nganhangsovn.com/wp-content/uploads/2022/12/cropped-Mo-the-tin-dung.png
188.114.96.1200 OK 18 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/12/cropped-Mo-the-tin-dung.png
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type PNG image data, 500 x 138, 8-bit/color RGBA, non-interlaced\012- data
Hash 2b2a1343d8cf33ffec52958b15129336
920b5ea234caec37cf19925310c8ec5a782a1fa1
d3c6c0e447821c95f9b3ee0cee1acf75c0743c5fa30ada7dab78cbb628b06800
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/12/cropped-Mo-the-tin-dung.png HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/png
content-length: 17773
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Tue, 20 Dec 2022 02:30:58 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mFuc1NqI1FLDqekDeL1IDC5ppOkNpRptqHwJiamGPlvjnUktmD%2FL2R14VMI5QYbOSHkKqY8B02rDT3E7IThUzZnsY0R%2Bdi8%2BwJ5vpwzI3ElmdUHDCosB8xVrfhtKhL3%2F91N6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed770b840b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2023/04/TPBank-evo-1-150x150.jpg
188.114.96.1200 OK 6.6 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2023/04/TPBank-evo-1-150x150.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash d5f72dfc5bd6760d8da38a68fa3f2bf2
766672c662e9920989dd994796c244f9ae2bf263
a9afc8afe3545d011788915a764ffc29b5465747157671a3843ef5f268e07c86
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2023/04/TPBank-evo-1-150x150.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 6628
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Fri, 14 Apr 2023 01:09:40 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eeDVaxDdCJzNRswXwXBJ48VHSJLbFn4vTX50qqptVPkywZdc2UsGtR1Wl2P9mvJnPTZ3vT1x56N%2FHiLseLnRmQSjz7d9tcUq7rIDNhoP9K%2FX0EEOaNVhQ7bTPQm%2BE4KkQuDX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed770b850b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/10/nganhangsovnpng.png
188.114.96.1200 OK 33 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/10/nganhangsovnpng.png
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type PNG image data, 379 x 153, 8-bit/color RGBA, non-interlaced\012- data
Hash 89faacc0714d282630125c0a0463a974
172e70ca5dc9e85fcd10e6475314198bcde86bac
23a1e806fd97b2dc6d73d47f7d4be5f87d325ee05722f2b56cc4746303a688b7
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/10/nganhangsovnpng.png HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/png
content-length: 32558
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Thu, 20 Oct 2022 08:46:17 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pb0eT5RCj8peEDDvOI%2Baxq73nGzeWiv1kkd7Dkja3NKU3twAWB4ApVfJQ6%2FsEmpQaXBU9qYv5LuB%2FDkkRrXGZFu9mGDtkDENjkPEyEr4GC4YhE9VKDGRBryOuhzQC%2B5d9OJ8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed770b830b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/12/2020420_vay-bang-dang-ky-xe-tima-150x150.jpg
188.114.96.1200 OK 5.7 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/12/2020420_vay-bang-dang-ky-xe-tima-150x150.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 86ce2c9c6292db67b7dc9f72731eaa31
a8a4ae4f1b9b2df74484719a7d81987d7fe232ac
f38ed09558300096d324d2066444178d2b19d838eef1d8acadb7deb424914d5e
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/12/2020420_vay-bang-dang-ky-xe-tima-150x150.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 5718
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Wed, 21 Dec 2022 03:45:27 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D6zxI4sse3bWzwM2o8W3JKiYuckKEy7y3HNwQ7fc2mDfdk5LFgDfSrMsBs675hdYoLgNj%2BLIyrjhFUsZyWNowkH4fhxd97li%2BWPJHDZMcKSTtBqvHEzhHGvPr049Txeg3aNr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed770b870b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/plugins/tinh-vay-ngan-hang-tra-gop/css/mnd_laivay_cp.css?ver=6.3.1
188.114.96.1200 OK 8.6 kB URL GET HTTP/3 nganhangsovn.com/wp-content/plugins/tinh-vay-ngan-hang-tra-gop/css/mnd_laivay_cp.css?ver=6.3.1
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type ASCII text, with very long lines (4040), with no line terminators
Hash ce5fd463b57b9b4b9f6a4542ae397aa3
e271b3594bf50d1142c1c61b62d17c082985dbd5
66460adb4e173e99f88f794da809c8307e6488c982a82bdc58613036d9d3f67b
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/plugins/tinh-vay-ngan-hang-tra-gop/css/mnd_laivay_cp.css?ver=6.3.1 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Thu, 11 May 2023 00:26:45 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6yUV4FxU%2ByAciE21xL5c1rw4jshJg%2Ff0yG6p1w23zobP7FkncIVpqjdtmaiV3hNeV7g29zGI3FV4tX%2FHr3OyUgyqY6y3vaeDs9i%2FhT%2FvMIbroVAI4jqv%2B6OeMCwctxZMIxTJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed761af30b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/12/acb-online-150x150.jpg
188.114.96.1200 OK 8.0 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/12/acb-online-150x150.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 55b57697ef3193c7ea47b9c8fa197e13
117366979853fd2cb25e06d4679e9bd8e07a891b
7365628a5d0884e3e1eb0db95d1bcf83bb137e0ee6e2805900faabf48da9ebc9
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/12/acb-online-150x150.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 7994
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 19 Dec 2022 07:12:01 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XsSnqcnbr5TgNiKeGSY7GuQzcRr8xQi35Bg8VVwgd8ierS41Y9cRuy6nwY9fqe21y38zi4fA0ffh2F%2BpxiCWgW3WmFHu0Yz1iGU3D6nobe1YpRVO3w4QafGGxPfyK3ORBBgD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed770b8b0b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/12/easy-loan-shinhan-1-150x150.jpg
188.114.96.1200 OK 5.1 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/12/easy-loan-shinhan-1-150x150.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 39b0d25c190b61a16e8877f55843548c
95386993fd8a526ce9263643df94d44331c09763
49f7d13949390fb9051222844b38dd728721a47c5c24b3e83f476f949ac91b57
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/12/easy-loan-shinhan-1-150x150.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 5113
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Wed, 21 Dec 2022 03:20:06 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iUdOLEk5PVy0X7L7Czkuj1mkxbaoxhE8x%2BHkFhzsIjVU7fjfVJZqH7RMCrBYujStNF3%2FDYP45eowCuazLPY1YOxt4KXVgLQNoqyrV8K4zCDlBrkvHb7nGdodc2pnz3hJS0ye"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed770b890b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/12/2020420_vay-bang-dang-ky-xe-tima.jpg
188.114.96.1200 OK 27 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/12/2020420_vay-bang-dang-ky-xe-tima.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 600x400, components 3\012- data
Hash f004576e44b4ea46497e4523caa4e43f
ca613766af828d938407932f14f62f01db754da3
3cf485f1ba6f1a0106919b16a08f757757be012a3c5a1fdf3d7893bb51c6ac2a
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/12/2020420_vay-bang-dang-ky-xe-tima.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 27176
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Wed, 21 Dec 2022 03:45:27 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DgjeIUR5A66IOLHQrigog3m4ZpVi11azRDcPOKt%2FVUIMrDudkbXLe1Tz8MQtR6bVVUKyGurrz83E9zfhLbT%2BlTCa2EUqVA4E4P7UwB5oIuhgNla%2FP6gH9ormaSBX7c3nSNtk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed770b8d0b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2023/04/TPBank-evo-1-768x432.jpg
188.114.96.1200 OK 42 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2023/04/TPBank-evo-1-768x432.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 768x432, components 3\012- data
Hash 2add3e70324e354e65eb82d7dd2c77a6
a4d2f8112890364c4b8457b21447643fe8170bc1
f74b8534c1c803def0ce5fbc0114bd07fd24c56eebefaf294925374d4a826f01
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2023/04/TPBank-evo-1-768x432.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 41951
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Fri, 14 Apr 2023 01:09:40 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B8U3Rsh2%2BIFg%2FL%2Bplxhkylkb2SS%2Fr8J6ZfVuhV0X2oVq9FJT0bRF%2FNer2DOyaOCzCaDVPRvNsROg1636588Ca0lWEdeCpEW4Pn%2BXL0FGo0O04ggQQpngllb7Wqh31qEB%2FfT7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed770b8c0b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/12/20221012100205330-f88-vay-tien-destop-768x188.png
188.114.96.1200 OK 28 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/12/20221012100205330-f88-vay-tien-destop-768x188.png
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 768x188, components 3\012- data
Hash a8aec8182bf5adb3a80bd63fdc4e4f55
65040ae09e2ea2ef0e9dba7f53546cabb7cc046b
ee2557764ca3fb27cf70ed79b7f9f0b42067568408aeba3b9cafc1f269181383
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/12/20221012100205330-f88-vay-tien-destop-768x188.png HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/png
content-length: 27933
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Wed, 21 Dec 2022 03:37:31 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G%2FCTrPn2fR8xUDl5mRLwQMZovMfPUZFirGiMVpR2BNL0yKKyJOxqRDksS%2F5AfDv5D%2Biahon67QbqshbP9Qi0mHrpb0dYv1sO2i63xPqWD%2FlSOJ42zkCyZPm2xxO15z3%2FphNs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed776ba00b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/12/easy-loan-shinhan-1.jpg
188.114.96.1200 OK 64 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/12/easy-loan-shinhan-1.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x360, components 3\012- data
Hash 82626bfd60044388cba7734330ebf6f6
9d45e87f0a5ee9c9daa7f82fa82b38bc8db4fd1b
fc6d7f285e99042511d8149864d704472b986f8ae02a24ed3945f6521eb660d0
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/12/easy-loan-shinhan-1.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 63829
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Wed, 21 Dec 2022 03:20:06 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jXLw%2FPbprqnFpYF3GoejJe15wotU8VHqlz4ESNQ58amVbidSRInshC5wCfDYvneMDsq%2F%2FIRUc2F9v0BoMbrg6cK76ERfhaNMoJL%2FQXGsI9KNRU8ej%2FkJcWqMkTXAd1oiuAf9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed776ba10b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/12/acb-online-768x497.jpg
188.114.96.1200 OK 72 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/12/acb-online-768x497.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 768x497, components 3\012- data
Hash 9f72d157acc4ff400525f6b423eb0dce
4a0717a83abae7d5aa356a23771c4060aa28aff7
692744d699742d7fea54dd7d8a24c4eb5bec3494fb9604da98b13c6830e7c079
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/12/acb-online-768x497.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 72077
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 19 Dec 2022 07:12:01 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a1LW38oe28hvomVj1C8BzDURDe68hKYk9g%2FD7ctJ58VACyygRUGiOvUHc7%2FTV%2FbkRdwCPSTfZOiJ7a8R6s%2B7oH6NNQgmLzlIDsY06ezL%2F773ew3I5RvA7FEWP2uUsCMJ%2Bd%2FG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed776ba20b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/10/Topi-500x306.jpg
188.114.96.1200 OK 17 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/10/Topi-500x306.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 500x306, components 3\012- data
Hash 930fc99a688ffccbdb9db851374d4e4d
26b5e2bf97f0b702a0ec0896276647bfa93b6ffc
dcb9ad3542bbfce10d4360fc0455b020ca16958b4f6661ddba19f7c14a4e7ac2
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/10/Topi-500x306.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 17392
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Tue, 18 Oct 2022 07:33:24 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TBf1x3SBxq8awGtcvT3FY14Ehy8isVhrKjcRD%2Bn49RdOcvQhxyNR8Y4BlUlSbf%2BLhK8kZvGHC7DDZkrpJey7o786pPKfDM1m0IHvko3dasGg9J4p7KHEw%2FFb2FEJiUvlcCjN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed779baa0b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/10/tikop-la-gi-1024x577-1-500x282.jpeg
188.114.96.1200 OK 26 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/10/tikop-la-gi-1024x577-1-500x282.jpeg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 500x282, components 3\012- data
Hash e96cf8180a48fa4731e4a90a3676b9d6
