6f102a76dc397d94cfbadcd292d64bb45acaa29b0391b41a9f1cc68c2274ae2
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.4.1 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: application/javascript
last-modified: Thu, 11 Mar 2021 08:00:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 321
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4
200 OK 899 B URL HTTP/2 vietroll.vn/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4
IP
File type ASCII text, with very long lines (1668)
Hash 22d65ba38528349e705d912ce26bf8ac
c89ba006009043d93b88ff155b4fec8797330550
6253bcb85e4267ad3ba843145534e729ee2c1d7e85e5b4ab5b2e074ae636bca3
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 03:25:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 899
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=5.1.0
200 OK 670 B URL HTTP/2 vietroll.vn/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=5.1.0
IP
File type ASCII text, with very long lines (2066), with no line terminators
Hash 82a4bb80f29fd8b251ac026d682f1529
0f9f3105ae887d44bbc296ddadd171ba3ee2e75e
95516630f841e1de482eba3c4bcc57991bbe6dbb13d88bb5a2583669d29a01a5
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=5.1.0 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 03:25:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 670
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=5.1.0
200 OK 934 B URL HTTP/2 vietroll.vn/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=5.1.0
IP
File type ASCII text, with very long lines (2938), with no line terminators
Hash ef8ddf2830341f13634a12266fa9813f
45c12d8b054261b0597ffdb97ff55f8ab7a913c4
698fbd0089cafb0659518bf2359ce5c990e71c9a543338fdc7b1595ee11ade22
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=5.1.0 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 03:25:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 934
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/plugins/twist/assets/js/slick.min.js
200 OK 10 kB URL HTTP/2 vietroll.vn/wp-content/plugins/twist/assets/js/slick.min.js
IP
File type ASCII text, with very long lines (42862)
Hash 09ed72c756aef05979d1c10d176eeb7a
1f3c35043f1aae481a38b40327fefb959ff63885
8638bee02f96fc15e4a3dae0ae220e31f020ee0b10c8eb5f829d9986b3fc53c4
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/twist/assets/js/slick.min.js HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 03:25:57 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 10097
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/plugins/twist/assets/js/public.js
200 OK 1.2 kB URL HTTP/2 vietroll.vn/wp-content/plugins/twist/assets/js/public.js
IP
File type ASCII text, with CRLF line terminators
Hash 63999b9179c542c3f66b3641c8568721
572e0dd7c2ad71b98f0b6a496b94f1c92a6257b6
93f09bdd2767d672b27017fe4d7cbc2d50248971bc8a44715986ea8c1d651cda
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/twist/assets/js/public.js HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 03:25:57 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 1234
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/themes/understrap/js/theme.min.js?ver=0.9.4.1612145532
200 OK 21 kB URL HTTP/2 vietroll.vn/wp-content/themes/understrap/js/theme.min.js?ver=0.9.4.1612145532
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 85533febe552ce9a9a739d359310d640
dcd7f2d409cd32426dada9b4f4371b20715bafab
b69d92f051e1eee988f024b7983c631de78a9a409c0b4f1352dd0f96dcbe001f
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/understrap/js/theme.min.js?ver=0.9.4.1612145532 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: application/javascript