cd571b0f9b5c01bfe1c8a15204e6449617d46d04
4517775f46c2db6b8b73b0166957807b3e2db9e2985c84603237a6953b5009af
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/10/tikop-la-gi-1024x577-1-500x282.jpeg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 26156
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Tue, 18 Oct 2022 03:52:25 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fBD6mhqIeyHPr%2B%2BLdriMwkyvZhHEs0KB5ZUSrigrB1n5SlB92LdUSwfWfr2aGbu4z7phtGUiZMYD0L1AN4snbNvWoaxy2VzYzL0LPWlP5Fy1NrQTim%2FGU0y9G7Hj4cgAFdXW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed77bbaf0b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/10/Vay-tien-buu-dien-2-150x150.jpg
188.114.96.1200 OK 6.5 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/10/Vay-tien-buu-dien-2-150x150.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 5e37065681f467d6065efc2158811773
9013ad8bbb28946359bdbbbc551519ea12b5cfeb
9bd0b24a27f30171a9a9b8d4a58c6411fd2065a64b488e5beff6259764c39834
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/10/Vay-tien-buu-dien-2-150x150.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 6479
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Thu, 20 Oct 2022 03:33:40 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3ug9%2FuYvCsgS6vX6LvwsFkSr6iyp00urZBg5zbYC49pgAdprlGy5RztQy1f1IUePrA6mZAXgpALYKw0dhJRB5PScbRa8NADxa5D%2BSrz8Avt7Lq6Pu7FkQFrYv2Hs4GdJ%2BUb5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed77bbb10b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/10/huong-dan-dang-ky-vay-tai-mcredit-150x150.jpg
188.114.96.1200 OK 7.6 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/10/huong-dan-dang-ky-vay-tai-mcredit-150x150.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 0d8830e02a71635b2d0b567408982b18
0f857710632a1605b1521524203d3d90fc9a7e51
15fefc050d3c43c9d732d6cc66bd84b501ad1aef5079f25b507afe5607db6f04
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/10/huong-dan-dang-ky-vay-tai-mcredit-150x150.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 7644
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Thu, 20 Oct 2022 02:31:30 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RuQe0E7JCy%2BnpL%2B%2B9YP52oAM69V%2BPlJ7sD3gZ5MdjBY%2B3tH%2B%2FGg8qCWaH4cD%2FxX%2B4FMCGhPyBMUX2ZzFW2D4Z0LsOYqG%2BeurPH9Ie7TV9yyeCa01hKXpafcKfB8McCcis8uT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed77ebb90b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/03/vay-tin-chap-Mirae-Asset-150x150.jpg
188.114.96.1200 OK 6.0 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/03/vay-tin-chap-Mirae-Asset-150x150.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash f54283cbed71f293b57042e548ed5098
b146dad57396e9ff5f69471487bc534c91a147d9
0eb4608000276586c795c12c40eb5626b0bb1b145435d570dcd58bb0638a6214
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/03/vay-tin-chap-Mirae-Asset-150x150.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 5976
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Thu, 24 Mar 2022 02:50:15 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8S0msjk7KGiB0Eh31G0iaMRukmMIGNpN3lXlTLbDRHPN7n1bDI8cxx%2Bm%2FznfMECQk3SQUsD4%2B3iTGR8GdqtTQdd7eaIpOA%2BMPk4p68q81u%2B4XDMdVKUT7Mv2U20%2FqNshZ%2FOY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed782bc30b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2023/04/TPBank-evo-1-500x281.jpg
188.114.96.1200 OK 24 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2023/04/TPBank-evo-1-500x281.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 500x281, components 3\012- data
Hash 17f8825acdb2718af4bc0d682d4359a3
14f8903a1d9c3819039e08733511764a9e6cc08f
2187cfdb165018570c14536ae877354fd03cc3d0bb320b193f56803ce238bb85
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2023/04/TPBank-evo-1-500x281.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 23527
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Fri, 14 Apr 2023 01:09:40 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r7O8MSVtdINlzd5iWhSSFn2oJv53yBI7fv7HtEGtYIKZnuuLXi%2B5UXudh49qSwso8UT84ncGireE5B%2Fd3Piqc2gn2qYewgUWWb5LjcAhEiQpZ4M4MFP8%2FhqKvNlcnxHxnn9h"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed782bc70b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/12/2020420_vay-bang-dang-ky-xe-tima-500x333.jpg
188.114.96.1200 OK 23 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/12/2020420_vay-bang-dang-ky-xe-tima-500x333.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 500x333, components 3\012- data
Hash 0892495bf13b2fff887dc2038fcb9326
05223c73f19ad3acc4fe45f5e2167b7584b4f365
61c812ec5dce8b6de9759ce02fe83afe05f8864e8ae8fba1adc33dacefcd62f4
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/12/2020420_vay-bang-dang-ky-xe-tima-500x333.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 23365
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Wed, 21 Dec 2022 03:45:27 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QXLkybvvWk5SbgMuBtahqo03tMuT1L1qO17wte1Loz%2FPhj%2F7r%2FFkVBezjaUqxbMm61nDyh1lThzsWN0bBjUK4RduRjXEiyuJB1YIBoP98agiG8MYjx0TI9GcqV6bBRSXke83"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed783bcc0b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/12/20221012100205330-f88-vay-tien-destop-500x122.png
188.114.96.1200 OK 15 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/12/20221012100205330-f88-vay-tien-destop-500x122.png
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 500x122, components 3\012- data
Hash d663039c00cf08db6c1d4adb10de7fa7
7ce0d0248053357f4cdd1048fac88ceff1e73a77
a43e78441c1455d4e76fd02975157f2d1cf879761c88f488f5fb51391747285e
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/12/20221012100205330-f88-vay-tien-destop-500x122.png HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/png
content-length: 15071
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Wed, 21 Dec 2022 03:37:31 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E99W%2FvyKHQ31A8BeR83IO1vmYy5zMx6LDRka9%2B8PULWxaL69fNawGePK5G55t12VhJy9T7bt9FsLmCcM3kmKYGy79QotniFDOnAT8vHTTTaxcevx%2F1RtEop5OkM19B36vEsp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed783bcd0b49-OSL
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 99734170fcdad2d52884412f61321bf8
25163901dbdc047070a12d8afadcaa7009d8b595
f2a2590ac5fa2bcc9db8c46b3b4ad45f0a03b03193f601a2636e900fe851cf59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:26:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nganhangsovn.com/wp-content/uploads/2022/12/easy-loan-shinhan-1-500x281.jpg
188.114.96.1200 OK 19 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/12/easy-loan-shinhan-1-500x281.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 500x281, components 3\012- data
Hash 2dcd142d8c7fedde325c0d9eadd962d0
e682bba7bd55f389961f460516e2de5baeae0f88
03127afda4e9d4ca06e932f9ea42f0678a584a8e4a337fa17d9cd6e2c21a4694
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/12/easy-loan-shinhan-1-500x281.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 19138
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Wed, 21 Dec 2022 03:20:06 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4TZYDA2UimX36PJOMsBjkODmbVE8UOy8QBM%2BB1B19dsH8VCDQEd3Iy1rlKaCyE%2FyZwa4a5zu8apso8R2K9jRcEXXBN%2Be48mjIM9ENzco67R7dRumEiNhHa5Dacx1sdiRJmPZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed786bd40b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/12/acb-online-500x323.jpg
188.114.96.1200 OK 38 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/12/acb-online-500x323.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 500x323, components 3\012- data
Hash c978a910d2c363f711f7bc6d8315d236
432ef526a1c052d69bba04243100e3d9c5e3fd44
8a41b569af53339828e5d1264251a7bafd8ea1822a4be10f1f7438e57ae2b4f3
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/12/acb-online-500x323.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 37729
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 19 Dec 2022 07:12:01 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W4TzX8c1%2FZe9JvLT4Zr7sgcPaw0%2B8l%2BrkpEL73A17zbf6W8jZn4Wwnce1lCfhr8nQIVsLX6gViLaCW2oMK3zBSvGUOpKj2VDpLYEDXndoJc8xVVoO5MOmLHhqV9KBZgodHza"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed787bd80b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/10/FHvGiOVwzjUeSeyN361YDyr-w1vcwVHTBImEs41PNgPGv1lwjmpW686avTl-qHqi29P13pQGMDNNscl7MlCWLUi9_CUUvv3kJjae9XTDjFRbSJ0OPx_no2sHz5jNAylOZJY0d0Vw-500x273.png
188.114.96.1200 OK 90 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/10/FHvGiOVwzjUeSeyN361YDyr-w1vcwVHTBImEs41PNgPGv1lwjmpW686avTl-qHqi29P13pQGMDNNscl7MlCWLUi9_CUUvv3kJjae9XTDjFRbSJ0OPx_no2sHz5jNAylOZJY0d0Vw-500x273.png
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type PNG image data, 500 x 273, 8-bit/color RGBA, non-interlaced\012- data
Hash 2c893054fa7a867fd97a89523e3af5e4
c8580ffea5e74f425c0f426683876f796dadd3ee
c6eaa1a570784e6df69ce50100c7c48db3f99d4ce06bac5dd52307ce4126d71d
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/10/FHvGiOVwzjUeSeyN361YDyr-w1vcwVHTBImEs41PNgPGv1lwjmpW686avTl-qHqi29P13pQGMDNNscl7MlCWLUi9_CUUvv3kJjae9XTDjFRbSJ0OPx_no2sHz5jNAylOZJY0d0Vw-500x273.png HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/png
content-length: 89762
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Fri, 14 Oct 2022 02:09:56 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PGSwAQCfyuqZSuqVENU5yK06oFpOZOt2ccf%2FhcQW06eq4P8FsGRoPlZjSJOAbcXFEQuXDFmmSTYorZ5C6FB98U%2BBcH1LPmdbgH%2B4SeewB6Ulk%2BqrqqEQbjIcZmeBPkRF79N3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed788bd90b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/themes/covernews/assets/bootstrap/css/bootstrap.min.css?ver=6.3.1
188.114.96.1200 OK 54 kB URL GET HTTP/3 nganhangsovn.com/wp-content/themes/covernews/assets/bootstrap/css/bootstrap.min.css?ver=6.3.1
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type ASCII text, with very long lines (65371)
Hash 69b4aa4c095f3e82f1d54919ace7566e
f7e5f4e71c02c558803049a3cb1a584025c6fad5
ebf968e400976b579ea9dcff5f0bc247a2b2371f9ce49c3b5829da4b7179f4f9
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/themes/covernews/assets/bootstrap/css/bootstrap.min.css?ver=6.3.1 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 18 Sep 2023 08:41:09 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZrwlFn6Obh1Xmr63NOXn7iFJba2L12bk41Y44l1BrEaie0M5n3NdTOEjUfXPsKc%2Brg0RDfy7OnQqOfm%2Fb6ZNHOo2WUBfvGfkBEERT8%2BfEYYqBwtH4jjLu0mEVOE75iS84ngZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed763af60b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/10/vay-tin-chap-la-gi-3-500x313.jpg
188.114.96.1200 OK 25 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/10/vay-tin-chap-la-gi-3-500x313.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 500x313, components 3\012- data
Hash 10c7257de1902015885e998b07aa30e3
4cb9c26389628bbeeb33ac25b19fbb06bf432a50
ffdebc340547b1b722cf402726313d05901835d0b0a4a5b63bebeaad0011667a
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/10/vay-tin-chap-la-gi-3-500x313.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 24590
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Fri, 14 Oct 2022 02:06:47 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QuLXDTqv3UU0x5C1WoU7dbPHZtRqpJVulJGxG33G1P3ADHXb3uZr7YjJqUSSy9ipVpDwevulndIrnx0Awlsoc9lQUcJs6R15KDbh4EnhdLBU0dSioztKVvRHopbZLsUSa98Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed788bda0b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/themes/covernews/style.css?ver=6.3.1
188.114.96.1200 OK 56 kB URL GET HTTP/3 nganhangsovn.com/wp-content/themes/covernews/style.css?ver=6.3.1
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type ASCII text, with very long lines (1243)
Hash 62757699f27c7733aab8ef271bbf93b5
451c586b1800927d4490a1f9ec7a6fc958dfac29
3171060b3abfcc2f3708820d366cc0309959020817d89ffa0ff0869b7e8c5284
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/themes/covernews/style.css?ver=6.3.1 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 18 Sep 2023 08:41:09 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=msmGOzpexwSgrTwrV2shGefnYznaXsveZgbzSbaVea1qCbA2Ej0lLUkWCHlbIo5f4DKgYiCJZ2YIiAZp6ckFLfF6ndY9MAhURAf2zeouk%2FhxIfGpJ4bl0IUnIW0dysJljsmB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed763af70b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/themes/covernews/assets/covernews-icons/style.css?ver=6.3.1
188.114.96.1200 OK 9.9 kB URL GET HTTP/3 nganhangsovn.com/wp-content/themes/covernews/assets/covernews-icons/style.css?ver=6.3.1
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
Hash 5cf91781750dacf5ab5b3c3319483059
80460d7b129ae02b49f496c882e37d6b1c3a0011
91fb5893ea8550cb2d98a2eb3d39b45270111eeb85b1ab1c55e1351044ac2396
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/themes/covernews/assets/covernews-icons/style.css?ver=6.3.1 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 18 Sep 2023 08:41:09 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E9VhmdLrHlYeiGg3ygugSLYxHsOKm0htr%2Fb7m8dcLkVCrtl4B9VPsfQI67idmrrft%2Ft9j3bzSYFMxk%2BuJFQ18t7%2B%2BgufgRQc5KB8NrxFJ%2F7gAgzJHH5NZoiyNrNXZ%2B460tEj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed764afa0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/themes/newsment/style.css?ver=1.1.0
188.114.96.1200 OK 18 kB URL GET HTTP/3 nganhangsovn.com/wp-content/themes/newsment/style.css?ver=1.1.0
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type ASCII text, with very long lines (1114)
Hash a1cb2c07be69267d7153ab6c64b2df2c
dc4308a9b9cef1b3fb8bbf8f625d7064a01d23b3
d5326035cf2a8beffd179670139e85a3e9b36711908a6f26de2db5b51600f47d
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/themes/newsment/style.css?ver=1.1.0 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Fri, 31 Mar 2023 04:28:51 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v%2BO3f7kXs1G7OnSjCorapStA8%2BNdmI2hkVjPvNse5x%2B4JjH%2BB8v7Ck%2B6CV0dA%2FLm4P0E25P7l%2BmGGaWPInZP7gcbajYE3WU6is8L9%2FqMdOQrCANcsYI4nAmMQVSSCAg7omm5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed763af90b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/10/mo-the-tin-dung-sacombank-1-500x375.jpg
188.114.96.1200 OK 38 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/10/mo-the-tin-dung-sacombank-1-500x375.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 500x375, components 3\012- data
Hash 8152dc38793a535aec94e8a32333b0ae
937b163aaa0239279eb1477035a59935dbd9c814
3321713b71ca06d55df8a51876050dda2d24ee94a3d3306b5e45252350b8a19b
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/10/mo-the-tin-dung-sacombank-1-500x375.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 37643
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Tue, 11 Oct 2022 09:05:55 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BZBGG7JoajCQaVMdW2wnlwVj1jYax62T8O0vG5UTjHCvKkr1V2vtBLtqLeArSRB3%2BHn35A3y9mluuZKA1xv8FMEUAwCfw%2BfjR8%2FA3clnBKDKf4LV%2Fh%2FiL6nviHJW5LDz3udZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed78abe80b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/themes/covernews/assets/slick/css/slick.css?ver=1.1.0
188.114.96.1200 OK 25 kB URL GET HTTP/3 nganhangsovn.com/wp-content/themes/covernews/assets/slick/css/slick.css?ver=1.1.0
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
Hash f38b2db10e01b1572732a3191d538707
a94a059b3178b4adec09e3281ace2819a30095a4
de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/themes/covernews/assets/slick/css/slick.css?ver=1.1.0 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 18 Sep 2023 08:41:09 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kFwUBTB%2FZ5lj%2F%2BYUShTJN1eVm8K1hxi5V1mlI01qFGvI3ewjpT4TCsWYemKpPLieSYzVczR82CnjHdReUphvQN5DfgcACMeSMH64tMk7zo4K0VgvANEz8eyzS4lJcmLMGG5j"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed765b070b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/10/neo-vpbank-11-500x317.jpg
188.114.96.1200 OK 30 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/10/neo-vpbank-11-500x317.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 500x317, components 3\012- data
Hash cd1f2a7219415a6a8f12a964a3755ee6
c4f9d136182241fbd7f0b6d90cb76a0eab1bbaae
11329138979559fbe6fd27241d5e6af0fcc9e53a198f747e75531d3ca54ee1d9
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/10/neo-vpbank-11-500x317.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 29490
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Tue, 11 Oct 2022 09:41:54 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B7ZMEiUA%2BiW2%2BWDK%2B2%2Bg1i0wdBDtBq1sVCcI3A0BoOze0M%2Fk0BRC1VXiRn5q5KFUN%2B0Mn59attNWJE5IgTd%2BHopf5Dsv3xLbl8CP8WLSCJpQgwIvhtl4pD0fy%2FVTwlHJpTDT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed78abe70b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/10/huong-dan-kiem-tien-khao-sat-online-voi-infoq-vn-2018-1-500x347.png
188.114.96.1200 OK 180 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/10/huong-dan-kiem-tien-khao-sat-online-voi-infoq-vn-2018-1-500x347.png
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type PNG image data, 500 x 347, 8-bit/color RGBA, non-interlaced\012- data
Size 180 kB (179947 bytes)
Hash 7d4d25b7eab40a1e0d50c45b77c12ac6
27b889e6d3e1c88291697dce46ed6aed677903c2
f152ed04209cdccfca8433a22ae1b02d363a18930c2bc346fcaa6b75f358e3bf
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/10/huong-dan-kiem-tien-khao-sat-online-voi-infoq-vn-2018-1-500x347.png HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/png
content-length: 179947
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Tue, 18 Oct 2022 01:48:22 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7%2BTkERrtzetEyXgXx9Loy205DOD8%2FCyzp83TWxiJ0wfxezUZT9KJsHU7bDgyn%2FvnJvFLaGVyrs42dm64%2BY6e4I%2BB7yf8zy2cMVMOPxcgZeSRmc2fHcszKH8Sb9LyJjuHmMX%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed78abea0b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/10/vinaresearch-500x232.webp
188.114.96.1200 OK 26 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/10/vinaresearch-500x232.webp
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x232, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c544afcd501428d0d8d7ed4a6d402490
cf4345d08e271550807337cddd7e32838ca3ea35
07f5d7434929325d419a3fd8df7d454d05ba1185ff5dd28f4cf25afb984e3c83
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/10/vinaresearch-500x232.webp HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/webp
content-length: 26486
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Tue, 18 Oct 2022 00:59:03 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HkYDgRDcsX%2F7huDrY4ruFgNNUXX%2FyuEwgess5HMMfr%2FmnA9JC1NjYsTMjJyLPkhXPuRPRHC3cJu6eq0l6pikMxapsE8f27Mr8Xyqof1oR0Z815uXO0W0iHgZIZJ1CQ2JTagP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed797c0e0b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/12/loi-ich-tai-khoan-shinhan-bank-online-1024x438-1-500x214.jpg
188.114.96.1200 OK 12 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/12/loi-ich-tai-khoan-shinhan-bank-online-1024x438-1-500x214.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 500x214, components 3\012- data
Hash b9b5de593d9d49007e4a86f1089c7cbb
cae5aebcc7025a990f9ed2fa461c90107ef2a283
4ae6b8bc459ec305dfd76095638deced5c68a9f28fb24dbc06cf0eb2f455df67
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/12/loi-ich-tai-khoan-shinhan-bank-online-1024x438-1-500x214.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 12386
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Thu, 15 Dec 2022 03:51:30 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gjbdyPXemwelS9EbaXcBYt2Y8ypwEut5xPGNwKV5DGwZH5nKwy3tS3Rbxs2iE%2FNJy9AnkH5RtQcPNW84OQdlxRfEc9%2BLIx2tbCKrM29mAjGvM4P2%2FcMrSefNYnCUyO3awAdo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed797c120b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/10/maxresdefault-500x281.jpg
188.114.96.1200 OK 19 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/10/maxresdefault-500x281.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 500x281, components 3\012- data
Hash adcd014e0951821a5cbdc95e73fb5ddc
2c0688748e77c34fe321593ca32697528fe9ccfb
d531eb040eedff7381cfa66817b6f5132b8978f5a11e9e6ddd5ec96cfc5a1c37
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/10/maxresdefault-500x281.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 18847
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Tue, 18 Oct 2022 01:32:48 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NqmQkPYXuCffb3u8cx7S50ZVFBPvOTXfgmdoAkkb29bSVlEfHXLJBa2Lhbh4IQJbNsm0yXNLEEFuQYIPqLxXHbIu%2BjDdAg4hY5hA0IeVd7qvuRM%2B45BJkbXgNph2g2O7PZYu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed797c0c0b49-OSL
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 99734170fcdad2d52884412f61321bf8
25163901dbdc047070a12d8afadcaa7009d8b595
f2a2590ac5fa2bcc9db8c46b3b4ad45f0a03b03193f601a2636e900fe851cf59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:26:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nganhangsovn.com/wp-content/uploads/2022/10/huong-dan-dang-ky-tai-khoan-ipanel-viet-nam7-700x322-1-500x230.png
188.114.96.1200 OK 136 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/10/huong-dan-dang-ky-tai-khoan-ipanel-viet-nam7-700x322-1-500x230.png
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type PNG image data, 500 x 230, 8-bit/color RGBA, non-interlaced\012- data
Size 136 kB (136491 bytes)
Hash 41a1417c3c51da5f017e51cd97bf4a9b
de5b70a9520945b5cc3dca470283bef94c3a5d74
3162c233bcff0296c4c4a7f3871bb11e342d473d98df3fdc538efe4874f73527
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/10/huong-dan-dang-ky-tai-khoan-ipanel-viet-nam7-700x322-1-500x230.png HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/png
content-length: 136491
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 17 Oct 2022 09:22:27 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ut8HhQ6%2Bfm52yYnLLxzr23lkG6xgIs0zxYFlY5YziuErfZ8GlWwRyn6cXO9vCqmgOFtln2tACSZW3NeseIqNT%2BFBB55qjFeNyhyBHYn4dKkyCHfxIVEhG4szItJd0S0hxtKa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed797c0f0b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/12/F88-cam-do-500x312.jpg
188.114.96.1200 OK 46 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/12/F88-cam-do-500x312.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 500x312, components 3\012- data
Hash 0e50761f8f18f0b7754d3899152f9e36
4744cc052ecd62138e309dc050b777ee98cc2d8a
b7b45c4f1e9ea311577f0a4acf0828e583c1854ce3de55274cd58326d535a438
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/12/F88-cam-do-500x312.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 45613
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 19 Dec 2022 07:02:49 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B5rcnr6Hoh%2F0%2ByDN8EsuE%2F5nuw91z%2BleNJE6IoCndTaAxcjtR%2BSxpNRNXGmfUD0LlKF7MHRFiXKLuTNd3FjAWMSN8eRDMXU43R5DgABP3aAxyKCuues6byeosHyS4cv5mPSh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed797c100b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/10/bean-survey-khao-sat-kiem-tien-500x321.png
188.114.96.1200 OK 141 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/10/bean-survey-khao-sat-kiem-tien-500x321.png
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type PNG image data, 500 x 321, 8-bit/color RGBA, non-interlaced\012- data
Size 141 kB (140911 bytes)
Hash 42a7f5831adc98ea78b790e30de8bf98
b70625618abaf05265c240e8114d7d98f001c853
b6b29093c4f71ce45ba19625107fe3249444f7a1ee1e2f97aedf3b196b053fbc
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/10/bean-survey-khao-sat-kiem-tien-500x321.png HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/png
content-length: 140911
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Tue, 18 Oct 2022 01:13:39 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c9kFiNryWz3SShIEHW797hT7gNxohpa%2B5H1NKjkLLfK4Wfogj%2FkqCzUkVmO5X5iJNIbfgUnbUV%2F0fC3OSbu4aypWH30CKIDkmqi2qF1fhNvxUf%2BYiI8sWOukz%2FGSCVRVQ%2BHx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed797c0d0b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/12/mo-tai-khoan-shinhan-bank-online-6-500x281.jpg
188.114.96.1200 OK 23 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/12/mo-tai-khoan-shinhan-bank-online-6-500x281.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 500x281, components 3\012- data
Hash 507cb85ba38ea04647852ef3b26ce17d