last-modified: Mon, 01 Feb 2021 02:12:12 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 21437
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/themes/understrap/js/custom/slick-option.js?ver=0.9.4.1612145532
200 OK 549 B URL HTTP/2 vietroll.vn/wp-content/themes/understrap/js/custom/slick-option.js?ver=0.9.4.1612145532
IP
Hash a88848181dbeffb69aed3a9aa80b4881
99ce9bb005906190aa1565323f4397eb500f3271
5a945c116a6e02d3a93e6fd1f85b1ecb46ba0f650276c07a842e5a797a03ca34
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/understrap/js/custom/slick-option.js?ver=0.9.4.1612145532 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: application/javascript
last-modified: Tue, 13 Apr 2021 10:04:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 549
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/themes/understrap/js/custom/main.js?ver=0.9.4.1612145532
200 OK 844 B URL HTTP/2 vietroll.vn/wp-content/themes/understrap/js/custom/main.js?ver=0.9.4.1612145532
IP
Hash 0a9f798393915089b4709e4686d2248e
c16ca4e3712841a7e8515d8a1326f55734a2a7ef
155a1af229e1c842e1dae0eb48756d1e80401db1921d9329eb5882df10c75fbf
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/understrap/js/custom/main.js?ver=0.9.4.1612145532 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: application/javascript
last-modified: Mon, 26 Jul 2021 09:43:02 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 844
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/plugins/wp-rocket/assets/js/lazyload/16.1/lazyload.min.js
200 OK 2.6 kB URL HTTP/2 vietroll.vn/wp-content/plugins/wp-rocket/assets/js/lazyload/16.1/lazyload.min.js
IP
File type ASCII text, with very long lines (7889)
Hash 38f598ed10cc662f33bcb2a719de6e52
7da764b9b7ff5b9679f0e4313fb5587252b54c2c
e99237b16aef4b9b118b75356607354192e33695c1e15372d9bb86bf07483db7
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/wp-rocket/assets/js/lazyload/16.1/lazyload.min.js HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:05 GMT
content-type: application/javascript
last-modified: Wed, 02 Mar 2022 09:21:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 2570
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/uploads/2022/02/cropped-cropped-vr-logo-vuong.png
200 OK 22 kB URL HTTP/2 vietroll.vn/wp-content/uploads/2022/02/cropped-cropped-vr-logo-vuong.png
IP
File type PNG image data, 512 x 321, 8-bit/color RGBA, non-interlaced\012- data
Hash 313df48ee66b8567f55fa626c5b02a7a
0de7d892a626c1a82ef587863a11c1422e008eaf
8434e884abd9a4ab9f2ddbb0219e11017f8d4be94e294066eaa7a2a612f9b927
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/2022/02/cropped-cropped-vr-logo-vuong.png HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=10368000,public
expires: Fri, 17 Mar 2023 22:36:05 GMT
content-type: image/png
last-modified: Thu, 10 Feb 2022 04:04:37 GMT
accept-ranges: bytes
content-length: 21585
date: Thu, 17 Nov 2022 22:36:05 GMT
server: LiteSpeed
vary: Accept-Encoding
X-Firefox-Spdy: h2
vietroll.vn/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=5.1.0
200 OK 1.1 kB URL HTTP/2 vietroll.vn/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=5.1.0
IP
File type ASCII text, with very long lines (7043), with no line terminators
Hash 398489038b789364a5c83f044e11974d
d5caf5f64c45693de65b5c0a801bfbf83a325485
32365dde0c909abbb02d8b6a8d9938056ba47f325d51e75082e3d265ce5f76d5
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=5.1.0 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=31536000,public