a887f2c8459ecfd64d0c69bb336978cac6f71f63
65d61e7289d840db67bafe00dc05f61281f0b156380576050ea8d15a14123bcd
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/12/mo-tai-khoan-shinhan-bank-online-6-500x281.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 23308
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 05 Dec 2022 02:37:50 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zo4sUZ%2F8xUcKWJgTw7FdiXZ8uR%2BNLbOxC1a28oiSUckhL2ucUFuwWlVB4wwgSZX90IJV%2F%2FIpTY1DkcGX5OpwDbOs%2B4N8h0hXx3U65vCkJsDWRiGLuzFiEOr27gUmLdHt2Jpf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed797c130b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/11/U00Nj5A-500x282.png
188.114.96.1200 OK 190 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/11/U00Nj5A-500x282.png
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type PNG image data, 500 x 282, 8-bit/color RGBA, non-interlaced\012- data
Size 190 kB (189565 bytes)
Hash 54833abb7a40c6c21f02e18680d3df40
b94fd32e662ceef44cb8fa93ec38aaf4f8870e96
cb9a3ea18043ff5d4a5835393fcdcbe4592589398654b892e6290e534adbc2b2
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/11/U00Nj5A-500x282.png HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/png
content-length: 189565
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Fri, 18 Nov 2022 07:58:58 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v%2BPHoQw%2B8JRdhjp3KLbxSQAg4ss8dq2owvI2%2Bbm0We0CKt7hY4spLVOhX0qt8ginsTL%2BSjHcFDVzuceJ%2B62FwGYF1HukC4lx1U9RONrKMO4qWXAKPeJUIVeg8fi3kFnvuqp4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed797c140b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/06/zalopay-la-gi-tat-tan-tat-cach-su-dung-zalopay-moi-nhat-150x150.png
188.114.96.1200 OK 24 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/06/zalopay-la-gi-tat-tan-tat-cach-su-dung-zalopay-moi-nhat-150x150.png
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 01ced528cf1f7fecf27f24f0a6fe1193
2761863c9b12804efd46c9b4ddfefc2537a3140b
cb012eecf0bd49e838baff06a43a8a4fb981b5349d23a56a4eca7cbb0db570c1
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/06/zalopay-la-gi-tat-tan-tat-cach-su-dung-zalopay-moi-nhat-150x150.png HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/png
content-length: 23536
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Tue, 11 Oct 2022 06:45:15 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UpD4oPiV700Rc%2FqatXQfst4B345tyt3Mx5dqhxK4GGYT%2FVXLa9G9FQEbWyKx9%2FvW0WqQp%2BvHoCyl%2ByimOm%2FC9F92KUHt9PPZKMqjK9U94duImrQZPUF0eAoDv%2BqLE%2FxaK6fc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed797c150b49-OSL
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 99734170fcdad2d52884412f61321bf8
25163901dbdc047070a12d8afadcaa7009d8b595
f2a2590ac5fa2bcc9db8c46b3b4ad45f0a03b03193f601a2636e900fe851cf59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:26:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nganhangsovn.com/wp-content/uploads/2022/06/cach-dang-ky-viettel-money_1280x720-800-resize-3253854-150x150.jpg
188.114.96.1200 OK 8.3 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/06/cach-dang-ky-viettel-money_1280x720-800-resize-3253854-150x150.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 4bf7771c4f757574d593821a7be87ed6
92182c19868fd9a4f9774a3293f3e1f0af829503
163544049183c0cefff28b5b1b1d32929e6b00b5a91eba5d5dff2ef08e59eb18
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/06/cach-dang-ky-viettel-money_1280x720-800-resize-3253854-150x150.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 8298
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Tue, 07 Jun 2022 08:22:50 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XV6Drtv0Ht6hN00hyXr%2B21GvlwiquaGl0aVu5%2BAP5m1Gun88zkLTefDivOt0KRLf3GHu8It6IbTrvtKFBbAwhT%2Bz1dtjIsKc5aPOpnlehnWKHxg3BzxsuigftC0yIgsjty%2FK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed797c160b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/06/X5eC3Wk-8574821-150x150.png
188.114.96.1200 OK 35 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/06/X5eC3Wk-8574821-150x150.png
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 159d217677e9d78b85fa51659f3f6b99
836bb1a39c9e328ae015eb1721311da782e7398a
0ca9edb7aa7bf519879512f89687153f368d7e8b96067180f0a9a42065d3a5ea
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/06/X5eC3Wk-8574821-150x150.png HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/png
content-length: 34799
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Tue, 07 Jun 2022 07:39:43 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FtgGuqbfOUzn5i2xzooESisapq1OjKRSSXn9chM83c7JM6qDxeQNG4WBtvxEJz8NHvVdnysvy7jPJ4mItBJpv52XPyXJVFWF5S1XoB6TIz1NMn%2BaTMmHkOFv9nlaxRUk3GjV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed797c170b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/04/vnpay-1-7004414-150x150.jpg
188.114.96.1200 OK 5.0 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/04/vnpay-1-7004414-150x150.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash df1ea126b6c4efe9bb11480023a0a034
88c525d92990b580b990eb327f89bf1912123923
f078a6546f41462c6d93fd0cef790eb499d644f54386bc8a1066f5832233df23
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/04/vnpay-1-7004414-150x150.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 5009
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Thu, 07 Apr 2022 08:57:39 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KJy%2F%2FYsecY6zp9eJgTp8EyatVQazVzlAFg%2BcZMuN2w7y%2F1MLlirkrSAg5bVxK%2F4aHHdcAaCoThlSfyFcCL1rIlHGrRLMc%2BymL%2BTQIOcTaOMRG2AsqSd7kr7tDPZMVZCH4nl6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed799c180b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/04/837F6B1A-AC69-4D8B-937C-D82F858EC1DE-2537517-150x150.jpeg
188.114.96.1200 OK 5.8 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/04/837F6B1A-AC69-4D8B-937C-D82F858EC1DE-2537517-150x150.jpeg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 1a4672bb3b1cb0288f40c09efd81abdd
121b52b9524464b629f92c43293436561680600b
576525f3012d92862152232b07cbf342057cff00b70482b905d1485bc4d50e7e
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/04/837F6B1A-AC69-4D8B-937C-D82F858EC1DE-2537517-150x150.jpeg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 5849
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Tue, 05 Apr 2022 03:02:16 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NCi12jgqWvu2JDE7oDnL5wMv97kl8XU2mGxbk584QeTnYuYORnB8CRZdvu4Zz%2BCWfZl0Zwh1tBydmUeB6s7IGbLNMVUAg5P5DUR%2BsPMpURx%2F6iKx4%2BoDHoyqjAP3tIIOOAAd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed799c1a0b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/04/1Gy679ri7kDxTMAnVPPL88JWlraiLDdA7bOA95Hg-800x700-8965690-150x150.png
188.114.96.1200 OK 13 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/04/1Gy679ri7kDxTMAnVPPL88JWlraiLDdA7bOA95Hg-800x700-8965690-150x150.png
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 7f90d2b2ffdb9987292d4d59109f65c1
dab2afaa155a22e0edc76187ae0bbfcd3218c641
97d8c1001bfab2e239bc3d41b200a812f254a8926109989d87eec442c6a2cdee
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/04/1Gy679ri7kDxTMAnVPPL88JWlraiLDdA7bOA95Hg-800x700-8965690-150x150.png HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/png
content-length: 12594
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Thu, 07 Apr 2022 02:43:29 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VKKL6vT3btmTJtFaltZktUTrDiTMgWL2JdWB3v2p%2BYg9meQQ5AJ8F5B6FncjH%2BqlK94I25t64u9qW1GAfO%2Ft2gdeO9aq0UYW5g4z9NOqmMYnxmEljbqm1uBmrQzzJ3RWPIyl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed799c1b0b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/04/NgC3A2n-hC3A0ng-sE1BB91-Cake-by-VPBank-min-6074821-150x150.jpg
188.114.96.1200 OK 7.8 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/04/NgC3A2n-hC3A0ng-sE1BB91-Cake-by-VPBank-min-6074821-150x150.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 3ebd02a14e41f69f961c266557d4d147
6c5ecd7309904731f25673a2cba05653e8ace93b
417a28a4e417cef4db880737cf687f381ac5ab3b74494821f735b569b5295244
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/04/NgC3A2n-hC3A0ng-sE1BB91-Cake-by-VPBank-min-6074821-150x150.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 7757
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Thu, 07 Apr 2022 08:29:11 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AonHK6wj%2BCFRKJlvPnCFXFWClceWwkmUmKQDymKWbVeZEdKbjb0BwU5PGQlgiWI2RY%2FL6bx6JXGA7a37Ai229yJTtJPVVMT89WnKUsyAq9BeRr08atp5R2RjJSoNfvG8dHGC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed799c1c0b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/themes/covernews/assets/bootstrap/js/bootstrap.min.js?ver=1.1.0
188.114.96.1200 OK 16 kB URL GET HTTP/3 nganhangsovn.com/wp-content/themes/covernews/assets/bootstrap/js/bootstrap.min.js?ver=1.1.0
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type ASCII text, with very long lines (57791)
Hash 00e8259f4fb0664ae55be9b184020d27
f8937340285f341ecf97909378ac91322eda3111
7209e11a45cef119e8d3539afb2689835d17b16a0a22f8334d867cf77a220d2a
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/themes/covernews/assets/bootstrap/js/bootstrap.min.js?ver=1.1.0 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 18 Sep 2023 08:41:09 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VO7fXaEC4owbkvGU3OFf%2F%2FTHpWz3F9hlTcgDYR5RVAtlunsXyr1I0GSUJTjVSBwaFJ4gHA69A6YLyxOMKQHDxquy0vXS66I95hWq9HbHDtFeKiQO1s9TaEUcrCXf7QwChGjL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed79fc290b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/themes/covernews/assets/slick/js/slick.min.js?ver=1.1.0
188.114.96.1200 OK 12 kB URL GET HTTP/3 nganhangsovn.com/wp-content/themes/covernews/assets/slick/js/slick.min.js?ver=1.1.0
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type ASCII text, with very long lines (53179), with no line terminators
Hash 481ac3f8935c805172d406c12da68e0a
fab75193a5fe33503eb2e62d047a01e238baaa64
032699f5abc60e8e1b3c28bfa7a9a046addb1777420acb4c599871b5d64f0888
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/themes/covernews/assets/slick/js/slick.min.js?ver=1.1.0 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 18 Sep 2023 08:41:09 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MuE%2FQuzjB6lu3ivx263ryjORTCXhBKr5MYegxFneNc7DvfsOjKj1Q6y0fQ%2F95gUBnFscxe7c3IFDRUkCY6qy2itfwvhlLFuvAQOZfGMDZ%2Bhu4l9oBP0ELRrs410IeRTwnuKY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed79fc280b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
images.dmca.com/Badges/dmca-badge-w250-5x1-09.png?ID=3b824f33-cbc5-4220-9c2b-766543615d85
194.242.11.186200 OK 8.7 kB URL GET HTTP/2 images.dmca.com/Badges/dmca-badge-w250-5x1-09.png?ID=3b824f33-cbc5-4220-9c2b-766543615d85
IP 194.242.11.186:443
ASN #34989 ServeTheWorld AS
Requested by https://nganhangsovn.com/
Certificate IssuerLet's Encrypt
Subjectimages.dmca.com
Fingerprint50:F9:B6:B6:8D:90:B2:16:D1:14:D6:4E:C5:BA:B4:B3:9A:B9:95:6B
ValidityTue, 12 Sep 2023 21:47:44 GMT - Mon, 11 Dec 2023 21:47:43 GMT
File type PNG image data, 250 x 50, 8-bit/color RGBA, interlaced\012- data
Hash 56938bf887f9bf9644d983913aec0545
dd1098fc01e21b7b516ee5a3115a6b9fa27dad70
1b5bc090c0d56902da3e233e5e852204a2ab220296d1573fe69003619759e8e8
GET /Badges/dmca-badge-w250-5x1-09.png?ID=3b824f33-cbc5-4220-9c2b-766543615d85 HTTP/1.1
Host: images.dmca.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 24 Sep 2023 03:26:45 GMT
content-type: image/png
content-length: 8727
server: BunnyCDN-NO1-830
cdn-pullzone: 1574055
cdn-uid: c136c664-112d-4533-8247-f90f6849ab39
cdn-requestcountrycode: NO
cache-control: public, max-age=31536000
etag: "8b5e9b3aace6d11:0"
last-modified: Mon, 25 Jul 2016 19:39:16 GMT
x-powered-by: ASP.NET
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 09/12/2023 22:56:37
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 93d42a7d59faeb99b58caa0891dc40af
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 99734170fcdad2d52884412f61321bf8
25163901dbdc047070a12d8afadcaa7009d8b595
f2a2590ac5fa2bcc9db8c46b3b4ad45f0a03b03193f601a2636e900fe851cf59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:26:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 23ee71f34a80feec27e23d99ecada83e