expires: Fri, 17 Nov 2023 22:36:06 GMT
content-type: text/css
last-modified: Tue, 13 Apr 2021 03:25:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
content-length: 1058
date: Thu, 17 Nov 2022 22:36:06 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
vietroll.vn/wp-content/themes/understrap//img/background-footer.jpg
200 OK 83 kB URL HTTP/2 vietroll.vn/wp-content/themes/understrap//img/background-footer.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1024x768, components 3\012- data
Hash d0e6e20532d4abe4d0fea24f504b8e70
e02dad89d9733dc607a8d64daf96d41a9473b57b
a388126cf0a046825efec4bd1bc4210c013dc510048a95b91f45f5ca2fe37dff
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/understrap//img/background-footer.jpg HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/themes/understrap/css/custom/footer.css?ver=0.9.4.1612145532
Cookie: pll_language=vi
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=10368000,public
expires: Fri, 17 Mar 2023 22:36:06 GMT
content-type: image/jpeg
last-modified: Mon, 26 Apr 2021 03:15:41 GMT
accept-ranges: bytes
content-length: 83268
date: Thu, 17 Nov 2022 22:36:06 GMT
server: LiteSpeed
vary: Accept-Encoding
X-Firefox-Spdy: h2
vietroll.vn/wp-content/themes/understrap/font-awesome-5.11.2/webfonts/fa-solid-900.woff2
200 OK 130 kB URL HTTP/2 vietroll.vn/wp-content/themes/understrap/font-awesome-5.11.2/webfonts/fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 129832, version 330.32636\012- data
Size 130 kB (129832 bytes)
Hash dbe8505cf4eb137c63b6c375e02c225e
e1b1db2ab291da9e9b17335580665c4fb5eddde9
0c103ae844c36c58f5947f4ffac0ef3edf1d447d0650fe33437071d3e13645ca
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/understrap/font-awesome-5.11.2/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/themes/understrap/font-awesome-5.11.2/css/all.min.css?ver=0.9.4.1612145532
Cookie: pll_language=vi
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=10368000
expires: Fri, 17 Mar 2023 22:36:06 GMT
content-type: font/woff2
last-modified: Mon, 01 Feb 2021 06:56:27 GMT
accept-ranges: bytes
content-length: 129832
date: Thu, 17 Nov 2022 22:36:06 GMT
server: LiteSpeed
vary: Accept-Encoding
X-Firefox-Spdy: h2
vietroll.vn/wp-content/themes/understrap/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/2 vietroll.vn/wp-content/themes/understrap/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/themes/understrap/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/themes/understrap/css/theme.min.css?ver=0.9.4.1612145532
Cookie: pll_language=vi
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=10368000
expires: Fri, 17 Mar 2023 22:36:06 GMT
content-type: font/woff2
last-modified: Mon, 01 Feb 2021 02:12:11 GMT
accept-ranges: bytes
content-length: 77160
date: Thu, 17 Nov 2022 22:36:06 GMT
server: LiteSpeed
vary: Accept-Encoding
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 8d0f8a7b5d388a31b6a0c5355220eb12
68bcdd3241360576983c78a956a3854da2fe5be9
80952525c81058697103f9688cdbf628dee02284a1edc061784e3d54e780b2d8
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 17 Nov 2022 22:36:07 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 21 Nov 2022 20:40:59 GMT
ETag: "68bcdd3241360576983c78a956a3854da2fe5be9"
Last-Modified: Thu, 17 Nov 2022 20:41:00 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 90
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76bbf1804ea8b51d-OSL
vietroll.vn/?wc-ajax=get_refreshed_fragments
200 OK 162 B URL HTTP/2 vietroll.vn/?wc-ajax=get_refreshed_fragments
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 5497cc2e771c14c8a41c10609d55d1ca
b78661198194154b5b320fd36e293cdbcd354aa5
db3ff9160f2b44a3e10bf09e9315196812e0b597215dfabc889f28ff8fe984e5
Analyzer Verdict Alert fortinet Malware
mnemonic_dns Sinkholed
quad9 Sinkholed
POST /?wc-ajax=get_refreshed_fragments HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://vietroll.vn
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Cookie: pll_language=vi
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/7.3.33
content-type: application/json; charset=UTF-8
cache-control: public, max-age=0
expires: Thu, 17 Nov 2022 22:36:06 GMT
content-length: 162
content-encoding: br
vary: Accept-Encoding,Accept-Encoding
date: Thu, 17 Nov 2022 22:36:06 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 17 Nov 2022 20:41:09 GMT
expires: Thu, 17 Nov 2022 22:41:09 GMT
cache-control: public, max-age=7200
age: 6898
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
vietroll.vn/wp-content/uploads/2022/02/cropped-cropped-vr-logo-vuong-1-192x192.png
200 OK 7.0 kB URL HTTP/2 vietroll.vn/wp-content/uploads/2022/02/cropped-cropped-vr-logo-vuong-1-192x192.png
IP
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash a537f05bdc73ff4088fbc7d077429813
541c89091ae44a0acefd37fddb8ee8219f03115d
e03801205833368b920f319c76417b064ad543c7a81b1870d6330095420e9c7a
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/2022/02/cropped-cropped-vr-logo-vuong-1-192x192.png HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Cookie: pll_language=vi
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=10368000,public
expires: Fri, 17 Mar 2023 22:36:07 GMT
content-type: image/png
last-modified: Thu, 17 Feb 2022 07:23:41 GMT
accept-ranges: bytes
content-length: 7030
date: Thu, 17 Nov 2022 22:36:07 GMT
server: LiteSpeed
vary: Accept-Encoding
X-Firefox-Spdy: h2
vietroll.vn/wp-content/uploads/2022/02/cropped-cropped-vr-logo-vuong-1-32x32.png
200 OK 831 B URL HTTP/2 vietroll.vn/wp-content/uploads/2022/02/cropped-cropped-vr-logo-vuong-1-32x32.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash b03d2356dc4400e3fbb08c909253d695
e8738224fcd82762c548df13d017daf3f8e4598f
5a3210f98bb33892fedc9ab09ea03b30f2fd7f4a425e1713a76632e75850d8d6
Analyzer Verdict Alert mnemonic_dns Sinkholed
quad9 Sinkholed
GET /wp-content/uploads/2022/02/cropped-cropped-vr-logo-vuong-1-32x32.png HTTP/1.1
Host: vietroll.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/wp-content/fMgN4vYD1/
Cookie: pll_language=vi
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=10368000,public
expires: Fri, 17 Mar 2023 22:36:07 GMT
content-type: image/png
last-modified: Thu, 17 Feb 2022 07:23:41 GMT
accept-ranges: bytes
content-length: 831
date: Thu, 17 Nov 2022 22:36:07 GMT
server: LiteSpeed
vary: Accept-Encoding
X-Firefox-Spdy: h2
contents.bownow.jp/forms/sid_f318237e10bc710d58d1/trace.js
200 OK 0 B URL HTTP/2 contents.bownow.jp/forms/sid_f318237e10bc710d58d1/trace.js
IP
GET /forms/sid_f318237e10bc710d58d1/trace.js HTTP/1.1
Host: contents.bownow.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 17 Nov 2022 22:36:07 GMT
content-type: text/javascript; charset=utf-8
server: nginx/1.20.0
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
etag: W/"97703dfd321385361e6a2769554adb76"
cache-control: max-age=0, private, must-revalidate
set-cookie: _bownow_locale=en; path=/; expires=Mon, 17 Nov 2042 22:36:07 GMT; secure; SameSite=None
bownow_cid=95cc787c-bde8-4fc9-b922-eb2b4a436f27; domain=bownow.jp; path=/; expires=Mon, 17 Nov 2042 22:36:07 GMT; secure; HttpOnly; SameSite=None