62f4c8dcc03187e2bdcdfa76dc732d4eebde5cc1
429bd03ec19810ed389955d166c98e62d9850e52160fbec3dd27da2cc30200fe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:26:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
216.58.207.227200 OK 24 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
IP 216.58.207.227:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nganhangsovn.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 15:16:10 GMT
expires: Fri, 20 Sep 2024 15:16:10 GMT
cache-control: public, max-age=31536000
age: 216635
last-modified: Tue, 02 May 2023 15:17:22 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
216.58.207.227200 OK 23 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP 216.58.207.227:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nganhangsovn.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 15:25:37 GMT
expires: Fri, 20 Sep 2024 15:25:37 GMT
cache-control: public, max-age=31536000
age: 216068
last-modified: Tue, 02 May 2023 15:07:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 23ee71f34a80feec27e23d99ecada83e
62f4c8dcc03187e2bdcdfa76dc732d4eebde5cc1
429bd03ec19810ed389955d166c98e62d9850e52160fbec3dd27da2cc30200fe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:26:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nganhangsovn.com/wp-content/themes/covernews/assets/covernews-icons/fonts/covernews-icons.ttf?wf149x
188.114.96.1200 OK 85 kB URL GET HTTP/3 nganhangsovn.com/wp-content/themes/covernews/assets/covernews-icons/fonts/covernews-icons.ttf?wf149x
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, covernews-icons\012- data
Hash 2864709734b47cc391d160f32ed741a1
f01c8475152dcf0bba2235280a7fbf55f2ec85ec
7b672462b09dab4cc703ec7af4b5dac420c486e02e83fe2fbe271bcd068241f5
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/themes/covernews/assets/covernews-icons/fonts/covernews-icons.ttf?wf149x HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/wp-content/themes/covernews/assets/covernews-icons/style.css?ver=6.3.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:45 GMT
content-type: font/ttf
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:29 GMT
last-modified: Mon, 18 Sep 2023 08:41:09 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C6mT%2FhaTgCbTEJYaHf2OXop5r%2F64T%2FeO%2BVfN2A%2FCXI4MMc1nGMKkXNW42SAgkRYdX7LOqHwYeg67RZKl0rPBpXA%2FxwinXdkYJgf72cIMAFnuSQmzYnIK0Hri2GrZfysSkD0d"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed7eaca30b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
216.58.207.227200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
IP 216.58.207.227:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 14892, version 1.0\012- data
Hash 9ec6deaf6bada919e20b98f9f7b718b1
501d36403ad8205e4644532600019ecb10f5cb0a
7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nganhangsovn.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 20 Sep 2023 07:39:48 GMT
expires: Thu, 19 Sep 2024 07:39:48 GMT
cache-control: public, max-age=31536000
age: 330417
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2
216.58.207.227200 OK 5.6 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2
IP 216.58.207.227:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 5560, version 1.0\012- data
Hash ca3b09b62fda648a4511700413313fd0
109cd4c5435bd6614391bb8722c47c287c96b2ec
77b24796a3d4ab521f66765651875338ed50cb9306cfe4603a3e79618e429cec
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nganhangsovn.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5560
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 15:13:25 GMT
expires: Fri, 20 Sep 2024 15:13:25 GMT
cache-control: public, max-age=31536000
age: 216800
last-modified: Wed, 11 May 2022 19:24:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2
216.58.207.227200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2
IP 216.58.207.227:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 14712, version 1.0\012- data
Hash 3afeae0d768769f5e5f30ac9805c5b70
3ada17c2b462db3e7a1fd85c3f4670dfe7704f4d
0d0a6262c545e8bbc895116e5afb22579c468d7abb77e378f377d6fed57c1dce
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nganhangsovn.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14712
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 15:16:10 GMT
expires: Fri, 20 Sep 2024 15:16:10 GMT
cache-control: public, max-age=31536000
age: 216635
last-modified: Thu, 01 Jun 2023 22:52:57 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmBduz8A.woff2
216.58.207.227200 OK 5.7 kB URL GET HTTP/2 fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmBduz8A.woff2
IP 216.58.207.227:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 5728, version 1.0\012- data
Hash 39607a71c7b901aa079679865670aa5d
9636c57c0477194fc0d6d8900a63929a5f4fcb4f
5a2f94cceedf6f1fa0df64dd6db216c9c1e783e174e48033a1a4c7f17a7a62a4
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmBduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nganhangsovn.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5728
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 23 Sep 2023 16:44:35 GMT
expires: Sun, 22 Sep 2024 16:44:35 GMT
cache-control: public, max-age=31536000
age: 38530
last-modified: Thu, 01 Jun 2023 22:53:06 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&subset=vietnamese&ver=6.3.1
142.250.74.138200 OK 22 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&subset=vietnamese&ver=6.3.1
IP 142.250.74.138:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49
ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT
File type gzip compressed data, max compression\012- data
Hash a61580bac0b23dc13fc50a8fccb0fc06
410e180e567d144c6648b1949d2a7c939c5af574
493faba50989b38ad1f242d5f56890254b4df5ad38229944dbb62d7ddf8cc049
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&subset=vietnamese&ver=6.3.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 24 Sep 2023 03:26:45 GMT
date: Sun, 24 Sep 2023 03:26:45 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
nganhangsovn.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.0
188.114.96.1200 OK 48 kB URL GET HTTP/3 nganhangsovn.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.0
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type ASCII text, with very long lines (65447)
Hash ff04dd1ef5c67998d8652330c0441689
5e6ff5bd5240181a8bdea983837f39ac231dac4d
5c93f77799d122fb5255ee24da285f9f228cc118cba11e6ceb2b6bda8cdf4164
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.0 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Fri, 11 Aug 2023 01:55:19 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Eq6kZ9lE8RVo8Ed5YbibkEl%2Bt6VMqIccHZrsZVB6JaU80vhksGenvg0lLZKzoKYx5n0uqcfdomOEdV94zVL6SSeOwKIGT6dFZb9cCzF01lmXF%2BQZ5ZSs1EbKpQxVWeQ%2Blv3j"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed768b1c0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
188.114.96.1200 OK 17 kB URL GET HTTP/3 nganhangsovn.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type ASCII text, with very long lines (13479)
Hash 9ffeb32e2d9efbf8f70caabded242267
3ad0c10e501ac2a9bfa18f9cd7e700219b378738
5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Fri, 11 Aug 2023 01:55:19 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YrrtBh%2F2rt79BidLmJNQGnn%2FcDY%2FMIvgz5cxl9lXDazRNNxUwTTGdZHsn9HO8XOEQvKOGBkvj%2FTd8Eriny9YxhSYQymlN6cCgVEBtIJbt%2BIFx%2FzZpEpkNLPvVD%2FGiDxGMH7l"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed76bb610b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2
216.58.207.227 5.4 kB URL fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2
IP 216.58.207.227:0
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 5368, version 1.0\012- data
Hash a48b0f049358d7503c497abb4dcbc4d6
d764e136ada1fba8ec4d99994b179d984d7983b8
4ef7cd3d4ed7de91e7eb3c05a31c6fa1da0b08d07cbfab8ae108c34d5e39cdb9
GET /s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nganhangsovn.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5368
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 04:40:55 GMT
expires: Fri, 20 Sep 2024 04:40:55 GMT
cache-control: public, max-age=31536000
age: 254750
last-modified: Tue, 02 May 2023 15:07:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
nganhangsovn.com/wp-content/plugins/tinh-vay-ngan-hang-tra-gop/js/skin_bootstrap.js?ver=6.3.1
188.114.96.1200 OK 38 kB URL GET HTTP/3 nganhangsovn.com/wp-content/plugins/tinh-vay-ngan-hang-tra-gop/js/skin_bootstrap.js?ver=6.3.1
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type Unicode text, UTF-8 text, with very long lines (65485), with no line terminators
Hash 2d3b5b47a31f1e0c72f652696fe318f6
3ccf4d7732ee15e1176c17ee9d852a2f70f44689
8433ae0bc20971199ef7dee255cb27cb6ea8ced4e746428098d6fe0e0484e39f
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/plugins/tinh-vay-ngan-hang-tra-gop/js/skin_bootstrap.js?ver=6.3.1 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Thu, 11 May 2023 00:26:45 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vfr%2F%2BSwuQaojycCRUeWR3gcnNXm2tnAWr38vIvm5HclVsDAfjJ4Du1vAv63fG7eoSKq1915XdR%2FaoPN7iLg962887M8b4YBhytb%2Bd3qhg7ZX4pleeHOMc6EmYMQ%2B9sp99R5g"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed76db720b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
216.58.207.227200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 216.58.207.227:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nganhangsovn.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 22 Sep 2023 10:05:24 GMT
expires: Sat, 21 Sep 2024 10:05:24 GMT
cache-control: public, max-age=31536000
age: 148881
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2
216.58.207.227200 OK 5.5 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2
IP 216.58.207.227:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 5472, version 1.0\012- data
Hash 4bde07f991ba6af69a1e009fd7ce9d1a
ed53e9f8967142ea4aa2fd113f696799319d91b2
1c2fc265baaeba4f3f5b8c7285b93343aead25590f08be73d3056718b376c5d7
GET /s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nganhangsovn.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5472
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 15:16:34 GMT
expires: Fri, 20 Sep 2024 15:16:34 GMT
cache-control: public, max-age=31536000
age: 216611
last-modified: Tue, 02 May 2023 15:17:15 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2
216.58.207.227200 OK 5.5 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2
IP 216.58.207.227:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 5548, version 1.0\012- data
Hash cdaab83619fcacd4027a77c99dd51e69
9e6eae8554f8cc2309b2dae2d9fa217e34eed6a4
4ec57f2a80b91090971b83970230ca09ab3568c5f5b224896ca9aa6180a76aa9
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nganhangsovn.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5548
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 05:05:51 GMT
expires: Fri, 20 Sep 2024 05:05:51 GMT
cache-control: public, max-age=31536000
age: 253254
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2
216.58.207.227200 OK 12 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2
IP 216.58.207.227:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 11824, version 1.0\012- data
Hash deb26e9b1a25438118e5d39d741ae6b6
a2801defb4c8bed8e4083dfde0b2a5a9c0537020
fc66f942651a9fe1a598770d3d896529dcd7a03d02f40655451513093103e61b
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nganhangsovn.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11824
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 22 Sep 2023 17:23:11 GMT
expires: Sat, 21 Sep 2024 17:23:11 GMT
cache-control: public, max-age=31536000
age: 122614
last-modified: Wed, 11 May 2022 19:24:43 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2
216.58.207.227200 OK 5.6 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2
IP 216.58.207.227:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 5560, version 1.0\012- data
Hash ca3b09b62fda648a4511700413313fd0
109cd4c5435bd6614391bb8722c47c287c96b2ec
77b24796a3d4ab521f66765651875338ed50cb9306cfe4603a3e79618e429cec
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nganhangsovn.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5560