x-request-id: 7f1ba34d-e432-4a34-acdf-b51b3eff81e1
x-runtime: 0.010390
strict-transport-security: max-age=63072000; includeSubDomains
X-Firefox-Spdy: h2
contents.bownow.jp/js/UTC_d5375b33ce6ab13e65f1/trace.js
200 OK 0 B URL HTTP/2 contents.bownow.jp/js/UTC_d5375b33ce6ab13e65f1/trace.js
IP
GET /js/UTC_d5375b33ce6ab13e65f1/trace.js HTTP/1.1
Host: contents.bownow.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 17 Nov 2022 22:36:07 GMT
content-type: text/javascript; charset=utf-8
server: nginx/1.20.0
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
etag: W/"ebd8a6f22ad2dc8a255a63382563e014"
cache-control: max-age=0, private, must-revalidate
set-cookie: _bownow_locale=en; path=/; expires=Mon, 17 Nov 2042 22:36:07 GMT; secure; SameSite=None
x-request-id: edf1766c-29ad-4277-bb81-5e65538151dd
x-runtime: 0.007022
strict-transport-security: max-age=63072000; includeSubDomains
X-Firefox-Spdy: h2
contents.bownow.jp/js/UTC_d5375b33ce6ab13e65f1/trace.js?referer=https%3A%2F%2Fvietroll.vn%2Fwp-content%2FfMgN4vYD1%2F
200 OK 0 B URL HTTP/2 contents.bownow.jp/js/UTC_d5375b33ce6ab13e65f1/trace.js?referer=https%3A%2F%2Fvietroll.vn%2Fwp-content%2FfMgN4vYD1%2F
IP
GET /js/UTC_d5375b33ce6ab13e65f1/trace.js?referer=https%3A%2F%2Fvietroll.vn%2Fwp-content%2FfMgN4vYD1%2F HTTP/1.1
Host: contents.bownow.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/
Cookie: _bownow_locale=en; bownow_cid=95cc787c-bde8-4fc9-b922-eb2b4a436f27
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 17 Nov 2022 22:36:07 GMT
content-type: text/javascript; charset=utf-8
server: nginx/1.20.0
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
etag: W/"515722258671e8b991bd6172be9f7e60"
cache-control: max-age=0, private, must-revalidate
set-cookie: _bownow_locale=en; path=/; expires=Mon, 17 Nov 2042 22:36:07 GMT; secure; SameSite=None
bownow_cid=95cc787c-bde8-4fc9-b922-eb2b4a436f27; domain=bownow.jp; path=/; expires=Mon, 17 Nov 2042 22:36:07 GMT; secure; HttpOnly; SameSite=None
x-request-id: b5ea71a2-2ddf-4d4f-8c9c-2f344fd3d829
x-runtime: 0.008460
strict-transport-security: max-age=63072000; includeSubDomains
X-Firefox-Spdy: h2
contents.bownow.jp/js/UTC_d5375b33ce6ab13e65f1/95cc787c-bde8-4fc9-b922-eb2b4a436f27/3e80ed40-ea52-4156-ad57-5648ac31df8a/trace.js?referer=https%3A%2F%2Fvietroll.vn%2Fwp-content%2FfMgN4vYD1%2F
200 OK 0 B URL HTTP/2 contents.bownow.jp/js/UTC_d5375b33ce6ab13e65f1/95cc787c-bde8-4fc9-b922-eb2b4a436f27/3e80ed40-ea52-4156-ad57-5648ac31df8a/trace.js?referer=https%3A%2F%2Fvietroll.vn%2Fwp-content%2FfMgN4vYD1%2F
IP
GET /js/UTC_d5375b33ce6ab13e65f1/95cc787c-bde8-4fc9-b922-eb2b4a436f27/3e80ed40-ea52-4156-ad57-5648ac31df8a/trace.js?referer=https%3A%2F%2Fvietroll.vn%2Fwp-content%2FfMgN4vYD1%2F HTTP/1.1
Host: contents.bownow.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vietroll.vn/
Cookie: _bownow_locale=en; bownow_cid=95cc787c-bde8-4fc9-b922-eb2b4a436f27
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 17 Nov 2022 22:36:08 GMT
content-type: text/javascript; charset=utf-8
server: nginx/1.20.0
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
etag: W/"f78f0f583e152fa235ca51f99bab70d1"
cache-control: max-age=0, private, must-revalidate
set-cookie: _bownow_locale=en; path=/; expires=Mon, 17 Nov 2042 22:36:08 GMT; secure; SameSite=None
x-request-id: 4892dab9-6a6b-4b46-b3d1-62adde1c7bc7
x-runtime: 0.010116
strict-transport-security: max-age=63072000; includeSubDomains
X-Firefox-Spdy: h2
103.77.162.11
34.120.237.76
104.18.21.226
52.197.105.218
23.36.77.32
93.184.220.29