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 15:13:25 GMT
expires: Fri, 20 Sep 2024 15:13:25 GMT
cache-control: public, max-age=31536000
age: 216800
last-modified: Wed, 11 May 2022 19:24:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 23ee71f34a80feec27e23d99ecada83e
62f4c8dcc03187e2bdcdfa76dc732d4eebde5cc1
429bd03ec19810ed389955d166c98e62d9850e52160fbec3dd27da2cc30200fe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 24 Sep 2023 03:26:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nganhangsovn.com/wp-content/uploads/2022/10/cropped-png-clipart-visa-mastercard-logo-visa-mastercard-computer-icons-visa-text-payment-32x32.png
188.114.96.1200 OK 2.4 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/10/cropped-png-clipart-visa-mastercard-logo-visa-mastercard-computer-icons-visa-text-payment-32x32.png
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 578fee044f792211dff0a2a55fb019c1
9838ee2f596c82694d3cbb65a820c9bb3f51496b
406b788de6ac2bfefbbad960a07ba9c408101bcfa34d390498442251dc825b31
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/10/cropped-png-clipart-visa-mastercard-logo-visa-mastercard-computer-icons-visa-text-payment-32x32.png HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:46 GMT
content-type: image/png
content-length: 2367
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 21:37:33 GMT
last-modified: Tue, 18 Oct 2022 02:15:13 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 193753
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zzzWv%2Bhn3dr%2Fz5WYc%2Fir5HYJ0eObf1TGGea0ETCtdxqxF5nwPJSSz0cFh35oyaOYRwwCMBCYM0V3%2Fe2ShA3IB5hb47CuofzI%2BXdqA2YxGqyGY3RBHyDo01Ye6nZTq8QK%2B6R%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed82fd6f0b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/10/cropped-png-clipart-visa-mastercard-logo-visa-mastercard-computer-icons-visa-text-payment-192x192.png
188.114.96.1200 OK 33 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/10/cropped-png-clipart-visa-mastercard-logo-visa-mastercard-computer-icons-visa-text-payment-192x192.png
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 211da6d51992db8ed3a5a782b5084af4
d020d6561eaa401a039147538737ce931db48f0b
078cdab5bf4162582d6cf8f9af0e463f31dd1d8db600477a8599518e2f88d70b
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/10/cropped-png-clipart-visa-mastercard-logo-visa-mastercard-computer-icons-visa-text-payment-192x192.png HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:46 GMT
content-type: image/png
content-length: 33391
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:30 GMT
last-modified: Tue, 18 Oct 2022 02:15:13 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wqocp6YeucUbLvr2SE%2BXbwpiP74SyWR1bSmd549szcFA%2BVfi9PQyzTDvAkjmuRC0W3lCExLxDjrL1L771pjXvqywVn0BcCAMST64XguFgf%2B86RFrx79cCwXvMQSJp0WBjTCI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed82fd6d0b49-OSL
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
216.58.207.227200 OK 9.6 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP 216.58.207.227:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 9628, version 1.0\012- data
Hash d9ac47c7e500fb7083b8d595eaf6fe12
112a2fc5f4ff9b85ee3a706fa9b8c47f79b05933
495d38d4b9741e8aa4204002414069e2d8db9f3c60b60e195e4d74381462dee9
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nganhangsovn.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 22 Sep 2023 10:08:28 GMT
expires: Sat, 21 Sep 2024 10:08:28 GMT
cache-control: public, max-age=31536000
age: 148698
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
216.58.207.227200 OK 9.6 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2
IP 216.58.207.227:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 9628, version 1.0\012- data
Hash d9ac47c7e500fb7083b8d595eaf6fe12
112a2fc5f4ff9b85ee3a706fa9b8c47f79b05933
495d38d4b9741e8aa4204002414069e2d8db9f3c60b60e195e4d74381462dee9
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nganhangsovn.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 22 Sep 2023 10:08:28 GMT
expires: Sat, 21 Sep 2024 10:08:28 GMT
cache-control: public, max-age=31536000
age: 148698
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
nganhangsovn.com/wp-content/uploads/2022/10/cropped-short_term-_placement_banner.jpg
188.114.96.1200 OK 96 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/10/cropped-short_term-_placement_banner.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1900x599, components 3\012- data
Hash 519259221ab88a4d1e666be99df9ca17
8ae04709a38da31f908faf1365ebf382d3929000
6d21048168902ef049da33cb767870605e44cc5fd94898af1c5f67fbb13c4912
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/10/cropped-short_term-_placement_banner.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:47 GMT
content-type: image/jpeg
content-length: 96322
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:30 GMT
last-modified: Mon, 17 Oct 2022 08:19:15 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190157
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DDbEKECUQSLBdDW8U%2FTbQuc%2Bsyy9gsr9IKW9mjurYhGgUe%2BTCZDJlpBkhTVlA6ADuh3FmPO3kl3vp%2FoqYrzSIlVezv2gMa%2FeAzw9k%2BAQkzqWMQTgrTvJjLr9BtdBmcZytC7N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed885e490b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/themes/covernews/js/skip-link-focus-fix.js?ver=1.1.0
188.114.96.1200 OK 685 B URL GET HTTP/3 nganhangsovn.com/wp-content/themes/covernews/js/skip-link-focus-fix.js?ver=1.1.0
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type ASCII text, with very long lines (766), with no line terminators
Hash 825575b61613af18835e303ed5e0c7b6
51ea336a9061664dd9d7ffaf0deb9e8944827f41
c7981ef4dd35b54facbc8948cf87bd1ef850b4a80daeb2a71207d898aba92f8d
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/themes/covernews/js/skip-link-focus-fix.js?ver=1.1.0 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 18 Sep 2023 08:41:09 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x99HTMq%2BSSfCiwTRu%2FaR4lrVMLghsxy2z2S%2B%2BX2Bx0dprUQ24Kwzk4ME0k28L9m7L7IeAUpvGTfbbzFg0hlFG0tTFeDRal9SWSOl3NX0tjXpL3TTTg25EEZCMbb60J5kRO7u"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed79ac220b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmRduz8A.woff2
216.58.207.227200 OK 20 kB URL GET HTTP/2 fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmRduz8A.woff2
IP 216.58.207.227:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 20392, version 1.0\012- data
Hash 271742eaf7491c7254efb0a2f0b71f3c
f845e307601dd7e4bd6398b11170a97b563a7889
22982053d357ec33aa4d613859733c23000ba767d919853d002f15129f7afc9e
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmRduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nganhangsovn.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20392
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 04:55:43 GMT
expires: Fri, 20 Sep 2024 04:55:43 GMT
cache-control: public, max-age=31536000
age: 253862
last-modified: Thu, 01 Jun 2023 22:53:12 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Source%20Sans%20Pro:400,700|Lato:400,700&subset=latin,latin-ext
142.250.74.138200 OK 6.1 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Source%20Sans%20Pro:400,700|Lato:400,700&subset=latin,latin-ext
IP 142.250.74.138:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49
ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT
File type ASCII text, with very long lines (6210), with no line terminators
Hash 121cb0390abbea513093c90354d231ab
33715c083ee0834d61abaa67f65328cc97fee470
150ffea4ff2db172fb3b04f045ca09c543ab7655a81f9cd67fa836e17ab7e3f3
GET /css?family=Source%20Sans%20Pro:400,700|Lato:400,700&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 24 Sep 2023 03:26:45 GMT
date: Sun, 24 Sep 2023 03:26:45 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
nganhangsovn.com/wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min.css?ver=5.3.6
188.114.96.1200 OK 13 kB URL GET HTTP/3 nganhangsovn.com/wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min.css?ver=5.3.6
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type ASCII text, with very long lines (12876), with no line terminators
Hash bcad7781b3e74db2565b8424c45232cd
41b0d94434ef667897c06e1184b703064ffceda1
d622534d53d3ac1095af275f0b30274fcd835785577df2dde6d9398e6f7a2c8f
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min.css?ver=5.3.6 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 18 Sep 2023 08:40:00 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FhxsHElJT0xtlcAn0qsFcgMX6P%2B3fj9%2F8EMGi7Lb2vhQCUIvM7QVlPGj%2FXOtuISDv0hz4m%2B4Ut24Fh3KHV7BeWdtyezj2hyJ39GwUrIDY2KVgatj8gm05I6np3ImDaSmScJl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed766b170b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
188.114.96.1200 OK 78 kB URL GET HTTP/3 nganhangsovn.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261\012- data
Hash e8a427e15cc502bef99cfd722b37ea98
a9922842a120a7f1eaced667480c5e185a106d69
d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.16.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:45 GMT
content-type: font/woff2
content-length: 78196
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:29 GMT
last-modified: Mon, 18 Sep 2023 08:40:00 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P5NLpsaDyeo%2FwSymSlEb9efu1RID1jlhjJBcnh4fNiIzk6q8a0VI2CywYpfql6Uh9KO615NAlb6LriCr16zVJvqiVqu7V7bbQt5rmfgV%2Fyk%2BTCVGpgqAaSaUVQPWkRPtJ5Ka"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed7f0cb50b49-OSL
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nganhangsovn.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 21 Sep 2023 04:50:55 GMT
expires: Fri, 20 Sep 2024 04:50:55 GMT
cache-control: public, max-age=31536000
age: 254150
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
nganhangsovn.com/wp-content/uploads/2022/10/gQVJGaoGEokEfLXUg7sSGZWigU21ErLjD2Jo2Ak5-WVaBFpdisyBP8buKsfZCW7IXGO9nc2QcZwdPuwytZJykxqtXx40S4Xe4c37_EJgBL_vuZHqwZoxycrKrIMBgMi1TfrwKcGt-500x333.jpg
188.114.96.1200 OK 33 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/10/gQVJGaoGEokEfLXUg7sSGZWigU21ErLjD2Jo2Ak5-WVaBFpdisyBP8buKsfZCW7IXGO9nc2QcZwdPuwytZJykxqtXx40S4Xe4c37_EJgBL_vuZHqwZoxycrKrIMBgMi1TfrwKcGt-500x333.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 500x333, components 3\012- data
Hash 57a26ad3843d8f5438a1d64a567a97ec
11bbe68f639e456e3dbf8f2ed8ee8babe8692d3a
2fda39738cf299779640cfbafe0ed89fb118971dd67676e74a683c10fef74b93
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/10/gQVJGaoGEokEfLXUg7sSGZWigU21ErLjD2Jo2Ak5-WVaBFpdisyBP8buKsfZCW7IXGO9nc2QcZwdPuwytZJykxqtXx40S4Xe4c37_EJgBL_vuZHqwZoxycrKrIMBgMi1TfrwKcGt-500x333.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 33297
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Fri, 14 Oct 2022 02:09:59 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1EHQZ5ZCdmEqWIQajlwY9AHdNAwLUcOoRwLsMdi%2B0Ul%2BmGMAwhej5qGLi9aTlvTTpZYyj%2BFsS%2FQYFefRQesRuS%2FBl0Z2fkT0uXdDd7VCquZyGCYoXDEJzNLAxMPIl6HgZcZg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed788bdb0b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/themes/covernews/js/navigation.js?ver=1.1.0
188.114.96.1200 OK 3.0 kB URL GET HTTP/3 nganhangsovn.com/wp-content/themes/covernews/js/navigation.js?ver=1.1.0
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type ASCII text, with very long lines (3275), with no line terminators
Hash 1b311704eb77d8ba4f7bdd6f3baa0246
cfa867a027ce3c055b6ddef20a47083affd4a9ab
f88c00e74a03a5c22fe79f8a24072f36ba9db734fe1116a28f906a184390521d
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/themes/covernews/js/navigation.js?ver=1.1.0 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 18 Sep 2023 08:41:09 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7ZNuoX3JEHUinNUWQfVCTduoasQbJJuxDxYnNVmXievNje%2FW18VoHP4fejhCgZBcvIzO68S3tbtog3zD0YM9IaDC5iI82R2NF86jy68XUKkodnhVEZftW5c118gGCT2PbaPp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed79ac210b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/12/20221012100205330-f88-vay-tien-destop-150x150.png
188.114.96.1200 OK 7.4 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/12/20221012100205330-f88-vay-tien-destop-150x150.png
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 1fa53c64739e94c139842c4409b2efc8
1593159712f14103bc5a1add6e9dc4d0ee884b05
bf7fa2f106e5910b3d2aad62fab67ae35d9860d82bbcf24d1a26e356985dec79
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/12/20221012100205330-f88-vay-tien-destop-150x150.png HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/png
content-length: 7409
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Wed, 21 Dec 2022 03:37:31 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S9TT6kIJxbfDj8tKwQldeB9LResIhMZq47VYjIJd1iJDvukJuNxTvt0ns58AOU5Jxai%2BqMUC%2FZbS%2F8JrRQX61FDxMnVABj5G0Z3NI1ClVJa%2F7ysl6627tL4PHAnmQ7cg1%2Bym"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed770b880b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.23.0
188.114.96.1200 OK 20 kB URL GET HTTP/3 nganhangsovn.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.23.0
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type ASCII text, with very long lines (19487)
Hash 3683d21c678ef9e264a1cb0fa2007285
180b55f2045971d357af3183c4126432f0c383f9
941b1493157dfb7316bcb3c7357a94e9ba173607d80559408620f4ab4c39c88d
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.23.0 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 18 Sep 2023 08:39:59 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TqyKJEn6UKXTRKWQduOrvRaZyGwwep1DoWJmtsPRTiN14y8QECdyAg4DygxfmkqmogXu9vIXSXqnZzXdElOLBIwtnwHVro76lshYBvE2S%2FZQMM2AU1ck7oOqyZcq%2BeOyTA7u"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed766b150b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/12/F88-cam-do-150x150.jpg
188.114.96.1200 OK 8.9 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/12/F88-cam-do-150x150.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 4f14212ce14d10b2c9487f77d15a7d37
1a23508cbecb477b9a5522c14007db9d34700b33
1738383b99de06e4e2108ab15794206a3e96a1f1af4207212b2f38deb516883b
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/12/F88-cam-do-150x150.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 8873
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 19 Dec 2022 07:02:49 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6uKVxUY9uEMA2SzQL0xAnOctLOdM3FR3Y5UNeShQ58Z1mb0y4k6V5nUXj1J5qJtB4iVxnHC0zsOD8r105ixBHhIkWrYhBRhzQNYjchHvTl0z2WgXr5oSo8T5vRMWGUG%2Bh6dE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed788bdd0b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/plugins/add-to-any/addtoany.min.js?ver=1.1
188.114.96.1200 OK 129 B URL GET HTTP/3 nganhangsovn.com/wp-content/plugins/add-to-any/addtoany.min.js?ver=1.1
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 04da7b386f4a75ef928a5f9f2fd3c315
df45beff471215ae26bdcb525d02efe71b3f55a5
dc7786546f12a0ee81f56254469c74213f45547a78e8de0ceec17893e6d55afd
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/plugins/add-to-any/addtoany.min.js?ver=1.1 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Fri, 11 Aug 2023 01:54:13 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9XzzzUXbzksvCPboFtxL9nJR8bHnI0herirFUDi39N14b1sJk9KfvAEkPUS7wNwMKqYrKZJfIDey2%2Bjp9bbAocvPQMvfh6Y0LUH7U8WDUwvE%2BgdEuLcB6SEwymiGk8Qb1EQu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed76db710b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
static.addtoany.com/menu/sm.24.html
104.22.70.197200 OK 677 B URL GET HTTP/3 static.addtoany.com/menu/sm.24.html
IP 104.22.70.197:443
Requested by https://nganhangsovn.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:A5:DB:83:09:73:10:48:06:97:65:2A:D9:27:B7:67:2D:7E:9D:6C
ValidityThu, 04 May 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (700), with no line terminators
Hash cfd119cf6bef57fab6c6d11a41f5551a
479462a99e186c36e68e3fc8f12dd795c65d4366
8460305d50a708748c228ecefae928f9392d4e451b89106021434c989eef106b
GET /menu/sm.24.html HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:45 GMT
content-type: text/html; charset=utf-8
via: e3s
last-modified: Fri, 18 Nov 2022 00:47:55 GMT
etag: W/"2a5-5edb40e6d10d8"
cache-control: max-age=315360000, immutable
age: 2229434
vary: Accept-Encoding
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 80b7ed7fee0398eb-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-includes/css/dist/block-library/style.min.css?ver=6.3.1
188.114.96.1200 OK 104 kB URL GET HTTP/3 nganhangsovn.com/wp-includes/css/dist/block-library/style.min.css?ver=6.3.1
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
Size 104 kB (104484 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.3.1 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Fri, 11 Aug 2023 01:55:19 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yt%2Fdl37u0UM9zIBaR6Ra8AI1JwfI6Ake6Eeb2Q%2FcdeR0872JBGgmWNAuvHL5KAMtI9J%2FbgtGGTf3CLCeQt%2FEj6IMbQABIortoRVRi9ZsFgrdqRrpM6vC9bmifEYUY8PtshyF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed761af20b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
216.58.207.227200 OK 12 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
IP 216.58.207.227:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 11872, version 1.0\012- data
Hash 87ace20058325aa069320aa4af875dff
b743548770c46d905ae1ba06310bc001c587fe8e
3c23eb02de6b34e30f18cfb7167abd81a2cedfd1da60dfcb71989517ab3fb431
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nganhangsovn.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11872
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 22 Sep 2023 10:31:16 GMT
expires: Sat, 21 Sep 2024 10:31:16 GMT
cache-control: public, max-age=31536000
age: 147329
last-modified: Wed, 11 May 2022 19:25:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:100,300,400,500,700
142.250.74.138200 OK 11 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto:100,300,400,500,700
IP 142.250.74.138:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49
ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT
Hash dbdc7ee435c6a7f4277bfc7fedf28368
8194a5d7e0108bed7abb001d8bf2b8985a5aa2ca
91b113cbf5aedc9b93ceebe313863344b1ead775a618a7e9f31f9e98dbbdf227
GET /css?family=Roboto:100,300,400,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 24 Sep 2023 03:26:45 GMT
date: Sun, 24 Sep 2023 03:26:45 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
nganhangsovn.com/wp-content/uploads/2022/11/mb-2-9621-500x220.jpg
188.114.96.1200 OK 16 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/11/mb-2-9621-500x220.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 500x220, components 3\012- data
Hash 97fb7cba24f0c5eff185a4471f21f2e9
3424374c2fe5b32867157ee3d943f5916dfd91a3
ee801fd63ddc58a246e9929be389069eecc7ff1ac969aa9940ba50fa2ae81a77
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/11/mb-2-9621-500x220.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 15549
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Thu, 03 Nov 2022 02:35:15 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wH34z67qwJqrcv8Ba7dB0DAes3mD3%2F6h23DdNNjREHER2XTf%2FwMDh%2FDt3nUC9d0mS58NodvupNxKWS5e1IkPez0GYxpNZM%2BvTA8vNwPmJqnOFxs1fNC8o%2F7S903Rg4bGTGRP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed78abe40b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/themes/covernews/assets/marquee/jquery.marquee.js?ver=1.1.0
188.114.96.1200 OK 23 kB URL GET HTTP/3 nganhangsovn.com/wp-content/themes/covernews/assets/marquee/jquery.marquee.js?ver=1.1.0
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
Hash 03d509c5deeff71fb4daf817fc41501d
656553e6690526119f93115194637c4f6d815a18
02decb76d37d026d332be0228facdbdf013a429f404a9283bf37fcc3cda99cbd
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/themes/covernews/assets/marquee/jquery.marquee.js?ver=1.1.0 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 18 Sep 2023 08:41:09 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wxdn0SaGOXNVoYOebGtDdJU5%2FvDVE1%2BewfjIDuSoMTVwZLa9ah9bdlWkAsYF65aGMDtTN%2BYiwCyd9u%2BHLQk8EXo81o6B56JqMy1Yt3AYABby57UhprOH7GaegLH0B%2FTGkfUN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed79fc2a0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.16.3
188.114.96.1200 OK 27 kB URL GET HTTP/3 nganhangsovn.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.16.3
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type ASCII text, with very long lines (26516)
Hash c55205bce667f5d812354fd1353e7389
f22de0af271eba636a022c873c94fbcd81b4c89a
c55902832fb84522d02ea1a60a30747403a140d8651fa748f13ba398b0c0df3a
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.16.3 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 18 Sep 2023 08:39:59 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4ejDcMKW0Svv%2FZxcl51nPNLMWTujDCWjwbE49mVLkVAclWuDskPzhT28%2BR9SK02ibdtEsT22uo0%2Fl6BIYaFZW4D68Rvu0kSXimmJ7V%2F7PVv41YXIOSzS%2B5%2BM3ht5lW9SGtvs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed767b1a0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.16.3
188.114.96.1200 OK 117 kB URL GET HTTP/3 nganhangsovn.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.16.3
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type ASCII text, with very long lines (65496)
Size 117 kB (117150 bytes)
Hash 62af5bb2cc4e1d87d1374d80bba56dcb
21da10b86823a79eee040ed31df0a717e9206570
a9979d70d8cbb8fe7ee74247da30eb3e1f0b70ac937f7f5f6113166b3cc02ca0
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.16.3 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 18 Sep 2023 08:39:59 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ahiXK6ZIXq%2FlD3ibspyKw%2Bea3%2BPQkJKYTFhAXB8%2FKr7Iyj0NlLsZWXkrpiqLvq2VvW6dcrVbrAFvdNKHJpmL15S4ZlsI7QWmxII4zOQY%2F6kQ2zcbYjPO48bwxwMD6Rj%2BVwUb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed766b160b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/elementor/css/post-416.css?ver=1695026486
188.114.96.1200 OK 1.1 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/elementor/css/post-416.css?ver=1695026486
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type ASCII text, with very long lines (1117), with no line terminators
Hash 199077dfb229914c8e8fd08e326984ea
32c4a1539f672eaedd116536f4e4fc0488dd0d2f
7f1b4dfe8df7b83d46db13a96cb65f22dfdd2021a8940ecbda6acb3affa74c04
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/elementor/css/post-416.css?ver=1695026486 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 18 Sep 2023 08:41:26 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kTWOko96WXUYxuyzqBDzJS9cTEzes0uQx9m%2Fa09rmmSrHXtbgP5N2MTFdyycBUAXY3foJlPrUFuI1LWGyj0yJn6hfZfCQje9q4L5dedkPrB6SJfBNvIouk9PnRKF0%2BIb3l2s"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed767b180b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/themes/covernews/assets/jquery-match-height/jquery.matchHeight.min.js?ver=1.1.0
188.114.96.1200 OK 3.4 kB URL GET HTTP/3 nganhangsovn.com/wp-content/themes/covernews/assets/jquery-match-height/jquery.matchHeight.min.js?ver=1.1.0
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type ASCII text, with very long lines (3533), with no line terminators
Hash b1e9d0c55b53c9c2b71f2549f653f95f
1cda5430ca303842d0d39f696c52487a5d67d3c5
a372b795a4117a19299b2bbb978d009822e525e15d6429e795908167c7a1cdac
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/themes/covernews/assets/jquery-match-height/jquery.matchHeight.min.js?ver=1.1.0 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 18 Sep 2023 08:41:09 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5W1OF7Aye%2BU%2FKUYUSnXUAaJXQ5xq%2FwpNmvU1POeT%2FOXp6PYyl9ZGTEBVmnAwRqONVQYpXeylDCuQ%2FVc6Mki9Xix02xBf6C6T8%2F5cuHhCllM%2F30aH%2FQIenNXW0gxl3Ne5x7IC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed79fc260b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/themes/covernews/assets/script.js?ver=1.1.0
188.114.96.1200 OK 17 kB URL GET HTTP/3 nganhangsovn.com/wp-content/themes/covernews/assets/script.js?ver=1.1.0
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
Hash ac761da52c5d90b3ae2bf2e102acf4ca
f300724c15baaa0e8523bb73126df3c8196aec54
57da6a343f0c1a525491a98ebd869af618c4386622e324a130a5a672feee6aec
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/themes/covernews/assets/script.js?ver=1.1.0 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 18 Sep 2023 08:41:09 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HIPZ9V3J3m7ff8e5qh4nOPhcP57N4FnJ3XJr2uA%2BxLleKSY70V4gc2tV3Gx1f8rQKvh2gZ7J%2BLtKc6AMWBHykzG6fQPpE%2Fc523IM3Z6%2BTm7Dknk7B65WUlK1QskdjXXIhdvU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed79fc2b0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/uploads/2022/10/gallery_image_2319-500x313.jpg
188.114.96.1200 OK 19 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/10/gallery_image_2319-500x313.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 500x313, components 3\012- data
Hash 954aebb5fa2b8d55940d64e190072c2c
7b8664fe67f2b26f09bd0b4e6bed859cb6847ee9
c690480806a523e4d9860e8e6eab9e75f83225b9ae7596de28d58b557ee80cb4
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/10/gallery_image_2319-500x313.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 18758
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Fri, 14 Oct 2022 01:17:08 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dE6RgDbrA7unlPxzydzKNRgye7tFXAocQC10PezVH4%2FXmWtCn5gTAZ4aqpJu4TxJsPEIDPOQtlIBnjQjpAiOxqaST4f0JTAbBtvqXOlNzDClcJuesLawSnCBd0Hxah8trkBK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed788bdc0b49-OSL
alt-svc: h3=":443"; ma=86400
188.114.96.1200 OK 385 kB URL User Request GET HTTP/2 IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
Size 385 kB (385067 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET / HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 24 Sep 2023 03:26:43 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
link: <https://nganhangsovn.com/wp-json/>; rel="https://api.w.org/", <https://nganhangsovn.com/wp-json/wp/v2/pages/54>; rel="alternate"; type="application/json", <https://nganhangsovn.com/>; rel=shortlink
x-litespeed-cache: hit
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iPf5IqDdJDO%2Fjj5dUvjYLpmmr7SD3BXkzW16LSTM0SXCCzfPiJWKMOO465%2FoAWoYjgCeRJ5pjxd3gMFnYzqRw9boG%2BhR4ewmfIf8eu7UG3QiZwK1VeVcbOc9bNIUxraoJOr3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed717ba55693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
nganhangsovn.com/wp-content/uploads/2022/10/mo-the-sieu-toc-500x262.jpg
188.114.96.1200 OK 24 kB URL GET HTTP/3 nganhangsovn.com/wp-content/uploads/2022/10/mo-the-sieu-toc-500x262.jpg
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 500x262, components 3\012- data
Hash 939de86ff13eff2afdfde14c744bd886
f6616863f15502d5ea4c82bad255d5548520a3a5
6a6bfc324b611889900a4c68b374afd9786919d5fcce9f7ecee979e71bb59196
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/uploads/2022/10/mo-the-sieu-toc-500x262.jpg HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: image/jpeg
content-length: 24175
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Fri, 14 Oct 2022 01:49:39 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IVVqULp%2BSuFIesSd1aT4JL07Mmg47akl0FjdD0ksfZwPQvXjBciOjYEpWFxaRO1cQu88gS34MgfUp9lk%2FB8LeaC5BMMO3oU9ksyR7hbcHHi8G3RBpZeCM1FgKW4Gq%2Fw2PGx0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b7ed78abe50b49-OSL
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/plugins/add-to-any/addtoany.min.css?ver=1.16
188.114.96.1200 OK 1.6 kB URL GET HTTP/3 nganhangsovn.com/wp-content/plugins/add-to-any/addtoany.min.css?ver=1.16
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type ASCII text, with very long lines (1606), with no line terminators
Hash 882914044de1c4ae5ea33132d58753b3
09af0e5de5e347cb58b63cd48ddbcf497e893c10
e100ead8fb6bd34ef773e4906d8d6e4b03ae101bdf1045f5e565593b12e3d146
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/plugins/add-to-any/addtoany.min.css?ver=1.16 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Fri, 11 Aug 2023 01:54:13 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qq9HQzpm0pq5pgbEJOcrmDUPo9Gm9jZk2f7sUoqO6BE4JhTEEXYVpnezILg5oTULAr%2B0q%2BzdnXmzMukO312qy4hpUJAvsakmvynmeLmGulvS3TNox507AQDAvTntJpOaCBQ%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed767b1b0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nganhangsovn.com/wp-content/themes/covernews/assets/fixed-header-script.js?ver=1.1.0
188.114.96.1200 OK 2.4 kB URL GET HTTP/3 nganhangsovn.com/wp-content/themes/covernews/assets/fixed-header-script.js?ver=1.1.0
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type ASCII text, with very long lines (2461), with no line terminators
Hash 1bcabc942a2b4cdadfb04a6d1938b9aa
a042d2fdd8d1da731db4bcbd19943353241929a9
8fe5297ce9791005ef56277ee32067c0366e94574a3d1dd94692a4a7667218c4
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/themes/covernews/assets/fixed-header-script.js?ver=1.1.0 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 18 Sep 2023 08:41:09 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J%2Fk5d9DcqtRqA297xDms3MCgZhKUeiCS36l8LlQTlTCdOTE7hF8kIS2XPr4DwQFE2SKA%2FSgNXhnSqDSmqPvJk%2FH4vRu3bYdF5jlqRAXSKaBqIBBoLNVEXDwKrfPmZwHLXDva"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed79fc270b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
static.addtoany.com/menu/page.js
104.22.70.197200 OK 3.1 kB URL GET HTTP/2 static.addtoany.com/menu/page.js
IP 104.22.70.197:443
Requested by https://nganhangsovn.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:A5:DB:83:09:73:10:48:06:97:65:2A:D9:27:B7:67:2D:7E:9D:6C
ValidityThu, 04 May 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (3218), with no line terminators
Hash 1951ca33daed8c7a3876863c07acf12b
f1f089cb2edb78d7cfaee1f45fccdcdfaed59ed9
59922c8dc07001f190cc592b1d81db6c3e1fedb394db2426cee71050ea780c30
GET /menu/page.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=172800
cf-bgj: minify
access-control-allow-origin: *
etag: W/"c09-6027af130ca25"
last-modified: Wed, 09 Aug 2023 10:28:36 GMT
vary: Accept-Encoding
via: e2s
x-content-type-options: nosniff
cf-cache-status: HIT
age: 147427
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 80b7ed77acf85f10-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
nganhangsovn.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.16.3
188.114.96.1200 OK 15 kB URL GET HTTP/3 nganhangsovn.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.16.3
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type ASCII text, with very long lines (14869)
Hash 7a5dea0a705cc2f4cd87dbaaa6666bc6
678bc6f750f13adb29bbc158eb0d9cd813b736fa
97cf1307c16a437b77b5f7f5c9bc0b985d0745a14be5a279019aca5a3432e264
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.16.3 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 18 Sep 2023 08:39:59 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oZvmJfCNwV7q75gHKJTwvbmHLrY6Ke8e5ubhGfOZ2NBj7jMHnvcAc2yhYr9x9zGyhNz4VnBd9g5JWieba87LilShCJn3238W5k9I5%2Bjb1rRI577G4EgLPz6a3l6suLnHX5kb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed76db730b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
188.114.96.1302 Found 385 kB URL User Request GET HTTP/2 IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
Size 385 kB (385067 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /moba/ HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sun, 24 Sep 2023 03:26:43 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
location: /
cache-control: no-cache, no-store, must-revalidate, max-age=0
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5t3xuR6yT8MQHhJ%2B40SFpqiWFn0p1Jrkh%2FyCrCTz9MCyBdxia68G%2BpiqfDSeFnq0h%2Fks5fXGBIiMb1vm0yWguwTJu549gSOkHyqtEz5wMMQNix4XErfGXcu3RjleVsnbATzH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed6d8ac55693-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
images.dmca.com/Badges/DMCABadgeHelper.min.js
194.242.11.186200 OK 465 B URL GET HTTP/2 images.dmca.com/Badges/DMCABadgeHelper.min.js
IP 194.242.11.186:443
ASN #34989 ServeTheWorld AS
Requested by https://nganhangsovn.com/
Certificate IssuerLet's Encrypt
Subjectimages.dmca.com
Fingerprint50:F9:B6:B6:8D:90:B2:16:D1:14:D6:4E:C5:BA:B4:B3:9A:B9:95:6B
ValidityTue, 12 Sep 2023 21:47:44 GMT - Mon, 11 Dec 2023 21:47:43 GMT
File type ASCII text, with very long lines (496), with no line terminators
Hash c5b49c326309174e4524057288a39582
ac4ac0cc06b4c4a13a28b06cac06399ba7168136
4ccaace87bdde15a0a00e832c3a814a1cd21a951bbc109300ede5b0f961a5610
GET /Badges/DMCABadgeHelper.min.js HTTP/1.1
Host: images.dmca.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 24 Sep 2023 03:26:45 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 1574055
cdn-uid: c136c664-112d-4533-8247-f90f6849ab39
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=31536000
etag: W/"26b181f16d28d51:0"
last-modified: Fri, 21 Jun 2019 20:14:34 GMT
x-powered-by: ASP.NET
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 09/12/2023 22:47:47
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 2026b579e5fa3b34fa8d41bd1254e3f9
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
nganhangsovn.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.16.3
188.114.96.1200 OK 59 kB URL GET HTTP/3 nganhangsovn.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.16.3
IP 188.114.96.1:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subjectnganhangsovn.com
Fingerprint0E:19:3F:53:E5:CB:E1:3C:0F:ED:BC:42:7D:10:E0:2D:41:7D:AD:F8
ValidityThu, 27 Jul 2023 18:05:38 GMT - Wed, 25 Oct 2023 18:05:37 GMT
File type ASCII text, with very long lines (59158)
Hash 74bab4578692993514e7f882cc15c218
b6293bcfd851f963edbe859498570c4c0c7eaae4
d87ddf917b7a1449ab45e2b8e3c98354629bdd65b6659c37e6023bbea1ce1386
Analyzer Verdict Alert mnemonic secure dns malicious Sinkholed
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.16.3 HTTP/1.1
Host: nganhangsovn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:44 GMT
content-type: text/css
cache-control: public, max-age=604800
expires: Thu, 28 Sep 2023 22:37:28 GMT
last-modified: Mon, 18 Sep 2023 08:39:59 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190156
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vKHpqbsljbNZ3eocNwWljY7Mq5s4FXuHcIFXbB7zXV%2BUOsEEcu2WMg2KOgKxHQUXRrrEZ%2BXn4yYJofBxokHhmtFU0lWrenmghRdhkYBvbgkv1NprJ%2BHVb%2BP2q4MHwzyxcFal"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80b7ed767b190b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
216.58.207.227200 OK 12 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
IP 216.58.207.227:443
Requested by https://nganhangsovn.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27
ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File type Web Open Font Format (Version 2), TrueType, length 11872, version 1.0\012- data
Hash 87ace20058325aa069320aa4af875dff
b743548770c46d905ae1ba06310bc001c587fe8e
3c23eb02de6b34e30f18cfb7167abd81a2cedfd1da60dfcb71989517ab3fb431
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nganhangsovn.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11872
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 22 Sep 2023 10:31:16 GMT
expires: Sat, 21 Sep 2024 10:31:16 GMT
cache-control: public, max-age=31536000
age: 147329
last-modified: Wed, 11 May 2022 19:25:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.addtoany.com/menu/modules/core.c78901bc.js
104.22.70.197200 OK 71 kB URL GET HTTP/3 static.addtoany.com/menu/modules/core.c78901bc.js
IP 104.22.70.197:443
Requested by https://nganhangsovn.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint20:A5:DB:83:09:73:10:48:06:97:65:2A:D9:27:B7:67:2D:7E:9D:6C
ValidityThu, 04 May 2023 00:00:00 GMT - Fri, 03 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 5bff8a92e2aa9a2b5decead3ffa11ca2
4ce405183cf896c930da9b53455ace837397adcf
05d18955853a018a783dde77bcf072fb4e36df5bffafefb7be0e5e97411ab092
GET /menu/modules/core.c78901bc.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nganhangsovn.com
DNT: 1
Connection: keep-alive
Referer: https://nganhangsovn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 24 Sep 2023 03:26:46 GMT
content-type: application/javascript; charset=utf-8
cache-control: max-age=315360000, immutable
cf-bgj: minify
access-control-allow-origin: *
etag: W/"1140a-6027af129c545"
last-modified: Wed, 09 Aug 2023 10:28:35 GMT
vary: Accept-Encoding
via: e7s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 80b7ed819e9498eb-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400